I. Name and address of the responsible party

The responsible party in the sense of the General Data Protection Regulation (GDPR) and of other national data protection regulations in force in the member states of European Union as well as of other regulations with a legal data-protecting character is the

CTP Advanced Materials GmbH

Stahlstrasse 60

D-65428 Ruesselsheim, Germany

Fon: +49 6142 91 85 0

Fax: +49 6142 91 85 55

Mail: ctp@ctpgmbh.de

 

The processing of some data takes place in joint responsibility according to Art. 26 GDPR with:

Aditya Birla Group
Aditya Birla Centre
S K Ahire Marg, Worli

Mumbai 400030, India

II. Name and address of the data protection officer

The data protection officer of the responsible party is:

daschug GmbH

Robert-Bosch-Strasse 7

64293 Darmstadt, Germany

Fon +49 6151 6673 440

Mail: datenschutz@ctpgmbh.de

III.    General information on data processing

Range of the processing of personal data

Generally, we collect and process personal data of users only as long as this is re­quired for providing a properly functioning website as well as delivering our contents and services. The collection and use of personal data of our users on a regular basis only takes place after consent of the data subject. An exception applies to those cases where obtaining consent prior to use is not possible based on matters of law and fact and the processing of data is allowed by legal regulations.

Legal fundamentals for the processing of personal data

In so far as we obtain the consent of the data subject for the processing of personal data Article 6 Para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the foundation for the processing of personal data.

Article 6 Para. 1 lit. b GDPR serves as the legal foundation for the processing of per­sonal data which is necessary for the fulfilment of a contract if the data subject is party to this contract. This applies also to the processing processes which are neces­sary for the execution of pre-contractual measures.

Article 6 Para. 1 lit. c GDPR serves as the legal foundation in so far as processing of personal data is necessary for the fulfilment of a legal obligation applying to our en­terprise.

Article 6 Para. 1 lit. d GDPR serves as the legal foundation for the situation that vital interests of the data subject or another natural person make the processing of per­sonal data necessary.

Article 6 Para. 1 lit. f GDPR serves as the legal foundation for the situation that pro­cessing is necessary to ensure a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not exceed the first named interest.

Deletion of data and duration of storage

The personal data of the data subject are deleted or disabled as soon as the purpose for which the data was stored lapses. In addition, storage can take place if this was stipulated by the European or national legislatures in orders, laws or other regulations in accordance with European Union law to which the responsible party is subject. Disabling or deletion of the data is also carried out if a storage period prescribed by the standards as named expires unless there is a necessity for the continued storage of the data for the concluding or fulfilling of a contract.

IV. Making available of our website and creation of logfiles

Description and range of data processing

On every visit on our website our system automatically collects data and information of the computer system calling. The following data is collected:

• Information on the type of browser and its version used
• The operating system of the user
• The internet-service-provider of the user
• The IP-address of the user
• Date and time of the access
• The website, from which an accessing system reaches our website
• Websites, which are accessed by the computer system of the user via our web­site

This data is also stored in the logfiles of our system. However, IP-addresses of the users or other data, which would allow the assignment of the data to a particular user, are not stored. Also, this data is not stored together with other personal data of the user.

Legal foundations for the data processing

Article 6 Para. 1 lit. f GDPR is the legal foundation for the temporary storage of data and logfiles.

Purpose of data processing

The temporary storage of the IP-address by the system is necessary to enable the delivery of the website to the computer of the user. For achieving this the IP-address of the user must remain stored for the duration of the session.

The storage in logfiles occurs to enable the proper functioning of the website. Fur­thermore, this data serves to optimize the website and to enable the security of our IT-systems. An analysis of the data for marketing purposes does not happen.

The legal foundation is our legitimate interest in data processing according to Article 6 Para.1 lit. f GDPR.

Duration of storage

The data is deleted or disabled as soon as the purpose for which the data was stored lapses. This is the case when the particular session has ended in situations where the data is collected for making the website available.

This is the case at the latest seven days after the time when the data was stored in log files. A storage exceeding this period is possible. In this case the IP-addresses of the users are deleted or distorted so that an assignment of the client calling in is no longer possible.

Possibility for objection and deletion

The collection of data for the making available of the website and the storage of data in logfiles is compulsory for operating the website. Thus, there is no right to object by the user.

Use of cookies

1. a) Description and range of data processing

Our website uses cookies. In general, cookies are small text files which are stored on your computer and which store certain settings and data for exchange with the online offer from us via your browser. If a user calls in a website, a cookie can be stored in the operating system of the user’s computer. This cookie usually contains a unique string of characters, which allows an unambiguous identification of the browser when calling in the website again.

We are using cookies to improve our online offer. Some elements of our website re­quire that a browser calling in can be identified after a changeover.

The following data is stored and transmitted:

• Language settings
• Log-In-information

The data of the user collected in this way is pseudonymized by technical processes. Accordingly, assignment of the data to the user calling in is no longer possible. The data collected is not stored together with other personal data of the user.

When our website is called, the users are informed by means of an information ban­ner about the use of cookies for analytical purposes and are referred to this data protection information. In this connection reference is given to how storage of cookies can be prevented by the browser settings.

In this connection follows a reference to how that storing of cookies can be prevented by appropriate browser settings.

1. b) Legal foundation of data processing

The legal foundation for the processing of personal data by using cookies is Article 6 Para. 1 lit. f GDPR.

1. c) Purpose of data processing

The purpose behind the use of strictly technically essential cookies is to facilitate the use of the website for the user. Certain functions of our website cannot be offered without the use of cookies. For these functions it is necessary that the browser is recognized even after a page change.

We need cookies for the following application:

• Adoption of language settings

Analysis cookies are used for the purpose of improving the quality of our website and its content. By the analysis cookies we learn how the website is used and thus are able to continually optimize our offer. These purposes also include our legitimate in­terest in the processing of the personal data in accordance with Article 6 Para. 1 lit. f GDPR.

1. d) Duration of storage, possibilities for objection and elimination

Cookies are stored on the user’s computer and are transmitted from this to our web­site. Accordingly, you as user have full control over the use of cookies. By a change of the settings of your internet browser you are able to deactivate or restrict the transmissions of cookies. Cookies already being stored can be deleted at any time. This can also be carried out automatically. However, if cookies for our website are deactivated, it may no longer be possible to fully use all functions of the website. The transmission of flash cookies cannot be prevented by the browser settings but re­quires changes of the settings of the flash player.

 

VI. E-Mail-contact

Description and range of data processing

Contacting us is possible by using the e-mail address provided. In this case personal data of the user transmitted with the e-mail is stored. In this connection no data is passed on to third parties. The data is used exclusively for the processing of the con­versation and will immediately be deleted if it is no longer needed.

Legal foundation of data processing

Legal foundation for the processing of the data after application of the user for a newsletter in case of consent of the user is Article 6 Para. 1 lit. a GDPR.

Legal foundation for the processing of data in case of the transmission of an e-mail is Article 6 Para. 1 lit. f GDPR. Is the e-mail contact directed at closing a contract addi­tional legal foundation for the processing of data is Article 6 Para. 1 lit. b GDPR.

Purpose of data processing

The processing of the personal data from the input mask/e-mail serves us solely for the processing of the contact. In case of contacting by e-mail this is also the neces­sary legitimate interest in the processing of the data.

Other personal data processed during the sending-off process serves to prevent abuse of the contact form and to ensure the security of our IT systems.

Duration of storage

The data is deleted as soon as it is no longer needed for achieving the purpose of their collection. This is the case for the personal data from the input mask of the contact form and those which are sent by e-mail when the particular conversation with the user has ended.

The conversation has ended when the circumstances allow the conclusion that the matter in question has been finally clarified.

The additional personal data collected during the sending-off process is deleted the latest after a period of seven days.

Possibilities for objection and elimination

At any time the user has the opportunity to withdraw his consent on the processing of personal data. If the user is contacting us by e-mail, he can object to the storage of his personal data at any time. In this case the conversation cannot be continued.

VII.       Rights of the data subject

If your personal data is processed, then you are the data subject in the sense of the GDPR and you are entitled to the following rights vis à vis the responsible party:

Right of access by the data subject

You can demand from the responsible party confirmation as to whether personal data that relates to you has been processed by us. If such processing has taken place, you can demand information from the responsible party on the following:

• The purposes for which the personal data is processed;
• The categories of personal data which are processed;
• The recipients or, resp., the categories of recipients to which the personal data relating to you has been disclosed or will be disclosed;
• The planned duration of the storage of the personal data relating to you or, if dis­tinct statements on this are not possible, the criteria for the laying down of duration of storage;
• The existence of a right to correction or deletion of the personal data relating to yourself, of a right to a restriction of the processing by the responsible party or of a right of objection to this processing;
• The existence of a right of appeal at a supervisory authority;
• All available information on the origin of the data if the personal data was not collected at the data subject;
• The existence of an automated decision-finding process including profiling in ac­cordance with Article 22 Para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and its scope and the effects strived for of such a processing for the data subject in question.

You are entitled to the right to demand information on whether the personal data re­lating to yourself is transmitted to a third country or an international organization. In this connection you can demand to be instructed on the suitable guarantees in ac­cordance with Article 46 GDPR in connection with the transmission.

Right to correction

You have a right to correction and/or completion vis à vis the responsible party in so far as the personal data as processed and which relates to yourself is incorrect or incomplete. The responsible party has to carry out the correction without delay.

Right to restrict the processing of personal data

Provided the following preconditions are met you can demand restriction of the pro­cessing of the personal data relating to you:

• if you dispute the correctness of the personal data relating to yourself for a pe­riod which makes it possible for the responsible party to check the correctness of the personal data;
• if the processing is unlawful and you reject deletion of the personal data and de­mand restriction of the use of the personal data instead;
• if the responsible party no longer needs the personal data for purposes of the processing but you need the data for the advancing, exercising or defending of legal claims, or
• if you have advanced objection to the processing in accordance with Article 21 Para. 1 GDPR but it has not yet been established whether the justified rea­sons of the responsible party outweigh your reasons.

If the processing of the personal data relating to yourself has been restricted, then this data – apart from the storage of it – may only be processed with your consent or for the assertion, exercising or defending of legal claims or for the protection of the rights of another natural person or legal entity or for reasons relating to an important public interest of the European Union or of a member state.

If the restriction of the processing has been restricted in accordance with the afore-mentioned preconditions, then you will be informed by the responsible party before the restriction is cancelled.

Right to erasure

1. a) Deletion obligation

You can demand by the responsible party that the personal data relating to yourself is deleted without delay and the responsible party is then obliged to delete this data without delay in so far as one of the following reasons applies:

• The personal data relating to you is no longer required for the purposes for which it was collected or for which it was processed.
• You revoke your consent, on which processing in accordance with Article 6 Para. 1 lit. a or Article 9 Para.2 lit. a GDPR was based, and there is no other legal foundation for the processing.
• You submit an objection to the processing in accordance with Article 21 Para. 1 GDPR and there are no justified reasons for the processing with a higher priority, or you submit an objection to the processing in accordance with Article 21 Para. 2 GDPR.
• The personal data relating to you was processed unlawfully.
• The deletion of the personal data relating to you is required to fulfil a legal obliga­tion in accordance with European Union law or the law of the member states, which laws the responsible party is subject to.
• The personal data relating to you was collected in relation to services offered by the information society in accordance with Article 8 Para. 1 GDPR.

1. b) Information to third parties

If the responsible party has made the personal data relating to you public and if he/she is obliged to delete this data in accordance with Article 17 Para. 1 GDPR, then he/she shall take reasonable measures including technical ones – whereby ac­count shall be taken of the available technology and the implementation costs – to inform the responsible parties for the data processing which process the personal data that you as data subject have demanded from them the deletion of all links to this personal data or of copies or replicates of these.

1. c) Exceptions

The right to erasure does not exist in so far as the processing is necessary for

• the exercising of the right of free expression of opinion and to information;
• for the fulfilment of a legal obligation, which requires the processing in accord­ance with the law of the European Union or the law of the member states, which laws the responsible party is subject to, or for the carrying out of a task, which lies in the public interest or which is carried out in the exercising of pub­lic authority, which authority was transferred to the responsible party;
• for reasons of public interest in the field of public health in accordance with Arti­cle 9 Para. 2 lit. h and i as well as Article 9 Para. 3 GDPR;
• for archiving purposes, scientific or historical research purposes lying in the pub­lic interest or for statistical purposes in accordance with Article 89 Para. 1 GDPR, in so far as the right named in section a) probably makes achieving of the objectives of the processing impossible or impairs it seriously, or
• for the advancing, exercising or defending of legal claims.

Right to information

If you have advanced the right to the correcting, erasure or restricting of the pro­cessing to the responsible party, then the latter is obliged to inform all recipients, to which the personal data relating to you was disclosed, of this correction or erasure of the data or of the restricting of the processing, unless this proves itself to be impossi­ble or linked with unreasonable expenditure.

You are entitled to the right vis à vis the responsible party to be informed about these recipients.

Right to data portability

You have the right to receive the personal data relating to yourself, which you made available to the responsible party, in a structured, conventional and machine-reada­ble format. In addition, you have the right to transmit this data to another responsible party without hindrance by the responsible party to whom the personal data was made available, in so far as

• the processing is based on consent in accordance with Article 6 Para. 1 lit. a GDPR or Article 9 Para. 2 lit. a GDPR or on a contract in accordance with Arti­cle 6 Para. 1 lit. b GDPR and
• the processing is carried out by means of automated processes.

In exercising this right, you have in addition the right to obtain the personal data re­lating to you is transferred directly from one responsible party to another responsible party in so far as this is technically possible. The freedoms and rights of other per­sons may not be impaired thereby.

The right to data portability applies not for the processing of personal data, which is necessary for the carrying out of a task, which lies in the public interest or in the ex­ercising of public authority and which task was transferred to the responsible party.

Right to object

For reasons which result from your particular situation you have the right to advance at any time objection to the processing of the personal data relating to you, which processing is carried out on the basis of Article 6 Para. 1 lit. e or f GDPR. This right also applies to the profiling based on these provisions.

The responsible party shall then no longer process the personal data relating to you, unless he/she can prove compelling reasons worthy of protection, which reasons overweigh your interests, rights and freedoms or where the processing serves the advancing, exercising or defending of legal claims.

If the personal data relating to you is processed for the purpose of direct advertising, then you have the right to advance at any time objection to the processing of the per­sonal data relating to you for purposes of such advertising. This applies also to the profiling in so far as this is carried out in connection with such direct advertising.

If you object to the processing for purposes of direct advertising, then the personal data relating to you will no longer be processed for these purposes.

You have the opportunity – in connection with the use of services of the information society and regardless of directive 2002/58/EC – to exercise your right of objection with the aid of automated processes in which technical specifications are used.

You have also the right for reasons which result from your particular situation to ad­vance at any time objection to the processing of the personal data relating to you which processing is carried out for scientific or historic purposes or for statistical pur­poses according to Article 89 Para. 1 GDPR.

Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your consent at any time. On withdrawal we immedi­ately will delete your personal data and no longer process it. The legality of the pro­cessing carried out prior to your withdrawal on the base of your given consent is not affected by you withdrawal.

Right to complain at a supervisory authority

Regardless of another regulatory or judicial remedy, you are entitled to the right to lodge a complaint at a supervisory authority and here in particular at a supervisory authority in the member state of your place of residence, of your place of work or of the place where the suspected infringement took place when you are of the opinion that the processing of the personal data relating to you infringes the GDPR.

In this case the supervisory authority, at which the complaint was lodged, shall inform the complainant on the status and the results of the complaint including the possibility of a judicial remedy in accordance with Article 78 GDPR.

I. Name and address of the responsible party

The responsible party in the sense of the General Data Protection Regulation (GDPR) and of other national data protection regulations in force in the member states of European Union as well as of other regulations with a legal data-protecting character is the

CTP Advanced Materials GmbH

Stahlstrasse 60

D-65428 Ruesselsheim, Germany

Fon: +49 6142 91 85 0

Fax: +49 6142 91 85 55

Mail: ctp@ctpgmbh.de

 

The processing of some data takes place in joint responsibility according to Art. 26 GDPR with:

Aditya Birla Group
Aditya Birla Centre
S K Ahire Marg, Worli

Mumbai 400030, India

II. Name and address of the data protection officer

The data protection officer of the responsible party is:

daschug GmbH

Robert-Bosch-Strasse 7

64293 Darmstadt, Germany

Fon +49 6151 6673 440

Mail: datenschutz@ctpgmbh.de

III.    General information on data processing

Range of the processing of personal data

Generally, we collect and process personal data of users only as long as this is re­quired for providing a properly functioning website as well as delivering our contents and services. The collection and use of personal data of our users on a regular basis only takes place after consent of the data subject. An exception applies to those cases where obtaining consent prior to use is not possible based on matters of law and fact and the processing of data is allowed by legal regulations.

Legal fundamentals for the processing of personal data

In so far as we obtain the consent of the data subject for the processing of personal data Article 6 Para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the foundation for the processing of personal data.

Article 6 Para. 1 lit. b GDPR serves as the legal foundation for the processing of per­sonal data which is necessary for the fulfilment of a contract if the data subject is party to this contract. This applies also to the processing processes which are neces­sary for the execution of pre-contractual measures.

Article 6 Para. 1 lit. c GDPR serves as the legal foundation in so far as processing of personal data is necessary for the fulfilment of a legal obligation applying to our en­terprise.

Article 6 Para. 1 lit. d GDPR serves as the legal foundation for the situation that vital interests of the data subject or another natural person make the processing of per­sonal data necessary.

Article 6 Para. 1 lit. f GDPR serves as the legal foundation for the situation that pro­cessing is necessary to ensure a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not exceed the first named interest.

Deletion of data and duration of storage

The personal data of the data subject are deleted or disabled as soon as the purpose for which the data was stored lapses. In addition, storage can take place if this was stipulated by the European or national legislatures in orders, laws or other regulations in accordance with European Union law to which the responsible party is subject. Disabling or deletion of the data is also carried out if a storage period prescribed by the standards as named expires unless there is a necessity for the continued storage of the data for the concluding or fulfilling of a contract.

IV. Making available of our website and creation of logfiles

Description and range of data processing

On every visit on our website our system automatically collects data and information of the computer system calling. The following data is collected:

• Information on the type of browser and its version used
• The operating system of the user
• The internet-service-provider of the user
• The IP-address of the user
• Date and time of the access
• The website, from which an accessing system reaches our website
• Websites, which are accessed by the computer system of the user via our web­site

This data is also stored in the logfiles of our system. However, IP-addresses of the users or other data, which would allow the assignment of the data to a particular user, are not stored. Also, this data is not stored together with other personal data of the user.

Legal foundations for the data processing

Article 6 Para. 1 lit. f GDPR is the legal foundation for the temporary storage of data and logfiles.

Purpose of data processing

The temporary storage of the IP-address by the system is necessary to enable the delivery of the website to the computer of the user. For achieving this the IP-address of the user must remain stored for the duration of the session.

The storage in logfiles occurs to enable the proper functioning of the website. Fur­thermore, this data serves to optimize the website and to enable the security of our IT-systems. An analysis of the data for marketing purposes does not happen.

The legal foundation is our legitimate interest in data processing according to Article 6 Para.1 lit. f GDPR.

Duration of storage

The data is deleted or disabled as soon as the purpose for which the data was stored lapses. This is the case when the particular session has ended in situations where the data is collected for making the website available.

This is the case at the latest seven days after the time when the data was stored in log files. A storage exceeding this period is possible. In this case the IP-addresses of the users are deleted or distorted so that an assignment of the client calling in is no longer possible.

Possibility for objection and deletion

The collection of data for the making available of the website and the storage of data in logfiles is compulsory for operating the website. Thus, there is no right to object by the user.

Use of cookies

1. a) Description and range of data processing

Our website uses cookies. In general, cookies are small text files which are stored on your computer and which store certain settings and data for exchange with the online offer from us via your browser. If a user calls in a website, a cookie can be stored in the operating system of the user’s computer. This cookie usually contains a unique string of characters, which allows an unambiguous identification of the browser when calling in the website again.

We are using cookies to improve our online offer. Some elements of our website re­quire that a browser calling in can be identified after a changeover.

The following data is stored and transmitted:

• Language settings
• Log-In-information

The data of the user collected in this way is pseudonymized by technical processes. Accordingly, assignment of the data to the user calling in is no longer possible. The data collected is not stored together with other personal data of the user.

When our website is called, the users are informed by means of an information ban­ner about the use of cookies for analytical purposes and are referred to this data protection information. In this connection reference is given to how storage of cookies can be prevented by the browser settings.

In this connection follows a reference to how that storing of cookies can be prevented by appropriate browser settings.

1. b) Legal foundation of data processing

The legal foundation for the processing of personal data by using cookies is Article 6 Para. 1 lit. f GDPR.

1. c) Purpose of data processing

The purpose behind the use of strictly technically essential cookies is to facilitate the use of the website for the user. Certain functions of our website cannot be offered without the use of cookies. For these functions it is necessary that the browser is recognized even after a page change.

We need cookies for the following application:

• Adoption of language settings

Analysis cookies are used for the purpose of improving the quality of our website and its content. By the analysis cookies we learn how the website is used and thus are able to continually optimize our offer. These purposes also include our legitimate in­terest in the processing of the personal data in accordance with Article 6 Para. 1 lit. f GDPR.

1. d) Duration of storage, possibilities for objection and elimination

Cookies are stored on the user’s computer and are transmitted from this to our web­site. Accordingly, you as user have full control over the use of cookies. By a change of the settings of your internet browser you are able to deactivate or restrict the transmissions of cookies. Cookies already being stored can be deleted at any time. This can also be carried out automatically. However, if cookies for our website are deactivated, it may no longer be possible to fully use all functions of the website. The transmission of flash cookies cannot be prevented by the browser settings but re­quires changes of the settings of the flash player.

 

VI. E-Mail-contact

Description and range of data processing

Contacting us is possible by using the e-mail address provided. In this case personal data of the user transmitted with the e-mail is stored. In this connection no data is passed on to third parties. The data is used exclusively for the processing of the con­versation and will immediately be deleted if it is no longer needed.

Legal foundation of data processing

Legal foundation for the processing of the data after application of the user for a newsletter in case of consent of the user is Article 6 Para. 1 lit. a GDPR.

Legal foundation for the processing of data in case of the transmission of an e-mail is Article 6 Para. 1 lit. f GDPR. Is the e-mail contact directed at closing a contract addi­tional legal foundation for the processing of data is Article 6 Para. 1 lit. b GDPR.

Purpose of data processing

The processing of the personal data from the input mask/e-mail serves us solely for the processing of the contact. In case of contacting by e-mail this is also the neces­sary legitimate interest in the processing of the data.

Other personal data processed during the sending-off process serves to prevent abuse of the contact form and to ensure the security of our IT systems.

Duration of storage

The data is deleted as soon as it is no longer needed for achieving the purpose of their collection. This is the case for the personal data from the input mask of the contact form and those which are sent by e-mail when the particular conversation with the user has ended.

The conversation has ended when the circumstances allow the conclusion that the matter in question has been finally clarified.

The additional personal data collected during the sending-off process is deleted the latest after a period of seven days.

Possibilities for objection and elimination

At any time the user has the opportunity to withdraw his consent on the processing of personal data. If the user is contacting us by e-mail, he can object to the storage of his personal data at any time. In this case the conversation cannot be continued.

VII.       Rights of the data subject

If your personal data is processed, then you are the data subject in the sense of the GDPR and you are entitled to the following rights vis à vis the responsible party:

Right of access by the data subject

You can demand from the responsible party confirmation as to whether personal data that relates to you has been processed by us. If such processing has taken place, you can demand information from the responsible party on the following:

• The purposes for which the personal data is processed;
• The categories of personal data which are processed;
• The recipients or, resp., the categories of recipients to which the personal data relating to you has been disclosed or will be disclosed;
• The planned duration of the storage of the personal data relating to you or, if dis­tinct statements on this are not possible, the criteria for the laying down of duration of storage;
• The existence of a right to correction or deletion of the personal data relating to yourself, of a right to a restriction of the processing by the responsible party or of a right of objection to this processing;
• The existence of a right of appeal at a supervisory authority;
• All available information on the origin of the data if the personal data was not collected at the data subject;
• The existence of an automated decision-finding process including profiling in ac­cordance with Article 22 Para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and its scope and the effects strived for of such a processing for the data subject in question.

You are entitled to the right to demand information on whether the personal data re­lating to yourself is transmitted to a third country or an international organization. In this connection you can demand to be instructed on the suitable guarantees in ac­cordance with Article 46 GDPR in connection with the transmission.

Right to correction

You have a right to correction and/or completion vis à vis the responsible party in so far as the personal data as processed and which relates to yourself is incorrect or incomplete. The responsible party has to carry out the correction without delay.

Right to restrict the processing of personal data

Provided the following preconditions are met you can demand restriction of the pro­cessing of the personal data relating to you:

• if you dispute the correctness of the personal data relating to yourself for a pe­riod which makes it possible for the responsible party to check the correctness of the personal data;
• if the processing is unlawful and you reject deletion of the personal data and de­mand restriction of the use of the personal data instead;
• if the responsible party no longer needs the personal data for purposes of the processing but you need the data for the advancing, exercising or defending of legal claims, or
• if you have advanced objection to the processing in accordance with Article 21 Para. 1 GDPR but it has not yet been established whether the justified rea­sons of the responsible party outweigh your reasons.

If the processing of the personal data relating to yourself has been restricted, then this data – apart from the storage of it – may only be processed with your consent or for the assertion, exercising or defending of legal claims or for the protection of the rights of another natural person or legal entity or for reasons relating to an important public interest of the European Union or of a member state.

If the restriction of the processing has been restricted in accordance with the afore-mentioned preconditions, then you will be informed by the responsible party before the restriction is cancelled.

Right to erasure

1. a) Deletion obligation

You can demand by the responsible party that the personal data relating to yourself is deleted without delay and the responsible party is then obliged to delete this data without delay in so far as one of the following reasons applies:

• The personal data relating to you is no longer required for the purposes for which it was collected or for which it was processed.
• You revoke your consent, on which processing in accordance with Article 6 Para. 1 lit. a or Article 9 Para.2 lit. a GDPR was based, and there is no other legal foundation for the processing.
• You submit an objection to the processing in accordance with Article 21 Para. 1 GDPR and there are no justified reasons for the processing with a higher priority, or you submit an objection to the processing in accordance with Article 21 Para. 2 GDPR.
• The personal data relating to you was processed unlawfully.
• The deletion of the personal data relating to you is required to fulfil a legal obliga­tion in accordance with European Union law or the law of the member states, which laws the responsible party is subject to.
• The personal data relating to you was collected in relation to services offered by the information society in accordance with Article 8 Para. 1 GDPR.

1. b) Information to third parties

If the responsible party has made the personal data relating to you public and if he/she is obliged to delete this data in accordance with Article 17 Para. 1 GDPR, then he/she shall take reasonable measures including technical ones – whereby ac­count shall be taken of the available technology and the implementation costs – to inform the responsible parties for the data processing which process the personal data that you as data subject have demanded from them the deletion of all links to this personal data or of copies or replicates of these.

1. c) Exceptions

The right to erasure does not exist in so far as the processing is necessary for

• the exercising of the right of free expression of opinion and to information;
• for the fulfilment of a legal obligation, which requires the processing in accord­ance with the law of the European Union or the law of the member states, which laws the responsible party is subject to, or for the carrying out of a task, which lies in the public interest or which is carried out in the exercising of pub­lic authority, which authority was transferred to the responsible party;
• for reasons of public interest in the field of public health in accordance with Arti­cle 9 Para. 2 lit. h and i as well as Article 9 Para. 3 GDPR;
• for archiving purposes, scientific or historical research purposes lying in the pub­lic interest or for statistical purposes in accordance with Article 89 Para. 1 GDPR, in so far as the right named in section a) probably makes achieving of the objectives of the processing impossible or impairs it seriously, or
• for the advancing, exercising or defending of legal claims.

Right to information

If you have advanced the right to the correcting, erasure or restricting of the pro­cessing to the responsible party, then the latter is obliged to inform all recipients, to which the personal data relating to you was disclosed, of this correction or erasure of the data or of the restricting of the processing, unless this proves itself to be impossi­ble or linked with unreasonable expenditure.

You are entitled to the right vis à vis the responsible party to be informed about these recipients.

Right to data portability

You have the right to receive the personal data relating to yourself, which you made available to the responsible party, in a structured, conventional and machine-reada­ble format. In addition, you have the right to transmit this data to another responsible party without hindrance by the responsible party to whom the personal data was made available, in so far as

• the processing is based on consent in accordance with Article 6 Para. 1 lit. a GDPR or Article 9 Para. 2 lit. a GDPR or on a contract in accordance with Arti­cle 6 Para. 1 lit. b GDPR and
• the processing is carried out by means of automated processes.

In exercising this right, you have in addition the right to obtain the personal data re­lating to you is transferred directly from one responsible party to another responsible party in so far as this is technically possible. The freedoms and rights of other per­sons may not be impaired thereby.

The right to data portability applies not for the processing of personal data, which is necessary for the carrying out of a task, which lies in the public interest or in the ex­ercising of public authority and which task was transferred to the responsible party.

Right to object

For reasons which result from your particular situation you have the right to advance at any time objection to the processing of the personal data relating to you, which processing is carried out on the basis of Article 6 Para. 1 lit. e or f GDPR. This right also applies to the profiling based on these provisions.

The responsible party shall then no longer process the personal data relating to you, unless he/she can prove compelling reasons worthy of protection, which reasons overweigh your interests, rights and freedoms or where the processing serves the advancing, exercising or defending of legal claims.

If the personal data relating to you is processed for the purpose of direct advertising, then you have the right to advance at any time objection to the processing of the per­sonal data relating to you for purposes of such advertising. This applies also to the profiling in so far as this is carried out in connection with such direct advertising.

If you object to the processing for purposes of direct advertising, then the personal data relating to you will no longer be processed for these purposes.

You have the opportunity – in connection with the use of services of the information society and regardless of directive 2002/58/EC – to exercise your right of objection with the aid of automated processes in which technical specifications are used.

You have also the right for reasons which result from your particular situation to ad­vance at any time objection to the processing of the personal data relating to you which processing is carried out for scientific or historic purposes or for statistical pur­poses according to Article 89 Para. 1 GDPR.

Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your consent at any time. On withdrawal we immedi­ately will delete your personal data and no longer process it. The legality of the pro­cessing carried out prior to your withdrawal on the base of your given consent is not affected by you withdrawal.

Right to complain at a supervisory authority

Regardless of another regulatory or judicial remedy, you are entitled to the right to lodge a complaint at a supervisory authority and here in particular at a supervisory authority in the member state of your place of residence, of your place of work or of the place where the suspected infringement took place when you are of the opinion that the processing of the personal data relating to you infringes the GDPR.

In this case the supervisory authority, at which the complaint was lodged, shall inform the complainant on the status and the results of the complaint including the possibility of a judicial remedy in accordance with Article 78 GDPR.

I. Name and address of the responsible party

The responsible party in the sense of the General Data Protection Regulation (GDPR) and of other national data protection regulations in force in the member states of European Union as well as of other regulations with a legal data-protecting character is the

CTP Advanced Materials GmbH

Stahlstrasse 60

D-65428 Ruesselsheim, Germany

Fon: +49 6142 91 85 0

Fax: +49 6142 91 85 55

Mail: ctp@ctpgmbh.de

 

The processing of some data takes place in joint responsibility according to Art. 26 GDPR with:

Aditya Birla Group
Aditya Birla Centre
S K Ahire Marg, Worli

Mumbai 400030, India

II. Name and address of the data protection officer

The data protection officer of the responsible party is:

daschug GmbH

Robert-Bosch-Strasse 7

64293 Darmstadt, Germany

Fon +49 6151 6673 440

Mail: datenschutz@ctpgmbh.de

III.    General information on data processing

Range of the processing of personal data

Generally, we collect and process personal data of users only as long as this is re­quired for providing a properly functioning website as well as delivering our contents and services. The collection and use of personal data of our users on a regular basis only takes place after consent of the data subject. An exception applies to those cases where obtaining consent prior to use is not possible based on matters of law and fact and the processing of data is allowed by legal regulations.

Legal fundamentals for the processing of personal data

In so far as we obtain the consent of the data subject for the processing of personal data Article 6 Para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the foundation for the processing of personal data.

Article 6 Para. 1 lit. b GDPR serves as the legal foundation for the processing of per­sonal data which is necessary for the fulfilment of a contract if the data subject is party to this contract. This applies also to the processing processes which are neces­sary for the execution of pre-contractual measures.

Article 6 Para. 1 lit. c GDPR serves as the legal foundation in so far as processing of personal data is necessary for the fulfilment of a legal obligation applying to our en­terprise.

Article 6 Para. 1 lit. d GDPR serves as the legal foundation for the situation that vital interests of the data subject or another natural person make the processing of per­sonal data necessary.

Article 6 Para. 1 lit. f GDPR serves as the legal foundation for the situation that pro­cessing is necessary to ensure a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not exceed the first named interest.

Deletion of data and duration of storage

The personal data of the data subject are deleted or disabled as soon as the purpose for which the data was stored lapses. In addition, storage can take place if this was stipulated by the European or national legislatures in orders, laws or other regulations in accordance with European Union law to which the responsible party is subject. Disabling or deletion of the data is also carried out if a storage period prescribed by the standards as named expires unless there is a necessity for the continued storage of the data for the concluding or fulfilling of a contract.

IV. Making available of our website and creation of logfiles

Description and range of data processing

On every visit on our website our system automatically collects data and information of the computer system calling. The following data is collected:

• Information on the type of browser and its version used
• The operating system of the user
• The internet-service-provider of the user
• The IP-address of the user
• Date and time of the access
• The website, from which an accessing system reaches our website
• Websites, which are accessed by the computer system of the user via our web­site

This data is also stored in the logfiles of our system. However, IP-addresses of the users or other data, which would allow the assignment of the data to a particular user, are not stored. Also, this data is not stored together with other personal data of the user.

Legal foundations for the data processing

Article 6 Para. 1 lit. f GDPR is the legal foundation for the temporary storage of data and logfiles.

Purpose of data processing

The temporary storage of the IP-address by the system is necessary to enable the delivery of the website to the computer of the user. For achieving this the IP-address of the user must remain stored for the duration of the session.

The storage in logfiles occurs to enable the proper functioning of the website. Fur­thermore, this data serves to optimize the website and to enable the security of our IT-systems. An analysis of the data for marketing purposes does not happen.

The legal foundation is our legitimate interest in data processing according to Article 6 Para.1 lit. f GDPR.

Duration of storage

The data is deleted or disabled as soon as the purpose for which the data was stored lapses. This is the case when the particular session has ended in situations where the data is collected for making the website available.

This is the case at the latest seven days after the time when the data was stored in log files. A storage exceeding this period is possible. In this case the IP-addresses of the users are deleted or distorted so that an assignment of the client calling in is no longer possible.

Possibility for objection and deletion

The collection of data for the making available of the website and the storage of data in logfiles is compulsory for operating the website. Thus, there is no right to object by the user.

Use of cookies

1. a) Description and range of data processing

Our website uses cookies. In general, cookies are small text files which are stored on your computer and which store certain settings and data for exchange with the online offer from us via your browser. If a user calls in a website, a cookie can be stored in the operating system of the user’s computer. This cookie usually contains a unique string of characters, which allows an unambiguous identification of the browser when calling in the website again.

We are using cookies to improve our online offer. Some elements of our website re­quire that a browser calling in can be identified after a changeover.

The following data is stored and transmitted:

• Language settings
• Log-In-information

The data of the user collected in this way is pseudonymized by technical processes. Accordingly, assignment of the data to the user calling in is no longer possible. The data collected is not stored together with other personal data of the user.

When our website is called, the users are informed by means of an information ban­ner about the use of cookies for analytical purposes and are referred to this data protection information. In this connection reference is given to how storage of cookies can be prevented by the browser settings.

In this connection follows a reference to how that storing of cookies can be prevented by appropriate browser settings.

1. b) Legal foundation of data processing

The legal foundation for the processing of personal data by using cookies is Article 6 Para. 1 lit. f GDPR.

1. c) Purpose of data processing

The purpose behind the use of strictly technically essential cookies is to facilitate the use of the website for the user. Certain functions of our website cannot be offered without the use of cookies. For these functions it is necessary that the browser is recognized even after a page change.

We need cookies for the following application:

• Adoption of language settings

Analysis cookies are used for the purpose of improving the quality of our website and its content. By the analysis cookies we learn how the website is used and thus are able to continually optimize our offer. These purposes also include our legitimate in­terest in the processing of the personal data in accordance with Article 6 Para. 1 lit. f GDPR.

1. d) Duration of storage, possibilities for objection and elimination

Cookies are stored on the user’s computer and are transmitted from this to our web­site. Accordingly, you as user have full control over the use of cookies. By a change of the settings of your internet browser you are able to deactivate or restrict the transmissions of cookies. Cookies already being stored can be deleted at any time. This can also be carried out automatically. However, if cookies for our website are deactivated, it may no longer be possible to fully use all functions of the website. The transmission of flash cookies cannot be prevented by the browser settings but re­quires changes of the settings of the flash player.

 

VI. E-Mail-contact

Description and range of data processing

Contacting us is possible by using the e-mail address provided. In this case personal data of the user transmitted with the e-mail is stored. In this connection no data is passed on to third parties. The data is used exclusively for the processing of the con­versation and will immediately be deleted if it is no longer needed.

Legal foundation of data processing

Legal foundation for the processing of the data after application of the user for a newsletter in case of consent of the user is Article 6 Para. 1 lit. a GDPR.

Legal foundation for the processing of data in case of the transmission of an e-mail is Article 6 Para. 1 lit. f GDPR. Is the e-mail contact directed at closing a contract addi­tional legal foundation for the processing of data is Article 6 Para. 1 lit. b GDPR.

Purpose of data processing

The processing of the personal data from the input mask/e-mail serves us solely for the processing of the contact. In case of contacting by e-mail this is also the neces­sary legitimate interest in the processing of the data.

Other personal data processed during the sending-off process serves to prevent abuse of the contact form and to ensure the security of our IT systems.

Duration of storage

The data is deleted as soon as it is no longer needed for achieving the purpose of their collection. This is the case for the personal data from the input mask of the contact form and those which are sent by e-mail when the particular conversation with the user has ended.

The conversation has ended when the circumstances allow the conclusion that the matter in question has been finally clarified.

The additional personal data collected during the sending-off process is deleted the latest after a period of seven days.

Possibilities for objection and elimination

At any time the user has the opportunity to withdraw his consent on the processing of personal data. If the user is contacting us by e-mail, he can object to the storage of his personal data at any time. In this case the conversation cannot be continued.

VII.       Rights of the data subject

If your personal data is processed, then you are the data subject in the sense of the GDPR and you are entitled to the following rights vis à vis the responsible party:

Right of access by the data subject

You can demand from the responsible party confirmation as to whether personal data that relates to you has been processed by us. If such processing has taken place, you can demand information from the responsible party on the following:

• The purposes for which the personal data is processed;
• The categories of personal data which are processed;
• The recipients or, resp., the categories of recipients to which the personal data relating to you has been disclosed or will be disclosed;
• The planned duration of the storage of the personal data relating to you or, if dis­tinct statements on this are not possible, the criteria for the laying down of duration of storage;
• The existence of a right to correction or deletion of the personal data relating to yourself, of a right to a restriction of the processing by the responsible party or of a right of objection to this processing;
• The existence of a right of appeal at a supervisory authority;
• All available information on the origin of the data if the personal data was not collected at the data subject;
• The existence of an automated decision-finding process including profiling in ac­cordance with Article 22 Para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and its scope and the effects strived for of such a processing for the data subject in question.

You are entitled to the right to demand information on whether the personal data re­lating to yourself is transmitted to a third country or an international organization. In this connection you can demand to be instructed on the suitable guarantees in ac­cordance with Article 46 GDPR in connection with the transmission.

Right to correction

You have a right to correction and/or completion vis à vis the responsible party in so far as the personal data as processed and which relates to yourself is incorrect or incomplete. The responsible party has to carry out the correction without delay.

Right to restrict the processing of personal data

Provided the following preconditions are met you can demand restriction of the pro­cessing of the personal data relating to you:

• if you dispute the correctness of the personal data relating to yourself for a pe­riod which makes it possible for the responsible party to check the correctness of the personal data;
• if the processing is unlawful and you reject deletion of the personal data and de­mand restriction of the use of the personal data instead;
• if the responsible party no longer needs the personal data for purposes of the processing but you need the data for the advancing, exercising or defending of legal claims, or
• if you have advanced objection to the processing in accordance with Article 21 Para. 1 GDPR but it has not yet been established whether the justified rea­sons of the responsible party outweigh your reasons.

If the processing of the personal data relating to yourself has been restricted, then this data – apart from the storage of it – may only be processed with your consent or for the assertion, exercising or defending of legal claims or for the protection of the rights of another natural person or legal entity or for reasons relating to an important public interest of the European Union or of a member state.

If the restriction of the processing has been restricted in accordance with the afore-mentioned preconditions, then you will be informed by the responsible party before the restriction is cancelled.

Right to erasure

1. a) Deletion obligation

You can demand by the responsible party that the personal data relating to yourself is deleted without delay and the responsible party is then obliged to delete this data without delay in so far as one of the following reasons applies:

• The personal data relating to you is no longer required for the purposes for which it was collected or for which it was processed.
• You revoke your consent, on which processing in accordance with Article 6 Para. 1 lit. a or Article 9 Para.2 lit. a GDPR was based, and there is no other legal foundation for the processing.
• You submit an objection to the processing in accordance with Article 21 Para. 1 GDPR and there are no justified reasons for the processing with a higher priority, or you submit an objection to the processing in accordance with Article 21 Para. 2 GDPR.
• The personal data relating to you was processed unlawfully.
• The deletion of the personal data relating to you is required to fulfil a legal obliga­tion in accordance with European Union law or the law of the member states, which laws the responsible party is subject to.
• The personal data relating to you was collected in relation to services offered by the information society in accordance with Article 8 Para. 1 GDPR.

1. b) Information to third parties

If the responsible party has made the personal data relating to you public and if he/she is obliged to delete this data in accordance with Article 17 Para. 1 GDPR, then he/she shall take reasonable measures including technical ones – whereby ac­count shall be taken of the available technology and the implementation costs – to inform the responsible parties for the data processing which process the personal data that you as data subject have demanded from them the deletion of all links to this personal data or of copies or replicates of these.

1. c) Exceptions

The right to erasure does not exist in so far as the processing is necessary for

• the exercising of the right of free expression of opinion and to information;
• for the fulfilment of a legal obligation, which requires the processing in accord­ance with the law of the European Union or the law of the member states, which laws the responsible party is subject to, or for the carrying out of a task, which lies in the public interest or which is carried out in the exercising of pub­lic authority, which authority was transferred to the responsible party;
• for reasons of public interest in the field of public health in accordance with Arti­cle 9 Para. 2 lit. h and i as well as Article 9 Para. 3 GDPR;
• for archiving purposes, scientific or historical research purposes lying in the pub­lic interest or for statistical purposes in accordance with Article 89 Para. 1 GDPR, in so far as the right named in section a) probably makes achieving of the objectives of the processing impossible or impairs it seriously, or
• for the advancing, exercising or defending of legal claims.

Right to information

If you have advanced the right to the correcting, erasure or restricting of the pro­cessing to the responsible party, then the latter is obliged to inform all recipients, to which the personal data relating to you was disclosed, of this correction or erasure of the data or of the restricting of the processing, unless this proves itself to be impossi­ble or linked with unreasonable expenditure.

You are entitled to the right vis à vis the responsible party to be informed about these recipients.

Right to data portability

You have the right to receive the personal data relating to yourself, which you made available to the responsible party, in a structured, conventional and machine-reada­ble format. In addition, you have the right to transmit this data to another responsible party without hindrance by the responsible party to whom the personal data was made available, in so far as

• the processing is based on consent in accordance with Article 6 Para. 1 lit. a GDPR or Article 9 Para. 2 lit. a GDPR or on a contract in accordance with Arti­cle 6 Para. 1 lit. b GDPR and
• the processing is carried out by means of automated processes.

In exercising this right, you have in addition the right to obtain the personal data re­lating to you is transferred directly from one responsible party to another responsible party in so far as this is technically possible. The freedoms and rights of other per­sons may not be impaired thereby.

The right to data portability applies not for the processing of personal data, which is necessary for the carrying out of a task, which lies in the public interest or in the ex­ercising of public authority and which task was transferred to the responsible party.

Right to object

For reasons which result from your particular situation you have the right to advance at any time objection to the processing of the personal data relating to you, which processing is carried out on the basis of Article 6 Para. 1 lit. e or f GDPR. This right also applies to the profiling based on these provisions.

The responsible party shall then no longer process the personal data relating to you, unless he/she can prove compelling reasons worthy of protection, which reasons overweigh your interests, rights and freedoms or where the processing serves the advancing, exercising or defending of legal claims.

If the personal data relating to you is processed for the purpose of direct advertising, then you have the right to advance at any time objection to the processing of the per­sonal data relating to you for purposes of such advertising. This applies also to the profiling in so far as this is carried out in connection with such direct advertising.

If you object to the processing for purposes of direct advertising, then the personal data relating to you will no longer be processed for these purposes.

You have the opportunity – in connection with the use of services of the information society and regardless of directive 2002/58/EC – to exercise your right of objection with the aid of automated processes in which technical specifications are used.

You have also the right for reasons which result from your particular situation to ad­vance at any time objection to the processing of the personal data relating to you which processing is carried out for scientific or historic purposes or for statistical pur­poses according to Article 89 Para. 1 GDPR.

Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your consent at any time. On withdrawal we immedi­ately will delete your personal data and no longer process it. The legality of the pro­cessing carried out prior to your withdrawal on the base of your given consent is not affected by you withdrawal.

Right to complain at a supervisory authority

Regardless of another regulatory or judicial remedy, you are entitled to the right to lodge a complaint at a supervisory authority and here in particular at a supervisory authority in the member state of your place of residence, of your place of work or of the place where the suspected infringement took place when you are of the opinion that the processing of the personal data relating to you infringes the GDPR.

In this case the supervisory authority, at which the complaint was lodged, shall inform the complainant on the status and the results of the complaint including the possibility of a judicial remedy in accordance with Article 78 GDPR.

I. Name and address of the responsible party

The responsible party in the sense of the General Data Protection Regulation (GDPR) and of other national data protection regulations in force in the member states of European Union as well as of other regulations with a legal data-protecting character is the

CTP Advanced Materials GmbH

Stahlstrasse 60

D-65428 Ruesselsheim, Germany

Fon: +49 6142 91 85 0

Fax: +49 6142 91 85 55

Mail: ctp@ctpgmbh.de

 

The processing of some data takes place in joint responsibility according to Art. 26 GDPR with:

Aditya Birla Group
Aditya Birla Centre
S K Ahire Marg, Worli

Mumbai 400030, India

II. Name and address of the data protection officer

The data protection officer of the responsible party is:

daschug GmbH

Robert-Bosch-Strasse 7

64293 Darmstadt, Germany

Fon +49 6151 6673 440

Mail: datenschutz@ctpgmbh.de

III.    General information on data processing

Range of the processing of personal data

Generally, we collect and process personal data of users only as long as this is re­quired for providing a properly functioning website as well as delivering our contents and services. The collection and use of personal data of our users on a regular basis only takes place after consent of the data subject. An exception applies to those cases where obtaining consent prior to use is not possible based on matters of law and fact and the processing of data is allowed by legal regulations.

Legal fundamentals for the processing of personal data

In so far as we obtain the consent of the data subject for the processing of personal data Article 6 Para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the foundation for the processing of personal data.

Article 6 Para. 1 lit. b GDPR serves as the legal foundation for the processing of per­sonal data which is necessary for the fulfilment of a contract if the data subject is party to this contract. This applies also to the processing processes which are neces­sary for the execution of pre-contractual measures.

Article 6 Para. 1 lit. c GDPR serves as the legal foundation in so far as processing of personal data is necessary for the fulfilment of a legal obligation applying to our en­terprise.

Article 6 Para. 1 lit. d GDPR serves as the legal foundation for the situation that vital interests of the data subject or another natural person make the processing of per­sonal data necessary.

Article 6 Para. 1 lit. f GDPR serves as the legal foundation for the situation that pro­cessing is necessary to ensure a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not exceed the first named interest.

Deletion of data and duration of storage

The personal data of the data subject are deleted or disabled as soon as the purpose for which the data was stored lapses. In addition, storage can take place if this was stipulated by the European or national legislatures in orders, laws or other regulations in accordance with European Union law to which the responsible party is subject. Disabling or deletion of the data is also carried out if a storage period prescribed by the standards as named expires unless there is a necessity for the continued storage of the data for the concluding or fulfilling of a contract.

IV. Making available of our website and creation of logfiles

Description and range of data processing

On every visit on our website our system automatically collects data and information of the computer system calling. The following data is collected:

• Information on the type of browser and its version used
• The operating system of the user
• The internet-service-provider of the user
• The IP-address of the user
• Date and time of the access
• The website, from which an accessing system reaches our website
• Websites, which are accessed by the computer system of the user via our web­site

This data is also stored in the logfiles of our system. However, IP-addresses of the users or other data, which would allow the assignment of the data to a particular user, are not stored. Also, this data is not stored together with other personal data of the user.

Legal foundations for the data processing

Article 6 Para. 1 lit. f GDPR is the legal foundation for the temporary storage of data and logfiles.

Purpose of data processing

The temporary storage of the IP-address by the system is necessary to enable the delivery of the website to the computer of the user. For achieving this the IP-address of the user must remain stored for the duration of the session.

The storage in logfiles occurs to enable the proper functioning of the website. Fur­thermore, this data serves to optimize the website and to enable the security of our IT-systems. An analysis of the data for marketing purposes does not happen.

The legal foundation is our legitimate interest in data processing according to Article 6 Para.1 lit. f GDPR.

Duration of storage

The data is deleted or disabled as soon as the purpose for which the data was stored lapses. This is the case when the particular session has ended in situations where the data is collected for making the website available.

This is the case at the latest seven days after the time when the data was stored in log files. A storage exceeding this period is possible. In this case the IP-addresses of the users are deleted or distorted so that an assignment of the client calling in is no longer possible.

Possibility for objection and deletion

The collection of data for the making available of the website and the storage of data in logfiles is compulsory for operating the website. Thus, there is no right to object by the user.

Use of cookies

1. a) Description and range of data processing

Our website uses cookies. In general, cookies are small text files which are stored on your computer and which store certain settings and data for exchange with the online offer from us via your browser. If a user calls in a website, a cookie can be stored in the operating system of the user’s computer. This cookie usually contains a unique string of characters, which allows an unambiguous identification of the browser when calling in the website again.

We are using cookies to improve our online offer. Some elements of our website re­quire that a browser calling in can be identified after a changeover.

The following data is stored and transmitted:

• Language settings
• Log-In-information

The data of the user collected in this way is pseudonymized by technical processes. Accordingly, assignment of the data to the user calling in is no longer possible. The data collected is not stored together with other personal data of the user.

When our website is called, the users are informed by means of an information ban­ner about the use of cookies for analytical purposes and are referred to this data protection information. In this connection reference is given to how storage of cookies can be prevented by the browser settings.

In this connection follows a reference to how that storing of cookies can be prevented by appropriate browser settings.

1. b) Legal foundation of data processing

The legal foundation for the processing of personal data by using cookies is Article 6 Para. 1 lit. f GDPR.

1. c) Purpose of data processing

The purpose behind the use of strictly technically essential cookies is to facilitate the use of the website for the user. Certain functions of our website cannot be offered without the use of cookies. For these functions it is necessary that the browser is recognized even after a page change.

We need cookies for the following application:

• Adoption of language settings

Analysis cookies are used for the purpose of improving the quality of our website and its content. By the analysis cookies we learn how the website is used and thus are able to continually optimize our offer. These purposes also include our legitimate in­terest in the processing of the personal data in accordance with Article 6 Para. 1 lit. f GDPR.

1. d) Duration of storage, possibilities for objection and elimination

Cookies are stored on the user’s computer and are transmitted from this to our web­site. Accordingly, you as user have full control over the use of cookies. By a change of the settings of your internet browser you are able to deactivate or restrict the transmissions of cookies. Cookies already being stored can be deleted at any time. This can also be carried out automatically. However, if cookies for our website are deactivated, it may no longer be possible to fully use all functions of the website. The transmission of flash cookies cannot be prevented by the browser settings but re­quires changes of the settings of the flash player.

 

VI. E-Mail-contact

Description and range of data processing

Contacting us is possible by using the e-mail address provided. In this case personal data of the user transmitted with the e-mail is stored. In this connection no data is passed on to third parties. The data is used exclusively for the processing of the con­versation and will immediately be deleted if it is no longer needed.

Legal foundation of data processing

Legal foundation for the processing of the data after application of the user for a newsletter in case of consent of the user is Article 6 Para. 1 lit. a GDPR.

Legal foundation for the processing of data in case of the transmission of an e-mail is Article 6 Para. 1 lit. f GDPR. Is the e-mail contact directed at closing a contract addi­tional legal foundation for the processing of data is Article 6 Para. 1 lit. b GDPR.

Purpose of data processing

The processing of the personal data from the input mask/e-mail serves us solely for the processing of the contact. In case of contacting by e-mail this is also the neces­sary legitimate interest in the processing of the data.

Other personal data processed during the sending-off process serves to prevent abuse of the contact form and to ensure the security of our IT systems.

Duration of storage

The data is deleted as soon as it is no longer needed for achieving the purpose of their collection. This is the case for the personal data from the input mask of the contact form and those which are sent by e-mail when the particular conversation with the user has ended.

The conversation has ended when the circumstances allow the conclusion that the matter in question has been finally clarified.

The additional personal data collected during the sending-off process is deleted the latest after a period of seven days.

Possibilities for objection and elimination

At any time the user has the opportunity to withdraw his consent on the processing of personal data. If the user is contacting us by e-mail, he can object to the storage of his personal data at any time. In this case the conversation cannot be continued.

VII.       Rights of the data subject

If your personal data is processed, then you are the data subject in the sense of the GDPR and you are entitled to the following rights vis à vis the responsible party:

Right of access by the data subject

You can demand from the responsible party confirmation as to whether personal data that relates to you has been processed by us. If such processing has taken place, you can demand information from the responsible party on the following:

• The purposes for which the personal data is processed;
• The categories of personal data which are processed;
• The recipients or, resp., the categories of recipients to which the personal data relating to you has been disclosed or will be disclosed;
• The planned duration of the storage of the personal data relating to you or, if dis­tinct statements on this are not possible, the criteria for the laying down of duration of storage;
• The existence of a right to correction or deletion of the personal data relating to yourself, of a right to a restriction of the processing by the responsible party or of a right of objection to this processing;
• The existence of a right of appeal at a supervisory authority;
• All available information on the origin of the data if the personal data was not collected at the data subject;
• The existence of an automated decision-finding process including profiling in ac­cordance with Article 22 Para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and its scope and the effects strived for of such a processing for the data subject in question.

You are entitled to the right to demand information on whether the personal data re­lating to yourself is transmitted to a third country or an international organization. In this connection you can demand to be instructed on the suitable guarantees in ac­cordance with Article 46 GDPR in connection with the transmission.

Right to correction

You have a right to correction and/or completion vis à vis the responsible party in so far as the personal data as processed and which relates to yourself is incorrect or incomplete. The responsible party has to carry out the correction without delay.

Right to restrict the processing of personal data

Provided the following preconditions are met you can demand restriction of the pro­cessing of the personal data relating to you:

• if you dispute the correctness of the personal data relating to yourself for a pe­riod which makes it possible for the responsible party to check the correctness of the personal data;
• if the processing is unlawful and you reject deletion of the personal data and de­mand restriction of the use of the personal data instead;
• if the responsible party no longer needs the personal data for purposes of the processing but you need the data for the advancing, exercising or defending of legal claims, or
• if you have advanced objection to the processing in accordance with Article 21 Para. 1 GDPR but it has not yet been established whether the justified rea­sons of the responsible party outweigh your reasons.

If the processing of the personal data relating to yourself has been restricted, then this data – apart from the storage of it – may only be processed with your consent or for the assertion, exercising or defending of legal claims or for the protection of the rights of another natural person or legal entity or for reasons relating to an important public interest of the European Union or of a member state.

If the restriction of the processing has been restricted in accordance with the afore-mentioned preconditions, then you will be informed by the responsible party before the restriction is cancelled.

Right to erasure

1. a) Deletion obligation

You can demand by the responsible party that the personal data relating to yourself is deleted without delay and the responsible party is then obliged to delete this data without delay in so far as one of the following reasons applies:

• The personal data relating to you is no longer required for the purposes for which it was collected or for which it was processed.
• You revoke your consent, on which processing in accordance with Article 6 Para. 1 lit. a or Article 9 Para.2 lit. a GDPR was based, and there is no other legal foundation for the processing.
• You submit an objection to the processing in accordance with Article 21 Para. 1 GDPR and there are no justified reasons for the processing with a higher priority, or you submit an objection to the processing in accordance with Article 21 Para. 2 GDPR.
• The personal data relating to you was processed unlawfully.
• The deletion of the personal data relating to you is required to fulfil a legal obliga­tion in accordance with European Union law or the law of the member states, which laws the responsible party is subject to.
• The personal data relating to you was collected in relation to services offered by the information society in accordance with Article 8 Para. 1 GDPR.

1. b) Information to third parties

If the responsible party has made the personal data relating to you public and if he/she is obliged to delete this data in accordance with Article 17 Para. 1 GDPR, then he/she shall take reasonable measures including technical ones – whereby ac­count shall be taken of the available technology and the implementation costs – to inform the responsible parties for the data processing which process the personal data that you as data subject have demanded from them the deletion of all links to this personal data or of copies or replicates of these.

1. c) Exceptions

The right to erasure does not exist in so far as the processing is necessary for

• the exercising of the right of free expression of opinion and to information;
• for the fulfilment of a legal obligation, which requires the processing in accord­ance with the law of the European Union or the law of the member states, which laws the responsible party is subject to, or for the carrying out of a task, which lies in the public interest or which is carried out in the exercising of pub­lic authority, which authority was transferred to the responsible party;
• for reasons of public interest in the field of public health in accordance with Arti­cle 9 Para. 2 lit. h and i as well as Article 9 Para. 3 GDPR;
• for archiving purposes, scientific or historical research purposes lying in the pub­lic interest or for statistical purposes in accordance with Article 89 Para. 1 GDPR, in so far as the right named in section a) probably makes achieving of the objectives of the processing impossible or impairs it seriously, or
• for the advancing, exercising or defending of legal claims.

Right to information

If you have advanced the right to the correcting, erasure or restricting of the pro­cessing to the responsible party, then the latter is obliged to inform all recipients, to which the personal data relating to you was disclosed, of this correction or erasure of the data or of the restricting of the processing, unless this proves itself to be impossi­ble or linked with unreasonable expenditure.

You are entitled to the right vis à vis the responsible party to be informed about these recipients.

Right to data portability

You have the right to receive the personal data relating to yourself, which you made available to the responsible party, in a structured, conventional and machine-reada­ble format. In addition, you have the right to transmit this data to another responsible party without hindrance by the responsible party to whom the personal data was made available, in so far as

• the processing is based on consent in accordance with Article 6 Para. 1 lit. a GDPR or Article 9 Para. 2 lit. a GDPR or on a contract in accordance with Arti­cle 6 Para. 1 lit. b GDPR and
• the processing is carried out by means of automated processes.

In exercising this right, you have in addition the right to obtain the personal data re­lating to you is transferred directly from one responsible party to another responsible party in so far as this is technically possible. The freedoms and rights of other per­sons may not be impaired thereby.

The right to data portability applies not for the processing of personal data, which is necessary for the carrying out of a task, which lies in the public interest or in the ex­ercising of public authority and which task was transferred to the responsible party.

Right to object

For reasons which result from your particular situation you have the right to advance at any time objection to the processing of the personal data relating to you, which processing is carried out on the basis of Article 6 Para. 1 lit. e or f GDPR. This right also applies to the profiling based on these provisions.

The responsible party shall then no longer process the personal data relating to you, unless he/she can prove compelling reasons worthy of protection, which reasons overweigh your interests, rights and freedoms or where the processing serves the advancing, exercising or defending of legal claims.

If the personal data relating to you is processed for the purpose of direct advertising, then you have the right to advance at any time objection to the processing of the per­sonal data relating to you for purposes of such advertising. This applies also to the profiling in so far as this is carried out in connection with such direct advertising.

If you object to the processing for purposes of direct advertising, then the personal data relating to you will no longer be processed for these purposes.

You have the opportunity – in connection with the use of services of the information society and regardless of directive 2002/58/EC – to exercise your right of objection with the aid of automated processes in which technical specifications are used.

You have also the right for reasons which result from your particular situation to ad­vance at any time objection to the processing of the personal data relating to you which processing is carried out for scientific or historic purposes or for statistical pur­poses according to Article 89 Para. 1 GDPR.

Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your consent at any time. On withdrawal we immedi­ately will delete your personal data and no longer process it. The legality of the pro­cessing carried out prior to your withdrawal on the base of your given consent is not affected by you withdrawal.

Right to complain at a supervisory authority

Regardless of another regulatory or judicial remedy, you are entitled to the right to lodge a complaint at a supervisory authority and here in particular at a supervisory authority in the member state of your place of residence, of your place of work or of the place where the suspected infringement took place when you are of the opinion that the processing of the personal data relating to you infringes the GDPR.

In this case the supervisory authority, at which the complaint was lodged, shall inform the complainant on the status and the results of the complaint including the possibility of a judicial remedy in accordance with Article 78 GDPR.

I. Name and address of the responsible party

The responsible party in the sense of the General Data Protection Regulation (GDPR) and of other national data protection regulations in force in the member states of European Union as well as of other regulations with a legal data-protecting character is the

CTP Advanced Materials GmbH

Stahlstrasse 60

D-65428 Ruesselsheim, Germany

Fon: +49 6142 91 85 0

Fax: +49 6142 91 85 55

Mail: ctp@ctpgmbh.de

 

The processing of some data takes place in joint responsibility according to Art. 26 GDPR with:

Aditya Birla Group
Aditya Birla Centre
S K Ahire Marg, Worli

Mumbai 400030, India

II. Name and address of the data protection officer

The data protection officer of the responsible party is:

daschug GmbH

Robert-Bosch-Strasse 7

64293 Darmstadt, Germany

Fon +49 6151 6673 440

Mail: datenschutz@ctpgmbh.de

III.    General information on data processing

Range of the processing of personal data

Generally, we collect and process personal data of users only as long as this is re­quired for providing a properly functioning website as well as delivering our contents and services. The collection and use of personal data of our users on a regular basis only takes place after consent of the data subject. An exception applies to those cases where obtaining consent prior to use is not possible based on matters of law and fact and the processing of data is allowed by legal regulations.

Legal fundamentals for the processing of personal data

In so far as we obtain the consent of the data subject for the processing of personal data Article 6 Para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the foundation for the processing of personal data.

Article 6 Para. 1 lit. b GDPR serves as the legal foundation for the processing of per­sonal data which is necessary for the fulfilment of a contract if the data subject is party to this contract. This applies also to the processing processes which are neces­sary for the execution of pre-contractual measures.

Article 6 Para. 1 lit. c GDPR serves as the legal foundation in so far as processing of personal data is necessary for the fulfilment of a legal obligation applying to our en­terprise.

Article 6 Para. 1 lit. d GDPR serves as the legal foundation for the situation that vital interests of the data subject or another natural person make the processing of per­sonal data necessary.

Article 6 Para. 1 lit. f GDPR serves as the legal foundation for the situation that pro­cessing is necessary to ensure a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not exceed the first named interest.

Deletion of data and duration of storage

The personal data of the data subject are deleted or disabled as soon as the purpose for which the data was stored lapses. In addition, storage can take place if this was stipulated by the European or national legislatures in orders, laws or other regulations in accordance with European Union law to which the responsible party is subject. Disabling or deletion of the data is also carried out if a storage period prescribed by the standards as named expires unless there is a necessity for the continued storage of the data for the concluding or fulfilling of a contract.

IV. Making available of our website and creation of logfiles

Description and range of data processing

On every visit on our website our system automatically collects data and information of the computer system calling. The following data is collected:

• Information on the type of browser and its version used
• The operating system of the user
• The internet-service-provider of the user
• The IP-address of the user
• Date and time of the access
• The website, from which an accessing system reaches our website
• Websites, which are accessed by the computer system of the user via our web­site

This data is also stored in the logfiles of our system. However, IP-addresses of the users or other data, which would allow the assignment of the data to a particular user, are not stored. Also, this data is not stored together with other personal data of the user.

Legal foundations for the data processing

Article 6 Para. 1 lit. f GDPR is the legal foundation for the temporary storage of data and logfiles.

Purpose of data processing

The temporary storage of the IP-address by the system is necessary to enable the delivery of the website to the computer of the user. For achieving this the IP-address of the user must remain stored for the duration of the session.

The storage in logfiles occurs to enable the proper functioning of the website. Fur­thermore, this data serves to optimize the website and to enable the security of our IT-systems. An analysis of the data for marketing purposes does not happen.

The legal foundation is our legitimate interest in data processing according to Article 6 Para.1 lit. f GDPR.

Duration of storage

The data is deleted or disabled as soon as the purpose for which the data was stored lapses. This is the case when the particular session has ended in situations where the data is collected for making the website available.

This is the case at the latest seven days after the time when the data was stored in log files. A storage exceeding this period is possible. In this case the IP-addresses of the users are deleted or distorted so that an assignment of the client calling in is no longer possible.

Possibility for objection and deletion

The collection of data for the making available of the website and the storage of data in logfiles is compulsory for operating the website. Thus, there is no right to object by the user.

Use of cookies

1. a) Description and range of data processing

Our website uses cookies. In general, cookies are small text files which are stored on your computer and which store certain settings and data for exchange with the online offer from us via your browser. If a user calls in a website, a cookie can be stored in the operating system of the user’s computer. This cookie usually contains a unique string of characters, which allows an unambiguous identification of the browser when calling in the website again.

We are using cookies to improve our online offer. Some elements of our website re­quire that a browser calling in can be identified after a changeover.

The following data is stored and transmitted:

• Language settings
• Log-In-information

The data of the user collected in this way is pseudonymized by technical processes. Accordingly, assignment of the data to the user calling in is no longer possible. The data collected is not stored together with other personal data of the user.

When our website is called, the users are informed by means of an information ban­ner about the use of cookies for analytical purposes and are referred to this data protection information. In this connection reference is given to how storage of cookies can be prevented by the browser settings.

In this connection follows a reference to how that storing of cookies can be prevented by appropriate browser settings.

1. b) Legal foundation of data processing

The legal foundation for the processing of personal data by using cookies is Article 6 Para. 1 lit. f GDPR.

1. c) Purpose of data processing

The purpose behind the use of strictly technically essential cookies is to facilitate the use of the website for the user. Certain functions of our website cannot be offered without the use of cookies. For these functions it is necessary that the browser is recognized even after a page change.

We need cookies for the following application:

• Adoption of language settings

Analysis cookies are used for the purpose of improving the quality of our website and its content. By the analysis cookies we learn how the website is used and thus are able to continually optimize our offer. These purposes also include our legitimate in­terest in the processing of the personal data in accordance with Article 6 Para. 1 lit. f GDPR.

1. d) Duration of storage, possibilities for objection and elimination

Cookies are stored on the user’s computer and are transmitted from this to our web­site. Accordingly, you as user have full control over the use of cookies. By a change of the settings of your internet browser you are able to deactivate or restrict the transmissions of cookies. Cookies already being stored can be deleted at any time. This can also be carried out automatically. However, if cookies for our website are deactivated, it may no longer be possible to fully use all functions of the website. The transmission of flash cookies cannot be prevented by the browser settings but re­quires changes of the settings of the flash player.

 

VI. E-Mail-contact

Description and range of data processing

Contacting us is possible by using the e-mail address provided. In this case personal data of the user transmitted with the e-mail is stored. In this connection no data is passed on to third parties. The data is used exclusively for the processing of the con­versation and will immediately be deleted if it is no longer needed.

Legal foundation of data processing

Legal foundation for the processing of the data after application of the user for a newsletter in case of consent of the user is Article 6 Para. 1 lit. a GDPR.

Legal foundation for the processing of data in case of the transmission of an e-mail is Article 6 Para. 1 lit. f GDPR. Is the e-mail contact directed at closing a contract addi­tional legal foundation for the processing of data is Article 6 Para. 1 lit. b GDPR.

Purpose of data processing

The processing of the personal data from the input mask/e-mail serves us solely for the processing of the contact. In case of contacting by e-mail this is also the neces­sary legitimate interest in the processing of the data.

Other personal data processed during the sending-off process serves to prevent abuse of the contact form and to ensure the security of our IT systems.

Duration of storage

The data is deleted as soon as it is no longer needed for achieving the purpose of their collection. This is the case for the personal data from the input mask of the contact form and those which are sent by e-mail when the particular conversation with the user has ended.

The conversation has ended when the circumstances allow the conclusion that the matter in question has been finally clarified.

The additional personal data collected during the sending-off process is deleted the latest after a period of seven days.

Possibilities for objection and elimination

At any time the user has the opportunity to withdraw his consent on the processing of personal data. If the user is contacting us by e-mail, he can object to the storage of his personal data at any time. In this case the conversation cannot be continued.

VII.       Rights of the data subject

If your personal data is processed, then you are the data subject in the sense of the GDPR and you are entitled to the following rights vis à vis the responsible party:

Right of access by the data subject

You can demand from the responsible party confirmation as to whether personal data that relates to you has been processed by us. If such processing has taken place, you can demand information from the responsible party on the following:

• The purposes for which the personal data is processed;
• The categories of personal data which are processed;
• The recipients or, resp., the categories of recipients to which the personal data relating to you has been disclosed or will be disclosed;
• The planned duration of the storage of the personal data relating to you or, if dis­tinct statements on this are not possible, the criteria for the laying down of duration of storage;
• The existence of a right to correction or deletion of the personal data relating to yourself, of a right to a restriction of the processing by the responsible party or of a right of objection to this processing;
• The existence of a right of appeal at a supervisory authority;
• All available information on the origin of the data if the personal data was not collected at the data subject;
• The existence of an automated decision-finding process including profiling in ac­cordance with Article 22 Para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and its scope and the effects strived for of such a processing for the data subject in question.

You are entitled to the right to demand information on whether the personal data re­lating to yourself is transmitted to a third country or an international organization. In this connection you can demand to be instructed on the suitable guarantees in ac­cordance with Article 46 GDPR in connection with the transmission.

Right to correction

You have a right to correction and/or completion vis à vis the responsible party in so far as the personal data as processed and which relates to yourself is incorrect or incomplete. The responsible party has to carry out the correction without delay.

Right to restrict the processing of personal data

Provided the following preconditions are met you can demand restriction of the pro­cessing of the personal data relating to you:

• if you dispute the correctness of the personal data relating to yourself for a pe­riod which makes it possible for the responsible party to check the correctness of the personal data;
• if the processing is unlawful and you reject deletion of the personal data and de­mand restriction of the use of the personal data instead;
• if the responsible party no longer needs the personal data for purposes of the processing but you need the data for the advancing, exercising or defending of legal claims, or
• if you have advanced objection to the processing in accordance with Article 21 Para. 1 GDPR but it has not yet been established whether the justified rea­sons of the responsible party outweigh your reasons.

If the processing of the personal data relating to yourself has been restricted, then this data – apart from the storage of it – may only be processed with your consent or for the assertion, exercising or defending of legal claims or for the protection of the rights of another natural person or legal entity or for reasons relating to an important public interest of the European Union or of a member state.

If the restriction of the processing has been restricted in accordance with the afore-mentioned preconditions, then you will be informed by the responsible party before the restriction is cancelled.

Right to erasure

1. a) Deletion obligation

You can demand by the responsible party that the personal data relating to yourself is deleted without delay and the responsible party is then obliged to delete this data without delay in so far as one of the following reasons applies:

• The personal data relating to you is no longer required for the purposes for which it was collected or for which it was processed.
• You revoke your consent, on which processing in accordance with Article 6 Para. 1 lit. a or Article 9 Para.2 lit. a GDPR was based, and there is no other legal foundation for the processing.
• You submit an objection to the processing in accordance with Article 21 Para. 1 GDPR and there are no justified reasons for the processing with a higher priority, or you submit an objection to the processing in accordance with Article 21 Para. 2 GDPR.
• The personal data relating to you was processed unlawfully.
• The deletion of the personal data relating to you is required to fulfil a legal obliga­tion in accordance with European Union law or the law of the member states, which laws the responsible party is subject to.
• The personal data relating to you was collected in relation to services offered by the information society in accordance with Article 8 Para. 1 GDPR.

1. b) Information to third parties

If the responsible party has made the personal data relating to you public and if he/she is obliged to delete this data in accordance with Article 17 Para. 1 GDPR, then he/she shall take reasonable measures including technical ones – whereby ac­count shall be taken of the available technology and the implementation costs – to inform the responsible parties for the data processing which process the personal data that you as data subject have demanded from them the deletion of all links to this personal data or of copies or replicates of these.

1. c) Exceptions

The right to erasure does not exist in so far as the processing is necessary for

• the exercising of the right of free expression of opinion and to information;
• for the fulfilment of a legal obligation, which requires the processing in accord­ance with the law of the European Union or the law of the member states, which laws the responsible party is subject to, or for the carrying out of a task, which lies in the public interest or which is carried out in the exercising of pub­lic authority, which authority was transferred to the responsible party;
• for reasons of public interest in the field of public health in accordance with Arti­cle 9 Para. 2 lit. h and i as well as Article 9 Para. 3 GDPR;
• for archiving purposes, scientific or historical research purposes lying in the pub­lic interest or for statistical purposes in accordance with Article 89 Para. 1 GDPR, in so far as the right named in section a) probably makes achieving of the objectives of the processing impossible or impairs it seriously, or
• for the advancing, exercising or defending of legal claims.

Right to information

If you have advanced the right to the correcting, erasure or restricting of the pro­cessing to the responsible party, then the latter is obliged to inform all recipients, to which the personal data relating to you was disclosed, of this correction or erasure of the data or of the restricting of the processing, unless this proves itself to be impossi­ble or linked with unreasonable expenditure.

You are entitled to the right vis à vis the responsible party to be informed about these recipients.

Right to data portability

You have the right to receive the personal data relating to yourself, which you made available to the responsible party, in a structured, conventional and machine-reada­ble format. In addition, you have the right to transmit this data to another responsible party without hindrance by the responsible party to whom the personal data was made available, in so far as

• the processing is based on consent in accordance with Article 6 Para. 1 lit. a GDPR or Article 9 Para. 2 lit. a GDPR or on a contract in accordance with Arti­cle 6 Para. 1 lit. b GDPR and
• the processing is carried out by means of automated processes.

In exercising this right, you have in addition the right to obtain the personal data re­lating to you is transferred directly from one responsible party to another responsible party in so far as this is technically possible. The freedoms and rights of other per­sons may not be impaired thereby.

The right to data portability applies not for the processing of personal data, which is necessary for the carrying out of a task, which lies in the public interest or in the ex­ercising of public authority and which task was transferred to the responsible party.

Right to object

For reasons which result from your particular situation you have the right to advance at any time objection to the processing of the personal data relating to you, which processing is carried out on the basis of Article 6 Para. 1 lit. e or f GDPR. This right also applies to the profiling based on these provisions.

The responsible party shall then no longer process the personal data relating to you, unless he/she can prove compelling reasons worthy of protection, which reasons overweigh your interests, rights and freedoms or where the processing serves the advancing, exercising or defending of legal claims.

If the personal data relating to you is processed for the purpose of direct advertising, then you have the right to advance at any time objection to the processing of the per­sonal data relating to you for purposes of such advertising. This applies also to the profiling in so far as this is carried out in connection with such direct advertising.

If you object to the processing for purposes of direct advertising, then the personal data relating to you will no longer be processed for these purposes.

You have the opportunity – in connection with the use of services of the information society and regardless of directive 2002/58/EC – to exercise your right of objection with the aid of automated processes in which technical specifications are used.

You have also the right for reasons which result from your particular situation to ad­vance at any time objection to the processing of the personal data relating to you which processing is carried out for scientific or historic purposes or for statistical pur­poses according to Article 89 Para. 1 GDPR.

Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your consent at any time. On withdrawal we immedi­ately will delete your personal data and no longer process it. The legality of the pro­cessing carried out prior to your withdrawal on the base of your given consent is not affected by you withdrawal.

Right to complain at a supervisory authority

Regardless of another regulatory or judicial remedy, you are entitled to the right to lodge a complaint at a supervisory authority and here in particular at a supervisory authority in the member state of your place of residence, of your place of work or of the place where the suspected infringement took place when you are of the opinion that the processing of the personal data relating to you infringes the GDPR.

In this case the supervisory authority, at which the complaint was lodged, shall inform the complainant on the status and the results of the complaint including the possibility of a judicial remedy in accordance with Article 78 GDPR.

I. Name and address of the responsible party

The responsible party in the sense of the General Data Protection Regulation (GDPR) and of other national data protection regulations in force in the member states of European Union as well as of other regulations with a legal data-protecting character is the

CTP Advanced Materials GmbH

Stahlstrasse 60

D-65428 Ruesselsheim, Germany

Fon: +49 6142 91 85 0

Fax: +49 6142 91 85 55

Mail: ctp@ctpgmbh.de

 

The processing of some data takes place in joint responsibility according to Art. 26 GDPR with:

Aditya Birla Group
Aditya Birla Centre
S K Ahire Marg, Worli

Mumbai 400030, India

II. Name and address of the data protection officer

The data protection officer of the responsible party is:

daschug GmbH

Robert-Bosch-Strasse 7

64293 Darmstadt, Germany

Fon +49 6151 6673 440

Mail: datenschutz@ctpgmbh.de

III.    General information on data processing

Range of the processing of personal data

Generally, we collect and process personal data of users only as long as this is re­quired for providing a properly functioning website as well as delivering our contents and services. The collection and use of personal data of our users on a regular basis only takes place after consent of the data subject. An exception applies to those cases where obtaining consent prior to use is not possible based on matters of law and fact and the processing of data is allowed by legal regulations.

Legal fundamentals for the processing of personal data

In so far as we obtain the consent of the data subject for the processing of personal data Article 6 Para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the foundation for the processing of personal data.

Article 6 Para. 1 lit. b GDPR serves as the legal foundation for the processing of per­sonal data which is necessary for the fulfilment of a contract if the data subject is party to this contract. This applies also to the processing processes which are neces­sary for the execution of pre-contractual measures.

Article 6 Para. 1 lit. c GDPR serves as the legal foundation in so far as processing of personal data is necessary for the fulfilment of a legal obligation applying to our en­terprise.

Article 6 Para. 1 lit. d GDPR serves as the legal foundation for the situation that vital interests of the data subject or another natural person make the processing of per­sonal data necessary.

Article 6 Para. 1 lit. f GDPR serves as the legal foundation for the situation that pro­cessing is necessary to ensure a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not exceed the first named interest.

Deletion of data and duration of storage

The personal data of the data subject are deleted or disabled as soon as the purpose for which the data was stored lapses. In addition, storage can take place if this was stipulated by the European or national legislatures in orders, laws or other regulations in accordance with European Union law to which the responsible party is subject. Disabling or deletion of the data is also carried out if a storage period prescribed by the standards as named expires unless there is a necessity for the continued storage of the data for the concluding or fulfilling of a contract.

IV. Making available of our website and creation of logfiles

Description and range of data processing

On every visit on our website our system automatically collects data and information of the computer system calling. The following data is collected:

• Information on the type of browser and its version used
• The operating system of the user
• The internet-service-provider of the user
• The IP-address of the user
• Date and time of the access
• The website, from which an accessing system reaches our website
• Websites, which are accessed by the computer system of the user via our web­site

This data is also stored in the logfiles of our system. However, IP-addresses of the users or other data, which would allow the assignment of the data to a particular user, are not stored. Also, this data is not stored together with other personal data of the user.

Legal foundations for the data processing

Article 6 Para. 1 lit. f GDPR is the legal foundation for the temporary storage of data and logfiles.

Purpose of data processing

The temporary storage of the IP-address by the system is necessary to enable the delivery of the website to the computer of the user. For achieving this the IP-address of the user must remain stored for the duration of the session.

The storage in logfiles occurs to enable the proper functioning of the website. Fur­thermore, this data serves to optimize the website and to enable the security of our IT-systems. An analysis of the data for marketing purposes does not happen.

The legal foundation is our legitimate interest in data processing according to Article 6 Para.1 lit. f GDPR.

Duration of storage

The data is deleted or disabled as soon as the purpose for which the data was stored lapses. This is the case when the particular session has ended in situations where the data is collected for making the website available.

This is the case at the latest seven days after the time when the data was stored in log files. A storage exceeding this period is possible. In this case the IP-addresses of the users are deleted or distorted so that an assignment of the client calling in is no longer possible.

Possibility for objection and deletion

The collection of data for the making available of the website and the storage of data in logfiles is compulsory for operating the website. Thus, there is no right to object by the user.

Use of cookies

1. a) Description and range of data processing

Our website uses cookies. In general, cookies are small text files which are stored on your computer and which store certain settings and data for exchange with the online offer from us via your browser. If a user calls in a website, a cookie can be stored in the operating system of the user’s computer. This cookie usually contains a unique string of characters, which allows an unambiguous identification of the browser when calling in the website again.

We are using cookies to improve our online offer. Some elements of our website re­quire that a browser calling in can be identified after a changeover.

The following data is stored and transmitted:

• Language settings
• Log-In-information

The data of the user collected in this way is pseudonymized by technical processes. Accordingly, assignment of the data to the user calling in is no longer possible. The data collected is not stored together with other personal data of the user.

When our website is called, the users are informed by means of an information ban­ner about the use of cookies for analytical purposes and are referred to this data protection information. In this connection reference is given to how storage of cookies can be prevented by the browser settings.

In this connection follows a reference to how that storing of cookies can be prevented by appropriate browser settings.

1. b) Legal foundation of data processing

The legal foundation for the processing of personal data by using cookies is Article 6 Para. 1 lit. f GDPR.

1. c) Purpose of data processing

The purpose behind the use of strictly technically essential cookies is to facilitate the use of the website for the user. Certain functions of our website cannot be offered without the use of cookies. For these functions it is necessary that the browser is recognized even after a page change.

We need cookies for the following application:

• Adoption of language settings

Analysis cookies are used for the purpose of improving the quality of our website and its content. By the analysis cookies we learn how the website is used and thus are able to continually optimize our offer. These purposes also include our legitimate in­terest in the processing of the personal data in accordance with Article 6 Para. 1 lit. f GDPR.

1. d) Duration of storage, possibilities for objection and elimination

Cookies are stored on the user’s computer and are transmitted from this to our web­site. Accordingly, you as user have full control over the use of cookies. By a change of the settings of your internet browser you are able to deactivate or restrict the transmissions of cookies. Cookies already being stored can be deleted at any time. This can also be carried out automatically. However, if cookies for our website are deactivated, it may no longer be possible to fully use all functions of the website. The transmission of flash cookies cannot be prevented by the browser settings but re­quires changes of the settings of the flash player.

 

VI. E-Mail-contact

Description and range of data processing

Contacting us is possible by using the e-mail address provided. In this case personal data of the user transmitted with the e-mail is stored. In this connection no data is passed on to third parties. The data is used exclusively for the processing of the con­versation and will immediately be deleted if it is no longer needed.

Legal foundation of data processing

Legal foundation for the processing of the data after application of the user for a newsletter in case of consent of the user is Article 6 Para. 1 lit. a GDPR.

Legal foundation for the processing of data in case of the transmission of an e-mail is Article 6 Para. 1 lit. f GDPR. Is the e-mail contact directed at closing a contract addi­tional legal foundation for the processing of data is Article 6 Para. 1 lit. b GDPR.

Purpose of data processing

The processing of the personal data from the input mask/e-mail serves us solely for the processing of the contact. In case of contacting by e-mail this is also the neces­sary legitimate interest in the processing of the data.

Other personal data processed during the sending-off process serves to prevent abuse of the contact form and to ensure the security of our IT systems.

Duration of storage

The data is deleted as soon as it is no longer needed for achieving the purpose of their collection. This is the case for the personal data from the input mask of the contact form and those which are sent by e-mail when the particular conversation with the user has ended.

The conversation has ended when the circumstances allow the conclusion that the matter in question has been finally clarified.

The additional personal data collected during the sending-off process is deleted the latest after a period of seven days.

Possibilities for objection and elimination

At any time the user has the opportunity to withdraw his consent on the processing of personal data. If the user is contacting us by e-mail, he can object to the storage of his personal data at any time. In this case the conversation cannot be continued.

VII.       Rights of the data subject

If your personal data is processed, then you are the data subject in the sense of the GDPR and you are entitled to the following rights vis à vis the responsible party:

Right of access by the data subject

You can demand from the responsible party confirmation as to whether personal data that relates to you has been processed by us. If such processing has taken place, you can demand information from the responsible party on the following:

• The purposes for which the personal data is processed;
• The categories of personal data which are processed;
• The recipients or, resp., the categories of recipients to which the personal data relating to you has been disclosed or will be disclosed;
• The planned duration of the storage of the personal data relating to you or, if dis­tinct statements on this are not possible, the criteria for the laying down of duration of storage;
• The existence of a right to correction or deletion of the personal data relating to yourself, of a right to a restriction of the processing by the responsible party or of a right of objection to this processing;
• The existence of a right of appeal at a supervisory authority;
• All available information on the origin of the data if the personal data was not collected at the data subject;
• The existence of an automated decision-finding process including profiling in ac­cordance with Article 22 Para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and its scope and the effects strived for of such a processing for the data subject in question.

You are entitled to the right to demand information on whether the personal data re­lating to yourself is transmitted to a third country or an international organization. In this connection you can demand to be instructed on the suitable guarantees in ac­cordance with Article 46 GDPR in connection with the transmission.

Right to correction

You have a right to correction and/or completion vis à vis the responsible party in so far as the personal data as processed and which relates to yourself is incorrect or incomplete. The responsible party has to carry out the correction without delay.

Right to restrict the processing of personal data

Provided the following preconditions are met you can demand restriction of the pro­cessing of the personal data relating to you:

• if you dispute the correctness of the personal data relating to yourself for a pe­riod which makes it possible for the responsible party to check the correctness of the personal data;
• if the processing is unlawful and you reject deletion of the personal data and de­mand restriction of the use of the personal data instead;
• if the responsible party no longer needs the personal data for purposes of the processing but you need the data for the advancing, exercising or defending of legal claims, or
• if you have advanced objection to the processing in accordance with Article 21 Para. 1 GDPR but it has not yet been established whether the justified rea­sons of the responsible party outweigh your reasons.

If the processing of the personal data relating to yourself has been restricted, then this data – apart from the storage of it – may only be processed with your consent or for the assertion, exercising or defending of legal claims or for the protection of the rights of another natural person or legal entity or for reasons relating to an important public interest of the European Union or of a member state.

If the restriction of the processing has been restricted in accordance with the afore-mentioned preconditions, then you will be informed by the responsible party before the restriction is cancelled.

Right to erasure

1. a) Deletion obligation

You can demand by the responsible party that the personal data relating to yourself is deleted without delay and the responsible party is then obliged to delete this data without delay in so far as one of the following reasons applies:

• The personal data relating to you is no longer required for the purposes for which it was collected or for which it was processed.
• You revoke your consent, on which processing in accordance with Article 6 Para. 1 lit. a or Article 9 Para.2 lit. a GDPR was based, and there is no other legal foundation for the processing.
• You submit an objection to the processing in accordance with Article 21 Para. 1 GDPR and there are no justified reasons for the processing with a higher priority, or you submit an objection to the processing in accordance with Article 21 Para. 2 GDPR.
• The personal data relating to you was processed unlawfully.
• The deletion of the personal data relating to you is required to fulfil a legal obliga­tion in accordance with European Union law or the law of the member states, which laws the responsible party is subject to.
• The personal data relating to you was collected in relation to services offered by the information society in accordance with Article 8 Para. 1 GDPR.

1. b) Information to third parties

If the responsible party has made the personal data relating to you public and if he/she is obliged to delete this data in accordance with Article 17 Para. 1 GDPR, then he/she shall take reasonable measures including technical ones – whereby ac­count shall be taken of the available technology and the implementation costs – to inform the responsible parties for the data processing which process the personal data that you as data subject have demanded from them the deletion of all links to this personal data or of copies or replicates of these.

1. c) Exceptions

The right to erasure does not exist in so far as the processing is necessary for

• the exercising of the right of free expression of opinion and to information;
• for the fulfilment of a legal obligation, which requires the processing in accord­ance with the law of the European Union or the law of the member states, which laws the responsible party is subject to, or for the carrying out of a task, which lies in the public interest or which is carried out in the exercising of pub­lic authority, which authority was transferred to the responsible party;
• for reasons of public interest in the field of public health in accordance with Arti­cle 9 Para. 2 lit. h and i as well as Article 9 Para. 3 GDPR;
• for archiving purposes, scientific or historical research purposes lying in the pub­lic interest or for statistical purposes in accordance with Article 89 Para. 1 GDPR, in so far as the right named in section a) probably makes achieving of the objectives of the processing impossible or impairs it seriously, or
• for the advancing, exercising or defending of legal claims.

Right to information

If you have advanced the right to the correcting, erasure or restricting of the pro­cessing to the responsible party, then the latter is obliged to inform all recipients, to which the personal data relating to you was disclosed, of this correction or erasure of the data or of the restricting of the processing, unless this proves itself to be impossi­ble or linked with unreasonable expenditure.

You are entitled to the right vis à vis the responsible party to be informed about these recipients.

Right to data portability

You have the right to receive the personal data relating to yourself, which you made available to the responsible party, in a structured, conventional and machine-reada­ble format. In addition, you have the right to transmit this data to another responsible party without hindrance by the responsible party to whom the personal data was made available, in so far as

• the processing is based on consent in accordance with Article 6 Para. 1 lit. a GDPR or Article 9 Para. 2 lit. a GDPR or on a contract in accordance with Arti­cle 6 Para. 1 lit. b GDPR and
• the processing is carried out by means of automated processes.

In exercising this right, you have in addition the right to obtain the personal data re­lating to you is transferred directly from one responsible party to another responsible party in so far as this is technically possible. The freedoms and rights of other per­sons may not be impaired thereby.

The right to data portability applies not for the processing of personal data, which is necessary for the carrying out of a task, which lies in the public interest or in the ex­ercising of public authority and which task was transferred to the responsible party.

Right to object

For reasons which result from your particular situation you have the right to advance at any time objection to the processing of the personal data relating to you, which processing is carried out on the basis of Article 6 Para. 1 lit. e or f GDPR. This right also applies to the profiling based on these provisions.

The responsible party shall then no longer process the personal data relating to you, unless he/she can prove compelling reasons worthy of protection, which reasons overweigh your interests, rights and freedoms or where the processing serves the advancing, exercising or defending of legal claims.

If the personal data relating to you is processed for the purpose of direct advertising, then you have the right to advance at any time objection to the processing of the per­sonal data relating to you for purposes of such advertising. This applies also to the profiling in so far as this is carried out in connection with such direct advertising.

If you object to the processing for purposes of direct advertising, then the personal data relating to you will no longer be processed for these purposes.

You have the opportunity – in connection with the use of services of the information society and regardless of directive 2002/58/EC – to exercise your right of objection with the aid of automated processes in which technical specifications are used.

You have also the right for reasons which result from your particular situation to ad­vance at any time objection to the processing of the personal data relating to you which processing is carried out for scientific or historic purposes or for statistical pur­poses according to Article 89 Para. 1 GDPR.

Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your consent at any time. On withdrawal we immedi­ately will delete your personal data and no longer process it. The legality of the pro­cessing carried out prior to your withdrawal on the base of your given consent is not affected by you withdrawal.

Right to complain at a supervisory authority

Regardless of another regulatory or judicial remedy, you are entitled to the right to lodge a complaint at a supervisory authority and here in particular at a supervisory authority in the member state of your place of residence, of your place of work or of the place where the suspected infringement took place when you are of the opinion that the processing of the personal data relating to you infringes the GDPR.

In this case the supervisory authority, at which the complaint was lodged, shall inform the complainant on the status and the results of the complaint including the possibility of a judicial remedy in accordance with Article 78 GDPR.

I. Name and address of the responsible party

The responsible party in the sense of the General Data Protection Regulation (GDPR) and of other national data protection regulations in force in the member states of European Union as well as of other regulations with a legal data-protecting character is the

CTP Advanced Materials GmbH

Stahlstrasse 60

D-65428 Ruesselsheim, Germany

Fon: +49 6142 91 85 0

Fax: +49 6142 91 85 55

Mail: ctp@ctpgmbh.de

 

The processing of some data takes place in joint responsibility according to Art. 26 GDPR with:

Aditya Birla Group
Aditya Birla Centre
S K Ahire Marg, Worli

Mumbai 400030, India

II. Name and address of the data protection officer

The data protection officer of the responsible party is:

daschug GmbH

Robert-Bosch-Strasse 7

64293 Darmstadt, Germany

Fon +49 6151 6673 440

Mail: datenschutz@ctpgmbh.de

III.    General information on data processing

Range of the processing of personal data

Generally, we collect and process personal data of users only as long as this is re­quired for providing a properly functioning website as well as delivering our contents and services. The collection and use of personal data of our users on a regular basis only takes place after consent of the data subject. An exception applies to those cases where obtaining consent prior to use is not possible based on matters of law and fact and the processing of data is allowed by legal regulations.

Legal fundamentals for the processing of personal data

In so far as we obtain the consent of the data subject for the processing of personal data Article 6 Para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the foundation for the processing of personal data.

Article 6 Para. 1 lit. b GDPR serves as the legal foundation for the processing of per­sonal data which is necessary for the fulfilment of a contract if the data subject is party to this contract. This applies also to the processing processes which are neces­sary for the execution of pre-contractual measures.

Article 6 Para. 1 lit. c GDPR serves as the legal foundation in so far as processing of personal data is necessary for the fulfilment of a legal obligation applying to our en­terprise.

Article 6 Para. 1 lit. d GDPR serves as the legal foundation for the situation that vital interests of the data subject or another natural person make the processing of per­sonal data necessary.

Article 6 Para. 1 lit. f GDPR serves as the legal foundation for the situation that pro­cessing is necessary to ensure a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not exceed the first named interest.

Deletion of data and duration of storage

The personal data of the data subject are deleted or disabled as soon as the purpose for which the data was stored lapses. In addition, storage can take place if this was stipulated by the European or national legislatures in orders, laws or other regulations in accordance with European Union law to which the responsible party is subject. Disabling or deletion of the data is also carried out if a storage period prescribed by the standards as named expires unless there is a necessity for the continued storage of the data for the concluding or fulfilling of a contract.

IV. Making available of our website and creation of logfiles

Description and range of data processing

On every visit on our website our system automatically collects data and information of the computer system calling. The following data is collected:

• Information on the type of browser and its version used
• The operating system of the user
• The internet-service-provider of the user
• The IP-address of the user
• Date and time of the access
• The website, from which an accessing system reaches our website
• Websites, which are accessed by the computer system of the user via our web­site

This data is also stored in the logfiles of our system. However, IP-addresses of the users or other data, which would allow the assignment of the data to a particular user, are not stored. Also, this data is not stored together with other personal data of the user.

Legal foundations for the data processing

Article 6 Para. 1 lit. f GDPR is the legal foundation for the temporary storage of data and logfiles.

Purpose of data processing

The temporary storage of the IP-address by the system is necessary to enable the delivery of the website to the computer of the user. For achieving this the IP-address of the user must remain stored for the duration of the session.

The storage in logfiles occurs to enable the proper functioning of the website. Fur­thermore, this data serves to optimize the website and to enable the security of our IT-systems. An analysis of the data for marketing purposes does not happen.

The legal foundation is our legitimate interest in data processing according to Article 6 Para.1 lit. f GDPR.

Duration of storage

The data is deleted or disabled as soon as the purpose for which the data was stored lapses. This is the case when the particular session has ended in situations where the data is collected for making the website available.

This is the case at the latest seven days after the time when the data was stored in log files. A storage exceeding this period is possible. In this case the IP-addresses of the users are deleted or distorted so that an assignment of the client calling in is no longer possible.

Possibility for objection and deletion

The collection of data for the making available of the website and the storage of data in logfiles is compulsory for operating the website. Thus, there is no right to object by the user.

Use of cookies

1. a) Description and range of data processing

Our website uses cookies. In general, cookies are small text files which are stored on your computer and which store certain settings and data for exchange with the online offer from us via your browser. If a user calls in a website, a cookie can be stored in the operating system of the user’s computer. This cookie usually contains a unique string of characters, which allows an unambiguous identification of the browser when calling in the website again.

We are using cookies to improve our online offer. Some elements of our website re­quire that a browser calling in can be identified after a changeover.

The following data is stored and transmitted:

• Language settings
• Log-In-information

The data of the user collected in this way is pseudonymized by technical processes. Accordingly, assignment of the data to the user calling in is no longer possible. The data collected is not stored together with other personal data of the user.

When our website is called, the users are informed by means of an information ban­ner about the use of cookies for analytical purposes and are referred to this data protection information. In this connection reference is given to how storage of cookies can be prevented by the browser settings.

In this connection follows a reference to how that storing of cookies can be prevented by appropriate browser settings.

1. b) Legal foundation of data processing

The legal foundation for the processing of personal data by using cookies is Article 6 Para. 1 lit. f GDPR.

1. c) Purpose of data processing

The purpose behind the use of strictly technically essential cookies is to facilitate the use of the website for the user. Certain functions of our website cannot be offered without the use of cookies. For these functions it is necessary that the browser is recognized even after a page change.

We need cookies for the following application:

• Adoption of language settings

Analysis cookies are used for the purpose of improving the quality of our website and its content. By the analysis cookies we learn how the website is used and thus are able to continually optimize our offer. These purposes also include our legitimate in­terest in the processing of the personal data in accordance with Article 6 Para. 1 lit. f GDPR.

1. d) Duration of storage, possibilities for objection and elimination

Cookies are stored on the user’s computer and are transmitted from this to our web­site. Accordingly, you as user have full control over the use of cookies. By a change of the settings of your internet browser you are able to deactivate or restrict the transmissions of cookies. Cookies already being stored can be deleted at any time. This can also be carried out automatically. However, if cookies for our website are deactivated, it may no longer be possible to fully use all functions of the website. The transmission of flash cookies cannot be prevented by the browser settings but re­quires changes of the settings of the flash player.

 

VI. E-Mail-contact

Description and range of data processing

Contacting us is possible by using the e-mail address provided. In this case personal data of the user transmitted with the e-mail is stored. In this connection no data is passed on to third parties. The data is used exclusively for the processing of the con­versation and will immediately be deleted if it is no longer needed.

Legal foundation of data processing

Legal foundation for the processing of the data after application of the user for a newsletter in case of consent of the user is Article 6 Para. 1 lit. a GDPR.

Legal foundation for the processing of data in case of the transmission of an e-mail is Article 6 Para. 1 lit. f GDPR. Is the e-mail contact directed at closing a contract addi­tional legal foundation for the processing of data is Article 6 Para. 1 lit. b GDPR.

Purpose of data processing

The processing of the personal data from the input mask/e-mail serves us solely for the processing of the contact. In case of contacting by e-mail this is also the neces­sary legitimate interest in the processing of the data.

Other personal data processed during the sending-off process serves to prevent abuse of the contact form and to ensure the security of our IT systems.

Duration of storage

The data is deleted as soon as it is no longer needed for achieving the purpose of their collection. This is the case for the personal data from the input mask of the contact form and those which are sent by e-mail when the particular conversation with the user has ended.

The conversation has ended when the circumstances allow the conclusion that the matter in question has been finally clarified.

The additional personal data collected during the sending-off process is deleted the latest after a period of seven days.

Possibilities for objection and elimination

At any time the user has the opportunity to withdraw his consent on the processing of personal data. If the user is contacting us by e-mail, he can object to the storage of his personal data at any time. In this case the conversation cannot be continued.

VII.       Rights of the data subject

If your personal data is processed, then you are the data subject in the sense of the GDPR and you are entitled to the following rights vis à vis the responsible party:

Right of access by the data subject

You can demand from the responsible party confirmation as to whether personal data that relates to you has been processed by us. If such processing has taken place, you can demand information from the responsible party on the following:

• The purposes for which the personal data is processed;
• The categories of personal data which are processed;
• The recipients or, resp., the categories of recipients to which the personal data relating to you has been disclosed or will be disclosed;
• The planned duration of the storage of the personal data relating to you or, if dis­tinct statements on this are not possible, the criteria for the laying down of duration of storage;
• The existence of a right to correction or deletion of the personal data relating to yourself, of a right to a restriction of the processing by the responsible party or of a right of objection to this processing;
• The existence of a right of appeal at a supervisory authority;
• All available information on the origin of the data if the personal data was not collected at the data subject;
• The existence of an automated decision-finding process including profiling in ac­cordance with Article 22 Para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and its scope and the effects strived for of such a processing for the data subject in question.

You are entitled to the right to demand information on whether the personal data re­lating to yourself is transmitted to a third country or an international organization. In this connection you can demand to be instructed on the suitable guarantees in ac­cordance with Article 46 GDPR in connection with the transmission.

Right to correction

You have a right to correction and/or completion vis à vis the responsible party in so far as the personal data as processed and which relates to yourself is incorrect or incomplete. The responsible party has to carry out the correction without delay.

Right to restrict the processing of personal data

Provided the following preconditions are met you can demand restriction of the pro­cessing of the personal data relating to you:

• if you dispute the correctness of the personal data relating to yourself for a pe­riod which makes it possible for the responsible party to check the correctness of the personal data;
• if the processing is unlawful and you reject deletion of the personal data and de­mand restriction of the use of the personal data instead;
• if the responsible party no longer needs the personal data for purposes of the processing but you need the data for the advancing, exercising or defending of legal claims, or
• if you have advanced objection to the processing in accordance with Article 21 Para. 1 GDPR but it has not yet been established whether the justified rea­sons of the responsible party outweigh your reasons.

If the processing of the personal data relating to yourself has been restricted, then this data – apart from the storage of it – may only be processed with your consent or for the assertion, exercising or defending of legal claims or for the protection of the rights of another natural person or legal entity or for reasons relating to an important public interest of the European Union or of a member state.

If the restriction of the processing has been restricted in accordance with the afore-mentioned preconditions, then you will be informed by the responsible party before the restriction is cancelled.

Right to erasure

1. a) Deletion obligation

You can demand by the responsible party that the personal data relating to yourself is deleted without delay and the responsible party is then obliged to delete this data without delay in so far as one of the following reasons applies:

• The personal data relating to you is no longer required for the purposes for which it was collected or for which it was processed.
• You revoke your consent, on which processing in accordance with Article 6 Para. 1 lit. a or Article 9 Para.2 lit. a GDPR was based, and there is no other legal foundation for the processing.
• You submit an objection to the processing in accordance with Article 21 Para. 1 GDPR and there are no justified reasons for the processing with a higher priority, or you submit an objection to the processing in accordance with Article 21 Para. 2 GDPR.
• The personal data relating to you was processed unlawfully.
• The deletion of the personal data relating to you is required to fulfil a legal obliga­tion in accordance with European Union law or the law of the member states, which laws the responsible party is subject to.
• The personal data relating to you was collected in relation to services offered by the information society in accordance with Article 8 Para. 1 GDPR.

1. b) Information to third parties

If the responsible party has made the personal data relating to you public and if he/she is obliged to delete this data in accordance with Article 17 Para. 1 GDPR, then he/she shall take reasonable measures including technical ones – whereby ac­count shall be taken of the available technology and the implementation costs – to inform the responsible parties for the data processing which process the personal data that you as data subject have demanded from them the deletion of all links to this personal data or of copies or replicates of these.

1. c) Exceptions

The right to erasure does not exist in so far as the processing is necessary for

• the exercising of the right of free expression of opinion and to information;
• for the fulfilment of a legal obligation, which requires the processing in accord­ance with the law of the European Union or the law of the member states, which laws the responsible party is subject to, or for the carrying out of a task, which lies in the public interest or which is carried out in the exercising of pub­lic authority, which authority was transferred to the responsible party;
• for reasons of public interest in the field of public health in accordance with Arti­cle 9 Para. 2 lit. h and i as well as Article 9 Para. 3 GDPR;
• for archiving purposes, scientific or historical research purposes lying in the pub­lic interest or for statistical purposes in accordance with Article 89 Para. 1 GDPR, in so far as the right named in section a) probably makes achieving of the objectives of the processing impossible or impairs it seriously, or
• for the advancing, exercising or defending of legal claims.

Right to information

If you have advanced the right to the correcting, erasure or restricting of the pro­cessing to the responsible party, then the latter is obliged to inform all recipients, to which the personal data relating to you was disclosed, of this correction or erasure of the data or of the restricting of the processing, unless this proves itself to be impossi­ble or linked with unreasonable expenditure.

You are entitled to the right vis à vis the responsible party to be informed about these recipients.

Right to data portability

You have the right to receive the personal data relating to yourself, which you made available to the responsible party, in a structured, conventional and machine-reada­ble format. In addition, you have the right to transmit this data to another responsible party without hindrance by the responsible party to whom the personal data was made available, in so far as

• the processing is based on consent in accordance with Article 6 Para. 1 lit. a GDPR or Article 9 Para. 2 lit. a GDPR or on a contract in accordance with Arti­cle 6 Para. 1 lit. b GDPR and
• the processing is carried out by means of automated processes.

In exercising this right, you have in addition the right to obtain the personal data re­lating to you is transferred directly from one responsible party to another responsible party in so far as this is technically possible. The freedoms and rights of other per­sons may not be impaired thereby.

The right to data portability applies not for the processing of personal data, which is necessary for the carrying out of a task, which lies in the public interest or in the ex­ercising of public authority and which task was transferred to the responsible party.

Right to object

For reasons which result from your particular situation you have the right to advance at any time objection to the processing of the personal data relating to you, which processing is carried out on the basis of Article 6 Para. 1 lit. e or f GDPR. This right also applies to the profiling based on these provisions.

The responsible party shall then no longer process the personal data relating to you, unless he/she can prove compelling reasons worthy of protection, which reasons overweigh your interests, rights and freedoms or where the processing serves the advancing, exercising or defending of legal claims.

If the personal data relating to you is processed for the purpose of direct advertising, then you have the right to advance at any time objection to the processing of the per­sonal data relating to you for purposes of such advertising. This applies also to the profiling in so far as this is carried out in connection with such direct advertising.

If you object to the processing for purposes of direct advertising, then the personal data relating to you will no longer be processed for these purposes.

You have the opportunity – in connection with the use of services of the information society and regardless of directive 2002/58/EC – to exercise your right of objection with the aid of automated processes in which technical specifications are used.

You have also the right for reasons which result from your particular situation to ad­vance at any time objection to the processing of the personal data relating to you which processing is carried out for scientific or historic purposes or for statistical pur­poses according to Article 89 Para. 1 GDPR.

Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your consent at any time. On withdrawal we immedi­ately will delete your personal data and no longer process it. The legality of the pro­cessing carried out prior to your withdrawal on the base of your given consent is not affected by you withdrawal.

Right to complain at a supervisory authority

Regardless of another regulatory or judicial remedy, you are entitled to the right to lodge a complaint at a supervisory authority and here in particular at a supervisory authority in the member state of your place of residence, of your place of work or of the place where the suspected infringement took place when you are of the opinion that the processing of the personal data relating to you infringes the GDPR.

In this case the supervisory authority, at which the complaint was lodged, shall inform the complainant on the status and the results of the complaint including the possibility of a judicial remedy in accordance with Article 78 GDPR.

I. Name and address of the responsible party

The responsible party in the sense of the General Data Protection Regulation (GDPR) and of other national data protection regulations in force in the member states of European Union as well as of other regulations with a legal data-protecting character is the

CTP Advanced Materials GmbH

Stahlstrasse 60

D-65428 Ruesselsheim, Germany

Fon: +49 6142 91 85 0

Fax: +49 6142 91 85 55

Mail: ctp@ctpgmbh.de

 

The processing of some data takes place in joint responsibility according to Art. 26 GDPR with:

Aditya Birla Group
Aditya Birla Centre
S K Ahire Marg, Worli

Mumbai 400030, India

II. Name and address of the data protection officer

The data protection officer of the responsible party is:

daschug GmbH

Robert-Bosch-Strasse 7

64293 Darmstadt, Germany

Fon +49 6151 6673 440

Mail: datenschutz@ctpgmbh.de

III.    General information on data processing

Range of the processing of personal data

Generally, we collect and process personal data of users only as long as this is re­quired for providing a properly functioning website as well as delivering our contents and services. The collection and use of personal data of our users on a regular basis only takes place after consent of the data subject. An exception applies to those cases where obtaining consent prior to use is not possible based on matters of law and fact and the processing of data is allowed by legal regulations.

Legal fundamentals for the processing of personal data

In so far as we obtain the consent of the data subject for the processing of personal data Article 6 Para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the foundation for the processing of personal data.

Article 6 Para. 1 lit. b GDPR serves as the legal foundation for the processing of per­sonal data which is necessary for the fulfilment of a contract if the data subject is party to this contract. This applies also to the processing processes which are neces­sary for the execution of pre-contractual measures.

Article 6 Para. 1 lit. c GDPR serves as the legal foundation in so far as processing of personal data is necessary for the fulfilment of a legal obligation applying to our en­terprise.

Article 6 Para. 1 lit. d GDPR serves as the legal foundation for the situation that vital interests of the data subject or another natural person make the processing of per­sonal data necessary.

Article 6 Para. 1 lit. f GDPR serves as the legal foundation for the situation that pro­cessing is necessary to ensure a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not exceed the first named interest.

Deletion of data and duration of storage

The personal data of the data subject are deleted or disabled as soon as the purpose for which the data was stored lapses. In addition, storage can take place if this was stipulated by the European or national legislatures in orders, laws or other regulations in accordance with European Union law to which the responsible party is subject. Disabling or deletion of the data is also carried out if a storage period prescribed by the standards as named expires unless there is a necessity for the continued storage of the data for the concluding or fulfilling of a contract.

IV. Making available of our website and creation of logfiles

Description and range of data processing

On every visit on our website our system automatically collects data and information of the computer system calling. The following data is collected:

• Information on the type of browser and its version used
• The operating system of the user
• The internet-service-provider of the user
• The IP-address of the user
• Date and time of the access
• The website, from which an accessing system reaches our website
• Websites, which are accessed by the computer system of the user via our web­site

This data is also stored in the logfiles of our system. However, IP-addresses of the users or other data, which would allow the assignment of the data to a particular user, are not stored. Also, this data is not stored together with other personal data of the user.

Legal foundations for the data processing

Article 6 Para. 1 lit. f GDPR is the legal foundation for the temporary storage of data and logfiles.

Purpose of data processing

The temporary storage of the IP-address by the system is necessary to enable the delivery of the website to the computer of the user. For achieving this the IP-address of the user must remain stored for the duration of the session.

The storage in logfiles occurs to enable the proper functioning of the website. Fur­thermore, this data serves to optimize the website and to enable the security of our IT-systems. An analysis of the data for marketing purposes does not happen.

The legal foundation is our legitimate interest in data processing according to Article 6 Para.1 lit. f GDPR.

Duration of storage

The data is deleted or disabled as soon as the purpose for which the data was stored lapses. This is the case when the particular session has ended in situations where the data is collected for making the website available.

This is the case at the latest seven days after the time when the data was stored in log files. A storage exceeding this period is possible. In this case the IP-addresses of the users are deleted or distorted so that an assignment of the client calling in is no longer possible.

Possibility for objection and deletion

The collection of data for the making available of the website and the storage of data in logfiles is compulsory for operating the website. Thus, there is no right to object by the user.

Use of cookies

1. a) Description and range of data processing

Our website uses cookies. In general, cookies are small text files which are stored on your computer and which store certain settings and data for exchange with the online offer from us via your browser. If a user calls in a website, a cookie can be stored in the operating system of the user’s computer. This cookie usually contains a unique string of characters, which allows an unambiguous identification of the browser when calling in the website again.

We are using cookies to improve our online offer. Some elements of our website re­quire that a browser calling in can be identified after a changeover.

The following data is stored and transmitted:

• Language settings
• Log-In-information

The data of the user collected in this way is pseudonymized by technical processes. Accordingly, assignment of the data to the user calling in is no longer possible. The data collected is not stored together with other personal data of the user.

When our website is called, the users are informed by means of an information ban­ner about the use of cookies for analytical purposes and are referred to this data protection information. In this connection reference is given to how storage of cookies can be prevented by the browser settings.

In this connection follows a reference to how that storing of cookies can be prevented by appropriate browser settings.

1. b) Legal foundation of data processing

The legal foundation for the processing of personal data by using cookies is Article 6 Para. 1 lit. f GDPR.

1. c) Purpose of data processing

The purpose behind the use of strictly technically essential cookies is to facilitate the use of the website for the user. Certain functions of our website cannot be offered without the use of cookies. For these functions it is necessary that the browser is recognized even after a page change.

We need cookies for the following application:

• Adoption of language settings

Analysis cookies are used for the purpose of improving the quality of our website and its content. By the analysis cookies we learn how the website is used and thus are able to continually optimize our offer. These purposes also include our legitimate in­terest in the processing of the personal data in accordance with Article 6 Para. 1 lit. f GDPR.

1. d) Duration of storage, possibilities for objection and elimination

Cookies are stored on the user’s computer and are transmitted from this to our web­site. Accordingly, you as user have full control over the use of cookies. By a change of the settings of your internet browser you are able to deactivate or restrict the transmissions of cookies. Cookies already being stored can be deleted at any time. This can also be carried out automatically. However, if cookies for our website are deactivated, it may no longer be possible to fully use all functions of the website. The transmission of flash cookies cannot be prevented by the browser settings but re­quires changes of the settings of the flash player.

 

VI. E-Mail-contact

Description and range of data processing

Contacting us is possible by using the e-mail address provided. In this case personal data of the user transmitted with the e-mail is stored. In this connection no data is passed on to third parties. The data is used exclusively for the processing of the con­versation and will immediately be deleted if it is no longer needed.

Legal foundation of data processing

Legal foundation for the processing of the data after application of the user for a newsletter in case of consent of the user is Article 6 Para. 1 lit. a GDPR.

Legal foundation for the processing of data in case of the transmission of an e-mail is Article 6 Para. 1 lit. f GDPR. Is the e-mail contact directed at closing a contract addi­tional legal foundation for the processing of data is Article 6 Para. 1 lit. b GDPR.

Purpose of data processing

The processing of the personal data from the input mask/e-mail serves us solely for the processing of the contact. In case of contacting by e-mail this is also the neces­sary legitimate interest in the processing of the data.

Other personal data processed during the sending-off process serves to prevent abuse of the contact form and to ensure the security of our IT systems.

Duration of storage

The data is deleted as soon as it is no longer needed for achieving the purpose of their collection. This is the case for the personal data from the input mask of the contact form and those which are sent by e-mail when the particular conversation with the user has ended.

The conversation has ended when the circumstances allow the conclusion that the matter in question has been finally clarified.

The additional personal data collected during the sending-off process is deleted the latest after a period of seven days.

Possibilities for objection and elimination

At any time the user has the opportunity to withdraw his consent on the processing of personal data. If the user is contacting us by e-mail, he can object to the storage of his personal data at any time. In this case the conversation cannot be continued.

VII.       Rights of the data subject

If your personal data is processed, then you are the data subject in the sense of the GDPR and you are entitled to the following rights vis à vis the responsible party:

Right of access by the data subject

You can demand from the responsible party confirmation as to whether personal data that relates to you has been processed by us. If such processing has taken place, you can demand information from the responsible party on the following:

• The purposes for which the personal data is processed;
• The categories of personal data which are processed;
• The recipients or, resp., the categories of recipients to which the personal data relating to you has been disclosed or will be disclosed;
• The planned duration of the storage of the personal data relating to you or, if dis­tinct statements on this are not possible, the criteria for the laying down of duration of storage;
• The existence of a right to correction or deletion of the personal data relating to yourself, of a right to a restriction of the processing by the responsible party or of a right of objection to this processing;
• The existence of a right of appeal at a supervisory authority;
• All available information on the origin of the data if the personal data was not collected at the data subject;
• The existence of an automated decision-finding process including profiling in ac­cordance with Article 22 Para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and its scope and the effects strived for of such a processing for the data subject in question.

You are entitled to the right to demand information on whether the personal data re­lating to yourself is transmitted to a third country or an international organization. In this connection you can demand to be instructed on the suitable guarantees in ac­cordance with Article 46 GDPR in connection with the transmission.

Right to correction

You have a right to correction and/or completion vis à vis the responsible party in so far as the personal data as processed and which relates to yourself is incorrect or incomplete. The responsible party has to carry out the correction without delay.

Right to restrict the processing of personal data

Provided the following preconditions are met you can demand restriction of the pro­cessing of the personal data relating to you:

• if you dispute the correctness of the personal data relating to yourself for a pe­riod which makes it possible for the responsible party to check the correctness of the personal data;
• if the processing is unlawful and you reject deletion of the personal data and de­mand restriction of the use of the personal data instead;
• if the responsible party no longer needs the personal data for purposes of the processing but you need the data for the advancing, exercising or defending of legal claims, or
• if you have advanced objection to the processing in accordance with Article 21 Para. 1 GDPR but it has not yet been established whether the justified rea­sons of the responsible party outweigh your reasons.

If the processing of the personal data relating to yourself has been restricted, then this data – apart from the storage of it – may only be processed with your consent or for the assertion, exercising or defending of legal claims or for the protection of the rights of another natural person or legal entity or for reasons relating to an important public interest of the European Union or of a member state.

If the restriction of the processing has been restricted in accordance with the afore-mentioned preconditions, then you will be informed by the responsible party before the restriction is cancelled.

Right to erasure

1. a) Deletion obligation

You can demand by the responsible party that the personal data relating to yourself is deleted without delay and the responsible party is then obliged to delete this data without delay in so far as one of the following reasons applies:

• The personal data relating to you is no longer required for the purposes for which it was collected or for which it was processed.
• You revoke your consent, on which processing in accordance with Article 6 Para. 1 lit. a or Article 9 Para.2 lit. a GDPR was based, and there is no other legal foundation for the processing.
• You submit an objection to the processing in accordance with Article 21 Para. 1 GDPR and there are no justified reasons for the processing with a higher priority, or you submit an objection to the processing in accordance with Article 21 Para. 2 GDPR.
• The personal data relating to you was processed unlawfully.
• The deletion of the personal data relating to you is required to fulfil a legal obliga­tion in accordance with European Union law or the law of the member states, which laws the responsible party is subject to.
• The personal data relating to you was collected in relation to services offered by the information society in accordance with Article 8 Para. 1 GDPR.

1. b) Information to third parties

If the responsible party has made the personal data relating to you public and if he/she is obliged to delete this data in accordance with Article 17 Para. 1 GDPR, then he/she shall take reasonable measures including technical ones – whereby ac­count shall be taken of the available technology and the implementation costs – to inform the responsible parties for the data processing which process the personal data that you as data subject have demanded from them the deletion of all links to this personal data or of copies or replicates of these.

1. c) Exceptions

The right to erasure does not exist in so far as the processing is necessary for

• the exercising of the right of free expression of opinion and to information;
• for the fulfilment of a legal obligation, which requires the processing in accord­ance with the law of the European Union or the law of the member states, which laws the responsible party is subject to, or for the carrying out of a task, which lies in the public interest or which is carried out in the exercising of pub­lic authority, which authority was transferred to the responsible party;
• for reasons of public interest in the field of public health in accordance with Arti­cle 9 Para. 2 lit. h and i as well as Article 9 Para. 3 GDPR;
• for archiving purposes, scientific or historical research purposes lying in the pub­lic interest or for statistical purposes in accordance with Article 89 Para. 1 GDPR, in so far as the right named in section a) probably makes achieving of the objectives of the processing impossible or impairs it seriously, or
• for the advancing, exercising or defending of legal claims.

Right to information

If you have advanced the right to the correcting, erasure or restricting of the pro­cessing to the responsible party, then the latter is obliged to inform all recipients, to which the personal data relating to you was disclosed, of this correction or erasure of the data or of the restricting of the processing, unless this proves itself to be impossi­ble or linked with unreasonable expenditure.

You are entitled to the right vis à vis the responsible party to be informed about these recipients.

Right to data portability

You have the right to receive the personal data relating to yourself, which you made available to the responsible party, in a structured, conventional and machine-reada­ble format. In addition, you have the right to transmit this data to another responsible party without hindrance by the responsible party to whom the personal data was made available, in so far as

• the processing is based on consent in accordance with Article 6 Para. 1 lit. a GDPR or Article 9 Para. 2 lit. a GDPR or on a contract in accordance with Arti­cle 6 Para. 1 lit. b GDPR and
• the processing is carried out by means of automated processes.

In exercising this right, you have in addition the right to obtain the personal data re­lating to you is transferred directly from one responsible party to another responsible party in so far as this is technically possible. The freedoms and rights of other per­sons may not be impaired thereby.

The right to data portability applies not for the processing of personal data, which is necessary for the carrying out of a task, which lies in the public interest or in the ex­ercising of public authority and which task was transferred to the responsible party.

Right to object

For reasons which result from your particular situation you have the right to advance at any time objection to the processing of the personal data relating to you, which processing is carried out on the basis of Article 6 Para. 1 lit. e or f GDPR. This right also applies to the profiling based on these provisions.

The responsible party shall then no longer process the personal data relating to you, unless he/she can prove compelling reasons worthy of protection, which reasons overweigh your interests, rights and freedoms or where the processing serves the advancing, exercising or defending of legal claims.

If the personal data relating to you is processed for the purpose of direct advertising, then you have the right to advance at any time objection to the processing of the per­sonal data relating to you for purposes of such advertising. This applies also to the profiling in so far as this is carried out in connection with such direct advertising.

If you object to the processing for purposes of direct advertising, then the personal data relating to you will no longer be processed for these purposes.

You have the opportunity – in connection with the use of services of the information society and regardless of directive 2002/58/EC – to exercise your right of objection with the aid of automated processes in which technical specifications are used.

You have also the right for reasons which result from your particular situation to ad­vance at any time objection to the processing of the personal data relating to you which processing is carried out for scientific or historic purposes or for statistical pur­poses according to Article 89 Para. 1 GDPR.

Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your consent at any time. On withdrawal we immedi­ately will delete your personal data and no longer process it. The legality of the pro­cessing carried out prior to your withdrawal on the base of your given consent is not affected by you withdrawal.

Right to complain at a supervisory authority

Regardless of another regulatory or judicial remedy, you are entitled to the right to lodge a complaint at a supervisory authority and here in particular at a supervisory authority in the member state of your place of residence, of your place of work or of the place where the suspected infringement took place when you are of the opinion that the processing of the personal data relating to you infringes the GDPR.

In this case the supervisory authority, at which the complaint was lodged, shall inform the complainant on the status and the results of the complaint including the possibility of a judicial remedy in accordance with Article 78 GDPR.

I. Name and address of the responsible party

The responsible party in the sense of the General Data Protection Regulation (GDPR) and of other national data protection regulations in force in the member states of European Union as well as of other regulations with a legal data-protecting character is the

CTP Advanced Materials GmbH

Stahlstrasse 60

D-65428 Ruesselsheim, Germany

Fon: +49 6142 91 85 0

Fax: +49 6142 91 85 55

Mail: ctp@ctpgmbh.de

 

The processing of some data takes place in joint responsibility according to Art. 26 GDPR with:

Aditya Birla Group
Aditya Birla Centre
S K Ahire Marg, Worli

Mumbai 400030, India

II. Name and address of the data protection officer

The data protection officer of the responsible party is:

daschug GmbH

Robert-Bosch-Strasse 7

64293 Darmstadt, Germany

Fon +49 6151 6673 440

Mail: datenschutz@ctpgmbh.de

III.    General information on data processing

Range of the processing of personal data

Generally, we collect and process personal data of users only as long as this is re­quired for providing a properly functioning website as well as delivering our contents and services. The collection and use of personal data of our users on a regular basis only takes place after consent of the data subject. An exception applies to those cases where obtaining consent prior to use is not possible based on matters of law and fact and the processing of data is allowed by legal regulations.

Legal fundamentals for the processing of personal data

In so far as we obtain the consent of the data subject for the processing of personal data Article 6 Para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the foundation for the processing of personal data.

Article 6 Para. 1 lit. b GDPR serves as the legal foundation for the processing of per­sonal data which is necessary for the fulfilment of a contract if the data subject is party to this contract. This applies also to the processing processes which are neces­sary for the execution of pre-contractual measures.

Article 6 Para. 1 lit. c GDPR serves as the legal foundation in so far as processing of personal data is necessary for the fulfilment of a legal obligation applying to our en­terprise.

Article 6 Para. 1 lit. d GDPR serves as the legal foundation for the situation that vital interests of the data subject or another natural person make the processing of per­sonal data necessary.

Article 6 Para. 1 lit. f GDPR serves as the legal foundation for the situation that pro­cessing is necessary to ensure a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not exceed the first named interest.

Deletion of data and duration of storage

The personal data of the data subject are deleted or disabled as soon as the purpose for which the data was stored lapses. In addition, storage can take place if this was stipulated by the European or national legislatures in orders, laws or other regulations in accordance with European Union law to which the responsible party is subject. Disabling or deletion of the data is also carried out if a storage period prescribed by the standards as named expires unless there is a necessity for the continued storage of the data for the concluding or fulfilling of a contract.

IV. Making available of our website and creation of logfiles

Description and range of data processing

On every visit on our website our system automatically collects data and information of the computer system calling. The following data is collected:

• Information on the type of browser and its version used
• The operating system of the user
• The internet-service-provider of the user
• The IP-address of the user
• Date and time of the access
• The website, from which an accessing system reaches our website
• Websites, which are accessed by the computer system of the user via our web­site

This data is also stored in the logfiles of our system. However, IP-addresses of the users or other data, which would allow the assignment of the data to a particular user, are not stored. Also, this data is not stored together with other personal data of the user.

Legal foundations for the data processing

Article 6 Para. 1 lit. f GDPR is the legal foundation for the temporary storage of data and logfiles.

Purpose of data processing

The temporary storage of the IP-address by the system is necessary to enable the delivery of the website to the computer of the user. For achieving this the IP-address of the user must remain stored for the duration of the session.

The storage in logfiles occurs to enable the proper functioning of the website. Fur­thermore, this data serves to optimize the website and to enable the security of our IT-systems. An analysis of the data for marketing purposes does not happen.

The legal foundation is our legitimate interest in data processing according to Article 6 Para.1 lit. f GDPR.

Duration of storage

The data is deleted or disabled as soon as the purpose for which the data was stored lapses. This is the case when the particular session has ended in situations where the data is collected for making the website available.

This is the case at the latest seven days after the time when the data was stored in log files. A storage exceeding this period is possible. In this case the IP-addresses of the users are deleted or distorted so that an assignment of the client calling in is no longer possible.

Possibility for objection and deletion

The collection of data for the making available of the website and the storage of data in logfiles is compulsory for operating the website. Thus, there is no right to object by the user.

Use of cookies

1. a) Description and range of data processing

Our website uses cookies. In general, cookies are small text files which are stored on your computer and which store certain settings and data for exchange with the online offer from us via your browser. If a user calls in a website, a cookie can be stored in the operating system of the user’s computer. This cookie usually contains a unique string of characters, which allows an unambiguous identification of the browser when calling in the website again.

We are using cookies to improve our online offer. Some elements of our website re­quire that a browser calling in can be identified after a changeover.

The following data is stored and transmitted:

• Language settings
• Log-In-information

The data of the user collected in this way is pseudonymized by technical processes. Accordingly, assignment of the data to the user calling in is no longer possible. The data collected is not stored together with other personal data of the user.

When our website is called, the users are informed by means of an information ban­ner about the use of cookies for analytical purposes and are referred to this data protection information. In this connection reference is given to how storage of cookies can be prevented by the browser settings.

In this connection follows a reference to how that storing of cookies can be prevented by appropriate browser settings.

1. b) Legal foundation of data processing

The legal foundation for the processing of personal data by using cookies is Article 6 Para. 1 lit. f GDPR.

1. c) Purpose of data processing

The purpose behind the use of strictly technically essential cookies is to facilitate the use of the website for the user. Certain functions of our website cannot be offered without the use of cookies. For these functions it is necessary that the browser is recognized even after a page change.

We need cookies for the following application:

• Adoption of language settings

Analysis cookies are used for the purpose of improving the quality of our website and its content. By the analysis cookies we learn how the website is used and thus are able to continually optimize our offer. These purposes also include our legitimate in­terest in the processing of the personal data in accordance with Article 6 Para. 1 lit. f GDPR.

1. d) Duration of storage, possibilities for objection and elimination

Cookies are stored on the user’s computer and are transmitted from this to our web­site. Accordingly, you as user have full control over the use of cookies. By a change of the settings of your internet browser you are able to deactivate or restrict the transmissions of cookies. Cookies already being stored can be deleted at any time. This can also be carried out automatically. However, if cookies for our website are deactivated, it may no longer be possible to fully use all functions of the website. The transmission of flash cookies cannot be prevented by the browser settings but re­quires changes of the settings of the flash player.

 

VI. E-Mail-contact

Description and range of data processing

Contacting us is possible by using the e-mail address provided. In this case personal data of the user transmitted with the e-mail is stored. In this connection no data is passed on to third parties. The data is used exclusively for the processing of the con­versation and will immediately be deleted if it is no longer needed.

Legal foundation of data processing

Legal foundation for the processing of the data after application of the user for a newsletter in case of consent of the user is Article 6 Para. 1 lit. a GDPR.

Legal foundation for the processing of data in case of the transmission of an e-mail is Article 6 Para. 1 lit. f GDPR. Is the e-mail contact directed at closing a contract addi­tional legal foundation for the processing of data is Article 6 Para. 1 lit. b GDPR.

Purpose of data processing

The processing of the personal data from the input mask/e-mail serves us solely for the processing of the contact. In case of contacting by e-mail this is also the neces­sary legitimate interest in the processing of the data.

Other personal data processed during the sending-off process serves to prevent abuse of the contact form and to ensure the security of our IT systems.

Duration of storage

The data is deleted as soon as it is no longer needed for achieving the purpose of their collection. This is the case for the personal data from the input mask of the contact form and those which are sent by e-mail when the particular conversation with the user has ended.

The conversation has ended when the circumstances allow the conclusion that the matter in question has been finally clarified.

The additional personal data collected during the sending-off process is deleted the latest after a period of seven days.

Possibilities for objection and elimination

At any time the user has the opportunity to withdraw his consent on the processing of personal data. If the user is contacting us by e-mail, he can object to the storage of his personal data at any time. In this case the conversation cannot be continued.

VII.       Rights of the data subject

If your personal data is processed, then you are the data subject in the sense of the GDPR and you are entitled to the following rights vis à vis the responsible party:

Right of access by the data subject

You can demand from the responsible party confirmation as to whether personal data that relates to you has been processed by us. If such processing has taken place, you can demand information from the responsible party on the following:

• The purposes for which the personal data is processed;
• The categories of personal data which are processed;
• The recipients or, resp., the categories of recipients to which the personal data relating to you has been disclosed or will be disclosed;
• The planned duration of the storage of the personal data relating to you or, if dis­tinct statements on this are not possible, the criteria for the laying down of duration of storage;
• The existence of a right to correction or deletion of the personal data relating to yourself, of a right to a restriction of the processing by the responsible party or of a right of objection to this processing;
• The existence of a right of appeal at a supervisory authority;
• All available information on the origin of the data if the personal data was not collected at the data subject;
• The existence of an automated decision-finding process including profiling in ac­cordance with Article 22 Para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and its scope and the effects strived for of such a processing for the data subject in question.

You are entitled to the right to demand information on whether the personal data re­lating to yourself is transmitted to a third country or an international organization. In this connection you can demand to be instructed on the suitable guarantees in ac­cordance with Article 46 GDPR in connection with the transmission.

Right to correction

You have a right to correction and/or completion vis à vis the responsible party in so far as the personal data as processed and which relates to yourself is incorrect or incomplete. The responsible party has to carry out the correction without delay.

Right to restrict the processing of personal data

Provided the following preconditions are met you can demand restriction of the pro­cessing of the personal data relating to you:

• if you dispute the correctness of the personal data relating to yourself for a pe­riod which makes it possible for the responsible party to check the correctness of the personal data;
• if the processing is unlawful and you reject deletion of the personal data and de­mand restriction of the use of the personal data instead;
• if the responsible party no longer needs the personal data for purposes of the processing but you need the data for the advancing, exercising or defending of legal claims, or
• if you have advanced objection to the processing in accordance with Article 21 Para. 1 GDPR but it has not yet been established whether the justified rea­sons of the responsible party outweigh your reasons.

If the processing of the personal data relating to yourself has been restricted, then this data – apart from the storage of it – may only be processed with your consent or for the assertion, exercising or defending of legal claims or for the protection of the rights of another natural person or legal entity or for reasons relating to an important public interest of the European Union or of a member state.

If the restriction of the processing has been restricted in accordance with the afore-mentioned preconditions, then you will be informed by the responsible party before the restriction is cancelled.

Right to erasure

1. a) Deletion obligation

You can demand by the responsible party that the personal data relating to yourself is deleted without delay and the responsible party is then obliged to delete this data without delay in so far as one of the following reasons applies:

• The personal data relating to you is no longer required for the purposes for which it was collected or for which it was processed.
• You revoke your consent, on which processing in accordance with Article 6 Para. 1 lit. a or Article 9 Para.2 lit. a GDPR was based, and there is no other legal foundation for the processing.
• You submit an objection to the processing in accordance with Article 21 Para. 1 GDPR and there are no justified reasons for the processing with a higher priority, or you submit an objection to the processing in accordance with Article 21 Para. 2 GDPR.
• The personal data relating to you was processed unlawfully.
• The deletion of the personal data relating to you is required to fulfil a legal obliga­tion in accordance with European Union law or the law of the member states, which laws the responsible party is subject to.
• The personal data relating to you was collected in relation to services offered by the information society in accordance with Article 8 Para. 1 GDPR.

1. b) Information to third parties

If the responsible party has made the personal data relating to you public and if he/she is obliged to delete this data in accordance with Article 17 Para. 1 GDPR, then he/she shall take reasonable measures including technical ones – whereby ac­count shall be taken of the available technology and the implementation costs – to inform the responsible parties for the data processing which process the personal data that you as data subject have demanded from them the deletion of all links to this personal data or of copies or replicates of these.

1. c) Exceptions

The right to erasure does not exist in so far as the processing is necessary for

• the exercising of the right of free expression of opinion and to information;
• for the fulfilment of a legal obligation, which requires the processing in accord­ance with the law of the European Union or the law of the member states, which laws the responsible party is subject to, or for the carrying out of a task, which lies in the public interest or which is carried out in the exercising of pub­lic authority, which authority was transferred to the responsible party;
• for reasons of public interest in the field of public health in accordance with Arti­cle 9 Para. 2 lit. h and i as well as Article 9 Para. 3 GDPR;
• for archiving purposes, scientific or historical research purposes lying in the pub­lic interest or for statistical purposes in accordance with Article 89 Para. 1 GDPR, in so far as the right named in section a) probably makes achieving of the objectives of the processing impossible or impairs it seriously, or
• for the advancing, exercising or defending of legal claims.

Right to information

If you have advanced the right to the correcting, erasure or restricting of the pro­cessing to the responsible party, then the latter is obliged to inform all recipients, to which the personal data relating to you was disclosed, of this correction or erasure of the data or of the restricting of the processing, unless this proves itself to be impossi­ble or linked with unreasonable expenditure.

You are entitled to the right vis à vis the responsible party to be informed about these recipients.

Right to data portability

You have the right to receive the personal data relating to yourself, which you made available to the responsible party, in a structured, conventional and machine-reada­ble format. In addition, you have the right to transmit this data to another responsible party without hindrance by the responsible party to whom the personal data was made available, in so far as

• the processing is based on consent in accordance with Article 6 Para. 1 lit. a GDPR or Article 9 Para. 2 lit. a GDPR or on a contract in accordance with Arti­cle 6 Para. 1 lit. b GDPR and
• the processing is carried out by means of automated processes.

In exercising this right, you have in addition the right to obtain the personal data re­lating to you is transferred directly from one responsible party to another responsible party in so far as this is technically possible. The freedoms and rights of other per­sons may not be impaired thereby.

The right to data portability applies not for the processing of personal data, which is necessary for the carrying out of a task, which lies in the public interest or in the ex­ercising of public authority and which task was transferred to the responsible party.

Right to object

For reasons which result from your particular situation you have the right to advance at any time objection to the processing of the personal data relating to you, which processing is carried out on the basis of Article 6 Para. 1 lit. e or f GDPR. This right also applies to the profiling based on these provisions.

The responsible party shall then no longer process the personal data relating to you, unless he/she can prove compelling reasons worthy of protection, which reasons overweigh your interests, rights and freedoms or where the processing serves the advancing, exercising or defending of legal claims.

If the personal data relating to you is processed for the purpose of direct advertising, then you have the right to advance at any time objection to the processing of the per­sonal data relating to you for purposes of such advertising. This applies also to the profiling in so far as this is carried out in connection with such direct advertising.

If you object to the processing for purposes of direct advertising, then the personal data relating to you will no longer be processed for these purposes.

You have the opportunity – in connection with the use of services of the information society and regardless of directive 2002/58/EC – to exercise your right of objection with the aid of automated processes in which technical specifications are used.

You have also the right for reasons which result from your particular situation to ad­vance at any time objection to the processing of the personal data relating to you which processing is carried out for scientific or historic purposes or for statistical pur­poses according to Article 89 Para. 1 GDPR.

Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your consent at any time. On withdrawal we immedi­ately will delete your personal data and no longer process it. The legality of the pro­cessing carried out prior to your withdrawal on the base of your given consent is not affected by you withdrawal.

Right to complain at a supervisory authority

Regardless of another regulatory or judicial remedy, you are entitled to the right to lodge a complaint at a supervisory authority and here in particular at a supervisory authority in the member state of your place of residence, of your place of work or of the place where the suspected infringement took place when you are of the opinion that the processing of the personal data relating to you infringes the GDPR.

In this case the supervisory authority, at which the complaint was lodged, shall inform the complainant on the status and the results of the complaint including the possibility of a judicial remedy in accordance with Article 78 GDPR.

I. Name and address of the responsible party

The responsible party in the sense of the General Data Protection Regulation (GDPR) and of other national data protection regulations in force in the member states of European Union as well as of other regulations with a legal data-protecting character is the

CTP Advanced Materials GmbH

Stahlstrasse 60

D-65428 Ruesselsheim, Germany

Fon: +49 6142 91 85 0

Fax: +49 6142 91 85 55

Mail: ctp@ctpgmbh.de

 

The processing of some data takes place in joint responsibility according to Art. 26 GDPR with:

Aditya Birla Group
Aditya Birla Centre
S K Ahire Marg, Worli

Mumbai 400030, India

II. Name and address of the data protection officer

The data protection officer of the responsible party is:

daschug GmbH

Robert-Bosch-Strasse 7

64293 Darmstadt, Germany

Fon +49 6151 6673 440

Mail: datenschutz@ctpgmbh.de

III.    General information on data processing

Range of the processing of personal data

Generally, we collect and process personal data of users only as long as this is re­quired for providing a properly functioning website as well as delivering our contents and services. The collection and use of personal data of our users on a regular basis only takes place after consent of the data subject. An exception applies to those cases where obtaining consent prior to use is not possible based on matters of law and fact and the processing of data is allowed by legal regulations.

Legal fundamentals for the processing of personal data

In so far as we obtain the consent of the data subject for the processing of personal data Article 6 Para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the foundation for the processing of personal data.

Article 6 Para. 1 lit. b GDPR serves as the legal foundation for the processing of per­sonal data which is necessary for the fulfilment of a contract if the data subject is party to this contract. This applies also to the processing processes which are neces­sary for the execution of pre-contractual measures.

Article 6 Para. 1 lit. c GDPR serves as the legal foundation in so far as processing of personal data is necessary for the fulfilment of a legal obligation applying to our en­terprise.

Article 6 Para. 1 lit. d GDPR serves as the legal foundation for the situation that vital interests of the data subject or another natural person make the processing of per­sonal data necessary.

Article 6 Para. 1 lit. f GDPR serves as the legal foundation for the situation that pro­cessing is necessary to ensure a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not exceed the first named interest.

Deletion of data and duration of storage

The personal data of the data subject are deleted or disabled as soon as the purpose for which the data was stored lapses. In addition, storage can take place if this was stipulated by the European or national legislatures in orders, laws or other regulations in accordance with European Union law to which the responsible party is subject. Disabling or deletion of the data is also carried out if a storage period prescribed by the standards as named expires unless there is a necessity for the continued storage of the data for the concluding or fulfilling of a contract.

IV. Making available of our website and creation of logfiles

Description and range of data processing

On every visit on our website our system automatically collects data and information of the computer system calling. The following data is collected:

• Information on the type of browser and its version used
• The operating system of the user
• The internet-service-provider of the user
• The IP-address of the user
• Date and time of the access
• The website, from which an accessing system reaches our website
• Websites, which are accessed by the computer system of the user via our web­site

This data is also stored in the logfiles of our system. However, IP-addresses of the users or other data, which would allow the assignment of the data to a particular user, are not stored. Also, this data is not stored together with other personal data of the user.

Legal foundations for the data processing

Article 6 Para. 1 lit. f GDPR is the legal foundation for the temporary storage of data and logfiles.

Purpose of data processing

The temporary storage of the IP-address by the system is necessary to enable the delivery of the website to the computer of the user. For achieving this the IP-address of the user must remain stored for the duration of the session.

The storage in logfiles occurs to enable the proper functioning of the website. Fur­thermore, this data serves to optimize the website and to enable the security of our IT-systems. An analysis of the data for marketing purposes does not happen.

The legal foundation is our legitimate interest in data processing according to Article 6 Para.1 lit. f GDPR.

Duration of storage

The data is deleted or disabled as soon as the purpose for which the data was stored lapses. This is the case when the particular session has ended in situations where the data is collected for making the website available.

This is the case at the latest seven days after the time when the data was stored in log files. A storage exceeding this period is possible. In this case the IP-addresses of the users are deleted or distorted so that an assignment of the client calling in is no longer possible.

Possibility for objection and deletion

The collection of data for the making available of the website and the storage of data in logfiles is compulsory for operating the website. Thus, there is no right to object by the user.

Use of cookies

1. a) Description and range of data processing

Our website uses cookies. In general, cookies are small text files which are stored on your computer and which store certain settings and data for exchange with the online offer from us via your browser. If a user calls in a website, a cookie can be stored in the operating system of the user’s computer. This cookie usually contains a unique string of characters, which allows an unambiguous identification of the browser when calling in the website again.

We are using cookies to improve our online offer. Some elements of our website re­quire that a browser calling in can be identified after a changeover.

The following data is stored and transmitted:

• Language settings
• Log-In-information

The data of the user collected in this way is pseudonymized by technical processes. Accordingly, assignment of the data to the user calling in is no longer possible. The data collected is not stored together with other personal data of the user.

When our website is called, the users are informed by means of an information ban­ner about the use of cookies for analytical purposes and are referred to this data protection information. In this connection reference is given to how storage of cookies can be prevented by the browser settings.

In this connection follows a reference to how that storing of cookies can be prevented by appropriate browser settings.

1. b) Legal foundation of data processing

The legal foundation for the processing of personal data by using cookies is Article 6 Para. 1 lit. f GDPR.

1. c) Purpose of data processing

The purpose behind the use of strictly technically essential cookies is to facilitate the use of the website for the user. Certain functions of our website cannot be offered without the use of cookies. For these functions it is necessary that the browser is recognized even after a page change.

We need cookies for the following application:

• Adoption of language settings

Analysis cookies are used for the purpose of improving the quality of our website and its content. By the analysis cookies we learn how the website is used and thus are able to continually optimize our offer. These purposes also include our legitimate in­terest in the processing of the personal data in accordance with Article 6 Para. 1 lit. f GDPR.

1. d) Duration of storage, possibilities for objection and elimination

Cookies are stored on the user’s computer and are transmitted from this to our web­site. Accordingly, you as user have full control over the use of cookies. By a change of the settings of your internet browser you are able to deactivate or restrict the transmissions of cookies. Cookies already being stored can be deleted at any time. This can also be carried out automatically. However, if cookies for our website are deactivated, it may no longer be possible to fully use all functions of the website. The transmission of flash cookies cannot be prevented by the browser settings but re­quires changes of the settings of the flash player.

 

VI. E-Mail-contact

Description and range of data processing

Contacting us is possible by using the e-mail address provided. In this case personal data of the user transmitted with the e-mail is stored. In this connection no data is passed on to third parties. The data is used exclusively for the processing of the con­versation and will immediately be deleted if it is no longer needed.

Legal foundation of data processing

Legal foundation for the processing of the data after application of the user for a newsletter in case of consent of the user is Article 6 Para. 1 lit. a GDPR.

Legal foundation for the processing of data in case of the transmission of an e-mail is Article 6 Para. 1 lit. f GDPR. Is the e-mail contact directed at closing a contract addi­tional legal foundation for the processing of data is Article 6 Para. 1 lit. b GDPR.

Purpose of data processing

The processing of the personal data from the input mask/e-mail serves us solely for the processing of the contact. In case of contacting by e-mail this is also the neces­sary legitimate interest in the processing of the data.

Other personal data processed during the sending-off process serves to prevent abuse of the contact form and to ensure the security of our IT systems.

Duration of storage

The data is deleted as soon as it is no longer needed for achieving the purpose of their collection. This is the case for the personal data from the input mask of the contact form and those which are sent by e-mail when the particular conversation with the user has ended.

The conversation has ended when the circumstances allow the conclusion that the matter in question has been finally clarified.

The additional personal data collected during the sending-off process is deleted the latest after a period of seven days.

Possibilities for objection and elimination

At any time the user has the opportunity to withdraw his consent on the processing of personal data. If the user is contacting us by e-mail, he can object to the storage of his personal data at any time. In this case the conversation cannot be continued.

VII.       Rights of the data subject

If your personal data is processed, then you are the data subject in the sense of the GDPR and you are entitled to the following rights vis à vis the responsible party:

Right of access by the data subject

You can demand from the responsible party confirmation as to whether personal data that relates to you has been processed by us. If such processing has taken place, you can demand information from the responsible party on the following:

• The purposes for which the personal data is processed;
• The categories of personal data which are processed;
• The recipients or, resp., the categories of recipients to which the personal data relating to you has been disclosed or will be disclosed;
• The planned duration of the storage of the personal data relating to you or, if dis­tinct statements on this are not possible, the criteria for the laying down of duration of storage;
• The existence of a right to correction or deletion of the personal data relating to yourself, of a right to a restriction of the processing by the responsible party or of a right of objection to this processing;
• The existence of a right of appeal at a supervisory authority;
• All available information on the origin of the data if the personal data was not collected at the data subject;
• The existence of an automated decision-finding process including profiling in ac­cordance with Article 22 Para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and its scope and the effects strived for of such a processing for the data subject in question.

You are entitled to the right to demand information on whether the personal data re­lating to yourself is transmitted to a third country or an international organization. In this connection you can demand to be instructed on the suitable guarantees in ac­cordance with Article 46 GDPR in connection with the transmission.

Right to correction

You have a right to correction and/or completion vis à vis the responsible party in so far as the personal data as processed and which relates to yourself is incorrect or incomplete. The responsible party has to carry out the correction without delay.

Right to restrict the processing of personal data

Provided the following preconditions are met you can demand restriction of the pro­cessing of the personal data relating to you:

• if you dispute the correctness of the personal data relating to yourself for a pe­riod which makes it possible for the responsible party to check the correctness of the personal data;
• if the processing is unlawful and you reject deletion of the personal data and de­mand restriction of the use of the personal data instead;
• if the responsible party no longer needs the personal data for purposes of the processing but you need the data for the advancing, exercising or defending of legal claims, or
• if you have advanced objection to the processing in accordance with Article 21 Para. 1 GDPR but it has not yet been established whether the justified rea­sons of the responsible party outweigh your reasons.

If the processing of the personal data relating to yourself has been restricted, then this data – apart from the storage of it – may only be processed with your consent or for the assertion, exercising or defending of legal claims or for the protection of the rights of another natural person or legal entity or for reasons relating to an important public interest of the European Union or of a member state.

If the restriction of the processing has been restricted in accordance with the afore-mentioned preconditions, then you will be informed by the responsible party before the restriction is cancelled.

Right to erasure

1. a) Deletion obligation

You can demand by the responsible party that the personal data relating to yourself is deleted without delay and the responsible party is then obliged to delete this data without delay in so far as one of the following reasons applies:

• The personal data relating to you is no longer required for the purposes for which it was collected or for which it was processed.
• You revoke your consent, on which processing in accordance with Article 6 Para. 1 lit. a or Article 9 Para.2 lit. a GDPR was based, and there is no other legal foundation for the processing.
• You submit an objection to the processing in accordance with Article 21 Para. 1 GDPR and there are no justified reasons for the processing with a higher priority, or you submit an objection to the processing in accordance with Article 21 Para. 2 GDPR.
• The personal data relating to you was processed unlawfully.
• The deletion of the personal data relating to you is required to fulfil a legal obliga­tion in accordance with European Union law or the law of the member states, which laws the responsible party is subject to.
• The personal data relating to you was collected in relation to services offered by the information society in accordance with Article 8 Para. 1 GDPR.

1. b) Information to third parties

If the responsible party has made the personal data relating to you public and if he/she is obliged to delete this data in accordance with Article 17 Para. 1 GDPR, then he/she shall take reasonable measures including technical ones – whereby ac­count shall be taken of the available technology and the implementation costs – to inform the responsible parties for the data processing which process the personal data that you as data subject have demanded from them the deletion of all links to this personal data or of copies or replicates of these.

1. c) Exceptions

The right to erasure does not exist in so far as the processing is necessary for

• the exercising of the right of free expression of opinion and to information;
• for the fulfilment of a legal obligation, which requires the processing in accord­ance with the law of the European Union or the law of the member states, which laws the responsible party is subject to, or for the carrying out of a task, which lies in the public interest or which is carried out in the exercising of pub­lic authority, which authority was transferred to the responsible party;
• for reasons of public interest in the field of public health in accordance with Arti­cle 9 Para. 2 lit. h and i as well as Article 9 Para. 3 GDPR;
• for archiving purposes, scientific or historical research purposes lying in the pub­lic interest or for statistical purposes in accordance with Article 89 Para. 1 GDPR, in so far as the right named in section a) probably makes achieving of the objectives of the processing impossible or impairs it seriously, or
• for the advancing, exercising or defending of legal claims.

Right to information

If you have advanced the right to the correcting, erasure or restricting of the pro­cessing to the responsible party, then the latter is obliged to inform all recipients, to which the personal data relating to you was disclosed, of this correction or erasure of the data or of the restricting of the processing, unless this proves itself to be impossi­ble or linked with unreasonable expenditure.

You are entitled to the right vis à vis the responsible party to be informed about these recipients.

Right to data portability

You have the right to receive the personal data relating to yourself, which you made available to the responsible party, in a structured, conventional and machine-reada­ble format. In addition, you have the right to transmit this data to another responsible party without hindrance by the responsible party to whom the personal data was made available, in so far as

• the processing is based on consent in accordance with Article 6 Para. 1 lit. a GDPR or Article 9 Para. 2 lit. a GDPR or on a contract in accordance with Arti­cle 6 Para. 1 lit. b GDPR and
• the processing is carried out by means of automated processes.

In exercising this right, you have in addition the right to obtain the personal data re­lating to you is transferred directly from one responsible party to another responsible party in so far as this is technically possible. The freedoms and rights of other per­sons may not be impaired thereby.

The right to data portability applies not for the processing of personal data, which is necessary for the carrying out of a task, which lies in the public interest or in the ex­ercising of public authority and which task was transferred to the responsible party.

Right to object

For reasons which result from your particular situation you have the right to advance at any time objection to the processing of the personal data relating to you, which processing is carried out on the basis of Article 6 Para. 1 lit. e or f GDPR. This right also applies to the profiling based on these provisions.

The responsible party shall then no longer process the personal data relating to you, unless he/she can prove compelling reasons worthy of protection, which reasons overweigh your interests, rights and freedoms or where the processing serves the advancing, exercising or defending of legal claims.

If the personal data relating to you is processed for the purpose of direct advertising, then you have the right to advance at any time objection to the processing of the per­sonal data relating to you for purposes of such advertising. This applies also to the profiling in so far as this is carried out in connection with such direct advertising.

If you object to the processing for purposes of direct advertising, then the personal data relating to you will no longer be processed for these purposes.

You have the opportunity – in connection with the use of services of the information society and regardless of directive 2002/58/EC – to exercise your right of objection with the aid of automated processes in which technical specifications are used.

You have also the right for reasons which result from your particular situation to ad­vance at any time objection to the processing of the personal data relating to you which processing is carried out for scientific or historic purposes or for statistical pur­poses according to Article 89 Para. 1 GDPR.

Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your consent at any time. On withdrawal we immedi­ately will delete your personal data and no longer process it. The legality of the pro­cessing carried out prior to your withdrawal on the base of your given consent is not affected by you withdrawal.

Right to complain at a supervisory authority

Regardless of another regulatory or judicial remedy, you are entitled to the right to lodge a complaint at a supervisory authority and here in particular at a supervisory authority in the member state of your place of residence, of your place of work or of the place where the suspected infringement took place when you are of the opinion that the processing of the personal data relating to you infringes the GDPR.

In this case the supervisory authority, at which the complaint was lodged, shall inform the complainant on the status and the results of the complaint including the possibility of a judicial remedy in accordance with Article 78 GDPR.

I. Name and address of the responsible party

The responsible party in the sense of the General Data Protection Regulation (GDPR) and of other national data protection regulations in force in the member states of European Union as well as of other regulations with a legal data-protecting character is the

CTP Advanced Materials GmbH

Stahlstrasse 60

D-65428 Ruesselsheim, Germany

Fon: +49 6142 91 85 0

Fax: +49 6142 91 85 55

Mail: ctp@ctpgmbh.de

 

The processing of some data takes place in joint responsibility according to Art. 26 GDPR with:

Aditya Birla Group
Aditya Birla Centre
S K Ahire Marg, Worli

Mumbai 400030, India

II. Name and address of the data protection officer

The data protection officer of the responsible party is:

daschug GmbH

Robert-Bosch-Strasse 7

64293 Darmstadt, Germany

Fon +49 6151 6673 440

Mail: datenschutz@ctpgmbh.de

III.    General information on data processing

Range of the processing of personal data

Generally, we collect and process personal data of users only as long as this is re­quired for providing a properly functioning website as well as delivering our contents and services. The collection and use of personal data of our users on a regular basis only takes place after consent of the data subject. An exception applies to those cases where obtaining consent prior to use is not possible based on matters of law and fact and the processing of data is allowed by legal regulations.

Legal fundamentals for the processing of personal data

In so far as we obtain the consent of the data subject for the processing of personal data Article 6 Para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the foundation for the processing of personal data.

Article 6 Para. 1 lit. b GDPR serves as the legal foundation for the processing of per­sonal data which is necessary for the fulfilment of a contract if the data subject is party to this contract. This applies also to the processing processes which are neces­sary for the execution of pre-contractual measures.

Article 6 Para. 1 lit. c GDPR serves as the legal foundation in so far as processing of personal data is necessary for the fulfilment of a legal obligation applying to our en­terprise.

Article 6 Para. 1 lit. d GDPR serves as the legal foundation for the situation that vital interests of the data subject or another natural person make the processing of per­sonal data necessary.

Article 6 Para. 1 lit. f GDPR serves as the legal foundation for the situation that pro­cessing is necessary to ensure a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not exceed the first named interest.

Deletion of data and duration of storage

The personal data of the data subject are deleted or disabled as soon as the purpose for which the data was stored lapses. In addition, storage can take place if this was stipulated by the European or national legislatures in orders, laws or other regulations in accordance with European Union law to which the responsible party is subject. Disabling or deletion of the data is also carried out if a storage period prescribed by the standards as named expires unless there is a necessity for the continued storage of the data for the concluding or fulfilling of a contract.

IV. Making available of our website and creation of logfiles

Description and range of data processing

On every visit on our website our system automatically collects data and information of the computer system calling. The following data is collected:

• Information on the type of browser and its version used
• The operating system of the user
• The internet-service-provider of the user
• The IP-address of the user
• Date and time of the access
• The website, from which an accessing system reaches our website
• Websites, which are accessed by the computer system of the user via our web­site

This data is also stored in the logfiles of our system. However, IP-addresses of the users or other data, which would allow the assignment of the data to a particular user, are not stored. Also, this data is not stored together with other personal data of the user.

Legal foundations for the data processing

Article 6 Para. 1 lit. f GDPR is the legal foundation for the temporary storage of data and logfiles.

Purpose of data processing

The temporary storage of the IP-address by the system is necessary to enable the delivery of the website to the computer of the user. For achieving this the IP-address of the user must remain stored for the duration of the session.

The storage in logfiles occurs to enable the proper functioning of the website. Fur­thermore, this data serves to optimize the website and to enable the security of our IT-systems. An analysis of the data for marketing purposes does not happen.

The legal foundation is our legitimate interest in data processing according to Article 6 Para.1 lit. f GDPR.

Duration of storage

The data is deleted or disabled as soon as the purpose for which the data was stored lapses. This is the case when the particular session has ended in situations where the data is collected for making the website available.

This is the case at the latest seven days after the time when the data was stored in log files. A storage exceeding this period is possible. In this case the IP-addresses of the users are deleted or distorted so that an assignment of the client calling in is no longer possible.

Possibility for objection and deletion

The collection of data for the making available of the website and the storage of data in logfiles is compulsory for operating the website. Thus, there is no right to object by the user.

Use of cookies

1. a) Description and range of data processing

Our website uses cookies. In general, cookies are small text files which are stored on your computer and which store certain settings and data for exchange with the online offer from us via your browser. If a user calls in a website, a cookie can be stored in the operating system of the user’s computer. This cookie usually contains a unique string of characters, which allows an unambiguous identification of the browser when calling in the website again.

We are using cookies to improve our online offer. Some elements of our website re­quire that a browser calling in can be identified after a changeover.

The following data is stored and transmitted:

• Language settings
• Log-In-information

The data of the user collected in this way is pseudonymized by technical processes. Accordingly, assignment of the data to the user calling in is no longer possible. The data collected is not stored together with other personal data of the user.

When our website is called, the users are informed by means of an information ban­ner about the use of cookies for analytical purposes and are referred to this data protection information. In this connection reference is given to how storage of cookies can be prevented by the browser settings.

In this connection follows a reference to how that storing of cookies can be prevented by appropriate browser settings.

1. b) Legal foundation of data processing

The legal foundation for the processing of personal data by using cookies is Article 6 Para. 1 lit. f GDPR.

1. c) Purpose of data processing

The purpose behind the use of strictly technically essential cookies is to facilitate the use of the website for the user. Certain functions of our website cannot be offered without the use of cookies. For these functions it is necessary that the browser is recognized even after a page change.

We need cookies for the following application:

• Adoption of language settings

Analysis cookies are used for the purpose of improving the quality of our website and its content. By the analysis cookies we learn how the website is used and thus are able to continually optimize our offer. These purposes also include our legitimate in­terest in the processing of the personal data in accordance with Article 6 Para. 1 lit. f GDPR.

1. d) Duration of storage, possibilities for objection and elimination

Cookies are stored on the user’s computer and are transmitted from this to our web­site. Accordingly, you as user have full control over the use of cookies. By a change of the settings of your internet browser you are able to deactivate or restrict the transmissions of cookies. Cookies already being stored can be deleted at any time. This can also be carried out automatically. However, if cookies for our website are deactivated, it may no longer be possible to fully use all functions of the website. The transmission of flash cookies cannot be prevented by the browser settings but re­quires changes of the settings of the flash player.

 

VI. E-Mail-contact

Description and range of data processing

Contacting us is possible by using the e-mail address provided. In this case personal data of the user transmitted with the e-mail is stored. In this connection no data is passed on to third parties. The data is used exclusively for the processing of the con­versation and will immediately be deleted if it is no longer needed.

Legal foundation of data processing

Legal foundation for the processing of the data after application of the user for a newsletter in case of consent of the user is Article 6 Para. 1 lit. a GDPR.

Legal foundation for the processing of data in case of the transmission of an e-mail is Article 6 Para. 1 lit. f GDPR. Is the e-mail contact directed at closing a contract addi­tional legal foundation for the processing of data is Article 6 Para. 1 lit. b GDPR.

Purpose of data processing

The processing of the personal data from the input mask/e-mail serves us solely for the processing of the contact. In case of contacting by e-mail this is also the neces­sary legitimate interest in the processing of the data.

Other personal data processed during the sending-off process serves to prevent abuse of the contact form and to ensure the security of our IT systems.

Duration of storage

The data is deleted as soon as it is no longer needed for achieving the purpose of their collection. This is the case for the personal data from the input mask of the contact form and those which are sent by e-mail when the particular conversation with the user has ended.

The conversation has ended when the circumstances allow the conclusion that the matter in question has been finally clarified.

The additional personal data collected during the sending-off process is deleted the latest after a period of seven days.

Possibilities for objection and elimination

At any time the user has the opportunity to withdraw his consent on the processing of personal data. If the user is contacting us by e-mail, he can object to the storage of his personal data at any time. In this case the conversation cannot be continued.

VII.       Rights of the data subject

If your personal data is processed, then you are the data subject in the sense of the GDPR and you are entitled to the following rights vis à vis the responsible party:

Right of access by the data subject

You can demand from the responsible party confirmation as to whether personal data that relates to you has been processed by us. If such processing has taken place, you can demand information from the responsible party on the following:

• The purposes for which the personal data is processed;
• The categories of personal data which are processed;
• The recipients or, resp., the categories of recipients to which the personal data relating to you has been disclosed or will be disclosed;
• The planned duration of the storage of the personal data relating to you or, if dis­tinct statements on this are not possible, the criteria for the laying down of duration of storage;
• The existence of a right to correction or deletion of the personal data relating to yourself, of a right to a restriction of the processing by the responsible party or of a right of objection to this processing;
• The existence of a right of appeal at a supervisory authority;
• All available information on the origin of the data if the personal data was not collected at the data subject;
• The existence of an automated decision-finding process including profiling in ac­cordance with Article 22 Para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and its scope and the effects strived for of such a processing for the data subject in question.

You are entitled to the right to demand information on whether the personal data re­lating to yourself is transmitted to a third country or an international organization. In this connection you can demand to be instructed on the suitable guarantees in ac­cordance with Article 46 GDPR in connection with the transmission.

Right to correction

You have a right to correction and/or completion vis à vis the responsible party in so far as the personal data as processed and which relates to yourself is incorrect or incomplete. The responsible party has to carry out the correction without delay.

Right to restrict the processing of personal data

Provided the following preconditions are met you can demand restriction of the pro­cessing of the personal data relating to you:

• if you dispute the correctness of the personal data relating to yourself for a pe­riod which makes it possible for the responsible party to check the correctness of the personal data;
• if the processing is unlawful and you reject deletion of the personal data and de­mand restriction of the use of the personal data instead;
• if the responsible party no longer needs the personal data for purposes of the processing but you need the data for the advancing, exercising or defending of legal claims, or
• if you have advanced objection to the processing in accordance with Article 21 Para. 1 GDPR but it has not yet been established whether the justified rea­sons of the responsible party outweigh your reasons.

If the processing of the personal data relating to yourself has been restricted, then this data – apart from the storage of it – may only be processed with your consent or for the assertion, exercising or defending of legal claims or for the protection of the rights of another natural person or legal entity or for reasons relating to an important public interest of the European Union or of a member state.

If the restriction of the processing has been restricted in accordance with the afore-mentioned preconditions, then you will be informed by the responsible party before the restriction is cancelled.

Right to erasure

1. a) Deletion obligation

You can demand by the responsible party that the personal data relating to yourself is deleted without delay and the responsible party is then obliged to delete this data without delay in so far as one of the following reasons applies:

• The personal data relating to you is no longer required for the purposes for which it was collected or for which it was processed.
• You revoke your consent, on which processing in accordance with Article 6 Para. 1 lit. a or Article 9 Para.2 lit. a GDPR was based, and there is no other legal foundation for the processing.
• You submit an objection to the processing in accordance with Article 21 Para. 1 GDPR and there are no justified reasons for the processing with a higher priority, or you submit an objection to the processing in accordance with Article 21 Para. 2 GDPR.
• The personal data relating to you was processed unlawfully.
• The deletion of the personal data relating to you is required to fulfil a legal obliga­tion in accordance with European Union law or the law of the member states, which laws the responsible party is subject to.
• The personal data relating to you was collected in relation to services offered by the information society in accordance with Article 8 Para. 1 GDPR.

1. b) Information to third parties

If the responsible party has made the personal data relating to you public and if he/she is obliged to delete this data in accordance with Article 17 Para. 1 GDPR, then he/she shall take reasonable measures including technical ones – whereby ac­count shall be taken of the available technology and the implementation costs – to inform the responsible parties for the data processing which process the personal data that you as data subject have demanded from them the deletion of all links to this personal data or of copies or replicates of these.

1. c) Exceptions

The right to erasure does not exist in so far as the processing is necessary for

• the exercising of the right of free expression of opinion and to information;
• for the fulfilment of a legal obligation, which requires the processing in accord­ance with the law of the European Union or the law of the member states, which laws the responsible party is subject to, or for the carrying out of a task, which lies in the public interest or which is carried out in the exercising of pub­lic authority, which authority was transferred to the responsible party;
• for reasons of public interest in the field of public health in accordance with Arti­cle 9 Para. 2 lit. h and i as well as Article 9 Para. 3 GDPR;
• for archiving purposes, scientific or historical research purposes lying in the pub­lic interest or for statistical purposes in accordance with Article 89 Para. 1 GDPR, in so far as the right named in section a) probably makes achieving of the objectives of the processing impossible or impairs it seriously, or
• for the advancing, exercising or defending of legal claims.

Right to information

If you have advanced the right to the correcting, erasure or restricting of the pro­cessing to the responsible party, then the latter is obliged to inform all recipients, to which the personal data relating to you was disclosed, of this correction or erasure of the data or of the restricting of the processing, unless this proves itself to be impossi­ble or linked with unreasonable expenditure.

You are entitled to the right vis à vis the responsible party to be informed about these recipients.

Right to data portability

You have the right to receive the personal data relating to yourself, which you made available to the responsible party, in a structured, conventional and machine-reada­ble format. In addition, you have the right to transmit this data to another responsible party without hindrance by the responsible party to whom the personal data was made available, in so far as

• the processing is based on consent in accordance with Article 6 Para. 1 lit. a GDPR or Article 9 Para. 2 lit. a GDPR or on a contract in accordance with Arti­cle 6 Para. 1 lit. b GDPR and
• the processing is carried out by means of automated processes.

In exercising this right, you have in addition the right to obtain the personal data re­lating to you is transferred directly from one responsible party to another responsible party in so far as this is technically possible. The freedoms and rights of other per­sons may not be impaired thereby.

The right to data portability applies not for the processing of personal data, which is necessary for the carrying out of a task, which lies in the public interest or in the ex­ercising of public authority and which task was transferred to the responsible party.

Right to object

For reasons which result from your particular situation you have the right to advance at any time objection to the processing of the personal data relating to you, which processing is carried out on the basis of Article 6 Para. 1 lit. e or f GDPR. This right also applies to the profiling based on these provisions.

The responsible party shall then no longer process the personal data relating to you, unless he/she can prove compelling reasons worthy of protection, which reasons overweigh your interests, rights and freedoms or where the processing serves the advancing, exercising or defending of legal claims.

If the personal data relating to you is processed for the purpose of direct advertising, then you have the right to advance at any time objection to the processing of the per­sonal data relating to you for purposes of such advertising. This applies also to the profiling in so far as this is carried out in connection with such direct advertising.

If you object to the processing for purposes of direct advertising, then the personal data relating to you will no longer be processed for these purposes.

You have the opportunity – in connection with the use of services of the information society and regardless of directive 2002/58/EC – to exercise your right of objection with the aid of automated processes in which technical specifications are used.

You have also the right for reasons which result from your particular situation to ad­vance at any time objection to the processing of the personal data relating to you which processing is carried out for scientific or historic purposes or for statistical pur­poses according to Article 89 Para. 1 GDPR.

Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your consent at any time. On withdrawal we immedi­ately will delete your personal data and no longer process it. The legality of the pro­cessing carried out prior to your withdrawal on the base of your given consent is not affected by you withdrawal.

Right to complain at a supervisory authority

Regardless of another regulatory or judicial remedy, you are entitled to the right to lodge a complaint at a supervisory authority and here in particular at a supervisory authority in the member state of your place of residence, of your place of work or of the place where the suspected infringement took place when you are of the opinion that the processing of the personal data relating to you infringes the GDPR.

In this case the supervisory authority, at which the complaint was lodged, shall inform the complainant on the status and the results of the complaint including the possibility of a judicial remedy in accordance with Article 78 GDPR.

I. Name and address of the responsible party

The responsible party in the sense of the General Data Protection Regulation (GDPR) and of other national data protection regulations in force in the member states of European Union as well as of other regulations with a legal data-protecting character is the

CTP Advanced Materials GmbH

Stahlstrasse 60

D-65428 Ruesselsheim, Germany

Fon: +49 6142 91 85 0

Fax: +49 6142 91 85 55

Mail: ctp@ctpgmbh.de

 

The processing of some data takes place in joint responsibility according to Art. 26 GDPR with:

Aditya Birla Group
Aditya Birla Centre
S K Ahire Marg, Worli

Mumbai 400030, India

II. Name and address of the data protection officer

The data protection officer of the responsible party is:

daschug GmbH

Robert-Bosch-Strasse 7

64293 Darmstadt, Germany

Fon +49 6151 6673 440

Mail: datenschutz@ctpgmbh.de

III.    General information on data processing

Range of the processing of personal data

Generally, we collect and process personal data of users only as long as this is re­quired for providing a properly functioning website as well as delivering our contents and services. The collection and use of personal data of our users on a regular basis only takes place after consent of the data subject. An exception applies to those cases where obtaining consent prior to use is not possible based on matters of law and fact and the processing of data is allowed by legal regulations.

Legal fundamentals for the processing of personal data

In so far as we obtain the consent of the data subject for the processing of personal data Article 6 Para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the foundation for the processing of personal data.

Article 6 Para. 1 lit. b GDPR serves as the legal foundation for the processing of per­sonal data which is necessary for the fulfilment of a contract if the data subject is party to this contract. This applies also to the processing processes which are neces­sary for the execution of pre-contractual measures.

Article 6 Para. 1 lit. c GDPR serves as the legal foundation in so far as processing of personal data is necessary for the fulfilment of a legal obligation applying to our en­terprise.

Article 6 Para. 1 lit. d GDPR serves as the legal foundation for the situation that vital interests of the data subject or another natural person make the processing of per­sonal data necessary.

Article 6 Para. 1 lit. f GDPR serves as the legal foundation for the situation that pro­cessing is necessary to ensure a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not exceed the first named interest.

Deletion of data and duration of storage

The personal data of the data subject are deleted or disabled as soon as the purpose for which the data was stored lapses. In addition, storage can take place if this was stipulated by the European or national legislatures in orders, laws or other regulations in accordance with European Union law to which the responsible party is subject. Disabling or deletion of the data is also carried out if a storage period prescribed by the standards as named expires unless there is a necessity for the continued storage of the data for the concluding or fulfilling of a contract.

IV. Making available of our website and creation of logfiles

Description and range of data processing

On every visit on our website our system automatically collects data and information of the computer system calling. The following data is collected:

• Information on the type of browser and its version used
• The operating system of the user
• The internet-service-provider of the user
• The IP-address of the user
• Date and time of the access
• The website, from which an accessing system reaches our website
• Websites, which are accessed by the computer system of the user via our web­site

This data is also stored in the logfiles of our system. However, IP-addresses of the users or other data, which would allow the assignment of the data to a particular user, are not stored. Also, this data is not stored together with other personal data of the user.

Legal foundations for the data processing

Article 6 Para. 1 lit. f GDPR is the legal foundation for the temporary storage of data and logfiles.

Purpose of data processing

The temporary storage of the IP-address by the system is necessary to enable the delivery of the website to the computer of the user. For achieving this the IP-address of the user must remain stored for the duration of the session.

The storage in logfiles occurs to enable the proper functioning of the website. Fur­thermore, this data serves to optimize the website and to enable the security of our IT-systems. An analysis of the data for marketing purposes does not happen.

The legal foundation is our legitimate interest in data processing according to Article 6 Para.1 lit. f GDPR.

Duration of storage

The data is deleted or disabled as soon as the purpose for which the data was stored lapses. This is the case when the particular session has ended in situations where the data is collected for making the website available.

This is the case at the latest seven days after the time when the data was stored in log files. A storage exceeding this period is possible. In this case the IP-addresses of the users are deleted or distorted so that an assignment of the client calling in is no longer possible.

Possibility for objection and deletion

The collection of data for the making available of the website and the storage of data in logfiles is compulsory for operating the website. Thus, there is no right to object by the user.

Use of cookies

1. a) Description and range of data processing

Our website uses cookies. In general, cookies are small text files which are stored on your computer and which store certain settings and data for exchange with the online offer from us via your browser. If a user calls in a website, a cookie can be stored in the operating system of the user’s computer. This cookie usually contains a unique string of characters, which allows an unambiguous identification of the browser when calling in the website again.

We are using cookies to improve our online offer. Some elements of our website re­quire that a browser calling in can be identified after a changeover.

The following data is stored and transmitted:

• Language settings
• Log-In-information

The data of the user collected in this way is pseudonymized by technical processes. Accordingly, assignment of the data to the user calling in is no longer possible. The data collected is not stored together with other personal data of the user.

When our website is called, the users are informed by means of an information ban­ner about the use of cookies for analytical purposes and are referred to this data protection information. In this connection reference is given to how storage of cookies can be prevented by the browser settings.

In this connection follows a reference to how that storing of cookies can be prevented by appropriate browser settings.

1. b) Legal foundation of data processing

The legal foundation for the processing of personal data by using cookies is Article 6 Para. 1 lit. f GDPR.

1. c) Purpose of data processing

The purpose behind the use of strictly technically essential cookies is to facilitate the use of the website for the user. Certain functions of our website cannot be offered without the use of cookies. For these functions it is necessary that the browser is recognized even after a page change.

We need cookies for the following application:

• Adoption of language settings

Analysis cookies are used for the purpose of improving the quality of our website and its content. By the analysis cookies we learn how the website is used and thus are able to continually optimize our offer. These purposes also include our legitimate in­terest in the processing of the personal data in accordance with Article 6 Para. 1 lit. f GDPR.

1. d) Duration of storage, possibilities for objection and elimination

Cookies are stored on the user’s computer and are transmitted from this to our web­site. Accordingly, you as user have full control over the use of cookies. By a change of the settings of your internet browser you are able to deactivate or restrict the transmissions of cookies. Cookies already being stored can be deleted at any time. This can also be carried out automatically. However, if cookies for our website are deactivated, it may no longer be possible to fully use all functions of the website. The transmission of flash cookies cannot be prevented by the browser settings but re­quires changes of the settings of the flash player.

 

VI. E-Mail-contact

Description and range of data processing

Contacting us is possible by using the e-mail address provided. In this case personal data of the user transmitted with the e-mail is stored. In this connection no data is passed on to third parties. The data is used exclusively for the processing of the con­versation and will immediately be deleted if it is no longer needed.

Legal foundation of data processing

Legal foundation for the processing of the data after application of the user for a newsletter in case of consent of the user is Article 6 Para. 1 lit. a GDPR.

Legal foundation for the processing of data in case of the transmission of an e-mail is Article 6 Para. 1 lit. f GDPR. Is the e-mail contact directed at closing a contract addi­tional legal foundation for the processing of data is Article 6 Para. 1 lit. b GDPR.

Purpose of data processing

The processing of the personal data from the input mask/e-mail serves us solely for the processing of the contact. In case of contacting by e-mail this is also the neces­sary legitimate interest in the processing of the data.

Other personal data processed during the sending-off process serves to prevent abuse of the contact form and to ensure the security of our IT systems.

Duration of storage

The data is deleted as soon as it is no longer needed for achieving the purpose of their collection. This is the case for the personal data from the input mask of the contact form and those which are sent by e-mail when the particular conversation with the user has ended.

The conversation has ended when the circumstances allow the conclusion that the matter in question has been finally clarified.

The additional personal data collected during the sending-off process is deleted the latest after a period of seven days.

Possibilities for objection and elimination

At any time the user has the opportunity to withdraw his consent on the processing of personal data. If the user is contacting us by e-mail, he can object to the storage of his personal data at any time. In this case the conversation cannot be continued.

VII.       Rights of the data subject

If your personal data is processed, then you are the data subject in the sense of the GDPR and you are entitled to the following rights vis à vis the responsible party:

Right of access by the data subject

You can demand from the responsible party confirmation as to whether personal data that relates to you has been processed by us. If such processing has taken place, you can demand information from the responsible party on the following:

• The purposes for which the personal data is processed;
• The categories of personal data which are processed;
• The recipients or, resp., the categories of recipients to which the personal data relating to you has been disclosed or will be disclosed;
• The planned duration of the storage of the personal data relating to you or, if dis­tinct statements on this are not possible, the criteria for the laying down of duration of storage;
• The existence of a right to correction or deletion of the personal data relating to yourself, of a right to a restriction of the processing by the responsible party or of a right of objection to this processing;
• The existence of a right of appeal at a supervisory authority;
• All available information on the origin of the data if the personal data was not collected at the data subject;
• The existence of an automated decision-finding process including profiling in ac­cordance with Article 22 Para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and its scope and the effects strived for of such a processing for the data subject in question.

You are entitled to the right to demand information on whether the personal data re­lating to yourself is transmitted to a third country or an international organization. In this connection you can demand to be instructed on the suitable guarantees in ac­cordance with Article 46 GDPR in connection with the transmission.

Right to correction

You have a right to correction and/or completion vis à vis the responsible party in so far as the personal data as processed and which relates to yourself is incorrect or incomplete. The responsible party has to carry out the correction without delay.

Right to restrict the processing of personal data

Provided the following preconditions are met you can demand restriction of the pro­cessing of the personal data relating to you:

• if you dispute the correctness of the personal data relating to yourself for a pe­riod which makes it possible for the responsible party to check the correctness of the personal data;
• if the processing is unlawful and you reject deletion of the personal data and de­mand restriction of the use of the personal data instead;
• if the responsible party no longer needs the personal data for purposes of the processing but you need the data for the advancing, exercising or defending of legal claims, or
• if you have advanced objection to the processing in accordance with Article 21 Para. 1 GDPR but it has not yet been established whether the justified rea­sons of the responsible party outweigh your reasons.

If the processing of the personal data relating to yourself has been restricted, then this data – apart from the storage of it – may only be processed with your consent or for the assertion, exercising or defending of legal claims or for the protection of the rights of another natural person or legal entity or for reasons relating to an important public interest of the European Union or of a member state.

If the restriction of the processing has been restricted in accordance with the afore-mentioned preconditions, then you will be informed by the responsible party before the restriction is cancelled.

Right to erasure

1. a) Deletion obligation

You can demand by the responsible party that the personal data relating to yourself is deleted without delay and the responsible party is then obliged to delete this data without delay in so far as one of the following reasons applies:

• The personal data relating to you is no longer required for the purposes for which it was collected or for which it was processed.
• You revoke your consent, on which processing in accordance with Article 6 Para. 1 lit. a or Article 9 Para.2 lit. a GDPR was based, and there is no other legal foundation for the processing.
• You submit an objection to the processing in accordance with Article 21 Para. 1 GDPR and there are no justified reasons for the processing with a higher priority, or you submit an objection to the processing in accordance with Article 21 Para. 2 GDPR.
• The personal data relating to you was processed unlawfully.
• The deletion of the personal data relating to you is required to fulfil a legal obliga­tion in accordance with European Union law or the law of the member states, which laws the responsible party is subject to.
• The personal data relating to you was collected in relation to services offered by the information society in accordance with Article 8 Para. 1 GDPR.

1. b) Information to third parties

If the responsible party has made the personal data relating to you public and if he/she is obliged to delete this data in accordance with Article 17 Para. 1 GDPR, then he/she shall take reasonable measures including technical ones – whereby ac­count shall be taken of the available technology and the implementation costs – to inform the responsible parties for the data processing which process the personal data that you as data subject have demanded from them the deletion of all links to this personal data or of copies or replicates of these.

1. c) Exceptions

The right to erasure does not exist in so far as the processing is necessary for

• the exercising of the right of free expression of opinion and to information;
• for the fulfilment of a legal obligation, which requires the processing in accord­ance with the law of the European Union or the law of the member states, which laws the responsible party is subject to, or for the carrying out of a task, which lies in the public interest or which is carried out in the exercising of pub­lic authority, which authority was transferred to the responsible party;
• for reasons of public interest in the field of public health in accordance with Arti­cle 9 Para. 2 lit. h and i as well as Article 9 Para. 3 GDPR;
• for archiving purposes, scientific or historical research purposes lying in the pub­lic interest or for statistical purposes in accordance with Article 89 Para. 1 GDPR, in so far as the right named in section a) probably makes achieving of the objectives of the processing impossible or impairs it seriously, or
• for the advancing, exercising or defending of legal claims.

Right to information

If you have advanced the right to the correcting, erasure or restricting of the pro­cessing to the responsible party, then the latter is obliged to inform all recipients, to which the personal data relating to you was disclosed, of this correction or erasure of the data or of the restricting of the processing, unless this proves itself to be impossi­ble or linked with unreasonable expenditure.

You are entitled to the right vis à vis the responsible party to be informed about these recipients.

Right to data portability

You have the right to receive the personal data relating to yourself, which you made available to the responsible party, in a structured, conventional and machine-reada­ble format. In addition, you have the right to transmit this data to another responsible party without hindrance by the responsible party to whom the personal data was made available, in so far as

• the processing is based on consent in accordance with Article 6 Para. 1 lit. a GDPR or Article 9 Para. 2 lit. a GDPR or on a contract in accordance with Arti­cle 6 Para. 1 lit. b GDPR and
• the processing is carried out by means of automated processes.

In exercising this right, you have in addition the right to obtain the personal data re­lating to you is transferred directly from one responsible party to another responsible party in so far as this is technically possible. The freedoms and rights of other per­sons may not be impaired thereby.

The right to data portability applies not for the processing of personal data, which is necessary for the carrying out of a task, which lies in the public interest or in the ex­ercising of public authority and which task was transferred to the responsible party.

Right to object

For reasons which result from your particular situation you have the right to advance at any time objection to the processing of the personal data relating to you, which processing is carried out on the basis of Article 6 Para. 1 lit. e or f GDPR. This right also applies to the profiling based on these provisions.

The responsible party shall then no longer process the personal data relating to you, unless he/she can prove compelling reasons worthy of protection, which reasons overweigh your interests, rights and freedoms or where the processing serves the advancing, exercising or defending of legal claims.

If the personal data relating to you is processed for the purpose of direct advertising, then you have the right to advance at any time objection to the processing of the per­sonal data relating to you for purposes of such advertising. This applies also to the profiling in so far as this is carried out in connection with such direct advertising.

If you object to the processing for purposes of direct advertising, then the personal data relating to you will no longer be processed for these purposes.

You have the opportunity – in connection with the use of services of the information society and regardless of directive 2002/58/EC – to exercise your right of objection with the aid of automated processes in which technical specifications are used.

You have also the right for reasons which result from your particular situation to ad­vance at any time objection to the processing of the personal data relating to you which processing is carried out for scientific or historic purposes or for statistical pur­poses according to Article 89 Para. 1 GDPR.

Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your consent at any time. On withdrawal we immedi­ately will delete your personal data and no longer process it. The legality of the pro­cessing carried out prior to your withdrawal on the base of your given consent is not affected by you withdrawal.

Right to complain at a supervisory authority

Regardless of another regulatory or judicial remedy, you are entitled to the right to lodge a complaint at a supervisory authority and here in particular at a supervisory authority in the member state of your place of residence, of your place of work or of the place where the suspected infringement took place when you are of the opinion that the processing of the personal data relating to you infringes the GDPR.

In this case the supervisory authority, at which the complaint was lodged, shall inform the complainant on the status and the results of the complaint including the possibility of a judicial remedy in accordance with Article 78 GDPR.

I. Name and address of the responsible party

The responsible party in the sense of the General Data Protection Regulation (GDPR) and of other national data protection regulations in force in the member states of European Union as well as of other regulations with a legal data-protecting character is the

CTP Advanced Materials GmbH

Stahlstrasse 60

D-65428 Ruesselsheim, Germany

Fon: +49 6142 91 85 0

Fax: +49 6142 91 85 55

Mail: ctp@ctpgmbh.de

 

The processing of some data takes place in joint responsibility according to Art. 26 GDPR with:

Aditya Birla Group
Aditya Birla Centre
S K Ahire Marg, Worli

Mumbai 400030, India

II. Name and address of the data protection officer

The data protection officer of the responsible party is:

daschug GmbH

Robert-Bosch-Strasse 7

64293 Darmstadt, Germany

Fon +49 6151 6673 440

Mail: datenschutz@ctpgmbh.de

III.    General information on data processing

Range of the processing of personal data

Generally, we collect and process personal data of users only as long as this is re­quired for providing a properly functioning website as well as delivering our contents and services. The collection and use of personal data of our users on a regular basis only takes place after consent of the data subject. An exception applies to those cases where obtaining consent prior to use is not possible based on matters of law and fact and the processing of data is allowed by legal regulations.

Legal fundamentals for the processing of personal data

In so far as we obtain the consent of the data subject for the processing of personal data Article 6 Para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the foundation for the processing of personal data.

Article 6 Para. 1 lit. b GDPR serves as the legal foundation for the processing of per­sonal data which is necessary for the fulfilment of a contract if the data subject is party to this contract. This applies also to the processing processes which are neces­sary for the execution of pre-contractual measures.

Article 6 Para. 1 lit. c GDPR serves as the legal foundation in so far as processing of personal data is necessary for the fulfilment of a legal obligation applying to our en­terprise.

Article 6 Para. 1 lit. d GDPR serves as the legal foundation for the situation that vital interests of the data subject or another natural person make the processing of per­sonal data necessary.

Article 6 Para. 1 lit. f GDPR serves as the legal foundation for the situation that pro­cessing is necessary to ensure a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not exceed the first named interest.

Deletion of data and duration of storage

The personal data of the data subject are deleted or disabled as soon as the purpose for which the data was stored lapses. In addition, storage can take place if this was stipulated by the European or national legislatures in orders, laws or other regulations in accordance with European Union law to which the responsible party is subject. Disabling or deletion of the data is also carried out if a storage period prescribed by the standards as named expires unless there is a necessity for the continued storage of the data for the concluding or fulfilling of a contract.

IV. Making available of our website and creation of logfiles

Description and range of data processing

On every visit on our website our system automatically collects data and information of the computer system calling. The following data is collected:

• Information on the type of browser and its version used
• The operating system of the user
• The internet-service-provider of the user
• The IP-address of the user
• Date and time of the access
• The website, from which an accessing system reaches our website
• Websites, which are accessed by the computer system of the user via our web­site

This data is also stored in the logfiles of our system. However, IP-addresses of the users or other data, which would allow the assignment of the data to a particular user, are not stored. Also, this data is not stored together with other personal data of the user.

Legal foundations for the data processing

Article 6 Para. 1 lit. f GDPR is the legal foundation for the temporary storage of data and logfiles.

Purpose of data processing

The temporary storage of the IP-address by the system is necessary to enable the delivery of the website to the computer of the user. For achieving this the IP-address of the user must remain stored for the duration of the session.

The storage in logfiles occurs to enable the proper functioning of the website. Fur­thermore, this data serves to optimize the website and to enable the security of our IT-systems. An analysis of the data for marketing purposes does not happen.

The legal foundation is our legitimate interest in data processing according to Article 6 Para.1 lit. f GDPR.

Duration of storage

The data is deleted or disabled as soon as the purpose for which the data was stored lapses. This is the case when the particular session has ended in situations where the data is collected for making the website available.

This is the case at the latest seven days after the time when the data was stored in log files. A storage exceeding this period is possible. In this case the IP-addresses of the users are deleted or distorted so that an assignment of the client calling in is no longer possible.

Possibility for objection and deletion

The collection of data for the making available of the website and the storage of data in logfiles is compulsory for operating the website. Thus, there is no right to object by the user.

Use of cookies

1. a) Description and range of data processing

Our website uses cookies. In general, cookies are small text files which are stored on your computer and which store certain settings and data for exchange with the online offer from us via your browser. If a user calls in a website, a cookie can be stored in the operating system of the user’s computer. This cookie usually contains a unique string of characters, which allows an unambiguous identification of the browser when calling in the website again.

We are using cookies to improve our online offer. Some elements of our website re­quire that a browser calling in can be identified after a changeover.

The following data is stored and transmitted:

• Language settings
• Log-In-information

The data of the user collected in this way is pseudonymized by technical processes. Accordingly, assignment of the data to the user calling in is no longer possible. The data collected is not stored together with other personal data of the user.

When our website is called, the users are informed by means of an information ban­ner about the use of cookies for analytical purposes and are referred to this data protection information. In this connection reference is given to how storage of cookies can be prevented by the browser settings.

In this connection follows a reference to how that storing of cookies can be prevented by appropriate browser settings.

1. b) Legal foundation of data processing

The legal foundation for the processing of personal data by using cookies is Article 6 Para. 1 lit. f GDPR.

1. c) Purpose of data processing

The purpose behind the use of strictly technically essential cookies is to facilitate the use of the website for the user. Certain functions of our website cannot be offered without the use of cookies. For these functions it is necessary that the browser is recognized even after a page change.

We need cookies for the following application:

• Adoption of language settings

Analysis cookies are used for the purpose of improving the quality of our website and its content. By the analysis cookies we learn how the website is used and thus are able to continually optimize our offer. These purposes also include our legitimate in­terest in the processing of the personal data in accordance with Article 6 Para. 1 lit. f GDPR.

1. d) Duration of storage, possibilities for objection and elimination

Cookies are stored on the user’s computer and are transmitted from this to our web­site. Accordingly, you as user have full control over the use of cookies. By a change of the settings of your internet browser you are able to deactivate or restrict the transmissions of cookies. Cookies already being stored can be deleted at any time. This can also be carried out automatically. However, if cookies for our website are deactivated, it may no longer be possible to fully use all functions of the website. The transmission of flash cookies cannot be prevented by the browser settings but re­quires changes of the settings of the flash player.

 

VI. E-Mail-contact

Description and range of data processing

Contacting us is possible by using the e-mail address provided. In this case personal data of the user transmitted with the e-mail is stored. In this connection no data is passed on to third parties. The data is used exclusively for the processing of the con­versation and will immediately be deleted if it is no longer needed.

Legal foundation of data processing

Legal foundation for the processing of the data after application of the user for a newsletter in case of consent of the user is Article 6 Para. 1 lit. a GDPR.

Legal foundation for the processing of data in case of the transmission of an e-mail is Article 6 Para. 1 lit. f GDPR. Is the e-mail contact directed at closing a contract addi­tional legal foundation for the processing of data is Article 6 Para. 1 lit. b GDPR.

Purpose of data processing

The processing of the personal data from the input mask/e-mail serves us solely for the processing of the contact. In case of contacting by e-mail this is also the neces­sary legitimate interest in the processing of the data.

Other personal data processed during the sending-off process serves to prevent abuse of the contact form and to ensure the security of our IT systems.

Duration of storage

The data is deleted as soon as it is no longer needed for achieving the purpose of their collection. This is the case for the personal data from the input mask of the contact form and those which are sent by e-mail when the particular conversation with the user has ended.

The conversation has ended when the circumstances allow the conclusion that the matter in question has been finally clarified.

The additional personal data collected during the sending-off process is deleted the latest after a period of seven days.

Possibilities for objection and elimination

At any time the user has the opportunity to withdraw his consent on the processing of personal data. If the user is contacting us by e-mail, he can object to the storage of his personal data at any time. In this case the conversation cannot be continued.

VII.       Rights of the data subject

If your personal data is processed, then you are the data subject in the sense of the GDPR and you are entitled to the following rights vis à vis the responsible party:

Right of access by the data subject

You can demand from the responsible party confirmation as to whether personal data that relates to you has been processed by us. If such processing has taken place, you can demand information from the responsible party on the following:

• The purposes for which the personal data is processed;
• The categories of personal data which are processed;
• The recipients or, resp., the categories of recipients to which the personal data relating to you has been disclosed or will be disclosed;
• The planned duration of the storage of the personal data relating to you or, if dis­tinct statements on this are not possible, the criteria for the laying down of duration of storage;
• The existence of a right to correction or deletion of the personal data relating to yourself, of a right to a restriction of the processing by the responsible party or of a right of objection to this processing;
• The existence of a right of appeal at a supervisory authority;
• All available information on the origin of the data if the personal data was not collected at the data subject;
• The existence of an automated decision-finding process including profiling in ac­cordance with Article 22 Para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and its scope and the effects strived for of such a processing for the data subject in question.

You are entitled to the right to demand information on whether the personal data re­lating to yourself is transmitted to a third country or an international organization. In this connection you can demand to be instructed on the suitable guarantees in ac­cordance with Article 46 GDPR in connection with the transmission.

Right to correction

You have a right to correction and/or completion vis à vis the responsible party in so far as the personal data as processed and which relates to yourself is incorrect or incomplete. The responsible party has to carry out the correction without delay.

Right to restrict the processing of personal data

Provided the following preconditions are met you can demand restriction of the pro­cessing of the personal data relating to you:

• if you dispute the correctness of the personal data relating to yourself for a pe­riod which makes it possible for the responsible party to check the correctness of the personal data;
• if the processing is unlawful and you reject deletion of the personal data and de­mand restriction of the use of the personal data instead;
• if the responsible party no longer needs the personal data for purposes of the processing but you need the data for the advancing, exercising or defending of legal claims, or
• if you have advanced objection to the processing in accordance with Article 21 Para. 1 GDPR but it has not yet been established whether the justified rea­sons of the responsible party outweigh your reasons.

If the processing of the personal data relating to yourself has been restricted, then this data – apart from the storage of it – may only be processed with your consent or for the assertion, exercising or defending of legal claims or for the protection of the rights of another natural person or legal entity or for reasons relating to an important public interest of the European Union or of a member state.

If the restriction of the processing has been restricted in accordance with the afore-mentioned preconditions, then you will be informed by the responsible party before the restriction is cancelled.

Right to erasure

1. a) Deletion obligation

You can demand by the responsible party that the personal data relating to yourself is deleted without delay and the responsible party is then obliged to delete this data without delay in so far as one of the following reasons applies:

• The personal data relating to you is no longer required for the purposes for which it was collected or for which it was processed.
• You revoke your consent, on which processing in accordance with Article 6 Para. 1 lit. a or Article 9 Para.2 lit. a GDPR was based, and there is no other legal foundation for the processing.
• You submit an objection to the processing in accordance with Article 21 Para. 1 GDPR and there are no justified reasons for the processing with a higher priority, or you submit an objection to the processing in accordance with Article 21 Para. 2 GDPR.
• The personal data relating to you was processed unlawfully.
• The deletion of the personal data relating to you is required to fulfil a legal obliga­tion in accordance with European Union law or the law of the member states, which laws the responsible party is subject to.
• The personal data relating to you was collected in relation to services offered by the information society in accordance with Article 8 Para. 1 GDPR.

1. b) Information to third parties

If the responsible party has made the personal data relating to you public and if he/she is obliged to delete this data in accordance with Article 17 Para. 1 GDPR, then he/she shall take reasonable measures including technical ones – whereby ac­count shall be taken of the available technology and the implementation costs – to inform the responsible parties for the data processing which process the personal data that you as data subject have demanded from them the deletion of all links to this personal data or of copies or replicates of these.

1. c) Exceptions

The right to erasure does not exist in so far as the processing is necessary for

• the exercising of the right of free expression of opinion and to information;
• for the fulfilment of a legal obligation, which requires the processing in accord­ance with the law of the European Union or the law of the member states, which laws the responsible party is subject to, or for the carrying out of a task, which lies in the public interest or which is carried out in the exercising of pub­lic authority, which authority was transferred to the responsible party;
• for reasons of public interest in the field of public health in accordance with Arti­cle 9 Para. 2 lit. h and i as well as Article 9 Para. 3 GDPR;
• for archiving purposes, scientific or historical research purposes lying in the pub­lic interest or for statistical purposes in accordance with Article 89 Para. 1 GDPR, in so far as the right named in section a) probably makes achieving of the objectives of the processing impossible or impairs it seriously, or
• for the advancing, exercising or defending of legal claims.

Right to information

If you have advanced the right to the correcting, erasure or restricting of the pro­cessing to the responsible party, then the latter is obliged to inform all recipients, to which the personal data relating to you was disclosed, of this correction or erasure of the data or of the restricting of the processing, unless this proves itself to be impossi­ble or linked with unreasonable expenditure.

You are entitled to the right vis à vis the responsible party to be informed about these recipients.

Right to data portability

You have the right to receive the personal data relating to yourself, which you made available to the responsible party, in a structured, conventional and machine-reada­ble format. In addition, you have the right to transmit this data to another responsible party without hindrance by the responsible party to whom the personal data was made available, in so far as

• the processing is based on consent in accordance with Article 6 Para. 1 lit. a GDPR or Article 9 Para. 2 lit. a GDPR or on a contract in accordance with Arti­cle 6 Para. 1 lit. b GDPR and
• the processing is carried out by means of automated processes.

In exercising this right, you have in addition the right to obtain the personal data re­lating to you is transferred directly from one responsible party to another responsible party in so far as this is technically possible. The freedoms and rights of other per­sons may not be impaired thereby.

The right to data portability applies not for the processing of personal data, which is necessary for the carrying out of a task, which lies in the public interest or in the ex­ercising of public authority and which task was transferred to the responsible party.

Right to object

For reasons which result from your particular situation you have the right to advance at any time objection to the processing of the personal data relating to you, which processing is carried out on the basis of Article 6 Para. 1 lit. e or f GDPR. This right also applies to the profiling based on these provisions.

The responsible party shall then no longer process the personal data relating to you, unless he/she can prove compelling reasons worthy of protection, which reasons overweigh your interests, rights and freedoms or where the processing serves the advancing, exercising or defending of legal claims.

If the personal data relating to you is processed for the purpose of direct advertising, then you have the right to advance at any time objection to the processing of the per­sonal data relating to you for purposes of such advertising. This applies also to the profiling in so far as this is carried out in connection with such direct advertising.

If you object to the processing for purposes of direct advertising, then the personal data relating to you will no longer be processed for these purposes.

You have the opportunity – in connection with the use of services of the information society and regardless of directive 2002/58/EC – to exercise your right of objection with the aid of automated processes in which technical specifications are used.

You have also the right for reasons which result from your particular situation to ad­vance at any time objection to the processing of the personal data relating to you which processing is carried out for scientific or historic purposes or for statistical pur­poses according to Article 89 Para. 1 GDPR.

Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your consent at any time. On withdrawal we immedi­ately will delete your personal data and no longer process it. The legality of the pro­cessing carried out prior to your withdrawal on the base of your given consent is not affected by you withdrawal.

Right to complain at a supervisory authority

Regardless of another regulatory or judicial remedy, you are entitled to the right to lodge a complaint at a supervisory authority and here in particular at a supervisory authority in the member state of your place of residence, of your place of work or of the place where the suspected infringement took place when you are of the opinion that the processing of the personal data relating to you infringes the GDPR.

In this case the supervisory authority, at which the complaint was lodged, shall inform the complainant on the status and the results of the complaint including the possibility of a judicial remedy in accordance with Article 78 GDPR.

I. Name and address of the responsible party

The responsible party in the sense of the General Data Protection Regulation (GDPR) and of other national data protection regulations in force in the member states of European Union as well as of other regulations with a legal data-protecting character is the

CTP Advanced Materials GmbH

Stahlstrasse 60

D-65428 Ruesselsheim, Germany

Fon: +49 6142 91 85 0

Fax: +49 6142 91 85 55

Mail: ctp@ctpgmbh.de

 

The processing of some data takes place in joint responsibility according to Art. 26 GDPR with:

Aditya Birla Group
Aditya Birla Centre
S K Ahire Marg, Worli

Mumbai 400030, India

II. Name and address of the data protection officer

The data protection officer of the responsible party is:

daschug GmbH

Robert-Bosch-Strasse 7

64293 Darmstadt, Germany

Fon +49 6151 6673 440

Mail: datenschutz@ctpgmbh.de

III.    General information on data processing

Range of the processing of personal data

Generally, we collect and process personal data of users only as long as this is re­quired for providing a properly functioning website as well as delivering our contents and services. The collection and use of personal data of our users on a regular basis only takes place after consent of the data subject. An exception applies to those cases where obtaining consent prior to use is not possible based on matters of law and fact and the processing of data is allowed by legal regulations.

Legal fundamentals for the processing of personal data

In so far as we obtain the consent of the data subject for the processing of personal data Article 6 Para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the foundation for the processing of personal data.

Article 6 Para. 1 lit. b GDPR serves as the legal foundation for the processing of per­sonal data which is necessary for the fulfilment of a contract if the data subject is party to this contract. This applies also to the processing processes which are neces­sary for the execution of pre-contractual measures.

Article 6 Para. 1 lit. c GDPR serves as the legal foundation in so far as processing of personal data is necessary for the fulfilment of a legal obligation applying to our en­terprise.

Article 6 Para. 1 lit. d GDPR serves as the legal foundation for the situation that vital interests of the data subject or another natural person make the processing of per­sonal data necessary.

Article 6 Para. 1 lit. f GDPR serves as the legal foundation for the situation that pro­cessing is necessary to ensure a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not exceed the first named interest.

Deletion of data and duration of storage

The personal data of the data subject are deleted or disabled as soon as the purpose for which the data was stored lapses. In addition, storage can take place if this was stipulated by the European or national legislatures in orders, laws or other regulations in accordance with European Union law to which the responsible party is subject. Disabling or deletion of the data is also carried out if a storage period prescribed by the standards as named expires unless there is a necessity for the continued storage of the data for the concluding or fulfilling of a contract.

IV. Making available of our website and creation of logfiles

Description and range of data processing

On every visit on our website our system automatically collects data and information of the computer system calling. The following data is collected:

• Information on the type of browser and its version used
• The operating system of the user
• The internet-service-provider of the user
• The IP-address of the user
• Date and time of the access
• The website, from which an accessing system reaches our website
• Websites, which are accessed by the computer system of the user via our web­site

This data is also stored in the logfiles of our system. However, IP-addresses of the users or other data, which would allow the assignment of the data to a particular user, are not stored. Also, this data is not stored together with other personal data of the user.

Legal foundations for the data processing

Article 6 Para. 1 lit. f GDPR is the legal foundation for the temporary storage of data and logfiles.

Purpose of data processing

The temporary storage of the IP-address by the system is necessary to enable the delivery of the website to the computer of the user. For achieving this the IP-address of the user must remain stored for the duration of the session.

The storage in logfiles occurs to enable the proper functioning of the website. Fur­thermore, this data serves to optimize the website and to enable the security of our IT-systems. An analysis of the data for marketing purposes does not happen.

The legal foundation is our legitimate interest in data processing according to Article 6 Para.1 lit. f GDPR.

Duration of storage

The data is deleted or disabled as soon as the purpose for which the data was stored lapses. This is the case when the particular session has ended in situations where the data is collected for making the website available.

This is the case at the latest seven days after the time when the data was stored in log files. A storage exceeding this period is possible. In this case the IP-addresses of the users are deleted or distorted so that an assignment of the client calling in is no longer possible.

Possibility for objection and deletion

The collection of data for the making available of the website and the storage of data in logfiles is compulsory for operating the website. Thus, there is no right to object by the user.

Use of cookies

1. a) Description and range of data processing

Our website uses cookies. In general, cookies are small text files which are stored on your computer and which store certain settings and data for exchange with the online offer from us via your browser. If a user calls in a website, a cookie can be stored in the operating system of the user’s computer. This cookie usually contains a unique string of characters, which allows an unambiguous identification of the browser when calling in the website again.

We are using cookies to improve our online offer. Some elements of our website re­quire that a browser calling in can be identified after a changeover.

The following data is stored and transmitted:

• Language settings
• Log-In-information

The data of the user collected in this way is pseudonymized by technical processes. Accordingly, assignment of the data to the user calling in is no longer possible. The data collected is not stored together with other personal data of the user.

When our website is called, the users are informed by means of an information ban­ner about the use of cookies for analytical purposes and are referred to this data protection information. In this connection reference is given to how storage of cookies can be prevented by the browser settings.

In this connection follows a reference to how that storing of cookies can be prevented by appropriate browser settings.

1. b) Legal foundation of data processing

The legal foundation for the processing of personal data by using cookies is Article 6 Para. 1 lit. f GDPR.

1. c) Purpose of data processing

The purpose behind the use of strictly technically essential cookies is to facilitate the use of the website for the user. Certain functions of our website cannot be offered without the use of cookies. For these functions it is necessary that the browser is recognized even after a page change.

We need cookies for the following application:

• Adoption of language settings

Analysis cookies are used for the purpose of improving the quality of our website and its content. By the analysis cookies we learn how the website is used and thus are able to continually optimize our offer. These purposes also include our legitimate in­terest in the processing of the personal data in accordance with Article 6 Para. 1 lit. f GDPR.

1. d) Duration of storage, possibilities for objection and elimination

Cookies are stored on the user’s computer and are transmitted from this to our web­site. Accordingly, you as user have full control over the use of cookies. By a change of the settings of your internet browser you are able to deactivate or restrict the transmissions of cookies. Cookies already being stored can be deleted at any time. This can also be carried out automatically. However, if cookies for our website are deactivated, it may no longer be possible to fully use all functions of the website. The transmission of flash cookies cannot be prevented by the browser settings but re­quires changes of the settings of the flash player.

 

VI. E-Mail-contact

Description and range of data processing

Contacting us is possible by using the e-mail address provided. In this case personal data of the user transmitted with the e-mail is stored. In this connection no data is passed on to third parties. The data is used exclusively for the processing of the con­versation and will immediately be deleted if it is no longer needed.

Legal foundation of data processing

Legal foundation for the processing of the data after application of the user for a newsletter in case of consent of the user is Article 6 Para. 1 lit. a GDPR.

Legal foundation for the processing of data in case of the transmission of an e-mail is Article 6 Para. 1 lit. f GDPR. Is the e-mail contact directed at closing a contract addi­tional legal foundation for the processing of data is Article 6 Para. 1 lit. b GDPR.

Purpose of data processing

The processing of the personal data from the input mask/e-mail serves us solely for the processing of the contact. In case of contacting by e-mail this is also the neces­sary legitimate interest in the processing of the data.

Other personal data processed during the sending-off process serves to prevent abuse of the contact form and to ensure the security of our IT systems.

Duration of storage

The data is deleted as soon as it is no longer needed for achieving the purpose of their collection. This is the case for the personal data from the input mask of the contact form and those which are sent by e-mail when the particular conversation with the user has ended.

The conversation has ended when the circumstances allow the conclusion that the matter in question has been finally clarified.

The additional personal data collected during the sending-off process is deleted the latest after a period of seven days.

Possibilities for objection and elimination

At any time the user has the opportunity to withdraw his consent on the processing of personal data. If the user is contacting us by e-mail, he can object to the storage of his personal data at any time. In this case the conversation cannot be continued.

VII.       Rights of the data subject

If your personal data is processed, then you are the data subject in the sense of the GDPR and you are entitled to the following rights vis à vis the responsible party:

Right of access by the data subject

You can demand from the responsible party confirmation as to whether personal data that relates to you has been processed by us. If such processing has taken place, you can demand information from the responsible party on the following:

• The purposes for which the personal data is processed;
• The categories of personal data which are processed;
• The recipients or, resp., the categories of recipients to which the personal data relating to you has been disclosed or will be disclosed;
• The planned duration of the storage of the personal data relating to you or, if dis­tinct statements on this are not possible, the criteria for the laying down of duration of storage;
• The existence of a right to correction or deletion of the personal data relating to yourself, of a right to a restriction of the processing by the responsible party or of a right of objection to this processing;
• The existence of a right of appeal at a supervisory authority;
• All available information on the origin of the data if the personal data was not collected at the data subject;
• The existence of an automated decision-finding process including profiling in ac­cordance with Article 22 Para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and its scope and the effects strived for of such a processing for the data subject in question.

You are entitled to the right to demand information on whether the personal data re­lating to yourself is transmitted to a third country or an international organization. In this connection you can demand to be instructed on the suitable guarantees in ac­cordance with Article 46 GDPR in connection with the transmission.

Right to correction

You have a right to correction and/or completion vis à vis the responsible party in so far as the personal data as processed and which relates to yourself is incorrect or incomplete. The responsible party has to carry out the correction without delay.

Right to restrict the processing of personal data

Provided the following preconditions are met you can demand restriction of the pro­cessing of the personal data relating to you:

• if you dispute the correctness of the personal data relating to yourself for a pe­riod which makes it possible for the responsible party to check the correctness of the personal data;
• if the processing is unlawful and you reject deletion of the personal data and de­mand restriction of the use of the personal data instead;
• if the responsible party no longer needs the personal data for purposes of the processing but you need the data for the advancing, exercising or defending of legal claims, or
• if you have advanced objection to the processing in accordance with Article 21 Para. 1 GDPR but it has not yet been established whether the justified rea­sons of the responsible party outweigh your reasons.

If the processing of the personal data relating to yourself has been restricted, then this data – apart from the storage of it – may only be processed with your consent or for the assertion, exercising or defending of legal claims or for the protection of the rights of another natural person or legal entity or for reasons relating to an important public interest of the European Union or of a member state.

If the restriction of the processing has been restricted in accordance with the afore-mentioned preconditions, then you will be informed by the responsible party before the restriction is cancelled.

Right to erasure

1. a) Deletion obligation

You can demand by the responsible party that the personal data relating to yourself is deleted without delay and the responsible party is then obliged to delete this data without delay in so far as one of the following reasons applies:

• The personal data relating to you is no longer required for the purposes for which it was collected or for which it was processed.
• You revoke your consent, on which processing in accordance with Article 6 Para. 1 lit. a or Article 9 Para.2 lit. a GDPR was based, and there is no other legal foundation for the processing.
• You submit an objection to the processing in accordance with Article 21 Para. 1 GDPR and there are no justified reasons for the processing with a higher priority, or you submit an objection to the processing in accordance with Article 21 Para. 2 GDPR.
• The personal data relating to you was processed unlawfully.
• The deletion of the personal data relating to you is required to fulfil a legal obliga­tion in accordance with European Union law or the law of the member states, which laws the responsible party is subject to.
• The personal data relating to you was collected in relation to services offered by the information society in accordance with Article 8 Para. 1 GDPR.

1. b) Information to third parties

If the responsible party has made the personal data relating to you public and if he/she is obliged to delete this data in accordance with Article 17 Para. 1 GDPR, then he/she shall take reasonable measures including technical ones – whereby ac­count shall be taken of the available technology and the implementation costs – to inform the responsible parties for the data processing which process the personal data that you as data subject have demanded from them the deletion of all links to this personal data or of copies or replicates of these.

1. c) Exceptions

The right to erasure does not exist in so far as the processing is necessary for

• the exercising of the right of free expression of opinion and to information;
• for the fulfilment of a legal obligation, which requires the processing in accord­ance with the law of the European Union or the law of the member states, which laws the responsible party is subject to, or for the carrying out of a task, which lies in the public interest or which is carried out in the exercising of pub­lic authority, which authority was transferred to the responsible party;
• for reasons of public interest in the field of public health in accordance with Arti­cle 9 Para. 2 lit. h and i as well as Article 9 Para. 3 GDPR;
• for archiving purposes, scientific or historical research purposes lying in the pub­lic interest or for statistical purposes in accordance with Article 89 Para. 1 GDPR, in so far as the right named in section a) probably makes achieving of the objectives of the processing impossible or impairs it seriously, or
• for the advancing, exercising or defending of legal claims.

Right to information

If you have advanced the right to the correcting, erasure or restricting of the pro­cessing to the responsible party, then the latter is obliged to inform all recipients, to which the personal data relating to you was disclosed, of this correction or erasure of the data or of the restricting of the processing, unless this proves itself to be impossi­ble or linked with unreasonable expenditure.

You are entitled to the right vis à vis the responsible party to be informed about these recipients.

Right to data portability

You have the right to receive the personal data relating to yourself, which you made available to the responsible party, in a structured, conventional and machine-reada­ble format. In addition, you have the right to transmit this data to another responsible party without hindrance by the responsible party to whom the personal data was made available, in so far as

• the processing is based on consent in accordance with Article 6 Para. 1 lit. a GDPR or Article 9 Para. 2 lit. a GDPR or on a contract in accordance with Arti­cle 6 Para. 1 lit. b GDPR and
• the processing is carried out by means of automated processes.

In exercising this right, you have in addition the right to obtain the personal data re­lating to you is transferred directly from one responsible party to another responsible party in so far as this is technically possible. The freedoms and rights of other per­sons may not be impaired thereby.

The right to data portability applies not for the processing of personal data, which is necessary for the carrying out of a task, which lies in the public interest or in the ex­ercising of public authority and which task was transferred to the responsible party.

Right to object

For reasons which result from your particular situation you have the right to advance at any time objection to the processing of the personal data relating to you, which processing is carried out on the basis of Article 6 Para. 1 lit. e or f GDPR. This right also applies to the profiling based on these provisions.

The responsible party shall then no longer process the personal data relating to you, unless he/she can prove compelling reasons worthy of protection, which reasons overweigh your interests, rights and freedoms or where the processing serves the advancing, exercising or defending of legal claims.

If the personal data relating to you is processed for the purpose of direct advertising, then you have the right to advance at any time objection to the processing of the per­sonal data relating to you for purposes of such advertising. This applies also to the profiling in so far as this is carried out in connection with such direct advertising.

If you object to the processing for purposes of direct advertising, then the personal data relating to you will no longer be processed for these purposes.

You have the opportunity – in connection with the use of services of the information society and regardless of directive 2002/58/EC – to exercise your right of objection with the aid of automated processes in which technical specifications are used.

You have also the right for reasons which result from your particular situation to ad­vance at any time objection to the processing of the personal data relating to you which processing is carried out for scientific or historic purposes or for statistical pur­poses according to Article 89 Para. 1 GDPR.

Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your consent at any time. On withdrawal we immedi­ately will delete your personal data and no longer process it. The legality of the pro­cessing carried out prior to your withdrawal on the base of your given consent is not affected by you withdrawal.

Right to complain at a supervisory authority

Regardless of another regulatory or judicial remedy, you are entitled to the right to lodge a complaint at a supervisory authority and here in particular at a supervisory authority in the member state of your place of residence, of your place of work or of the place where the suspected infringement took place when you are of the opinion that the processing of the personal data relating to you infringes the GDPR.

In this case the supervisory authority, at which the complaint was lodged, shall inform the complainant on the status and the results of the complaint including the possibility of a judicial remedy in accordance with Article 78 GDPR.

I. Name and address of the responsible party

The responsible party in the sense of the General Data Protection Regulation (GDPR) and of other national data protection regulations in force in the member states of European Union as well as of other regulations with a legal data-protecting character is the

CTP Advanced Materials GmbH

Stahlstrasse 60

D-65428 Ruesselsheim, Germany

Fon: +49 6142 91 85 0

Fax: +49 6142 91 85 55

Mail: ctp@ctpgmbh.de

 

The processing of some data takes place in joint responsibility according to Art. 26 GDPR with:

Aditya Birla Group
Aditya Birla Centre
S K Ahire Marg, Worli

Mumbai 400030, India

II. Name and address of the data protection officer

The data protection officer of the responsible party is:

daschug GmbH

Robert-Bosch-Strasse 7

64293 Darmstadt, Germany

Fon +49 6151 6673 440

Mail: datenschutz@ctpgmbh.de

III.    General information on data processing

Range of the processing of personal data

Generally, we collect and process personal data of users only as long as this is re­quired for providing a properly functioning website as well as delivering our contents and services. The collection and use of personal data of our users on a regular basis only takes place after consent of the data subject. An exception applies to those cases where obtaining consent prior to use is not possible based on matters of law and fact and the processing of data is allowed by legal regulations.

Legal fundamentals for the processing of personal data

In so far as we obtain the consent of the data subject for the processing of personal data Article 6 Para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the foundation for the processing of personal data.

Article 6 Para. 1 lit. b GDPR serves as the legal foundation for the processing of per­sonal data which is necessary for the fulfilment of a contract if the data subject is party to this contract. This applies also to the processing processes which are neces­sary for the execution of pre-contractual measures.

Article 6 Para. 1 lit. c GDPR serves as the legal foundation in so far as processing of personal data is necessary for the fulfilment of a legal obligation applying to our en­terprise.

Article 6 Para. 1 lit. d GDPR serves as the legal foundation for the situation that vital interests of the data subject or another natural person make the processing of per­sonal data necessary.

Article 6 Para. 1 lit. f GDPR serves as the legal foundation for the situation that pro­cessing is necessary to ensure a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not exceed the first named interest.

Deletion of data and duration of storage

The personal data of the data subject are deleted or disabled as soon as the purpose for which the data was stored lapses. In addition, storage can take place if this was stipulated by the European or national legislatures in orders, laws or other regulations in accordance with European Union law to which the responsible party is subject. Disabling or deletion of the data is also carried out if a storage period prescribed by the standards as named expires unless there is a necessity for the continued storage of the data for the concluding or fulfilling of a contract.

IV. Making available of our website and creation of logfiles

Description and range of data processing

On every visit on our website our system automatically collects data and information of the computer system calling. The following data is collected:

• Information on the type of browser and its version used
• The operating system of the user
• The internet-service-provider of the user
• The IP-address of the user
• Date and time of the access
• The website, from which an accessing system reaches our website
• Websites, which are accessed by the computer system of the user via our web­site

This data is also stored in the logfiles of our system. However, IP-addresses of the users or other data, which would allow the assignment of the data to a particular user, are not stored. Also, this data is not stored together with other personal data of the user.

Legal foundations for the data processing

Article 6 Para. 1 lit. f GDPR is the legal foundation for the temporary storage of data and logfiles.

Purpose of data processing

The temporary storage of the IP-address by the system is necessary to enable the delivery of the website to the computer of the user. For achieving this the IP-address of the user must remain stored for the duration of the session.

The storage in logfiles occurs to enable the proper functioning of the website. Fur­thermore, this data serves to optimize the website and to enable the security of our IT-systems. An analysis of the data for marketing purposes does not happen.

The legal foundation is our legitimate interest in data processing according to Article 6 Para.1 lit. f GDPR.

Duration of storage

The data is deleted or disabled as soon as the purpose for which the data was stored lapses. This is the case when the particular session has ended in situations where the data is collected for making the website available.

This is the case at the latest seven days after the time when the data was stored in log files. A storage exceeding this period is possible. In this case the IP-addresses of the users are deleted or distorted so that an assignment of the client calling in is no longer possible.

Possibility for objection and deletion

The collection of data for the making available of the website and the storage of data in logfiles is compulsory for operating the website. Thus, there is no right to object by the user.

Use of cookies

1. a) Description and range of data processing

Our website uses cookies. In general, cookies are small text files which are stored on your computer and which store certain settings and data for exchange with the online offer from us via your browser. If a user calls in a website, a cookie can be stored in the operating system of the user’s computer. This cookie usually contains a unique string of characters, which allows an unambiguous identification of the browser when calling in the website again.

We are using cookies to improve our online offer. Some elements of our website re­quire that a browser calling in can be identified after a changeover.

The following data is stored and transmitted:

• Language settings
• Log-In-information

The data of the user collected in this way is pseudonymized by technical processes. Accordingly, assignment of the data to the user calling in is no longer possible. The data collected is not stored together with other personal data of the user.

When our website is called, the users are informed by means of an information ban­ner about the use of cookies for analytical purposes and are referred to this data protection information. In this connection reference is given to how storage of cookies can be prevented by the browser settings.

In this connection follows a reference to how that storing of cookies can be prevented by appropriate browser settings.

1. b) Legal foundation of data processing

The legal foundation for the processing of personal data by using cookies is Article 6 Para. 1 lit. f GDPR.

1. c) Purpose of data processing

The purpose behind the use of strictly technically essential cookies is to facilitate the use of the website for the user. Certain functions of our website cannot be offered without the use of cookies. For these functions it is necessary that the browser is recognized even after a page change.

We need cookies for the following application:

• Adoption of language settings

Analysis cookies are used for the purpose of improving the quality of our website and its content. By the analysis cookies we learn how the website is used and thus are able to continually optimize our offer. These purposes also include our legitimate in­terest in the processing of the personal data in accordance with Article 6 Para. 1 lit. f GDPR.

1. d) Duration of storage, possibilities for objection and elimination

Cookies are stored on the user’s computer and are transmitted from this to our web­site. Accordingly, you as user have full control over the use of cookies. By a change of the settings of your internet browser you are able to deactivate or restrict the transmissions of cookies. Cookies already being stored can be deleted at any time. This can also be carried out automatically. However, if cookies for our website are deactivated, it may no longer be possible to fully use all functions of the website. The transmission of flash cookies cannot be prevented by the browser settings but re­quires changes of the settings of the flash player.

 

VI. E-Mail-contact

Description and range of data processing

Contacting us is possible by using the e-mail address provided. In this case personal data of the user transmitted with the e-mail is stored. In this connection no data is passed on to third parties. The data is used exclusively for the processing of the con­versation and will immediately be deleted if it is no longer needed.

Legal foundation of data processing

Legal foundation for the processing of the data after application of the user for a newsletter in case of consent of the user is Article 6 Para. 1 lit. a GDPR.

Legal foundation for the processing of data in case of the transmission of an e-mail is Article 6 Para. 1 lit. f GDPR. Is the e-mail contact directed at closing a contract addi­tional legal foundation for the processing of data is Article 6 Para. 1 lit. b GDPR.

Purpose of data processing

The processing of the personal data from the input mask/e-mail serves us solely for the processing of the contact. In case of contacting by e-mail this is also the neces­sary legitimate interest in the processing of the data.

Other personal data processed during the sending-off process serves to prevent abuse of the contact form and to ensure the security of our IT systems.

Duration of storage

The data is deleted as soon as it is no longer needed for achieving the purpose of their collection. This is the case for the personal data from the input mask of the contact form and those which are sent by e-mail when the particular conversation with the user has ended.

The conversation has ended when the circumstances allow the conclusion that the matter in question has been finally clarified.

The additional personal data collected during the sending-off process is deleted the latest after a period of seven days.

Possibilities for objection and elimination

At any time the user has the opportunity to withdraw his consent on the processing of personal data. If the user is contacting us by e-mail, he can object to the storage of his personal data at any time. In this case the conversation cannot be continued.

VII.       Rights of the data subject

If your personal data is processed, then you are the data subject in the sense of the GDPR and you are entitled to the following rights vis à vis the responsible party:

Right of access by the data subject

You can demand from the responsible party confirmation as to whether personal data that relates to you has been processed by us. If such processing has taken place, you can demand information from the responsible party on the following:

• The purposes for which the personal data is processed;
• The categories of personal data which are processed;
• The recipients or, resp., the categories of recipients to which the personal data relating to you has been disclosed or will be disclosed;
• The planned duration of the storage of the personal data relating to you or, if dis­tinct statements on this are not possible, the criteria for the laying down of duration of storage;
• The existence of a right to correction or deletion of the personal data relating to yourself, of a right to a restriction of the processing by the responsible party or of a right of objection to this processing;
• The existence of a right of appeal at a supervisory authority;
• All available information on the origin of the data if the personal data was not collected at the data subject;
• The existence of an automated decision-finding process including profiling in ac­cordance with Article 22 Para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and its scope and the effects strived for of such a processing for the data subject in question.

You are entitled to the right to demand information on whether the personal data re­lating to yourself is transmitted to a third country or an international organization. In this connection you can demand to be instructed on the suitable guarantees in ac­cordance with Article 46 GDPR in connection with the transmission.

Right to correction

You have a right to correction and/or completion vis à vis the responsible party in so far as the personal data as processed and which relates to yourself is incorrect or incomplete. The responsible party has to carry out the correction without delay.

Right to restrict the processing of personal data

Provided the following preconditions are met you can demand restriction of the pro­cessing of the personal data relating to you:

• if you dispute the correctness of the personal data relating to yourself for a pe­riod which makes it possible for the responsible party to check the correctness of the personal data;
• if the processing is unlawful and you reject deletion of the personal data and de­mand restriction of the use of the personal data instead;
• if the responsible party no longer needs the personal data for purposes of the processing but you need the data for the advancing, exercising or defending of legal claims, or
• if you have advanced objection to the processing in accordance with Article 21 Para. 1 GDPR but it has not yet been established whether the justified rea­sons of the responsible party outweigh your reasons.

If the processing of the personal data relating to yourself has been restricted, then this data – apart from the storage of it – may only be processed with your consent or for the assertion, exercising or defending of legal claims or for the protection of the rights of another natural person or legal entity or for reasons relating to an important public interest of the European Union or of a member state.

If the restriction of the processing has been restricted in accordance with the afore-mentioned preconditions, then you will be informed by the responsible party before the restriction is cancelled.

Right to erasure

1. a) Deletion obligation

You can demand by the responsible party that the personal data relating to yourself is deleted without delay and the responsible party is then obliged to delete this data without delay in so far as one of the following reasons applies:

• The personal data relating to you is no longer required for the purposes for which it was collected or for which it was processed.
• You revoke your consent, on which processing in accordance with Article 6 Para. 1 lit. a or Article 9 Para.2 lit. a GDPR was based, and there is no other legal foundation for the processing.
• You submit an objection to the processing in accordance with Article 21 Para. 1 GDPR and there are no justified reasons for the processing with a higher priority, or you submit an objection to the processing in accordance with Article 21 Para. 2 GDPR.
• The personal data relating to you was processed unlawfully.
• The deletion of the personal data relating to you is required to fulfil a legal obliga­tion in accordance with European Union law or the law of the member states, which laws the responsible party is subject to.
• The personal data relating to you was collected in relation to services offered by the information society in accordance with Article 8 Para. 1 GDPR.

1. b) Information to third parties

If the responsible party has made the personal data relating to you public and if he/she is obliged to delete this data in accordance with Article 17 Para. 1 GDPR, then he/she shall take reasonable measures including technical ones – whereby ac­count shall be taken of the available technology and the implementation costs – to inform the responsible parties for the data processing which process the personal data that you as data subject have demanded from them the deletion of all links to this personal data or of copies or replicates of these.

1. c) Exceptions

The right to erasure does not exist in so far as the processing is necessary for

• the exercising of the right of free expression of opinion and to information;
• for the fulfilment of a legal obligation, which requires the processing in accord­ance with the law of the European Union or the law of the member states, which laws the responsible party is subject to, or for the carrying out of a task, which lies in the public interest or which is carried out in the exercising of pub­lic authority, which authority was transferred to the responsible party;
• for reasons of public interest in the field of public health in accordance with Arti­cle 9 Para. 2 lit. h and i as well as Article 9 Para. 3 GDPR;
• for archiving purposes, scientific or historical research purposes lying in the pub­lic interest or for statistical purposes in accordance with Article 89 Para. 1 GDPR, in so far as the right named in section a) probably makes achieving of the objectives of the processing impossible or impairs it seriously, or
• for the advancing, exercising or defending of legal claims.

Right to information

If you have advanced the right to the correcting, erasure or restricting of the pro­cessing to the responsible party, then the latter is obliged to inform all recipients, to which the personal data relating to you was disclosed, of this correction or erasure of the data or of the restricting of the processing, unless this proves itself to be impossi­ble or linked with unreasonable expenditure.

You are entitled to the right vis à vis the responsible party to be informed about these recipients.

Right to data portability

You have the right to receive the personal data relating to yourself, which you made available to the responsible party, in a structured, conventional and machine-reada­ble format. In addition, you have the right to transmit this data to another responsible party without hindrance by the responsible party to whom the personal data was made available, in so far as

• the processing is based on consent in accordance with Article 6 Para. 1 lit. a GDPR or Article 9 Para. 2 lit. a GDPR or on a contract in accordance with Arti­cle 6 Para. 1 lit. b GDPR and
• the processing is carried out by means of automated processes.

In exercising this right, you have in addition the right to obtain the personal data re­lating to you is transferred directly from one responsible party to another responsible party in so far as this is technically possible. The freedoms and rights of other per­sons may not be impaired thereby.

The right to data portability applies not for the processing of personal data, which is necessary for the carrying out of a task, which lies in the public interest or in the ex­ercising of public authority and which task was transferred to the responsible party.

Right to object

For reasons which result from your particular situation you have the right to advance at any time objection to the processing of the personal data relating to you, which processing is carried out on the basis of Article 6 Para. 1 lit. e or f GDPR. This right also applies to the profiling based on these provisions.

The responsible party shall then no longer process the personal data relating to you, unless he/she can prove compelling reasons worthy of protection, which reasons overweigh your interests, rights and freedoms or where the processing serves the advancing, exercising or defending of legal claims.

If the personal data relating to you is processed for the purpose of direct advertising, then you have the right to advance at any time objection to the processing of the per­sonal data relating to you for purposes of such advertising. This applies also to the profiling in so far as this is carried out in connection with such direct advertising.

If you object to the processing for purposes of direct advertising, then the personal data relating to you will no longer be processed for these purposes.

You have the opportunity – in connection with the use of services of the information society and regardless of directive 2002/58/EC – to exercise your right of objection with the aid of automated processes in which technical specifications are used.

You have also the right for reasons which result from your particular situation to ad­vance at any time objection to the processing of the personal data relating to you which processing is carried out for scientific or historic purposes or for statistical pur­poses according to Article 89 Para. 1 GDPR.

Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your consent at any time. On withdrawal we immedi­ately will delete your personal data and no longer process it. The legality of the pro­cessing carried out prior to your withdrawal on the base of your given consent is not affected by you withdrawal.

Right to complain at a supervisory authority

Regardless of another regulatory or judicial remedy, you are entitled to the right to lodge a complaint at a supervisory authority and here in particular at a supervisory authority in the member state of your place of residence, of your place of work or of the place where the suspected infringement took place when you are of the opinion that the processing of the personal data relating to you infringes the GDPR.

In this case the supervisory authority, at which the complaint was lodged, shall inform the complainant on the status and the results of the complaint including the possibility of a judicial remedy in accordance with Article 78 GDPR.

I. Name and address of the responsible party

The responsible party in the sense of the General Data Protection Regulation (GDPR) and of other national data protection regulations in force in the member states of European Union as well as of other regulations with a legal data-protecting character is the

CTP Advanced Materials GmbH

Stahlstrasse 60

D-65428 Ruesselsheim, Germany

Fon: +49 6142 91 85 0

Fax: +49 6142 91 85 55

Mail: ctp@ctpgmbh.de

 

The processing of some data takes place in joint responsibility according to Art. 26 GDPR with:

Aditya Birla Group
Aditya Birla Centre
S K Ahire Marg, Worli

Mumbai 400030, India

II. Name and address of the data protection officer

The data protection officer of the responsible party is:

daschug GmbH

Robert-Bosch-Strasse 7

64293 Darmstadt, Germany

Fon +49 6151 6673 440

Mail: datenschutz@ctpgmbh.de

III.    General information on data processing

Range of the processing of personal data

Generally, we collect and process personal data of users only as long as this is re­quired for providing a properly functioning website as well as delivering our contents and services. The collection and use of personal data of our users on a regular basis only takes place after consent of the data subject. An exception applies to those cases where obtaining consent prior to use is not possible based on matters of law and fact and the processing of data is allowed by legal regulations.

Legal fundamentals for the processing of personal data

In so far as we obtain the consent of the data subject for the processing of personal data Article 6 Para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the foundation for the processing of personal data.

Article 6 Para. 1 lit. b GDPR serves as the legal foundation for the processing of per­sonal data which is necessary for the fulfilment of a contract if the data subject is party to this contract. This applies also to the processing processes which are neces­sary for the execution of pre-contractual measures.

Article 6 Para. 1 lit. c GDPR serves as the legal foundation in so far as processing of personal data is necessary for the fulfilment of a legal obligation applying to our en­terprise.

Article 6 Para. 1 lit. d GDPR serves as the legal foundation for the situation that vital interests of the data subject or another natural person make the processing of per­sonal data necessary.

Article 6 Para. 1 lit. f GDPR serves as the legal foundation for the situation that pro­cessing is necessary to ensure a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not exceed the first named interest.

Deletion of data and duration of storage

The personal data of the data subject are deleted or disabled as soon as the purpose for which the data was stored lapses. In addition, storage can take place if this was stipulated by the European or national legislatures in orders, laws or other regulations in accordance with European Union law to which the responsible party is subject. Disabling or deletion of the data is also carried out if a storage period prescribed by the standards as named expires unless there is a necessity for the continued storage of the data for the concluding or fulfilling of a contract.

IV. Making available of our website and creation of logfiles

Description and range of data processing

On every visit on our website our system automatically collects data and information of the computer system calling. The following data is collected:

• Information on the type of browser and its version used
• The operating system of the user
• The internet-service-provider of the user
• The IP-address of the user
• Date and time of the access
• The website, from which an accessing system reaches our website
• Websites, which are accessed by the computer system of the user via our web­site

This data is also stored in the logfiles of our system. However, IP-addresses of the users or other data, which would allow the assignment of the data to a particular user, are not stored. Also, this data is not stored together with other personal data of the user.

Legal foundations for the data processing

Article 6 Para. 1 lit. f GDPR is the legal foundation for the temporary storage of data and logfiles.

Purpose of data processing

The temporary storage of the IP-address by the system is necessary to enable the delivery of the website to the computer of the user. For achieving this the IP-address of the user must remain stored for the duration of the session.

The storage in logfiles occurs to enable the proper functioning of the website. Fur­thermore, this data serves to optimize the website and to enable the security of our IT-systems. An analysis of the data for marketing purposes does not happen.

The legal foundation is our legitimate interest in data processing according to Article 6 Para.1 lit. f GDPR.

Duration of storage

The data is deleted or disabled as soon as the purpose for which the data was stored lapses. This is the case when the particular session has ended in situations where the data is collected for making the website available.

This is the case at the latest seven days after the time when the data was stored in log files. A storage exceeding this period is possible. In this case the IP-addresses of the users are deleted or distorted so that an assignment of the client calling in is no longer possible.

Possibility for objection and deletion

The collection of data for the making available of the website and the storage of data in logfiles is compulsory for operating the website. Thus, there is no right to object by the user.

Use of cookies

1. a) Description and range of data processing

Our website uses cookies. In general, cookies are small text files which are stored on your computer and which store certain settings and data for exchange with the online offer from us via your browser. If a user calls in a website, a cookie can be stored in the operating system of the user’s computer. This cookie usually contains a unique string of characters, which allows an unambiguous identification of the browser when calling in the website again.

We are using cookies to improve our online offer. Some elements of our website re­quire that a browser calling in can be identified after a changeover.

The following data is stored and transmitted:

• Language settings
• Log-In-information

The data of the user collected in this way is pseudonymized by technical processes. Accordingly, assignment of the data to the user calling in is no longer possible. The data collected is not stored together with other personal data of the user.

When our website is called, the users are informed by means of an information ban­ner about the use of cookies for analytical purposes and are referred to this data protection information. In this connection reference is given to how storage of cookies can be prevented by the browser settings.

In this connection follows a reference to how that storing of cookies can be prevented by appropriate browser settings.

1. b) Legal foundation of data processing

The legal foundation for the processing of personal data by using cookies is Article 6 Para. 1 lit. f GDPR.

1. c) Purpose of data processing

The purpose behind the use of strictly technically essential cookies is to facilitate the use of the website for the user. Certain functions of our website cannot be offered without the use of cookies. For these functions it is necessary that the browser is recognized even after a page change.

We need cookies for the following application:

• Adoption of language settings

Analysis cookies are used for the purpose of improving the quality of our website and its content. By the analysis cookies we learn how the website is used and thus are able to continually optimize our offer. These purposes also include our legitimate in­terest in the processing of the personal data in accordance with Article 6 Para. 1 lit. f GDPR.

1. d) Duration of storage, possibilities for objection and elimination

Cookies are stored on the user’s computer and are transmitted from this to our web­site. Accordingly, you as user have full control over the use of cookies. By a change of the settings of your internet browser you are able to deactivate or restrict the transmissions of cookies. Cookies already being stored can be deleted at any time. This can also be carried out automatically. However, if cookies for our website are deactivated, it may no longer be possible to fully use all functions of the website. The transmission of flash cookies cannot be prevented by the browser settings but re­quires changes of the settings of the flash player.

 

VI. E-Mail-contact

Description and range of data processing

Contacting us is possible by using the e-mail address provided. In this case personal data of the user transmitted with the e-mail is stored. In this connection no data is passed on to third parties. The data is used exclusively for the processing of the con­versation and will immediately be deleted if it is no longer needed.

Legal foundation of data processing

Legal foundation for the processing of the data after application of the user for a newsletter in case of consent of the user is Article 6 Para. 1 lit. a GDPR.

Legal foundation for the processing of data in case of the transmission of an e-mail is Article 6 Para. 1 lit. f GDPR. Is the e-mail contact directed at closing a contract addi­tional legal foundation for the processing of data is Article 6 Para. 1 lit. b GDPR.

Purpose of data processing

The processing of the personal data from the input mask/e-mail serves us solely for the processing of the contact. In case of contacting by e-mail this is also the neces­sary legitimate interest in the processing of the data.

Other personal data processed during the sending-off process serves to prevent abuse of the contact form and to ensure the security of our IT systems.

Duration of storage

The data is deleted as soon as it is no longer needed for achieving the purpose of their collection. This is the case for the personal data from the input mask of the contact form and those which are sent by e-mail when the particular conversation with the user has ended.

The conversation has ended when the circumstances allow the conclusion that the matter in question has been finally clarified.

The additional personal data collected during the sending-off process is deleted the latest after a period of seven days.

Possibilities for objection and elimination

At any time the user has the opportunity to withdraw his consent on the processing of personal data. If the user is contacting us by e-mail, he can object to the storage of his personal data at any time. In this case the conversation cannot be continued.

VII.       Rights of the data subject

If your personal data is processed, then you are the data subject in the sense of the GDPR and you are entitled to the following rights vis à vis the responsible party:

Right of access by the data subject

You can demand from the responsible party confirmation as to whether personal data that relates to you has been processed by us. If such processing has taken place, you can demand information from the responsible party on the following:

• The purposes for which the personal data is processed;
• The categories of personal data which are processed;
• The recipients or, resp., the categories of recipients to which the personal data relating to you has been disclosed or will be disclosed;
• The planned duration of the storage of the personal data relating to you or, if dis­tinct statements on this are not possible, the criteria for the laying down of duration of storage;
• The existence of a right to correction or deletion of the personal data relating to yourself, of a right to a restriction of the processing by the responsible party or of a right of objection to this processing;
• The existence of a right of appeal at a supervisory authority;
• All available information on the origin of the data if the personal data was not collected at the data subject;
• The existence of an automated decision-finding process including profiling in ac­cordance with Article 22 Para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and its scope and the effects strived for of such a processing for the data subject in question.

You are entitled to the right to demand information on whether the personal data re­lating to yourself is transmitted to a third country or an international organization. In this connection you can demand to be instructed on the suitable guarantees in ac­cordance with Article 46 GDPR in connection with the transmission.

Right to correction

You have a right to correction and/or completion vis à vis the responsible party in so far as the personal data as processed and which relates to yourself is incorrect or incomplete. The responsible party has to carry out the correction without delay.

Right to restrict the processing of personal data

Provided the following preconditions are met you can demand restriction of the pro­cessing of the personal data relating to you:

• if you dispute the correctness of the personal data relating to yourself for a pe­riod which makes it possible for the responsible party to check the correctness of the personal data;
• if the processing is unlawful and you reject deletion of the personal data and de­mand restriction of the use of the personal data instead;
• if the responsible party no longer needs the personal data for purposes of the processing but you need the data for the advancing, exercising or defending of legal claims, or
• if you have advanced objection to the processing in accordance with Article 21 Para. 1 GDPR but it has not yet been established whether the justified rea­sons of the responsible party outweigh your reasons.

If the processing of the personal data relating to yourself has been restricted, then this data – apart from the storage of it – may only be processed with your consent or for the assertion, exercising or defending of legal claims or for the protection of the rights of another natural person or legal entity or for reasons relating to an important public interest of the European Union or of a member state.

If the restriction of the processing has been restricted in accordance with the afore-mentioned preconditions, then you will be informed by the responsible party before the restriction is cancelled.

Right to erasure

1. a) Deletion obligation

You can demand by the responsible party that the personal data relating to yourself is deleted without delay and the responsible party is then obliged to delete this data without delay in so far as one of the following reasons applies:

• The personal data relating to you is no longer required for the purposes for which it was collected or for which it was processed.
• You revoke your consent, on which processing in accordance with Article 6 Para. 1 lit. a or Article 9 Para.2 lit. a GDPR was based, and there is no other legal foundation for the processing.
• You submit an objection to the processing in accordance with Article 21 Para. 1 GDPR and there are no justified reasons for the processing with a higher priority, or you submit an objection to the processing in accordance with Article 21 Para. 2 GDPR.
• The personal data relating to you was processed unlawfully.
• The deletion of the personal data relating to you is required to fulfil a legal obliga­tion in accordance with European Union law or the law of the member states, which laws the responsible party is subject to.
• The personal data relating to you was collected in relation to services offered by the information society in accordance with Article 8 Para. 1 GDPR.

1. b) Information to third parties

If the responsible party has made the personal data relating to you public and if he/she is obliged to delete this data in accordance with Article 17 Para. 1 GDPR, then he/she shall take reasonable measures including technical ones – whereby ac­count shall be taken of the available technology and the implementation costs – to inform the responsible parties for the data processing which process the personal data that you as data subject have demanded from them the deletion of all links to this personal data or of copies or replicates of these.

1. c) Exceptions

The right to erasure does not exist in so far as the processing is necessary for

• the exercising of the right of free expression of opinion and to information;
• for the fulfilment of a legal obligation, which requires the processing in accord­ance with the law of the European Union or the law of the member states, which laws the responsible party is subject to, or for the carrying out of a task, which lies in the public interest or which is carried out in the exercising of pub­lic authority, which authority was transferred to the responsible party;
• for reasons of public interest in the field of public health in accordance with Arti­cle 9 Para. 2 lit. h and i as well as Article 9 Para. 3 GDPR;
• for archiving purposes, scientific or historical research purposes lying in the pub­lic interest or for statistical purposes in accordance with Article 89 Para. 1 GDPR, in so far as the right named in section a) probably makes achieving of the objectives of the processing impossible or impairs it seriously, or
• for the advancing, exercising or defending of legal claims.

Right to information

If you have advanced the right to the correcting, erasure or restricting of the pro­cessing to the responsible party, then the latter is obliged to inform all recipients, to which the personal data relating to you was disclosed, of this correction or erasure of the data or of the restricting of the processing, unless this proves itself to be impossi­ble or linked with unreasonable expenditure.

You are entitled to the right vis à vis the responsible party to be informed about these recipients.

Right to data portability

You have the right to receive the personal data relating to yourself, which you made available to the responsible party, in a structured, conventional and machine-reada­ble format. In addition, you have the right to transmit this data to another responsible party without hindrance by the responsible party to whom the personal data was made available, in so far as

• the processing is based on consent in accordance with Article 6 Para. 1 lit. a GDPR or Article 9 Para. 2 lit. a GDPR or on a contract in accordance with Arti­cle 6 Para. 1 lit. b GDPR and
• the processing is carried out by means of automated processes.

In exercising this right, you have in addition the right to obtain the personal data re­lating to you is transferred directly from one responsible party to another responsible party in so far as this is technically possible. The freedoms and rights of other per­sons may not be impaired thereby.

The right to data portability applies not for the processing of personal data, which is necessary for the carrying out of a task, which lies in the public interest or in the ex­ercising of public authority and which task was transferred to the responsible party.

Right to object

For reasons which result from your particular situation you have the right to advance at any time objection to the processing of the personal data relating to you, which processing is carried out on the basis of Article 6 Para. 1 lit. e or f GDPR. This right also applies to the profiling based on these provisions.

The responsible party shall then no longer process the personal data relating to you, unless he/she can prove compelling reasons worthy of protection, which reasons overweigh your interests, rights and freedoms or where the processing serves the advancing, exercising or defending of legal claims.

If the personal data relating to you is processed for the purpose of direct advertising, then you have the right to advance at any time objection to the processing of the per­sonal data relating to you for purposes of such advertising. This applies also to the profiling in so far as this is carried out in connection with such direct advertising.

If you object to the processing for purposes of direct advertising, then the personal data relating to you will no longer be processed for these purposes.

You have the opportunity – in connection with the use of services of the information society and regardless of directive 2002/58/EC – to exercise your right of objection with the aid of automated processes in which technical specifications are used.

You have also the right for reasons which result from your particular situation to ad­vance at any time objection to the processing of the personal data relating to you which processing is carried out for scientific or historic purposes or for statistical pur­poses according to Article 89 Para. 1 GDPR.

Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your consent at any time. On withdrawal we immedi­ately will delete your personal data and no longer process it. The legality of the pro­cessing carried out prior to your withdrawal on the base of your given consent is not affected by you withdrawal.

Right to complain at a supervisory authority

Regardless of another regulatory or judicial remedy, you are entitled to the right to lodge a complaint at a supervisory authority and here in particular at a supervisory authority in the member state of your place of residence, of your place of work or of the place where the suspected infringement took place when you are of the opinion that the processing of the personal data relating to you infringes the GDPR.

In this case the supervisory authority, at which the complaint was lodged, shall inform the complainant on the status and the results of the complaint including the possibility of a judicial remedy in accordance with Article 78 GDPR.

I. Name and address of the responsible party

The responsible party in the sense of the General Data Protection Regulation (GDPR) and of other national data protection regulations in force in the member states of European Union as well as of other regulations with a legal data-protecting character is the

CTP Advanced Materials GmbH

Stahlstrasse 60

D-65428 Ruesselsheim, Germany

Fon: +49 6142 91 85 0

Fax: +49 6142 91 85 55

Mail: ctp@ctpgmbh.de

 

The processing of some data takes place in joint responsibility according to Art. 26 GDPR with:

Aditya Birla Group
Aditya Birla Centre
S K Ahire Marg, Worli

Mumbai 400030, India

II. Name and address of the data protection officer

The data protection officer of the responsible party is:

daschug GmbH

Robert-Bosch-Strasse 7

64293 Darmstadt, Germany

Fon +49 6151 6673 440

Mail: datenschutz@ctpgmbh.de

III.    General information on data processing

Range of the processing of personal data

Generally, we collect and process personal data of users only as long as this is re­quired for providing a properly functioning website as well as delivering our contents and services. The collection and use of personal data of our users on a regular basis only takes place after consent of the data subject. An exception applies to those cases where obtaining consent prior to use is not possible based on matters of law and fact and the processing of data is allowed by legal regulations.

Legal fundamentals for the processing of personal data

In so far as we obtain the consent of the data subject for the processing of personal data Article 6 Para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the foundation for the processing of personal data.

Article 6 Para. 1 lit. b GDPR serves as the legal foundation for the processing of per­sonal data which is necessary for the fulfilment of a contract if the data subject is party to this contract. This applies also to the processing processes which are neces­sary for the execution of pre-contractual measures.

Article 6 Para. 1 lit. c GDPR serves as the legal foundation in so far as processing of personal data is necessary for the fulfilment of a legal obligation applying to our en­terprise.

Article 6 Para. 1 lit. d GDPR serves as the legal foundation for the situation that vital interests of the data subject or another natural person make the processing of per­sonal data necessary.

Article 6 Para. 1 lit. f GDPR serves as the legal foundation for the situation that pro­cessing is necessary to ensure a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not exceed the first named interest.

Deletion of data and duration of storage

The personal data of the data subject are deleted or disabled as soon as the purpose for which the data was stored lapses. In addition, storage can take place if this was stipulated by the European or national legislatures in orders, laws or other regulations in accordance with European Union law to which the responsible party is subject. Disabling or deletion of the data is also carried out if a storage period prescribed by the standards as named expires unless there is a necessity for the continued storage of the data for the concluding or fulfilling of a contract.

IV. Making available of our website and creation of logfiles

Description and range of data processing

On every visit on our website our system automatically collects data and information of the computer system calling. The following data is collected:

• Information on the type of browser and its version used
• The operating system of the user
• The internet-service-provider of the user
• The IP-address of the user
• Date and time of the access
• The website, from which an accessing system reaches our website
• Websites, which are accessed by the computer system of the user via our web­site

This data is also stored in the logfiles of our system. However, IP-addresses of the users or other data, which would allow the assignment of the data to a particular user, are not stored. Also, this data is not stored together with other personal data of the user.

Legal foundations for the data processing

Article 6 Para. 1 lit. f GDPR is the legal foundation for the temporary storage of data and logfiles.

Purpose of data processing

The temporary storage of the IP-address by the system is necessary to enable the delivery of the website to the computer of the user. For achieving this the IP-address of the user must remain stored for the duration of the session.

The storage in logfiles occurs to enable the proper functioning of the website. Fur­thermore, this data serves to optimize the website and to enable the security of our IT-systems. An analysis of the data for marketing purposes does not happen.

The legal foundation is our legitimate interest in data processing according to Article 6 Para.1 lit. f GDPR.

Duration of storage

The data is deleted or disabled as soon as the purpose for which the data was stored lapses. This is the case when the particular session has ended in situations where the data is collected for making the website available.

This is the case at the latest seven days after the time when the data was stored in log files. A storage exceeding this period is possible. In this case the IP-addresses of the users are deleted or distorted so that an assignment of the client calling in is no longer possible.

Possibility for objection and deletion

The collection of data for the making available of the website and the storage of data in logfiles is compulsory for operating the website. Thus, there is no right to object by the user.

Use of cookies

1. a) Description and range of data processing

Our website uses cookies. In general, cookies are small text files which are stored on your computer and which store certain settings and data for exchange with the online offer from us via your browser. If a user calls in a website, a cookie can be stored in the operating system of the user’s computer. This cookie usually contains a unique string of characters, which allows an unambiguous identification of the browser when calling in the website again.

We are using cookies to improve our online offer. Some elements of our website re­quire that a browser calling in can be identified after a changeover.

The following data is stored and transmitted:

• Language settings
• Log-In-information

The data of the user collected in this way is pseudonymized by technical processes. Accordingly, assignment of the data to the user calling in is no longer possible. The data collected is not stored together with other personal data of the user.

When our website is called, the users are informed by means of an information ban­ner about the use of cookies for analytical purposes and are referred to this data protection information. In this connection reference is given to how storage of cookies can be prevented by the browser settings.

In this connection follows a reference to how that storing of cookies can be prevented by appropriate browser settings.

1. b) Legal foundation of data processing

The legal foundation for the processing of personal data by using cookies is Article 6 Para. 1 lit. f GDPR.

1. c) Purpose of data processing

The purpose behind the use of strictly technically essential cookies is to facilitate the use of the website for the user. Certain functions of our website cannot be offered without the use of cookies. For these functions it is necessary that the browser is recognized even after a page change.

We need cookies for the following application:

• Adoption of language settings

Analysis cookies are used for the purpose of improving the quality of our website and its content. By the analysis cookies we learn how the website is used and thus are able to continually optimize our offer. These purposes also include our legitimate in­terest in the processing of the personal data in accordance with Article 6 Para. 1 lit. f GDPR.

1. d) Duration of storage, possibilities for objection and elimination

Cookies are stored on the user’s computer and are transmitted from this to our web­site. Accordingly, you as user have full control over the use of cookies. By a change of the settings of your internet browser you are able to deactivate or restrict the transmissions of cookies. Cookies already being stored can be deleted at any time. This can also be carried out automatically. However, if cookies for our website are deactivated, it may no longer be possible to fully use all functions of the website. The transmission of flash cookies cannot be prevented by the browser settings but re­quires changes of the settings of the flash player.

 

VI. E-Mail-contact

Description and range of data processing

Contacting us is possible by using the e-mail address provided. In this case personal data of the user transmitted with the e-mail is stored. In this connection no data is passed on to third parties. The data is used exclusively for the processing of the con­versation and will immediately be deleted if it is no longer needed.

Legal foundation of data processing

Legal foundation for the processing of the data after application of the user for a newsletter in case of consent of the user is Article 6 Para. 1 lit. a GDPR.

Legal foundation for the processing of data in case of the transmission of an e-mail is Article 6 Para. 1 lit. f GDPR. Is the e-mail contact directed at closing a contract addi­tional legal foundation for the processing of data is Article 6 Para. 1 lit. b GDPR.

Purpose of data processing

The processing of the personal data from the input mask/e-mail serves us solely for the processing of the contact. In case of contacting by e-mail this is also the neces­sary legitimate interest in the processing of the data.

Other personal data processed during the sending-off process serves to prevent abuse of the contact form and to ensure the security of our IT systems.

Duration of storage

The data is deleted as soon as it is no longer needed for achieving the purpose of their collection. This is the case for the personal data from the input mask of the contact form and those which are sent by e-mail when the particular conversation with the user has ended.

The conversation has ended when the circumstances allow the conclusion that the matter in question has been finally clarified.

The additional personal data collected during the sending-off process is deleted the latest after a period of seven days.

Possibilities for objection and elimination

At any time the user has the opportunity to withdraw his consent on the processing of personal data. If the user is contacting us by e-mail, he can object to the storage of his personal data at any time. In this case the conversation cannot be continued.

VII.       Rights of the data subject

If your personal data is processed, then you are the data subject in the sense of the GDPR and you are entitled to the following rights vis à vis the responsible party:

Right of access by the data subject

You can demand from the responsible party confirmation as to whether personal data that relates to you has been processed by us. If such processing has taken place, you can demand information from the responsible party on the following:

• The purposes for which the personal data is processed;
• The categories of personal data which are processed;
• The recipients or, resp., the categories of recipients to which the personal data relating to you has been disclosed or will be disclosed;
• The planned duration of the storage of the personal data relating to you or, if dis­tinct statements on this are not possible, the criteria for the laying down of duration of storage;
• The existence of a right to correction or deletion of the personal data relating to yourself, of a right to a restriction of the processing by the responsible party or of a right of objection to this processing;
• The existence of a right of appeal at a supervisory authority;
• All available information on the origin of the data if the personal data was not collected at the data subject;
• The existence of an automated decision-finding process including profiling in ac­cordance with Article 22 Para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and its scope and the effects strived for of such a processing for the data subject in question.

You are entitled to the right to demand information on whether the personal data re­lating to yourself is transmitted to a third country or an international organization. In this connection you can demand to be instructed on the suitable guarantees in ac­cordance with Article 46 GDPR in connection with the transmission.

Right to correction

You have a right to correction and/or completion vis à vis the responsible party in so far as the personal data as processed and which relates to yourself is incorrect or incomplete. The responsible party has to carry out the correction without delay.

Right to restrict the processing of personal data

Provided the following preconditions are met you can demand restriction of the pro­cessing of the personal data relating to you:

• if you dispute the correctness of the personal data relating to yourself for a pe­riod which makes it possible for the responsible party to check the correctness of the personal data;
• if the processing is unlawful and you reject deletion of the personal data and de­mand restriction of the use of the personal data instead;
• if the responsible party no longer needs the personal data for purposes of the processing but you need the data for the advancing, exercising or defending of legal claims, or
• if you have advanced objection to the processing in accordance with Article 21 Para. 1 GDPR but it has not yet been established whether the justified rea­sons of the responsible party outweigh your reasons.

If the processing of the personal data relating to yourself has been restricted, then this data – apart from the storage of it – may only be processed with your consent or for the assertion, exercising or defending of legal claims or for the protection of the rights of another natural person or legal entity or for reasons relating to an important public interest of the European Union or of a member state.

If the restriction of the processing has been restricted in accordance with the afore-mentioned preconditions, then you will be informed by the responsible party before the restriction is cancelled.

Right to erasure

1. a) Deletion obligation

You can demand by the responsible party that the personal data relating to yourself is deleted without delay and the responsible party is then obliged to delete this data without delay in so far as one of the following reasons applies:

• The personal data relating to you is no longer required for the purposes for which it was collected or for which it was processed.
• You revoke your consent, on which processing in accordance with Article 6 Para. 1 lit. a or Article 9 Para.2 lit. a GDPR was based, and there is no other legal foundation for the processing.
• You submit an objection to the processing in accordance with Article 21 Para. 1 GDPR and there are no justified reasons for the processing with a higher priority, or you submit an objection to the processing in accordance with Article 21 Para. 2 GDPR.
• The personal data relating to you was processed unlawfully.
• The deletion of the personal data relating to you is required to fulfil a legal obliga­tion in accordance with European Union law or the law of the member states, which laws the responsible party is subject to.
• The personal data relating to you was collected in relation to services offered by the information society in accordance with Article 8 Para. 1 GDPR.

1. b) Information to third parties

If the responsible party has made the personal data relating to you public and if he/she is obliged to delete this data in accordance with Article 17 Para. 1 GDPR, then he/she shall take reasonable measures including technical ones – whereby ac­count shall be taken of the available technology and the implementation costs – to inform the responsible parties for the data processing which process the personal data that you as data subject have demanded from them the deletion of all links to this personal data or of copies or replicates of these.

1. c) Exceptions

The right to erasure does not exist in so far as the processing is necessary for

• the exercising of the right of free expression of opinion and to information;
• for the fulfilment of a legal obligation, which requires the processing in accord­ance with the law of the European Union or the law of the member states, which laws the responsible party is subject to, or for the carrying out of a task, which lies in the public interest or which is carried out in the exercising of pub­lic authority, which authority was transferred to the responsible party;
• for reasons of public interest in the field of public health in accordance with Arti­cle 9 Para. 2 lit. h and i as well as Article 9 Para. 3 GDPR;
• for archiving purposes, scientific or historical research purposes lying in the pub­lic interest or for statistical purposes in accordance with Article 89 Para. 1 GDPR, in so far as the right named in section a) probably makes achieving of the objectives of the processing impossible or impairs it seriously, or
• for the advancing, exercising or defending of legal claims.

Right to information

If you have advanced the right to the correcting, erasure or restricting of the pro­cessing to the responsible party, then the latter is obliged to inform all recipients, to which the personal data relating to you was disclosed, of this correction or erasure of the data or of the restricting of the processing, unless this proves itself to be impossi­ble or linked with unreasonable expenditure.

You are entitled to the right vis à vis the responsible party to be informed about these recipients.

Right to data portability

You have the right to receive the personal data relating to yourself, which you made available to the responsible party, in a structured, conventional and machine-reada­ble format. In addition, you have the right to transmit this data to another responsible party without hindrance by the responsible party to whom the personal data was made available, in so far as

• the processing is based on consent in accordance with Article 6 Para. 1 lit. a GDPR or Article 9 Para. 2 lit. a GDPR or on a contract in accordance with Arti­cle 6 Para. 1 lit. b GDPR and
• the processing is carried out by means of automated processes.

In exercising this right, you have in addition the right to obtain the personal data re­lating to you is transferred directly from one responsible party to another responsible party in so far as this is technically possible. The freedoms and rights of other per­sons may not be impaired thereby.

The right to data portability applies not for the processing of personal data, which is necessary for the carrying out of a task, which lies in the public interest or in the ex­ercising of public authority and which task was transferred to the responsible party.

Right to object

For reasons which result from your particular situation you have the right to advance at any time objection to the processing of the personal data relating to you, which processing is carried out on the basis of Article 6 Para. 1 lit. e or f GDPR. This right also applies to the profiling based on these provisions.

The responsible party shall then no longer process the personal data relating to you, unless he/she can prove compelling reasons worthy of protection, which reasons overweigh your interests, rights and freedoms or where the processing serves the advancing, exercising or defending of legal claims.

If the personal data relating to you is processed for the purpose of direct advertising, then you have the right to advance at any time objection to the processing of the per­sonal data relating to you for purposes of such advertising. This applies also to the profiling in so far as this is carried out in connection with such direct advertising.

If you object to the processing for purposes of direct advertising, then the personal data relating to you will no longer be processed for these purposes.

You have the opportunity – in connection with the use of services of the information society and regardless of directive 2002/58/EC – to exercise your right of objection with the aid of automated processes in which technical specifications are used.

You have also the right for reasons which result from your particular situation to ad­vance at any time objection to the processing of the personal data relating to you which processing is carried out for scientific or historic purposes or for statistical pur­poses according to Article 89 Para. 1 GDPR.

Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your consent at any time. On withdrawal we immedi­ately will delete your personal data and no longer process it. The legality of the pro­cessing carried out prior to your withdrawal on the base of your given consent is not affected by you withdrawal.

Right to complain at a supervisory authority

Regardless of another regulatory or judicial remedy, you are entitled to the right to lodge a complaint at a supervisory authority and here in particular at a supervisory authority in the member state of your place of residence, of your place of work or of the place where the suspected infringement took place when you are of the opinion that the processing of the personal data relating to you infringes the GDPR.

In this case the supervisory authority, at which the complaint was lodged, shall inform the complainant on the status and the results of the complaint including the possibility of a judicial remedy in accordance with Article 78 GDPR.

I. Name and address of the responsible party

The responsible party in the sense of the General Data Protection Regulation (GDPR) and of other national data protection regulations in force in the member states of European Union as well as of other regulations with a legal data-protecting character is the

CTP Advanced Materials GmbH

Stahlstrasse 60

D-65428 Ruesselsheim, Germany

Fon: +49 6142 91 85 0

Fax: +49 6142 91 85 55

Mail: ctp@ctpgmbh.de

 

The processing of some data takes place in joint responsibility according to Art. 26 GDPR with:

Aditya Birla Group
Aditya Birla Centre
S K Ahire Marg, Worli

Mumbai 400030, India

II. Name and address of the data protection officer

The data protection officer of the responsible party is:

daschug GmbH

Robert-Bosch-Strasse 7

64293 Darmstadt, Germany

Fon +49 6151 6673 440

Mail: datenschutz@ctpgmbh.de

III.    General information on data processing

Range of the processing of personal data

Generally, we collect and process personal data of users only as long as this is re­quired for providing a properly functioning website as well as delivering our contents and services. The collection and use of personal data of our users on a regular basis only takes place after consent of the data subject. An exception applies to those cases where obtaining consent prior to use is not possible based on matters of law and fact and the processing of data is allowed by legal regulations.

Legal fundamentals for the processing of personal data

In so far as we obtain the consent of the data subject for the processing of personal data Article 6 Para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the foundation for the processing of personal data.

Article 6 Para. 1 lit. b GDPR serves as the legal foundation for the processing of per­sonal data which is necessary for the fulfilment of a contract if the data subject is party to this contract. This applies also to the processing processes which are neces­sary for the execution of pre-contractual measures.

Article 6 Para. 1 lit. c GDPR serves as the legal foundation in so far as processing of personal data is necessary for the fulfilment of a legal obligation applying to our en­terprise.

Article 6 Para. 1 lit. d GDPR serves as the legal foundation for the situation that vital interests of the data subject or another natural person make the processing of per­sonal data necessary.

Article 6 Para. 1 lit. f GDPR serves as the legal foundation for the situation that pro­cessing is necessary to ensure a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not exceed the first named interest.

Deletion of data and duration of storage

The personal data of the data subject are deleted or disabled as soon as the purpose for which the data was stored lapses. In addition, storage can take place if this was stipulated by the European or national legislatures in orders, laws or other regulations in accordance with European Union law to which the responsible party is subject. Disabling or deletion of the data is also carried out if a storage period prescribed by the standards as named expires unless there is a necessity for the continued storage of the data for the concluding or fulfilling of a contract.

IV. Making available of our website and creation of logfiles

Description and range of data processing

On every visit on our website our system automatically collects data and information of the computer system calling. The following data is collected:

• Information on the type of browser and its version used
• The operating system of the user
• The internet-service-provider of the user
• The IP-address of the user
• Date and time of the access
• The website, from which an accessing system reaches our website
• Websites, which are accessed by the computer system of the user via our web­site

This data is also stored in the logfiles of our system. However, IP-addresses of the users or other data, which would allow the assignment of the data to a particular user, are not stored. Also, this data is not stored together with other personal data of the user.

Legal foundations for the data processing

Article 6 Para. 1 lit. f GDPR is the legal foundation for the temporary storage of data and logfiles.

Purpose of data processing

The temporary storage of the IP-address by the system is necessary to enable the delivery of the website to the computer of the user. For achieving this the IP-address of the user must remain stored for the duration of the session.

The storage in logfiles occurs to enable the proper functioning of the website. Fur­thermore, this data serves to optimize the website and to enable the security of our IT-systems. An analysis of the data for marketing purposes does not happen.

The legal foundation is our legitimate interest in data processing according to Article 6 Para.1 lit. f GDPR.

Duration of storage

The data is deleted or disabled as soon as the purpose for which the data was stored lapses. This is the case when the particular session has ended in situations where the data is collected for making the website available.

This is the case at the latest seven days after the time when the data was stored in log files. A storage exceeding this period is possible. In this case the IP-addresses of the users are deleted or distorted so that an assignment of the client calling in is no longer possible.

Possibility for objection and deletion

The collection of data for the making available of the website and the storage of data in logfiles is compulsory for operating the website. Thus, there is no right to object by the user.

Use of cookies

1. a) Description and range of data processing

Our website uses cookies. In general, cookies are small text files which are stored on your computer and which store certain settings and data for exchange with the online offer from us via your browser. If a user calls in a website, a cookie can be stored in the operating system of the user’s computer. This cookie usually contains a unique string of characters, which allows an unambiguous identification of the browser when calling in the website again.

We are using cookies to improve our online offer. Some elements of our website re­quire that a browser calling in can be identified after a changeover.

The following data is stored and transmitted:

• Language settings
• Log-In-information

The data of the user collected in this way is pseudonymized by technical processes. Accordingly, assignment of the data to the user calling in is no longer possible. The data collected is not stored together with other personal data of the user.

When our website is called, the users are informed by means of an information ban­ner about the use of cookies for analytical purposes and are referred to this data protection information. In this connection reference is given to how storage of cookies can be prevented by the browser settings.

In this connection follows a reference to how that storing of cookies can be prevented by appropriate browser settings.

1. b) Legal foundation of data processing

The legal foundation for the processing of personal data by using cookies is Article 6 Para. 1 lit. f GDPR.

1. c) Purpose of data processing

The purpose behind the use of strictly technically essential cookies is to facilitate the use of the website for the user. Certain functions of our website cannot be offered without the use of cookies. For these functions it is necessary that the browser is recognized even after a page change.

We need cookies for the following application:

• Adoption of language settings

Analysis cookies are used for the purpose of improving the quality of our website and its content. By the analysis cookies we learn how the website is used and thus are able to continually optimize our offer. These purposes also include our legitimate in­terest in the processing of the personal data in accordance with Article 6 Para. 1 lit. f GDPR.

1. d) Duration of storage, possibilities for objection and elimination

Cookies are stored on the user’s computer and are transmitted from this to our web­site. Accordingly, you as user have full control over the use of cookies. By a change of the settings of your internet browser you are able to deactivate or restrict the transmissions of cookies. Cookies already being stored can be deleted at any time. This can also be carried out automatically. However, if cookies for our website are deactivated, it may no longer be possible to fully use all functions of the website. The transmission of flash cookies cannot be prevented by the browser settings but re­quires changes of the settings of the flash player.

 

VI. E-Mail-contact

Description and range of data processing

Contacting us is possible by using the e-mail address provided. In this case personal data of the user transmitted with the e-mail is stored. In this connection no data is passed on to third parties. The data is used exclusively for the processing of the con­versation and will immediately be deleted if it is no longer needed.

Legal foundation of data processing

Legal foundation for the processing of the data after application of the user for a newsletter in case of consent of the user is Article 6 Para. 1 lit. a GDPR.

Legal foundation for the processing of data in case of the transmission of an e-mail is Article 6 Para. 1 lit. f GDPR. Is the e-mail contact directed at closing a contract addi­tional legal foundation for the processing of data is Article 6 Para. 1 lit. b GDPR.

Purpose of data processing

The processing of the personal data from the input mask/e-mail serves us solely for the processing of the contact. In case of contacting by e-mail this is also the neces­sary legitimate interest in the processing of the data.

Other personal data processed during the sending-off process serves to prevent abuse of the contact form and to ensure the security of our IT systems.

Duration of storage

The data is deleted as soon as it is no longer needed for achieving the purpose of their collection. This is the case for the personal data from the input mask of the contact form and those which are sent by e-mail when the particular conversation with the user has ended.

The conversation has ended when the circumstances allow the conclusion that the matter in question has been finally clarified.

The additional personal data collected during the sending-off process is deleted the latest after a period of seven days.

Possibilities for objection and elimination

At any time the user has the opportunity to withdraw his consent on the processing of personal data. If the user is contacting us by e-mail, he can object to the storage of his personal data at any time. In this case the conversation cannot be continued.

VII.       Rights of the data subject

If your personal data is processed, then you are the data subject in the sense of the GDPR and you are entitled to the following rights vis à vis the responsible party:

Right of access by the data subject

You can demand from the responsible party confirmation as to whether personal data that relates to you has been processed by us. If such processing has taken place, you can demand information from the responsible party on the following:

• The purposes for which the personal data is processed;
• The categories of personal data which are processed;
• The recipients or, resp., the categories of recipients to which the personal data relating to you has been disclosed or will be disclosed;
• The planned duration of the storage of the personal data relating to you or, if dis­tinct statements on this are not possible, the criteria for the laying down of duration of storage;
• The existence of a right to correction or deletion of the personal data relating to yourself, of a right to a restriction of the processing by the responsible party or of a right of objection to this processing;
• The existence of a right of appeal at a supervisory authority;
• All available information on the origin of the data if the personal data was not collected at the data subject;
• The existence of an automated decision-finding process including profiling in ac­cordance with Article 22 Para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and its scope and the effects strived for of such a processing for the data subject in question.

You are entitled to the right to demand information on whether the personal data re­lating to yourself is transmitted to a third country or an international organization. In this connection you can demand to be instructed on the suitable guarantees in ac­cordance with Article 46 GDPR in connection with the transmission.

Right to correction

You have a right to correction and/or completion vis à vis the responsible party in so far as the personal data as processed and which relates to yourself is incorrect or incomplete. The responsible party has to carry out the correction without delay.

Right to restrict the processing of personal data

Provided the following preconditions are met you can demand restriction of the pro­cessing of the personal data relating to you:

• if you dispute the correctness of the personal data relating to yourself for a pe­riod which makes it possible for the responsible party to check the correctness of the personal data;
• if the processing is unlawful and you reject deletion of the personal data and de­mand restriction of the use of the personal data instead;
• if the responsible party no longer needs the personal data for purposes of the processing but you need the data for the advancing, exercising or defending of legal claims, or
• if you have advanced objection to the processing in accordance with Article 21 Para. 1 GDPR but it has not yet been established whether the justified rea­sons of the responsible party outweigh your reasons.

If the processing of the personal data relating to yourself has been restricted, then this data – apart from the storage of it – may only be processed with your consent or for the assertion, exercising or defending of legal claims or for the protection of the rights of another natural person or legal entity or for reasons relating to an important public interest of the European Union or of a member state.

If the restriction of the processing has been restricted in accordance with the afore-mentioned preconditions, then you will be informed by the responsible party before the restriction is cancelled.

Right to erasure

1. a) Deletion obligation

You can demand by the responsible party that the personal data relating to yourself is deleted without delay and the responsible party is then obliged to delete this data without delay in so far as one of the following reasons applies:

• The personal data relating to you is no longer required for the purposes for which it was collected or for which it was processed.
• You revoke your consent, on which processing in accordance with Article 6 Para. 1 lit. a or Article 9 Para.2 lit. a GDPR was based, and there is no other legal foundation for the processing.
• You submit an objection to the processing in accordance with Article 21 Para. 1 GDPR and there are no justified reasons for the processing with a higher priority, or you submit an objection to the processing in accordance with Article 21 Para. 2 GDPR.
• The personal data relating to you was processed unlawfully.
• The deletion of the personal data relating to you is required to fulfil a legal obliga­tion in accordance with European Union law or the law of the member states, which laws the responsible party is subject to.
• The personal data relating to you was collected in relation to services offered by the information society in accordance with Article 8 Para. 1 GDPR.

1. b) Information to third parties

If the responsible party has made the personal data relating to you public and if he/she is obliged to delete this data in accordance with Article 17 Para. 1 GDPR, then he/she shall take reasonable measures including technical ones – whereby ac­count shall be taken of the available technology and the implementation costs – to inform the responsible parties for the data processing which process the personal data that you as data subject have demanded from them the deletion of all links to this personal data or of copies or replicates of these.

1. c) Exceptions

The right to erasure does not exist in so far as the processing is necessary for

• the exercising of the right of free expression of opinion and to information;
• for the fulfilment of a legal obligation, which requires the processing in accord­ance with the law of the European Union or the law of the member states, which laws the responsible party is subject to, or for the carrying out of a task, which lies in the public interest or which is carried out in the exercising of pub­lic authority, which authority was transferred to the responsible party;
• for reasons of public interest in the field of public health in accordance with Arti­cle 9 Para. 2 lit. h and i as well as Article 9 Para. 3 GDPR;
• for archiving purposes, scientific or historical research purposes lying in the pub­lic interest or for statistical purposes in accordance with Article 89 Para. 1 GDPR, in so far as the right named in section a) probably makes achieving of the objectives of the processing impossible or impairs it seriously, or
• for the advancing, exercising or defending of legal claims.

Right to information

If you have advanced the right to the correcting, erasure or restricting of the pro­cessing to the responsible party, then the latter is obliged to inform all recipients, to which the personal data relating to you was disclosed, of this correction or erasure of the data or of the restricting of the processing, unless this proves itself to be impossi­ble or linked with unreasonable expenditure.

You are entitled to the right vis à vis the responsible party to be informed about these recipients.

Right to data portability

You have the right to receive the personal data relating to yourself, which you made available to the responsible party, in a structured, conventional and machine-reada­ble format. In addition, you have the right to transmit this data to another responsible party without hindrance by the responsible party to whom the personal data was made available, in so far as

• the processing is based on consent in accordance with Article 6 Para. 1 lit. a GDPR or Article 9 Para. 2 lit. a GDPR or on a contract in accordance with Arti­cle 6 Para. 1 lit. b GDPR and
• the processing is carried out by means of automated processes.

In exercising this right, you have in addition the right to obtain the personal data re­lating to you is transferred directly from one responsible party to another responsible party in so far as this is technically possible. The freedoms and rights of other per­sons may not be impaired thereby.

The right to data portability applies not for the processing of personal data, which is necessary for the carrying out of a task, which lies in the public interest or in the ex­ercising of public authority and which task was transferred to the responsible party.

Right to object

For reasons which result from your particular situation you have the right to advance at any time objection to the processing of the personal data relating to you, which processing is carried out on the basis of Article 6 Para. 1 lit. e or f GDPR. This right also applies to the profiling based on these provisions.

The responsible party shall then no longer process the personal data relating to you, unless he/she can prove compelling reasons worthy of protection, which reasons overweigh your interests, rights and freedoms or where the processing serves the advancing, exercising or defending of legal claims.

If the personal data relating to you is processed for the purpose of direct advertising, then you have the right to advance at any time objection to the processing of the per­sonal data relating to you for purposes of such advertising. This applies also to the profiling in so far as this is carried out in connection with such direct advertising.

If you object to the processing for purposes of direct advertising, then the personal data relating to you will no longer be processed for these purposes.

You have the opportunity – in connection with the use of services of the information society and regardless of directive 2002/58/EC – to exercise your right of objection with the aid of automated processes in which technical specifications are used.

You have also the right for reasons which result from your particular situation to ad­vance at any time objection to the processing of the personal data relating to you which processing is carried out for scientific or historic purposes or for statistical pur­poses according to Article 89 Para. 1 GDPR.

Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your consent at any time. On withdrawal we immedi­ately will delete your personal data and no longer process it. The legality of the pro­cessing carried out prior to your withdrawal on the base of your given consent is not affected by you withdrawal.

Right to complain at a supervisory authority

Regardless of another regulatory or judicial remedy, you are entitled to the right to lodge a complaint at a supervisory authority and here in particular at a supervisory authority in the member state of your place of residence, of your place of work or of the place where the suspected infringement took place when you are of the opinion that the processing of the personal data relating to you infringes the GDPR.

In this case the supervisory authority, at which the complaint was lodged, shall inform the complainant on the status and the results of the complaint including the possibility of a judicial remedy in accordance with Article 78 GDPR.

I. Name and address of the responsible party

The responsible party in the sense of the General Data Protection Regulation (GDPR) and of other national data protection regulations in force in the member states of European Union as well as of other regulations with a legal data-protecting character is the

CTP Advanced Materials GmbH

Stahlstrasse 60

D-65428 Ruesselsheim, Germany

Fon: +49 6142 91 85 0

Fax: +49 6142 91 85 55

Mail: ctp@ctpgmbh.de

 

The processing of some data takes place in joint responsibility according to Art. 26 GDPR with:

Aditya Birla Group
Aditya Birla Centre
S K Ahire Marg, Worli

Mumbai 400030, India

II. Name and address of the data protection officer

The data protection officer of the responsible party is:

daschug GmbH

Robert-Bosch-Strasse 7

64293 Darmstadt, Germany

Fon +49 6151 6673 440

Mail: datenschutz@ctpgmbh.de

III.    General information on data processing

Range of the processing of personal data

Generally, we collect and process personal data of users only as long as this is re­quired for providing a properly functioning website as well as delivering our contents and services. The collection and use of personal data of our users on a regular basis only takes place after consent of the data subject. An exception applies to those cases where obtaining consent prior to use is not possible based on matters of law and fact and the processing of data is allowed by legal regulations.

Legal fundamentals for the processing of personal data

In so far as we obtain the consent of the data subject for the processing of personal data Article 6 Para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the foundation for the processing of personal data.

Article 6 Para. 1 lit. b GDPR serves as the legal foundation for the processing of per­sonal data which is necessary for the fulfilment of a contract if the data subject is party to this contract. This applies also to the processing processes which are neces­sary for the execution of pre-contractual measures.

Article 6 Para. 1 lit. c GDPR serves as the legal foundation in so far as processing of personal data is necessary for the fulfilment of a legal obligation applying to our en­terprise.

Article 6 Para. 1 lit. d GDPR serves as the legal foundation for the situation that vital interests of the data subject or another natural person make the processing of per­sonal data necessary.

Article 6 Para. 1 lit. f GDPR serves as the legal foundation for the situation that pro­cessing is necessary to ensure a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not exceed the first named interest.

Deletion of data and duration of storage

The personal data of the data subject are deleted or disabled as soon as the purpose for which the data was stored lapses. In addition, storage can take place if this was stipulated by the European or national legislatures in orders, laws or other regulations in accordance with European Union law to which the responsible party is subject. Disabling or deletion of the data is also carried out if a storage period prescribed by the standards as named expires unless there is a necessity for the continued storage of the data for the concluding or fulfilling of a contract.

IV. Making available of our website and creation of logfiles

Description and range of data processing

On every visit on our website our system automatically collects data and information of the computer system calling. The following data is collected:

• Information on the type of browser and its version used
• The operating system of the user
• The internet-service-provider of the user
• The IP-address of the user
• Date and time of the access
• The website, from which an accessing system reaches our website
• Websites, which are accessed by the computer system of the user via our web­site

This data is also stored in the logfiles of our system. However, IP-addresses of the users or other data, which would allow the assignment of the data to a particular user, are not stored. Also, this data is not stored together with other personal data of the user.

Legal foundations for the data processing

Article 6 Para. 1 lit. f GDPR is the legal foundation for the temporary storage of data and logfiles.

Purpose of data processing

The temporary storage of the IP-address by the system is necessary to enable the delivery of the website to the computer of the user. For achieving this the IP-address of the user must remain stored for the duration of the session.

The storage in logfiles occurs to enable the proper functioning of the website. Fur­thermore, this data serves to optimize the website and to enable the security of our IT-systems. An analysis of the data for marketing purposes does not happen.

The legal foundation is our legitimate interest in data processing according to Article 6 Para.1 lit. f GDPR.

Duration of storage

The data is deleted or disabled as soon as the purpose for which the data was stored lapses. This is the case when the particular session has ended in situations where the data is collected for making the website available.

This is the case at the latest seven days after the time when the data was stored in log files. A storage exceeding this period is possible. In this case the IP-addresses of the users are deleted or distorted so that an assignment of the client calling in is no longer possible.

Possibility for objection and deletion

The collection of data for the making available of the website and the storage of data in logfiles is compulsory for operating the website. Thus, there is no right to object by the user.

Use of cookies

1. a) Description and range of data processing

Our website uses cookies. In general, cookies are small text files which are stored on your computer and which store certain settings and data for exchange with the online offer from us via your browser. If a user calls in a website, a cookie can be stored in the operating system of the user’s computer. This cookie usually contains a unique string of characters, which allows an unambiguous identification of the browser when calling in the website again.

We are using cookies to improve our online offer. Some elements of our website re­quire that a browser calling in can be identified after a changeover.

The following data is stored and transmitted:

• Language settings
• Log-In-information

The data of the user collected in this way is pseudonymized by technical processes. Accordingly, assignment of the data to the user calling in is no longer possible. The data collected is not stored together with other personal data of the user.

When our website is called, the users are informed by means of an information ban­ner about the use of cookies for analytical purposes and are referred to this data protection information. In this connection reference is given to how storage of cookies can be prevented by the browser settings.

In this connection follows a reference to how that storing of cookies can be prevented by appropriate browser settings.

1. b) Legal foundation of data processing

The legal foundation for the processing of personal data by using cookies is Article 6 Para. 1 lit. f GDPR.

1. c) Purpose of data processing

The purpose behind the use of strictly technically essential cookies is to facilitate the use of the website for the user. Certain functions of our website cannot be offered without the use of cookies. For these functions it is necessary that the browser is recognized even after a page change.

We need cookies for the following application:

• Adoption of language settings

Analysis cookies are used for the purpose of improving the quality of our website and its content. By the analysis cookies we learn how the website is used and thus are able to continually optimize our offer. These purposes also include our legitimate in­terest in the processing of the personal data in accordance with Article 6 Para. 1 lit. f GDPR.

1. d) Duration of storage, possibilities for objection and elimination

Cookies are stored on the user’s computer and are transmitted from this to our web­site. Accordingly, you as user have full control over the use of cookies. By a change of the settings of your internet browser you are able to deactivate or restrict the transmissions of cookies. Cookies already being stored can be deleted at any time. This can also be carried out automatically. However, if cookies for our website are deactivated, it may no longer be possible to fully use all functions of the website. The transmission of flash cookies cannot be prevented by the browser settings but re­quires changes of the settings of the flash player.

 

VI. E-Mail-contact

Description and range of data processing

Contacting us is possible by using the e-mail address provided. In this case personal data of the user transmitted with the e-mail is stored. In this connection no data is passed on to third parties. The data is used exclusively for the processing of the con­versation and will immediately be deleted if it is no longer needed.

Legal foundation of data processing

Legal foundation for the processing of the data after application of the user for a newsletter in case of consent of the user is Article 6 Para. 1 lit. a GDPR.

Legal foundation for the processing of data in case of the transmission of an e-mail is Article 6 Para. 1 lit. f GDPR. Is the e-mail contact directed at closing a contract addi­tional legal foundation for the processing of data is Article 6 Para. 1 lit. b GDPR.

Purpose of data processing

The processing of the personal data from the input mask/e-mail serves us solely for the processing of the contact. In case of contacting by e-mail this is also the neces­sary legitimate interest in the processing of the data.

Other personal data processed during the sending-off process serves to prevent abuse of the contact form and to ensure the security of our IT systems.

Duration of storage

The data is deleted as soon as it is no longer needed for achieving the purpose of their collection. This is the case for the personal data from the input mask of the contact form and those which are sent by e-mail when the particular conversation with the user has ended.

The conversation has ended when the circumstances allow the conclusion that the matter in question has been finally clarified.

The additional personal data collected during the sending-off process is deleted the latest after a period of seven days.

Possibilities for objection and elimination

At any time the user has the opportunity to withdraw his consent on the processing of personal data. If the user is contacting us by e-mail, he can object to the storage of his personal data at any time. In this case the conversation cannot be continued.

VII.       Rights of the data subject

If your personal data is processed, then you are the data subject in the sense of the GDPR and you are entitled to the following rights vis à vis the responsible party:

Right of access by the data subject

You can demand from the responsible party confirmation as to whether personal data that relates to you has been processed by us. If such processing has taken place, you can demand information from the responsible party on the following:

• The purposes for which the personal data is processed;
• The categories of personal data which are processed;
• The recipients or, resp., the categories of recipients to which the personal data relating to you has been disclosed or will be disclosed;
• The planned duration of the storage of the personal data relating to you or, if dis­tinct statements on this are not possible, the criteria for the laying down of duration of storage;
• The existence of a right to correction or deletion of the personal data relating to yourself, of a right to a restriction of the processing by the responsible party or of a right of objection to this processing;
• The existence of a right of appeal at a supervisory authority;
• All available information on the origin of the data if the personal data was not collected at the data subject;
• The existence of an automated decision-finding process including profiling in ac­cordance with Article 22 Para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and its scope and the effects strived for of such a processing for the data subject in question.

You are entitled to the right to demand information on whether the personal data re­lating to yourself is transmitted to a third country or an international organization. In this connection you can demand to be instructed on the suitable guarantees in ac­cordance with Article 46 GDPR in connection with the transmission.

Right to correction

You have a right to correction and/or completion vis à vis the responsible party in so far as the personal data as processed and which relates to yourself is incorrect or incomplete. The responsible party has to carry out the correction without delay.

Right to restrict the processing of personal data

Provided the following preconditions are met you can demand restriction of the pro­cessing of the personal data relating to you:

• if you dispute the correctness of the personal data relating to yourself for a pe­riod which makes it possible for the responsible party to check the correctness of the personal data;
• if the processing is unlawful and you reject deletion of the personal data and de­mand restriction of the use of the personal data instead;
• if the responsible party no longer needs the personal data for purposes of the processing but you need the data for the advancing, exercising or defending of legal claims, or
• if you have advanced objection to the processing in accordance with Article 21 Para. 1 GDPR but it has not yet been established whether the justified rea­sons of the responsible party outweigh your reasons.

If the processing of the personal data relating to yourself has been restricted, then this data – apart from the storage of it – may only be processed with your consent or for the assertion, exercising or defending of legal claims or for the protection of the rights of another natural person or legal entity or for reasons relating to an important public interest of the European Union or of a member state.

If the restriction of the processing has been restricted in accordance with the afore-mentioned preconditions, then you will be informed by the responsible party before the restriction is cancelled.

Right to erasure

1. a) Deletion obligation

You can demand by the responsible party that the personal data relating to yourself is deleted without delay and the responsible party is then obliged to delete this data without delay in so far as one of the following reasons applies:

• The personal data relating to you is no longer required for the purposes for which it was collected or for which it was processed.
• You revoke your consent, on which processing in accordance with Article 6 Para. 1 lit. a or Article 9 Para.2 lit. a GDPR was based, and there is no other legal foundation for the processing.
• You submit an objection to the processing in accordance with Article 21 Para. 1 GDPR and there are no justified reasons for the processing with a higher priority, or you submit an objection to the processing in accordance with Article 21 Para. 2 GDPR.
• The personal data relating to you was processed unlawfully.
• The deletion of the personal data relating to you is required to fulfil a legal obliga­tion in accordance with European Union law or the law of the member states, which laws the responsible party is subject to.
• The personal data relating to you was collected in relation to services offered by the information society in accordance with Article 8 Para. 1 GDPR.

1. b) Information to third parties

If the responsible party has made the personal data relating to you public and if he/she is obliged to delete this data in accordance with Article 17 Para. 1 GDPR, then he/she shall take reasonable measures including technical ones – whereby ac­count shall be taken of the available technology and the implementation costs – to inform the responsible parties for the data processing which process the personal data that you as data subject have demanded from them the deletion of all links to this personal data or of copies or replicates of these.

1. c) Exceptions

The right to erasure does not exist in so far as the processing is necessary for

• the exercising of the right of free expression of opinion and to information;
• for the fulfilment of a legal obligation, which requires the processing in accord­ance with the law of the European Union or the law of the member states, which laws the responsible party is subject to, or for the carrying out of a task, which lies in the public interest or which is carried out in the exercising of pub­lic authority, which authority was transferred to the responsible party;
• for reasons of public interest in the field of public health in accordance with Arti­cle 9 Para. 2 lit. h and i as well as Article 9 Para. 3 GDPR;
• for archiving purposes, scientific or historical research purposes lying in the pub­lic interest or for statistical purposes in accordance with Article 89 Para. 1 GDPR, in so far as the right named in section a) probably makes achieving of the objectives of the processing impossible or impairs it seriously, or
• for the advancing, exercising or defending of legal claims.

Right to information

If you have advanced the right to the correcting, erasure or restricting of the pro­cessing to the responsible party, then the latter is obliged to inform all recipients, to which the personal data relating to you was disclosed, of this correction or erasure of the data or of the restricting of the processing, unless this proves itself to be impossi­ble or linked with unreasonable expenditure.

You are entitled to the right vis à vis the responsible party to be informed about these recipients.

Right to data portability

You have the right to receive the personal data relating to yourself, which you made available to the responsible party, in a structured, conventional and machine-reada­ble format. In addition, you have the right to transmit this data to another responsible party without hindrance by the responsible party to whom the personal data was made available, in so far as

• the processing is based on consent in accordance with Article 6 Para. 1 lit. a GDPR or Article 9 Para. 2 lit. a GDPR or on a contract in accordance with Arti­cle 6 Para. 1 lit. b GDPR and
• the processing is carried out by means of automated processes.

In exercising this right, you have in addition the right to obtain the personal data re­lating to you is transferred directly from one responsible party to another responsible party in so far as this is technically possible. The freedoms and rights of other per­sons may not be impaired thereby.

The right to data portability applies not for the processing of personal data, which is necessary for the carrying out of a task, which lies in the public interest or in the ex­ercising of public authority and which task was transferred to the responsible party.

Right to object

For reasons which result from your particular situation you have the right to advance at any time objection to the processing of the personal data relating to you, which processing is carried out on the basis of Article 6 Para. 1 lit. e or f GDPR. This right also applies to the profiling based on these provisions.

The responsible party shall then no longer process the personal data relating to you, unless he/she can prove compelling reasons worthy of protection, which reasons overweigh your interests, rights and freedoms or where the processing serves the advancing, exercising or defending of legal claims.

If the personal data relating to you is processed for the purpose of direct advertising, then you have the right to advance at any time objection to the processing of the per­sonal data relating to you for purposes of such advertising. This applies also to the profiling in so far as this is carried out in connection with such direct advertising.

If you object to the processing for purposes of direct advertising, then the personal data relating to you will no longer be processed for these purposes.

You have the opportunity – in connection with the use of services of the information society and regardless of directive 2002/58/EC – to exercise your right of objection with the aid of automated processes in which technical specifications are used.

You have also the right for reasons which result from your particular situation to ad­vance at any time objection to the processing of the personal data relating to you which processing is carried out for scientific or historic purposes or for statistical pur­poses according to Article 89 Para. 1 GDPR.

Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your consent at any time. On withdrawal we immedi­ately will delete your personal data and no longer process it. The legality of the pro­cessing carried out prior to your withdrawal on the base of your given consent is not affected by you withdrawal.

Right to complain at a supervisory authority

Regardless of another regulatory or judicial remedy, you are entitled to the right to lodge a complaint at a supervisory authority and here in particular at a supervisory authority in the member state of your place of residence, of your place of work or of the place where the suspected infringement took place when you are of the opinion that the processing of the personal data relating to you infringes the GDPR.

In this case the supervisory authority, at which the complaint was lodged, shall inform the complainant on the status and the results of the complaint including the possibility of a judicial remedy in accordance with Article 78 GDPR.

I. Name and address of the responsible party

The responsible party in the sense of the General Data Protection Regulation (GDPR) and of other national data protection regulations in force in the member states of European Union as well as of other regulations with a legal data-protecting character is the

CTP Advanced Materials GmbH

Stahlstrasse 60

D-65428 Ruesselsheim, Germany

Fon: +49 6142 91 85 0

Fax: +49 6142 91 85 55

Mail: ctp@ctpgmbh.de

 

The processing of some data takes place in joint responsibility according to Art. 26 GDPR with:

Aditya Birla Group
Aditya Birla Centre
S K Ahire Marg, Worli

Mumbai 400030, India

II. Name and address of the data protection officer

The data protection officer of the responsible party is:

daschug GmbH

Robert-Bosch-Strasse 7

64293 Darmstadt, Germany

Fon +49 6151 6673 440

Mail: datenschutz@ctpgmbh.de

III.    General information on data processing

Range of the processing of personal data

Generally, we collect and process personal data of users only as long as this is re­quired for providing a properly functioning website as well as delivering our contents and services. The collection and use of personal data of our users on a regular basis only takes place after consent of the data subject. An exception applies to those cases where obtaining consent prior to use is not possible based on matters of law and fact and the processing of data is allowed by legal regulations.

Legal fundamentals for the processing of personal data

In so far as we obtain the consent of the data subject for the processing of personal data Article 6 Para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the foundation for the processing of personal data.

Article 6 Para. 1 lit. b GDPR serves as the legal foundation for the processing of per­sonal data which is necessary for the fulfilment of a contract if the data subject is party to this contract. This applies also to the processing processes which are neces­sary for the execution of pre-contractual measures.

Article 6 Para. 1 lit. c GDPR serves as the legal foundation in so far as processing of personal data is necessary for the fulfilment of a legal obligation applying to our en­terprise.

Article 6 Para. 1 lit. d GDPR serves as the legal foundation for the situation that vital interests of the data subject or another natural person make the processing of per­sonal data necessary.

Article 6 Para. 1 lit. f GDPR serves as the legal foundation for the situation that pro­cessing is necessary to ensure a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not exceed the first named interest.

Deletion of data and duration of storage

The personal data of the data subject are deleted or disabled as soon as the purpose for which the data was stored lapses. In addition, storage can take place if this was stipulated by the European or national legislatures in orders, laws or other regulations in accordance with European Union law to which the responsible party is subject. Disabling or deletion of the data is also carried out if a storage period prescribed by the standards as named expires unless there is a necessity for the continued storage of the data for the concluding or fulfilling of a contract.

IV. Making available of our website and creation of logfiles

Description and range of data processing

On every visit on our website our system automatically collects data and information of the computer system calling. The following data is collected:

• Information on the type of browser and its version used
• The operating system of the user
• The internet-service-provider of the user
• The IP-address of the user
• Date and time of the access
• The website, from which an accessing system reaches our website
• Websites, which are accessed by the computer system of the user via our web­site

This data is also stored in the logfiles of our system. However, IP-addresses of the users or other data, which would allow the assignment of the data to a particular user, are not stored. Also, this data is not stored together with other personal data of the user.

Legal foundations for the data processing

Article 6 Para. 1 lit. f GDPR is the legal foundation for the temporary storage of data and logfiles.

Purpose of data processing

The temporary storage of the IP-address by the system is necessary to enable the delivery of the website to the computer of the user. For achieving this the IP-address of the user must remain stored for the duration of the session.

The storage in logfiles occurs to enable the proper functioning of the website. Fur­thermore, this data serves to optimize the website and to enable the security of our IT-systems. An analysis of the data for marketing purposes does not happen.

The legal foundation is our legitimate interest in data processing according to Article 6 Para.1 lit. f GDPR.

Duration of storage

The data is deleted or disabled as soon as the purpose for which the data was stored lapses. This is the case when the particular session has ended in situations where the data is collected for making the website available.

This is the case at the latest seven days after the time when the data was stored in log files. A storage exceeding this period is possible. In this case the IP-addresses of the users are deleted or distorted so that an assignment of the client calling in is no longer possible.

Possibility for objection and deletion

The collection of data for the making available of the website and the storage of data in logfiles is compulsory for operating the website. Thus, there is no right to object by the user.

Use of cookies

1. a) Description and range of data processing

Our website uses cookies. In general, cookies are small text files which are stored on your computer and which store certain settings and data for exchange with the online offer from us via your browser. If a user calls in a website, a cookie can be stored in the operating system of the user’s computer. This cookie usually contains a unique string of characters, which allows an unambiguous identification of the browser when calling in the website again.

We are using cookies to improve our online offer. Some elements of our website re­quire that a browser calling in can be identified after a changeover.

The following data is stored and transmitted:

• Language settings
• Log-In-information

The data of the user collected in this way is pseudonymized by technical processes. Accordingly, assignment of the data to the user calling in is no longer possible. The data collected is not stored together with other personal data of the user.

When our website is called, the users are informed by means of an information ban­ner about the use of cookies for analytical purposes and are referred to this data protection information. In this connection reference is given to how storage of cookies can be prevented by the browser settings.

In this connection follows a reference to how that storing of cookies can be prevented by appropriate browser settings.

1. b) Legal foundation of data processing

The legal foundation for the processing of personal data by using cookies is Article 6 Para. 1 lit. f GDPR.

1. c) Purpose of data processing

The purpose behind the use of strictly technically essential cookies is to facilitate the use of the website for the user. Certain functions of our website cannot be offered without the use of cookies. For these functions it is necessary that the browser is recognized even after a page change.

We need cookies for the following application:

• Adoption of language settings

Analysis cookies are used for the purpose of improving the quality of our website and its content. By the analysis cookies we learn how the website is used and thus are able to continually optimize our offer. These purposes also include our legitimate in­terest in the processing of the personal data in accordance with Article 6 Para. 1 lit. f GDPR.

1. d) Duration of storage, possibilities for objection and elimination

Cookies are stored on the user’s computer and are transmitted from this to our web­site. Accordingly, you as user have full control over the use of cookies. By a change of the settings of your internet browser you are able to deactivate or restrict the transmissions of cookies. Cookies already being stored can be deleted at any time. This can also be carried out automatically. However, if cookies for our website are deactivated, it may no longer be possible to fully use all functions of the website. The transmission of flash cookies cannot be prevented by the browser settings but re­quires changes of the settings of the flash player.

 

VI. E-Mail-contact

Description and range of data processing

Contacting us is possible by using the e-mail address provided. In this case personal data of the user transmitted with the e-mail is stored. In this connection no data is passed on to third parties. The data is used exclusively for the processing of the con­versation and will immediately be deleted if it is no longer needed.

Legal foundation of data processing

Legal foundation for the processing of the data after application of the user for a newsletter in case of consent of the user is Article 6 Para. 1 lit. a GDPR.

Legal foundation for the processing of data in case of the transmission of an e-mail is Article 6 Para. 1 lit. f GDPR. Is the e-mail contact directed at closing a contract addi­tional legal foundation for the processing of data is Article 6 Para. 1 lit. b GDPR.

Purpose of data processing

The processing of the personal data from the input mask/e-mail serves us solely for the processing of the contact. In case of contacting by e-mail this is also the neces­sary legitimate interest in the processing of the data.

Other personal data processed during the sending-off process serves to prevent abuse of the contact form and to ensure the security of our IT systems.

Duration of storage

The data is deleted as soon as it is no longer needed for achieving the purpose of their collection. This is the case for the personal data from the input mask of the contact form and those which are sent by e-mail when the particular conversation with the user has ended.

The conversation has ended when the circumstances allow the conclusion that the matter in question has been finally clarified.

The additional personal data collected during the sending-off process is deleted the latest after a period of seven days.

Possibilities for objection and elimination

At any time the user has the opportunity to withdraw his consent on the processing of personal data. If the user is contacting us by e-mail, he can object to the storage of his personal data at any time. In this case the conversation cannot be continued.

VII.       Rights of the data subject

If your personal data is processed, then you are the data subject in the sense of the GDPR and you are entitled to the following rights vis à vis the responsible party:

Right of access by the data subject

You can demand from the responsible party confirmation as to whether personal data that relates to you has been processed by us. If such processing has taken place, you can demand information from the responsible party on the following:

• The purposes for which the personal data is processed;
• The categories of personal data which are processed;
• The recipients or, resp., the categories of recipients to which the personal data relating to you has been disclosed or will be disclosed;
• The planned duration of the storage of the personal data relating to you or, if dis­tinct statements on this are not possible, the criteria for the laying down of duration of storage;
• The existence of a right to correction or deletion of the personal data relating to yourself, of a right to a restriction of the processing by the responsible party or of a right of objection to this processing;
• The existence of a right of appeal at a supervisory authority;
• All available information on the origin of the data if the personal data was not collected at the data subject;
• The existence of an automated decision-finding process including profiling in ac­cordance with Article 22 Para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and its scope and the effects strived for of such a processing for the data subject in question.

You are entitled to the right to demand information on whether the personal data re­lating to yourself is transmitted to a third country or an international organization. In this connection you can demand to be instructed on the suitable guarantees in ac­cordance with Article 46 GDPR in connection with the transmission.

Right to correction

You have a right to correction and/or completion vis à vis the responsible party in so far as the personal data as processed and which relates to yourself is incorrect or incomplete. The responsible party has to carry out the correction without delay.

Right to restrict the processing of personal data

Provided the following preconditions are met you can demand restriction of the pro­cessing of the personal data relating to you:

• if you dispute the correctness of the personal data relating to yourself for a pe­riod which makes it possible for the responsible party to check the correctness of the personal data;
• if the processing is unlawful and you reject deletion of the personal data and de­mand restriction of the use of the personal data instead;
• if the responsible party no longer needs the personal data for purposes of the processing but you need the data for the advancing, exercising or defending of legal claims, or
• if you have advanced objection to the processing in accordance with Article 21 Para. 1 GDPR but it has not yet been established whether the justified rea­sons of the responsible party outweigh your reasons.

If the processing of the personal data relating to yourself has been restricted, then this data – apart from the storage of it – may only be processed with your consent or for the assertion, exercising or defending of legal claims or for the protection of the rights of another natural person or legal entity or for reasons relating to an important public interest of the European Union or of a member state.

If the restriction of the processing has been restricted in accordance with the afore-mentioned preconditions, then you will be informed by the responsible party before the restriction is cancelled.

Right to erasure

1. a) Deletion obligation

You can demand by the responsible party that the personal data relating to yourself is deleted without delay and the responsible party is then obliged to delete this data without delay in so far as one of the following reasons applies:

• The personal data relating to you is no longer required for the purposes for which it was collected or for which it was processed.
• You revoke your consent, on which processing in accordance with Article 6 Para. 1 lit. a or Article 9 Para.2 lit. a GDPR was based, and there is no other legal foundation for the processing.
• You submit an objection to the processing in accordance with Article 21 Para. 1 GDPR and there are no justified reasons for the processing with a higher priority, or you submit an objection to the processing in accordance with Article 21 Para. 2 GDPR.
• The personal data relating to you was processed unlawfully.
• The deletion of the personal data relating to you is required to fulfil a legal obliga­tion in accordance with European Union law or the law of the member states, which laws the responsible party is subject to.
• The personal data relating to you was collected in relation to services offered by the information society in accordance with Article 8 Para. 1 GDPR.

1. b) Information to third parties

If the responsible party has made the personal data relating to you public and if he/she is obliged to delete this data in accordance with Article 17 Para. 1 GDPR, then he/she shall take reasonable measures including technical ones – whereby ac­count shall be taken of the available technology and the implementation costs – to inform the responsible parties for the data processing which process the personal data that you as data subject have demanded from them the deletion of all links to this personal data or of copies or replicates of these.

1. c) Exceptions

The right to erasure does not exist in so far as the processing is necessary for

• the exercising of the right of free expression of opinion and to information;
• for the fulfilment of a legal obligation, which requires the processing in accord­ance with the law of the European Union or the law of the member states, which laws the responsible party is subject to, or for the carrying out of a task, which lies in the public interest or which is carried out in the exercising of pub­lic authority, which authority was transferred to the responsible party;
• for reasons of public interest in the field of public health in accordance with Arti­cle 9 Para. 2 lit. h and i as well as Article 9 Para. 3 GDPR;
• for archiving purposes, scientific or historical research purposes lying in the pub­lic interest or for statistical purposes in accordance with Article 89 Para. 1 GDPR, in so far as the right named in section a) probably makes achieving of the objectives of the processing impossible or impairs it seriously, or
• for the advancing, exercising or defending of legal claims.

Right to information

If you have advanced the right to the correcting, erasure or restricting of the pro­cessing to the responsible party, then the latter is obliged to inform all recipients, to which the personal data relating to you was disclosed, of this correction or erasure of the data or of the restricting of the processing, unless this proves itself to be impossi­ble or linked with unreasonable expenditure.

You are entitled to the right vis à vis the responsible party to be informed about these recipients.

Right to data portability

You have the right to receive the personal data relating to yourself, which you made available to the responsible party, in a structured, conventional and machine-reada­ble format. In addition, you have the right to transmit this data to another responsible party without hindrance by the responsible party to whom the personal data was made available, in so far as

• the processing is based on consent in accordance with Article 6 Para. 1 lit. a GDPR or Article 9 Para. 2 lit. a GDPR or on a contract in accordance with Arti­cle 6 Para. 1 lit. b GDPR and
• the processing is carried out by means of automated processes.

In exercising this right, you have in addition the right to obtain the personal data re­lating to you is transferred directly from one responsible party to another responsible party in so far as this is technically possible. The freedoms and rights of other per­sons may not be impaired thereby.

The right to data portability applies not for the processing of personal data, which is necessary for the carrying out of a task, which lies in the public interest or in the ex­ercising of public authority and which task was transferred to the responsible party.

Right to object

For reasons which result from your particular situation you have the right to advance at any time objection to the processing of the personal data relating to you, which processing is carried out on the basis of Article 6 Para. 1 lit. e or f GDPR. This right also applies to the profiling based on these provisions.

The responsible party shall then no longer process the personal data relating to you, unless he/she can prove compelling reasons worthy of protection, which reasons overweigh your interests, rights and freedoms or where the processing serves the advancing, exercising or defending of legal claims.

If the personal data relating to you is processed for the purpose of direct advertising, then you have the right to advance at any time objection to the processing of the per­sonal data relating to you for purposes of such advertising. This applies also to the profiling in so far as this is carried out in connection with such direct advertising.

If you object to the processing for purposes of direct advertising, then the personal data relating to you will no longer be processed for these purposes.

You have the opportunity – in connection with the use of services of the information society and regardless of directive 2002/58/EC – to exercise your right of objection with the aid of automated processes in which technical specifications are used.

You have also the right for reasons which result from your particular situation to ad­vance at any time objection to the processing of the personal data relating to you which processing is carried out for scientific or historic purposes or for statistical pur­poses according to Article 89 Para. 1 GDPR.

Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your consent at any time. On withdrawal we immedi­ately will delete your personal data and no longer process it. The legality of the pro­cessing carried out prior to your withdrawal on the base of your given consent is not affected by you withdrawal.

Right to complain at a supervisory authority

Regardless of another regulatory or judicial remedy, you are entitled to the right to lodge a complaint at a supervisory authority and here in particular at a supervisory authority in the member state of your place of residence, of your place of work or of the place where the suspected infringement took place when you are of the opinion that the processing of the personal data relating to you infringes the GDPR.

In this case the supervisory authority, at which the complaint was lodged, shall inform the complainant on the status and the results of the complaint including the possibility of a judicial remedy in accordance with Article 78 GDPR.

I. Name and address of the responsible party

The responsible party in the sense of the General Data Protection Regulation (GDPR) and of other national data protection regulations in force in the member states of European Union as well as of other regulations with a legal data-protecting character is the

CTP Advanced Materials GmbH

Stahlstrasse 60

D-65428 Ruesselsheim, Germany

Fon: +49 6142 91 85 0

Fax: +49 6142 91 85 55

Mail: ctp@ctpgmbh.de

 

The processing of some data takes place in joint responsibility according to Art. 26 GDPR with:

Aditya Birla Group
Aditya Birla Centre
S K Ahire Marg, Worli

Mumbai 400030, India

II. Name and address of the data protection officer

The data protection officer of the responsible party is:

daschug GmbH

Robert-Bosch-Strasse 7

64293 Darmstadt, Germany

Fon +49 6151 6673 440

Mail: datenschutz@ctpgmbh.de

III.    General information on data processing

Range of the processing of personal data

Generally, we collect and process personal data of users only as long as this is re­quired for providing a properly functioning website as well as delivering our contents and services. The collection and use of personal data of our users on a regular basis only takes place after consent of the data subject. An exception applies to those cases where obtaining consent prior to use is not possible based on matters of law and fact and the processing of data is allowed by legal regulations.

Legal fundamentals for the processing of personal data

In so far as we obtain the consent of the data subject for the processing of personal data Article 6 Para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the foundation for the processing of personal data.

Article 6 Para. 1 lit. b GDPR serves as the legal foundation for the processing of per­sonal data which is necessary for the fulfilment of a contract if the data subject is party to this contract. This applies also to the processing processes which are neces­sary for the execution of pre-contractual measures.

Article 6 Para. 1 lit. c GDPR serves as the legal foundation in so far as processing of personal data is necessary for the fulfilment of a legal obligation applying to our en­terprise.

Article 6 Para. 1 lit. d GDPR serves as the legal foundation for the situation that vital interests of the data subject or another natural person make the processing of per­sonal data necessary.

Article 6 Para. 1 lit. f GDPR serves as the legal foundation for the situation that pro­cessing is necessary to ensure a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not exceed the first named interest.

Deletion of data and duration of storage

The personal data of the data subject are deleted or disabled as soon as the purpose for which the data was stored lapses. In addition, storage can take place if this was stipulated by the European or national legislatures in orders, laws or other regulations in accordance with European Union law to which the responsible party is subject. Disabling or deletion of the data is also carried out if a storage period prescribed by the standards as named expires unless there is a necessity for the continued storage of the data for the concluding or fulfilling of a contract.

IV. Making available of our website and creation of logfiles

Description and range of data processing

On every visit on our website our system automatically collects data and information of the computer system calling. The following data is collected:

• Information on the type of browser and its version used
• The operating system of the user
• The internet-service-provider of the user
• The IP-address of the user
• Date and time of the access
• The website, from which an accessing system reaches our website
• Websites, which are accessed by the computer system of the user via our web­site

This data is also stored in the logfiles of our system. However, IP-addresses of the users or other data, which would allow the assignment of the data to a particular user, are not stored. Also, this data is not stored together with other personal data of the user.

Legal foundations for the data processing

Article 6 Para. 1 lit. f GDPR is the legal foundation for the temporary storage of data and logfiles.

Purpose of data processing

The temporary storage of the IP-address by the system is necessary to enable the delivery of the website to the computer of the user. For achieving this the IP-address of the user must remain stored for the duration of the session.

The storage in logfiles occurs to enable the proper functioning of the website. Fur­thermore, this data serves to optimize the website and to enable the security of our IT-systems. An analysis of the data for marketing purposes does not happen.

The legal foundation is our legitimate interest in data processing according to Article 6 Para.1 lit. f GDPR.

Duration of storage

The data is deleted or disabled as soon as the purpose for which the data was stored lapses. This is the case when the particular session has ended in situations where the data is collected for making the website available.

This is the case at the latest seven days after the time when the data was stored in log files. A storage exceeding this period is possible. In this case the IP-addresses of the users are deleted or distorted so that an assignment of the client calling in is no longer possible.

Possibility for objection and deletion

The collection of data for the making available of the website and the storage of data in logfiles is compulsory for operating the website. Thus, there is no right to object by the user.

Use of cookies

1. a) Description and range of data processing

Our website uses cookies. In general, cookies are small text files which are stored on your computer and which store certain settings and data for exchange with the online offer from us via your browser. If a user calls in a website, a cookie can be stored in the operating system of the user’s computer. This cookie usually contains a unique string of characters, which allows an unambiguous identification of the browser when calling in the website again.

We are using cookies to improve our online offer. Some elements of our website re­quire that a browser calling in can be identified after a changeover.

The following data is stored and transmitted:

• Language settings
• Log-In-information

The data of the user collected in this way is pseudonymized by technical processes. Accordingly, assignment of the data to the user calling in is no longer possible. The data collected is not stored together with other personal data of the user.

When our website is called, the users are informed by means of an information ban­ner about the use of cookies for analytical purposes and are referred to this data protection information. In this connection reference is given to how storage of cookies can be prevented by the browser settings.

In this connection follows a reference to how that storing of cookies can be prevented by appropriate browser settings.

1. b) Legal foundation of data processing

The legal foundation for the processing of personal data by using cookies is Article 6 Para. 1 lit. f GDPR.

1. c) Purpose of data processing

The purpose behind the use of strictly technically essential cookies is to facilitate the use of the website for the user. Certain functions of our website cannot be offered without the use of cookies. For these functions it is necessary that the browser is recognized even after a page change.

We need cookies for the following application:

• Adoption of language settings

Analysis cookies are used for the purpose of improving the quality of our website and its content. By the analysis cookies we learn how the website is used and thus are able to continually optimize our offer. These purposes also include our legitimate in­terest in the processing of the personal data in accordance with Article 6 Para. 1 lit. f GDPR.

1. d) Duration of storage, possibilities for objection and elimination

Cookies are stored on the user’s computer and are transmitted from this to our web­site. Accordingly, you as user have full control over the use of cookies. By a change of the settings of your internet browser you are able to deactivate or restrict the transmissions of cookies. Cookies already being stored can be deleted at any time. This can also be carried out automatically. However, if cookies for our website are deactivated, it may no longer be possible to fully use all functions of the website. The transmission of flash cookies cannot be prevented by the browser settings but re­quires changes of the settings of the flash player.

 

VI. E-Mail-contact

Description and range of data processing

Contacting us is possible by using the e-mail address provided. In this case personal data of the user transmitted with the e-mail is stored. In this connection no data is passed on to third parties. The data is used exclusively for the processing of the con­versation and will immediately be deleted if it is no longer needed.

Legal foundation of data processing

Legal foundation for the processing of the data after application of the user for a newsletter in case of consent of the user is Article 6 Para. 1 lit. a GDPR.

Legal foundation for the processing of data in case of the transmission of an e-mail is Article 6 Para. 1 lit. f GDPR. Is the e-mail contact directed at closing a contract addi­tional legal foundation for the processing of data is Article 6 Para. 1 lit. b GDPR.

Purpose of data processing

The processing of the personal data from the input mask/e-mail serves us solely for the processing of the contact. In case of contacting by e-mail this is also the neces­sary legitimate interest in the processing of the data.

Other personal data processed during the sending-off process serves to prevent abuse of the contact form and to ensure the security of our IT systems.

Duration of storage

The data is deleted as soon as it is no longer needed for achieving the purpose of their collection. This is the case for the personal data from the input mask of the contact form and those which are sent by e-mail when the particular conversation with the user has ended.

The conversation has ended when the circumstances allow the conclusion that the matter in question has been finally clarified.

The additional personal data collected during the sending-off process is deleted the latest after a period of seven days.

Possibilities for objection and elimination

At any time the user has the opportunity to withdraw his consent on the processing of personal data. If the user is contacting us by e-mail, he can object to the storage of his personal data at any time. In this case the conversation cannot be continued.

VII.       Rights of the data subject

If your personal data is processed, then you are the data subject in the sense of the GDPR and you are entitled to the following rights vis à vis the responsible party:

Right of access by the data subject

You can demand from the responsible party confirmation as to whether personal data that relates to you has been processed by us. If such processing has taken place, you can demand information from the responsible party on the following:

• The purposes for which the personal data is processed;
• The categories of personal data which are processed;
• The recipients or, resp., the categories of recipients to which the personal data relating to you has been disclosed or will be disclosed;
• The planned duration of the storage of the personal data relating to you or, if dis­tinct statements on this are not possible, the criteria for the laying down of duration of storage;
• The existence of a right to correction or deletion of the personal data relating to yourself, of a right to a restriction of the processing by the responsible party or of a right of objection to this processing;
• The existence of a right of appeal at a supervisory authority;
• All available information on the origin of the data if the personal data was not collected at the data subject;
• The existence of an automated decision-finding process including profiling in ac­cordance with Article 22 Para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and its scope and the effects strived for of such a processing for the data subject in question.

You are entitled to the right to demand information on whether the personal data re­lating to yourself is transmitted to a third country or an international organization. In this connection you can demand to be instructed on the suitable guarantees in ac­cordance with Article 46 GDPR in connection with the transmission.

Right to correction

You have a right to correction and/or completion vis à vis the responsible party in so far as the personal data as processed and which relates to yourself is incorrect or incomplete. The responsible party has to carry out the correction without delay.

Right to restrict the processing of personal data

Provided the following preconditions are met you can demand restriction of the pro­cessing of the personal data relating to you:

• if you dispute the correctness of the personal data relating to yourself for a pe­riod which makes it possible for the responsible party to check the correctness of the personal data;
• if the processing is unlawful and you reject deletion of the personal data and de­mand restriction of the use of the personal data instead;
• if the responsible party no longer needs the personal data for purposes of the processing but you need the data for the advancing, exercising or defending of legal claims, or
• if you have advanced objection to the processing in accordance with Article 21 Para. 1 GDPR but it has not yet been established whether the justified rea­sons of the responsible party outweigh your reasons.

If the processing of the personal data relating to yourself has been restricted, then this data – apart from the storage of it – may only be processed with your consent or for the assertion, exercising or defending of legal claims or for the protection of the rights of another natural person or legal entity or for reasons relating to an important public interest of the European Union or of a member state.

If the restriction of the processing has been restricted in accordance with the afore-mentioned preconditions, then you will be informed by the responsible party before the restriction is cancelled.

Right to erasure

1. a) Deletion obligation

You can demand by the responsible party that the personal data relating to yourself is deleted without delay and the responsible party is then obliged to delete this data without delay in so far as one of the following reasons applies:

• The personal data relating to you is no longer required for the purposes for which it was collected or for which it was processed.
• You revoke your consent, on which processing in accordance with Article 6 Para. 1 lit. a or Article 9 Para.2 lit. a GDPR was based, and there is no other legal foundation for the processing.
• You submit an objection to the processing in accordance with Article 21 Para. 1 GDPR and there are no justified reasons for the processing with a higher priority, or you submit an objection to the processing in accordance with Article 21 Para. 2 GDPR.
• The personal data relating to you was processed unlawfully.
• The deletion of the personal data relating to you is required to fulfil a legal obliga­tion in accordance with European Union law or the law of the member states, which laws the responsible party is subject to.
• The personal data relating to you was collected in relation to services offered by the information society in accordance with Article 8 Para. 1 GDPR.

1. b) Information to third parties

If the responsible party has made the personal data relating to you public and if he/she is obliged to delete this data in accordance with Article 17 Para. 1 GDPR, then he/she shall take reasonable measures including technical ones – whereby ac­count shall be taken of the available technology and the implementation costs – to inform the responsible parties for the data processing which process the personal data that you as data subject have demanded from them the deletion of all links to this personal data or of copies or replicates of these.

1. c) Exceptions

The right to erasure does not exist in so far as the processing is necessary for

• the exercising of the right of free expression of opinion and to information;
• for the fulfilment of a legal obligation, which requires the processing in accord­ance with the law of the European Union or the law of the member states, which laws the responsible party is subject to, or for the carrying out of a task, which lies in the public interest or which is carried out in the exercising of pub­lic authority, which authority was transferred to the responsible party;
• for reasons of public interest in the field of public health in accordance with Arti­cle 9 Para. 2 lit. h and i as well as Article 9 Para. 3 GDPR;
• for archiving purposes, scientific or historical research purposes lying in the pub­lic interest or for statistical purposes in accordance with Article 89 Para. 1 GDPR, in so far as the right named in section a) probably makes achieving of the objectives of the processing impossible or impairs it seriously, or
• for the advancing, exercising or defending of legal claims.

Right to information

If you have advanced the right to the correcting, erasure or restricting of the pro­cessing to the responsible party, then the latter is obliged to inform all recipients, to which the personal data relating to you was disclosed, of this correction or erasure of the data or of the restricting of the processing, unless this proves itself to be impossi­ble or linked with unreasonable expenditure.

You are entitled to the right vis à vis the responsible party to be informed about these recipients.

Right to data portability

You have the right to receive the personal data relating to yourself, which you made available to the responsible party, in a structured, conventional and machine-reada­ble format. In addition, you have the right to transmit this data to another responsible party without hindrance by the responsible party to whom the personal data was made available, in so far as

• the processing is based on consent in accordance with Article 6 Para. 1 lit. a GDPR or Article 9 Para. 2 lit. a GDPR or on a contract in accordance with Arti­cle 6 Para. 1 lit. b GDPR and
• the processing is carried out by means of automated processes.

In exercising this right, you have in addition the right to obtain the personal data re­lating to you is transferred directly from one responsible party to another responsible party in so far as this is technically possible. The freedoms and rights of other per­sons may not be impaired thereby.

The right to data portability applies not for the processing of personal data, which is necessary for the carrying out of a task, which lies in the public interest or in the ex­ercising of public authority and which task was transferred to the responsible party.

Right to object

For reasons which result from your particular situation you have the right to advance at any time objection to the processing of the personal data relating to you, which processing is carried out on the basis of Article 6 Para. 1 lit. e or f GDPR. This right also applies to the profiling based on these provisions.

The responsible party shall then no longer process the personal data relating to you, unless he/she can prove compelling reasons worthy of protection, which reasons overweigh your interests, rights and freedoms or where the processing serves the advancing, exercising or defending of legal claims.

If the personal data relating to you is processed for the purpose of direct advertising, then you have the right to advance at any time objection to the processing of the per­sonal data relating to you for purposes of such advertising. This applies also to the profiling in so far as this is carried out in connection with such direct advertising.

If you object to the processing for purposes of direct advertising, then the personal data relating to you will no longer be processed for these purposes.

You have the opportunity – in connection with the use of services of the information society and regardless of directive 2002/58/EC – to exercise your right of objection with the aid of automated processes in which technical specifications are used.

You have also the right for reasons which result from your particular situation to ad­vance at any time objection to the processing of the personal data relating to you which processing is carried out for scientific or historic purposes or for statistical pur­poses according to Article 89 Para. 1 GDPR.

Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your consent at any time. On withdrawal we immedi­ately will delete your personal data and no longer process it. The legality of the pro­cessing carried out prior to your withdrawal on the base of your given consent is not affected by you withdrawal.

Right to complain at a supervisory authority

Regardless of another regulatory or judicial remedy, you are entitled to the right to lodge a complaint at a supervisory authority and here in particular at a supervisory authority in the member state of your place of residence, of your place of work or of the place where the suspected infringement took place when you are of the opinion that the processing of the personal data relating to you infringes the GDPR.

In this case the supervisory authority, at which the complaint was lodged, shall inform the complainant on the status and the results of the complaint including the possibility of a judicial remedy in accordance with Article 78 GDPR.

I. Name and address of the responsible party

The responsible party in the sense of the General Data Protection Regulation (GDPR) and of other national data protection regulations in force in the member states of European Union as well as of other regulations with a legal data-protecting character is the

CTP Advanced Materials GmbH

Stahlstrasse 60

D-65428 Ruesselsheim, Germany

Fon: +49 6142 91 85 0

Fax: +49 6142 91 85 55

Mail: ctp@ctpgmbh.de

 

The processing of some data takes place in joint responsibility according to Art. 26 GDPR with:

Aditya Birla Group
Aditya Birla Centre
S K Ahire Marg, Worli

Mumbai 400030, India

II. Name and address of the data protection officer

The data protection officer of the responsible party is:

daschug GmbH

Robert-Bosch-Strasse 7

64293 Darmstadt, Germany

Fon +49 6151 6673 440

Mail: datenschutz@ctpgmbh.de

III.    General information on data processing

Range of the processing of personal data

Generally, we collect and process personal data of users only as long as this is re­quired for providing a properly functioning website as well as delivering our contents and services. The collection and use of personal data of our users on a regular basis only takes place after consent of the data subject. An exception applies to those cases where obtaining consent prior to use is not possible based on matters of law and fact and the processing of data is allowed by legal regulations.

Legal fundamentals for the processing of personal data

In so far as we obtain the consent of the data subject for the processing of personal data Article 6 Para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the foundation for the processing of personal data.

Article 6 Para. 1 lit. b GDPR serves as the legal foundation for the processing of per­sonal data which is necessary for the fulfilment of a contract if the data subject is party to this contract. This applies also to the processing processes which are neces­sary for the execution of pre-contractual measures.

Article 6 Para. 1 lit. c GDPR serves as the legal foundation in so far as processing of personal data is necessary for the fulfilment of a legal obligation applying to our en­terprise.

Article 6 Para. 1 lit. d GDPR serves as the legal foundation for the situation that vital interests of the data subject or another natural person make the processing of per­sonal data necessary.

Article 6 Para. 1 lit. f GDPR serves as the legal foundation for the situation that pro­cessing is necessary to ensure a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not exceed the first named interest.

Deletion of data and duration of storage

The personal data of the data subject are deleted or disabled as soon as the purpose for which the data was stored lapses. In addition, storage can take place if this was stipulated by the European or national legislatures in orders, laws or other regulations in accordance with European Union law to which the responsible party is subject. Disabling or deletion of the data is also carried out if a storage period prescribed by the standards as named expires unless there is a necessity for the continued storage of the data for the concluding or fulfilling of a contract.

IV. Making available of our website and creation of logfiles

Description and range of data processing

On every visit on our website our system automatically collects data and information of the computer system calling. The following data is collected:

• Information on the type of browser and its version used
• The operating system of the user
• The internet-service-provider of the user
• The IP-address of the user
• Date and time of the access
• The website, from which an accessing system reaches our website
• Websites, which are accessed by the computer system of the user via our web­site

This data is also stored in the logfiles of our system. However, IP-addresses of the users or other data, which would allow the assignment of the data to a particular user, are not stored. Also, this data is not stored together with other personal data of the user.

Legal foundations for the data processing

Article 6 Para. 1 lit. f GDPR is the legal foundation for the temporary storage of data and logfiles.

Purpose of data processing

The temporary storage of the IP-address by the system is necessary to enable the delivery of the website to the computer of the user. For achieving this the IP-address of the user must remain stored for the duration of the session.

The storage in logfiles occurs to enable the proper functioning of the website. Fur­thermore, this data serves to optimize the website and to enable the security of our IT-systems. An analysis of the data for marketing purposes does not happen.

The legal foundation is our legitimate interest in data processing according to Article 6 Para.1 lit. f GDPR.

Duration of storage

The data is deleted or disabled as soon as the purpose for which the data was stored lapses. This is the case when the particular session has ended in situations where the data is collected for making the website available.

This is the case at the latest seven days after the time when the data was stored in log files. A storage exceeding this period is possible. In this case the IP-addresses of the users are deleted or distorted so that an assignment of the client calling in is no longer possible.

Possibility for objection and deletion

The collection of data for the making available of the website and the storage of data in logfiles is compulsory for operating the website. Thus, there is no right to object by the user.

Use of cookies

1. a) Description and range of data processing

Our website uses cookies. In general, cookies are small text files which are stored on your computer and which store certain settings and data for exchange with the online offer from us via your browser. If a user calls in a website, a cookie can be stored in the operating system of the user’s computer. This cookie usually contains a unique string of characters, which allows an unambiguous identification of the browser when calling in the website again.

We are using cookies to improve our online offer. Some elements of our website re­quire that a browser calling in can be identified after a changeover.

The following data is stored and transmitted:

• Language settings
• Log-In-information

The data of the user collected in this way is pseudonymized by technical processes. Accordingly, assignment of the data to the user calling in is no longer possible. The data collected is not stored together with other personal data of the user.

When our website is called, the users are informed by means of an information ban­ner about the use of cookies for analytical purposes and are referred to this data protection information. In this connection reference is given to how storage of cookies can be prevented by the browser settings.

In this connection follows a reference to how that storing of cookies can be prevented by appropriate browser settings.

1. b) Legal foundation of data processing

The legal foundation for the processing of personal data by using cookies is Article 6 Para. 1 lit. f GDPR.

1. c) Purpose of data processing

The purpose behind the use of strictly technically essential cookies is to facilitate the use of the website for the user. Certain functions of our website cannot be offered without the use of cookies. For these functions it is necessary that the browser is recognized even after a page change.

We need cookies for the following application:

• Adoption of language settings

Analysis cookies are used for the purpose of improving the quality of our website and its content. By the analysis cookies we learn how the website is used and thus are able to continually optimize our offer. These purposes also include our legitimate in­terest in the processing of the personal data in accordance with Article 6 Para. 1 lit. f GDPR.

1. d) Duration of storage, possibilities for objection and elimination

Cookies are stored on the user’s computer and are transmitted from this to our web­site. Accordingly, you as user have full control over the use of cookies. By a change of the settings of your internet browser you are able to deactivate or restrict the transmissions of cookies. Cookies already being stored can be deleted at any time. This can also be carried out automatically. However, if cookies for our website are deactivated, it may no longer be possible to fully use all functions of the website. The transmission of flash cookies cannot be prevented by the browser settings but re­quires changes of the settings of the flash player.

 

VI. E-Mail-contact

Description and range of data processing

Contacting us is possible by using the e-mail address provided. In this case personal data of the user transmitted with the e-mail is stored. In this connection no data is passed on to third parties. The data is used exclusively for the processing of the con­versation and will immediately be deleted if it is no longer needed.

Legal foundation of data processing

Legal foundation for the processing of the data after application of the user for a newsletter in case of consent of the user is Article 6 Para. 1 lit. a GDPR.

Legal foundation for the processing of data in case of the transmission of an e-mail is Article 6 Para. 1 lit. f GDPR. Is the e-mail contact directed at closing a contract addi­tional legal foundation for the processing of data is Article 6 Para. 1 lit. b GDPR.

Purpose of data processing

The processing of the personal data from the input mask/e-mail serves us solely for the processing of the contact. In case of contacting by e-mail this is also the neces­sary legitimate interest in the processing of the data.

Other personal data processed during the sending-off process serves to prevent abuse of the contact form and to ensure the security of our IT systems.

Duration of storage

The data is deleted as soon as it is no longer needed for achieving the purpose of their collection. This is the case for the personal data from the input mask of the contact form and those which are sent by e-mail when the particular conversation with the user has ended.

The conversation has ended when the circumstances allow the conclusion that the matter in question has been finally clarified.

The additional personal data collected during the sending-off process is deleted the latest after a period of seven days.

Possibilities for objection and elimination

At any time the user has the opportunity to withdraw his consent on the processing of personal data. If the user is contacting us by e-mail, he can object to the storage of his personal data at any time. In this case the conversation cannot be continued.

VII.       Rights of the data subject

If your personal data is processed, then you are the data subject in the sense of the GDPR and you are entitled to the following rights vis à vis the responsible party:

Right of access by the data subject

You can demand from the responsible party confirmation as to whether personal data that relates to you has been processed by us. If such processing has taken place, you can demand information from the responsible party on the following:

• The purposes for which the personal data is processed;
• The categories of personal data which are processed;
• The recipients or, resp., the categories of recipients to which the personal data relating to you has been disclosed or will be disclosed;
• The planned duration of the storage of the personal data relating to you or, if dis­tinct statements on this are not possible, the criteria for the laying down of duration of storage;
• The existence of a right to correction or deletion of the personal data relating to yourself, of a right to a restriction of the processing by the responsible party or of a right of objection to this processing;
• The existence of a right of appeal at a supervisory authority;
• All available information on the origin of the data if the personal data was not collected at the data subject;
• The existence of an automated decision-finding process including profiling in ac­cordance with Article 22 Para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and its scope and the effects strived for of such a processing for the data subject in question.

You are entitled to the right to demand information on whether the personal data re­lating to yourself is transmitted to a third country or an international organization. In this connection you can demand to be instructed on the suitable guarantees in ac­cordance with Article 46 GDPR in connection with the transmission.

Right to correction

You have a right to correction and/or completion vis à vis the responsible party in so far as the personal data as processed and which relates to yourself is incorrect or incomplete. The responsible party has to carry out the correction without delay.

Right to restrict the processing of personal data

Provided the following preconditions are met you can demand restriction of the pro­cessing of the personal data relating to you:

• if you dispute the correctness of the personal data relating to yourself for a pe­riod which makes it possible for the responsible party to check the correctness of the personal data;
• if the processing is unlawful and you reject deletion of the personal data and de­mand restriction of the use of the personal data instead;
• if the responsible party no longer needs the personal data for purposes of the processing but you need the data for the advancing, exercising or defending of legal claims, or
• if you have advanced objection to the processing in accordance with Article 21 Para. 1 GDPR but it has not yet been established whether the justified rea­sons of the responsible party outweigh your reasons.

If the processing of the personal data relating to yourself has been restricted, then this data – apart from the storage of it – may only be processed with your consent or for the assertion, exercising or defending of legal claims or for the protection of the rights of another natural person or legal entity or for reasons relating to an important public interest of the European Union or of a member state.

If the restriction of the processing has been restricted in accordance with the afore-mentioned preconditions, then you will be informed by the responsible party before the restriction is cancelled.

Right to erasure

1. a) Deletion obligation

You can demand by the responsible party that the personal data relating to yourself is deleted without delay and the responsible party is then obliged to delete this data without delay in so far as one of the following reasons applies:

• The personal data relating to you is no longer required for the purposes for which it was collected or for which it was processed.
• You revoke your consent, on which processing in accordance with Article 6 Para. 1 lit. a or Article 9 Para.2 lit. a GDPR was based, and there is no other legal foundation for the processing.
• You submit an objection to the processing in accordance with Article 21 Para. 1 GDPR and there are no justified reasons for the processing with a higher priority, or you submit an objection to the processing in accordance with Article 21 Para. 2 GDPR.
• The personal data relating to you was processed unlawfully.
• The deletion of the personal data relating to you is required to fulfil a legal obliga­tion in accordance with European Union law or the law of the member states, which laws the responsible party is subject to.
• The personal data relating to you was collected in relation to services offered by the information society in accordance with Article 8 Para. 1 GDPR.

1. b) Information to third parties

If the responsible party has made the personal data relating to you public and if he/she is obliged to delete this data in accordance with Article 17 Para. 1 GDPR, then he/she shall take reasonable measures including technical ones – whereby ac­count shall be taken of the available technology and the implementation costs – to inform the responsible parties for the data processing which process the personal data that you as data subject have demanded from them the deletion of all links to this personal data or of copies or replicates of these.

1. c) Exceptions

The right to erasure does not exist in so far as the processing is necessary for

• the exercising of the right of free expression of opinion and to information;
• for the fulfilment of a legal obligation, which requires the processing in accord­ance with the law of the European Union or the law of the member states, which laws the responsible party is subject to, or for the carrying out of a task, which lies in the public interest or which is carried out in the exercising of pub­lic authority, which authority was transferred to the responsible party;
• for reasons of public interest in the field of public health in accordance with Arti­cle 9 Para. 2 lit. h and i as well as Article 9 Para. 3 GDPR;
• for archiving purposes, scientific or historical research purposes lying in the pub­lic interest or for statistical purposes in accordance with Article 89 Para. 1 GDPR, in so far as the right named in section a) probably makes achieving of the objectives of the processing impossible or impairs it seriously, or
• for the advancing, exercising or defending of legal claims.

Right to information

If you have advanced the right to the correcting, erasure or restricting of the pro­cessing to the responsible party, then the latter is obliged to inform all recipients, to which the personal data relating to you was disclosed, of this correction or erasure of the data or of the restricting of the processing, unless this proves itself to be impossi­ble or linked with unreasonable expenditure.

You are entitled to the right vis à vis the responsible party to be informed about these recipients.

Right to data portability

You have the right to receive the personal data relating to yourself, which you made available to the responsible party, in a structured, conventional and machine-reada­ble format. In addition, you have the right to transmit this data to another responsible party without hindrance by the responsible party to whom the personal data was made available, in so far as

• the processing is based on consent in accordance with Article 6 Para. 1 lit. a GDPR or Article 9 Para. 2 lit. a GDPR or on a contract in accordance with Arti­cle 6 Para. 1 lit. b GDPR and
• the processing is carried out by means of automated processes.

In exercising this right, you have in addition the right to obtain the personal data re­lating to you is transferred directly from one responsible party to another responsible party in so far as this is technically possible. The freedoms and rights of other per­sons may not be impaired thereby.

The right to data portability applies not for the processing of personal data, which is necessary for the carrying out of a task, which lies in the public interest or in the ex­ercising of public authority and which task was transferred to the responsible party.

Right to object

For reasons which result from your particular situation you have the right to advance at any time objection to the processing of the personal data relating to you, which processing is carried out on the basis of Article 6 Para. 1 lit. e or f GDPR. This right also applies to the profiling based on these provisions.

The responsible party shall then no longer process the personal data relating to you, unless he/she can prove compelling reasons worthy of protection, which reasons overweigh your interests, rights and freedoms or where the processing serves the advancing, exercising or defending of legal claims.

If the personal data relating to you is processed for the purpose of direct advertising, then you have the right to advance at any time objection to the processing of the per­sonal data relating to you for purposes of such advertising. This applies also to the profiling in so far as this is carried out in connection with such direct advertising.

If you object to the processing for purposes of direct advertising, then the personal data relating to you will no longer be processed for these purposes.

You have the opportunity – in connection with the use of services of the information society and regardless of directive 2002/58/EC – to exercise your right of objection with the aid of automated processes in which technical specifications are used.

You have also the right for reasons which result from your particular situation to ad­vance at any time objection to the processing of the personal data relating to you which processing is carried out for scientific or historic purposes or for statistical pur­poses according to Article 89 Para. 1 GDPR.

Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your consent at any time. On withdrawal we immedi­ately will delete your personal data and no longer process it. The legality of the pro­cessing carried out prior to your withdrawal on the base of your given consent is not affected by you withdrawal.

Right to complain at a supervisory authority

Regardless of another regulatory or judicial remedy, you are entitled to the right to lodge a complaint at a supervisory authority and here in particular at a supervisory authority in the member state of your place of residence, of your place of work or of the place where the suspected infringement took place when you are of the opinion that the processing of the personal data relating to you infringes the GDPR.

In this case the supervisory authority, at which the complaint was lodged, shall inform the complainant on the status and the results of the complaint including the possibility of a judicial remedy in accordance with Article 78 GDPR.

I. Name and address of the responsible party

The responsible party in the sense of the General Data Protection Regulation (GDPR) and of other national data protection regulations in force in the member states of European Union as well as of other regulations with a legal data-protecting character is the

CTP Advanced Materials GmbH

Stahlstrasse 60

D-65428 Ruesselsheim, Germany

Fon: +49 6142 91 85 0

Fax: +49 6142 91 85 55

Mail: ctp@ctpgmbh.de

 

The processing of some data takes place in joint responsibility according to Art. 26 GDPR with:

Aditya Birla Group
Aditya Birla Centre
S K Ahire Marg, Worli

Mumbai 400030, India

II. Name and address of the data protection officer

The data protection officer of the responsible party is:

daschug GmbH

Robert-Bosch-Strasse 7

64293 Darmstadt, Germany

Fon +49 6151 6673 440

Mail: datenschutz@ctpgmbh.de

III.    General information on data processing

Range of the processing of personal data

Generally, we collect and process personal data of users only as long as this is re­quired for providing a properly functioning website as well as delivering our contents and services. The collection and use of personal data of our users on a regular basis only takes place after consent of the data subject. An exception applies to those cases where obtaining consent prior to use is not possible based on matters of law and fact and the processing of data is allowed by legal regulations.

Legal fundamentals for the processing of personal data

In so far as we obtain the consent of the data subject for the processing of personal data Article 6 Para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the foundation for the processing of personal data.

Article 6 Para. 1 lit. b GDPR serves as the legal foundation for the processing of per­sonal data which is necessary for the fulfilment of a contract if the data subject is party to this contract. This applies also to the processing processes which are neces­sary for the execution of pre-contractual measures.

Article 6 Para. 1 lit. c GDPR serves as the legal foundation in so far as processing of personal data is necessary for the fulfilment of a legal obligation applying to our en­terprise.

Article 6 Para. 1 lit. d GDPR serves as the legal foundation for the situation that vital interests of the data subject or another natural person make the processing of per­sonal data necessary.

Article 6 Para. 1 lit. f GDPR serves as the legal foundation for the situation that pro­cessing is necessary to ensure a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not exceed the first named interest.

Deletion of data and duration of storage

The personal data of the data subject are deleted or disabled as soon as the purpose for which the data was stored lapses. In addition, storage can take place if this was stipulated by the European or national legislatures in orders, laws or other regulations in accordance with European Union law to which the responsible party is subject. Disabling or deletion of the data is also carried out if a storage period prescribed by the standards as named expires unless there is a necessity for the continued storage of the data for the concluding or fulfilling of a contract.

IV. Making available of our website and creation of logfiles

Description and range of data processing

On every visit on our website our system automatically collects data and information of the computer system calling. The following data is collected:

• Information on the type of browser and its version used
• The operating system of the user
• The internet-service-provider of the user
• The IP-address of the user
• Date and time of the access
• The website, from which an accessing system reaches our website
• Websites, which are accessed by the computer system of the user via our web­site

This data is also stored in the logfiles of our system. However, IP-addresses of the users or other data, which would allow the assignment of the data to a particular user, are not stored. Also, this data is not stored together with other personal data of the user.

Legal foundations for the data processing

Article 6 Para. 1 lit. f GDPR is the legal foundation for the temporary storage of data and logfiles.

Purpose of data processing

The temporary storage of the IP-address by the system is necessary to enable the delivery of the website to the computer of the user. For achieving this the IP-address of the user must remain stored for the duration of the session.

The storage in logfiles occurs to enable the proper functioning of the website. Fur­thermore, this data serves to optimize the website and to enable the security of our IT-systems. An analysis of the data for marketing purposes does not happen.

The legal foundation is our legitimate interest in data processing according to Article 6 Para.1 lit. f GDPR.

Duration of storage

The data is deleted or disabled as soon as the purpose for which the data was stored lapses. This is the case when the particular session has ended in situations where the data is collected for making the website available.

This is the case at the latest seven days after the time when the data was stored in log files. A storage exceeding this period is possible. In this case the IP-addresses of the users are deleted or distorted so that an assignment of the client calling in is no longer possible.

Possibility for objection and deletion

The collection of data for the making available of the website and the storage of data in logfiles is compulsory for operating the website. Thus, there is no right to object by the user.

Use of cookies

1. a) Description and range of data processing

Our website uses cookies. In general, cookies are small text files which are stored on your computer and which store certain settings and data for exchange with the online offer from us via your browser. If a user calls in a website, a cookie can be stored in the operating system of the user’s computer. This cookie usually contains a unique string of characters, which allows an unambiguous identification of the browser when calling in the website again.

We are using cookies to improve our online offer. Some elements of our website re­quire that a browser calling in can be identified after a changeover.

The following data is stored and transmitted:

• Language settings
• Log-In-information

The data of the user collected in this way is pseudonymized by technical processes. Accordingly, assignment of the data to the user calling in is no longer possible. The data collected is not stored together with other personal data of the user.

When our website is called, the users are informed by means of an information ban­ner about the use of cookies for analytical purposes and are referred to this data protection information. In this connection reference is given to how storage of cookies can be prevented by the browser settings.

In this connection follows a reference to how that storing of cookies can be prevented by appropriate browser settings.

1. b) Legal foundation of data processing

The legal foundation for the processing of personal data by using cookies is Article 6 Para. 1 lit. f GDPR.

1. c) Purpose of data processing

The purpose behind the use of strictly technically essential cookies is to facilitate the use of the website for the user. Certain functions of our website cannot be offered without the use of cookies. For these functions it is necessary that the browser is recognized even after a page change.

We need cookies for the following application:

• Adoption of language settings

Analysis cookies are used for the purpose of improving the quality of our website and its content. By the analysis cookies we learn how the website is used and thus are able to continually optimize our offer. These purposes also include our legitimate in­terest in the processing of the personal data in accordance with Article 6 Para. 1 lit. f GDPR.

1. d) Duration of storage, possibilities for objection and elimination

Cookies are stored on the user’s computer and are transmitted from this to our web­site. Accordingly, you as user have full control over the use of cookies. By a change of the settings of your internet browser you are able to deactivate or restrict the transmissions of cookies. Cookies already being stored can be deleted at any time. This can also be carried out automatically. However, if cookies for our website are deactivated, it may no longer be possible to fully use all functions of the website. The transmission of flash cookies cannot be prevented by the browser settings but re­quires changes of the settings of the flash player.

 

VI. E-Mail-contact

Description and range of data processing

Contacting us is possible by using the e-mail address provided. In this case personal data of the user transmitted with the e-mail is stored. In this connection no data is passed on to third parties. The data is used exclusively for the processing of the con­versation and will immediately be deleted if it is no longer needed.

Legal foundation of data processing

Legal foundation for the processing of the data after application of the user for a newsletter in case of consent of the user is Article 6 Para. 1 lit. a GDPR.

Legal foundation for the processing of data in case of the transmission of an e-mail is Article 6 Para. 1 lit. f GDPR. Is the e-mail contact directed at closing a contract addi­tional legal foundation for the processing of data is Article 6 Para. 1 lit. b GDPR.

Purpose of data processing

The processing of the personal data from the input mask/e-mail serves us solely for the processing of the contact. In case of contacting by e-mail this is also the neces­sary legitimate interest in the processing of the data.

Other personal data processed during the sending-off process serves to prevent abuse of the contact form and to ensure the security of our IT systems.

Duration of storage

The data is deleted as soon as it is no longer needed for achieving the purpose of their collection. This is the case for the personal data from the input mask of the contact form and those which are sent by e-mail when the particular conversation with the user has ended.

The conversation has ended when the circumstances allow the conclusion that the matter in question has been finally clarified.

The additional personal data collected during the sending-off process is deleted the latest after a period of seven days.

Possibilities for objection and elimination

At any time the user has the opportunity to withdraw his consent on the processing of personal data. If the user is contacting us by e-mail, he can object to the storage of his personal data at any time. In this case the conversation cannot be continued.

VII.       Rights of the data subject

If your personal data is processed, then you are the data subject in the sense of the GDPR and you are entitled to the following rights vis à vis the responsible party:

Right of access by the data subject

You can demand from the responsible party confirmation as to whether personal data that relates to you has been processed by us. If such processing has taken place, you can demand information from the responsible party on the following:

• The purposes for which the personal data is processed;
• The categories of personal data which are processed;
• The recipients or, resp., the categories of recipients to which the personal data relating to you has been disclosed or will be disclosed;
• The planned duration of the storage of the personal data relating to you or, if dis­tinct statements on this are not possible, the criteria for the laying down of duration of storage;
• The existence of a right to correction or deletion of the personal data relating to yourself, of a right to a restriction of the processing by the responsible party or of a right of objection to this processing;
• The existence of a right of appeal at a supervisory authority;
• All available information on the origin of the data if the personal data was not collected at the data subject;
• The existence of an automated decision-finding process including profiling in ac­cordance with Article 22 Para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and its scope and the effects strived for of such a processing for the data subject in question.

You are entitled to the right to demand information on whether the personal data re­lating to yourself is transmitted to a third country or an international organization. In this connection you can demand to be instructed on the suitable guarantees in ac­cordance with Article 46 GDPR in connection with the transmission.

Right to correction

You have a right to correction and/or completion vis à vis the responsible party in so far as the personal data as processed and which relates to yourself is incorrect or incomplete. The responsible party has to carry out the correction without delay.

Right to restrict the processing of personal data

Provided the following preconditions are met you can demand restriction of the pro­cessing of the personal data relating to you:

• if you dispute the correctness of the personal data relating to yourself for a pe­riod which makes it possible for the responsible party to check the correctness of the personal data;
• if the processing is unlawful and you reject deletion of the personal data and de­mand restriction of the use of the personal data instead;
• if the responsible party no longer needs the personal data for purposes of the processing but you need the data for the advancing, exercising or defending of legal claims, or
• if you have advanced objection to the processing in accordance with Article 21 Para. 1 GDPR but it has not yet been established whether the justified rea­sons of the responsible party outweigh your reasons.

If the processing of the personal data relating to yourself has been restricted, then this data – apart from the storage of it – may only be processed with your consent or for the assertion, exercising or defending of legal claims or for the protection of the rights of another natural person or legal entity or for reasons relating to an important public interest of the European Union or of a member state.

If the restriction of the processing has been restricted in accordance with the afore-mentioned preconditions, then you will be informed by the responsible party before the restriction is cancelled.

Right to erasure

1. a) Deletion obligation

You can demand by the responsible party that the personal data relating to yourself is deleted without delay and the responsible party is then obliged to delete this data without delay in so far as one of the following reasons applies:

• The personal data relating to you is no longer required for the purposes for which it was collected or for which it was processed.
• You revoke your consent, on which processing in accordance with Article 6 Para. 1 lit. a or Article 9 Para.2 lit. a GDPR was based, and there is no other legal foundation for the processing.
• You submit an objection to the processing in accordance with Article 21 Para. 1 GDPR and there are no justified reasons for the processing with a higher priority, or you submit an objection to the processing in accordance with Article 21 Para. 2 GDPR.
• The personal data relating to you was processed unlawfully.
• The deletion of the personal data relating to you is required to fulfil a legal obliga­tion in accordance with European Union law or the law of the member states, which laws the responsible party is subject to.
• The personal data relating to you was collected in relation to services offered by the information society in accordance with Article 8 Para. 1 GDPR.

1. b) Information to third parties

If the responsible party has made the personal data relating to you public and if he/she is obliged to delete this data in accordance with Article 17 Para. 1 GDPR, then he/she shall take reasonable measures including technical ones – whereby ac­count shall be taken of the available technology and the implementation costs – to inform the responsible parties for the data processing which process the personal data that you as data subject have demanded from them the deletion of all links to this personal data or of copies or replicates of these.

1. c) Exceptions

The right to erasure does not exist in so far as the processing is necessary for

• the exercising of the right of free expression of opinion and to information;
• for the fulfilment of a legal obligation, which requires the processing in accord­ance with the law of the European Union or the law of the member states, which laws the responsible party is subject to, or for the carrying out of a task, which lies in the public interest or which is carried out in the exercising of pub­lic authority, which authority was transferred to the responsible party;
• for reasons of public interest in the field of public health in accordance with Arti­cle 9 Para. 2 lit. h and i as well as Article 9 Para. 3 GDPR;
• for archiving purposes, scientific or historical research purposes lying in the pub­lic interest or for statistical purposes in accordance with Article 89 Para. 1 GDPR, in so far as the right named in section a) probably makes achieving of the objectives of the processing impossible or impairs it seriously, or
• for the advancing, exercising or defending of legal claims.

Right to information

If you have advanced the right to the correcting, erasure or restricting of the pro­cessing to the responsible party, then the latter is obliged to inform all recipients, to which the personal data relating to you was disclosed, of this correction or erasure of the data or of the restricting of the processing, unless this proves itself to be impossi­ble or linked with unreasonable expenditure.

You are entitled to the right vis à vis the responsible party to be informed about these recipients.

Right to data portability

You have the right to receive the personal data relating to yourself, which you made available to the responsible party, in a structured, conventional and machine-reada­ble format. In addition, you have the right to transmit this data to another responsible party without hindrance by the responsible party to whom the personal data was made available, in so far as

• the processing is based on consent in accordance with Article 6 Para. 1 lit. a GDPR or Article 9 Para. 2 lit. a GDPR or on a contract in accordance with Arti­cle 6 Para. 1 lit. b GDPR and
• the processing is carried out by means of automated processes.

In exercising this right, you have in addition the right to obtain the personal data re­lating to you is transferred directly from one responsible party to another responsible party in so far as this is technically possible. The freedoms and rights of other per­sons may not be impaired thereby.

The right to data portability applies not for the processing of personal data, which is necessary for the carrying out of a task, which lies in the public interest or in the ex­ercising of public authority and which task was transferred to the responsible party.

Right to object

For reasons which result from your particular situation you have the right to advance at any time objection to the processing of the personal data relating to you, which processing is carried out on the basis of Article 6 Para. 1 lit. e or f GDPR. This right also applies to the profiling based on these provisions.

The responsible party shall then no longer process the personal data relating to you, unless he/she can prove compelling reasons worthy of protection, which reasons overweigh your interests, rights and freedoms or where the processing serves the advancing, exercising or defending of legal claims.

If the personal data relating to you is processed for the purpose of direct advertising, then you have the right to advance at any time objection to the processing of the per­sonal data relating to you for purposes of such advertising. This applies also to the profiling in so far as this is carried out in connection with such direct advertising.

If you object to the processing for purposes of direct advertising, then the personal data relating to you will no longer be processed for these purposes.

You have the opportunity – in connection with the use of services of the information society and regardless of directive 2002/58/EC – to exercise your right of objection with the aid of automated processes in which technical specifications are used.

You have also the right for reasons which result from your particular situation to ad­vance at any time objection to the processing of the personal data relating to you which processing is carried out for scientific or historic purposes or for statistical pur­poses according to Article 89 Para. 1 GDPR.

Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your consent at any time. On withdrawal we immedi­ately will delete your personal data and no longer process it. The legality of the pro­cessing carried out prior to your withdrawal on the base of your given consent is not affected by you withdrawal.

Right to complain at a supervisory authority

Regardless of another regulatory or judicial remedy, you are entitled to the right to lodge a complaint at a supervisory authority and here in particular at a supervisory authority in the member state of your place of residence, of your place of work or of the place where the suspected infringement took place when you are of the opinion that the processing of the personal data relating to you infringes the GDPR.

In this case the supervisory authority, at which the complaint was lodged, shall inform the complainant on the status and the results of the complaint including the possibility of a judicial remedy in accordance with Article 78 GDPR.

I. Name and address of the responsible party

The responsible party in the sense of the General Data Protection Regulation (GDPR) and of other national data protection regulations in force in the member states of European Union as well as of other regulations with a legal data-protecting character is the

CTP Advanced Materials GmbH

Stahlstrasse 60

D-65428 Ruesselsheim, Germany

Fon: +49 6142 91 85 0

Fax: +49 6142 91 85 55

Mail: ctp@ctpgmbh.de

 

The processing of some data takes place in joint responsibility according to Art. 26 GDPR with:

Aditya Birla Group
Aditya Birla Centre
S K Ahire Marg, Worli

Mumbai 400030, India

II. Name and address of the data protection officer

The data protection officer of the responsible party is:

daschug GmbH

Robert-Bosch-Strasse 7

64293 Darmstadt, Germany

Fon +49 6151 6673 440

Mail: datenschutz@ctpgmbh.de

III.    General information on data processing

Range of the processing of personal data

Generally, we collect and process personal data of users only as long as this is re­quired for providing a properly functioning website as well as delivering our contents and services. The collection and use of personal data of our users on a regular basis only takes place after consent of the data subject. An exception applies to those cases where obtaining consent prior to use is not possible based on matters of law and fact and the processing of data is allowed by legal regulations.

Legal fundamentals for the processing of personal data

In so far as we obtain the consent of the data subject for the processing of personal data Article 6 Para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the foundation for the processing of personal data.

Article 6 Para. 1 lit. b GDPR serves as the legal foundation for the processing of per­sonal data which is necessary for the fulfilment of a contract if the data subject is party to this contract. This applies also to the processing processes which are neces­sary for the execution of pre-contractual measures.

Article 6 Para. 1 lit. c GDPR serves as the legal foundation in so far as processing of personal data is necessary for the fulfilment of a legal obligation applying to our en­terprise.

Article 6 Para. 1 lit. d GDPR serves as the legal foundation for the situation that vital interests of the data subject or another natural person make the processing of per­sonal data necessary.

Article 6 Para. 1 lit. f GDPR serves as the legal foundation for the situation that pro­cessing is necessary to ensure a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not exceed the first named interest.

Deletion of data and duration of storage

The personal data of the data subject are deleted or disabled as soon as the purpose for which the data was stored lapses. In addition, storage can take place if this was stipulated by the European or national legislatures in orders, laws or other regulations in accordance with European Union law to which the responsible party is subject. Disabling or deletion of the data is also carried out if a storage period prescribed by the standards as named expires unless there is a necessity for the continued storage of the data for the concluding or fulfilling of a contract.

IV. Making available of our website and creation of logfiles

Description and range of data processing

On every visit on our website our system automatically collects data and information of the computer system calling. The following data is collected:

• Information on the type of browser and its version used
• The operating system of the user
• The internet-service-provider of the user
• The IP-address of the user
• Date and time of the access
• The website, from which an accessing system reaches our website
• Websites, which are accessed by the computer system of the user via our web­site

This data is also stored in the logfiles of our system. However, IP-addresses of the users or other data, which would allow the assignment of the data to a particular user, are not stored. Also, this data is not stored together with other personal data of the user.

Legal foundations for the data processing

Article 6 Para. 1 lit. f GDPR is the legal foundation for the temporary storage of data and logfiles.

Purpose of data processing

The temporary storage of the IP-address by the system is necessary to enable the delivery of the website to the computer of the user. For achieving this the IP-address of the user must remain stored for the duration of the session.

The storage in logfiles occurs to enable the proper functioning of the website. Fur­thermore, this data serves to optimize the website and to enable the security of our IT-systems. An analysis of the data for marketing purposes does not happen.

The legal foundation is our legitimate interest in data processing according to Article 6 Para.1 lit. f GDPR.

Duration of storage

The data is deleted or disabled as soon as the purpose for which the data was stored lapses. This is the case when the particular session has ended in situations where the data is collected for making the website available.

This is the case at the latest seven days after the time when the data was stored in log files. A storage exceeding this period is possible. In this case the IP-addresses of the users are deleted or distorted so that an assignment of the client calling in is no longer possible.

Possibility for objection and deletion

The collection of data for the making available of the website and the storage of data in logfiles is compulsory for operating the website. Thus, there is no right to object by the user.

Use of cookies

1. a) Description and range of data processing

Our website uses cookies. In general, cookies are small text files which are stored on your computer and which store certain settings and data for exchange with the online offer from us via your browser. If a user calls in a website, a cookie can be stored in the operating system of the user’s computer. This cookie usually contains a unique string of characters, which allows an unambiguous identification of the browser when calling in the website again.

We are using cookies to improve our online offer. Some elements of our website re­quire that a browser calling in can be identified after a changeover.

The following data is stored and transmitted:

• Language settings
• Log-In-information

The data of the user collected in this way is pseudonymized by technical processes. Accordingly, assignment of the data to the user calling in is no longer possible. The data collected is not stored together with other personal data of the user.

When our website is called, the users are informed by means of an information ban­ner about the use of cookies for analytical purposes and are referred to this data protection information. In this connection reference is given to how storage of cookies can be prevented by the browser settings.

In this connection follows a reference to how that storing of cookies can be prevented by appropriate browser settings.

1. b) Legal foundation of data processing

The legal foundation for the processing of personal data by using cookies is Article 6 Para. 1 lit. f GDPR.

1. c) Purpose of data processing

The purpose behind the use of strictly technically essential cookies is to facilitate the use of the website for the user. Certain functions of our website cannot be offered without the use of cookies. For these functions it is necessary that the browser is recognized even after a page change.

We need cookies for the following application:

• Adoption of language settings

Analysis cookies are used for the purpose of improving the quality of our website and its content. By the analysis cookies we learn how the website is used and thus are able to continually optimize our offer. These purposes also include our legitimate in­terest in the processing of the personal data in accordance with Article 6 Para. 1 lit. f GDPR.

1. d) Duration of storage, possibilities for objection and elimination

Cookies are stored on the user’s computer and are transmitted from this to our web­site. Accordingly, you as user have full control over the use of cookies. By a change of the settings of your internet browser you are able to deactivate or restrict the transmissions of cookies. Cookies already being stored can be deleted at any time. This can also be carried out automatically. However, if cookies for our website are deactivated, it may no longer be possible to fully use all functions of the website. The transmission of flash cookies cannot be prevented by the browser settings but re­quires changes of the settings of the flash player.

 

VI. E-Mail-contact

Description and range of data processing

Contacting us is possible by using the e-mail address provided. In this case personal data of the user transmitted with the e-mail is stored. In this connection no data is passed on to third parties. The data is used exclusively for the processing of the con­versation and will immediately be deleted if it is no longer needed.

Legal foundation of data processing

Legal foundation for the processing of the data after application of the user for a newsletter in case of consent of the user is Article 6 Para. 1 lit. a GDPR.

Legal foundation for the processing of data in case of the transmission of an e-mail is Article 6 Para. 1 lit. f GDPR. Is the e-mail contact directed at closing a contract addi­tional legal foundation for the processing of data is Article 6 Para. 1 lit. b GDPR.

Purpose of data processing

The processing of the personal data from the input mask/e-mail serves us solely for the processing of the contact. In case of contacting by e-mail this is also the neces­sary legitimate interest in the processing of the data.

Other personal data processed during the sending-off process serves to prevent abuse of the contact form and to ensure the security of our IT systems.

Duration of storage

The data is deleted as soon as it is no longer needed for achieving the purpose of their collection. This is the case for the personal data from the input mask of the contact form and those which are sent by e-mail when the particular conversation with the user has ended.

The conversation has ended when the circumstances allow the conclusion that the matter in question has been finally clarified.

The additional personal data collected during the sending-off process is deleted the latest after a period of seven days.

Possibilities for objection and elimination

At any time the user has the opportunity to withdraw his consent on the processing of personal data. If the user is contacting us by e-mail, he can object to the storage of his personal data at any time. In this case the conversation cannot be continued.

VII.       Rights of the data subject

If your personal data is processed, then you are the data subject in the sense of the GDPR and you are entitled to the following rights vis à vis the responsible party:

Right of access by the data subject

You can demand from the responsible party confirmation as to whether personal data that relates to you has been processed by us. If such processing has taken place, you can demand information from the responsible party on the following:

• The purposes for which the personal data is processed;
• The categories of personal data which are processed;
• The recipients or, resp., the categories of recipients to which the personal data relating to you has been disclosed or will be disclosed;
• The planned duration of the storage of the personal data relating to you or, if dis­tinct statements on this are not possible, the criteria for the laying down of duration of storage;
• The existence of a right to correction or deletion of the personal data relating to yourself, of a right to a restriction of the processing by the responsible party or of a right of objection to this processing;
• The existence of a right of appeal at a supervisory authority;
• All available information on the origin of the data if the personal data was not collected at the data subject;
• The existence of an automated decision-finding process including profiling in ac­cordance with Article 22 Para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and its scope and the effects strived for of such a processing for the data subject in question.

You are entitled to the right to demand information on whether the personal data re­lating to yourself is transmitted to a third country or an international organization. In this connection you can demand to be instructed on the suitable guarantees in ac­cordance with Article 46 GDPR in connection with the transmission.

Right to correction

You have a right to correction and/or completion vis à vis the responsible party in so far as the personal data as processed and which relates to yourself is incorrect or incomplete. The responsible party has to carry out the correction without delay.

Right to restrict the processing of personal data

Provided the following preconditions are met you can demand restriction of the pro­cessing of the personal data relating to you:

• if you dispute the correctness of the personal data relating to yourself for a pe­riod which makes it possible for the responsible party to check the correctness of the personal data;
• if the processing is unlawful and you reject deletion of the personal data and de­mand restriction of the use of the personal data instead;
• if the responsible party no longer needs the personal data for purposes of the processing but you need the data for the advancing, exercising or defending of legal claims, or
• if you have advanced objection to the processing in accordance with Article 21 Para. 1 GDPR but it has not yet been established whether the justified rea­sons of the responsible party outweigh your reasons.

If the processing of the personal data relating to yourself has been restricted, then this data – apart from the storage of it – may only be processed with your consent or for the assertion, exercising or defending of legal claims or for the protection of the rights of another natural person or legal entity or for reasons relating to an important public interest of the European Union or of a member state.

If the restriction of the processing has been restricted in accordance with the afore-mentioned preconditions, then you will be informed by the responsible party before the restriction is cancelled.

Right to erasure

1. a) Deletion obligation

You can demand by the responsible party that the personal data relating to yourself is deleted without delay and the responsible party is then obliged to delete this data without delay in so far as one of the following reasons applies:

• The personal data relating to you is no longer required for the purposes for which it was collected or for which it was processed.
• You revoke your consent, on which processing in accordance with Article 6 Para. 1 lit. a or Article 9 Para.2 lit. a GDPR was based, and there is no other legal foundation for the processing.
• You submit an objection to the processing in accordance with Article 21 Para. 1 GDPR and there are no justified reasons for the processing with a higher priority, or you submit an objection to the processing in accordance with Article 21 Para. 2 GDPR.
• The personal data relating to you was processed unlawfully.
• The deletion of the personal data relating to you is required to fulfil a legal obliga­tion in accordance with European Union law or the law of the member states, which laws the responsible party is subject to.
• The personal data relating to you was collected in relation to services offered by the information society in accordance with Article 8 Para. 1 GDPR.

1. b) Information to third parties

If the responsible party has made the personal data relating to you public and if he/she is obliged to delete this data in accordance with Article 17 Para. 1 GDPR, then he/she shall take reasonable measures including technical ones – whereby ac­count shall be taken of the available technology and the implementation costs – to inform the responsible parties for the data processing which process the personal data that you as data subject have demanded from them the deletion of all links to this personal data or of copies or replicates of these.

1. c) Exceptions

The right to erasure does not exist in so far as the processing is necessary for

• the exercising of the right of free expression of opinion and to information;
• for the fulfilment of a legal obligation, which requires the processing in accord­ance with the law of the European Union or the law of the member states, which laws the responsible party is subject to, or for the carrying out of a task, which lies in the public interest or which is carried out in the exercising of pub­lic authority, which authority was transferred to the responsible party;
• for reasons of public interest in the field of public health in accordance with Arti­cle 9 Para. 2 lit. h and i as well as Article 9 Para. 3 GDPR;
• for archiving purposes, scientific or historical research purposes lying in the pub­lic interest or for statistical purposes in accordance with Article 89 Para. 1 GDPR, in so far as the right named in section a) probably makes achieving of the objectives of the processing impossible or impairs it seriously, or
• for the advancing, exercising or defending of legal claims.

Right to information

If you have advanced the right to the correcting, erasure or restricting of the pro­cessing to the responsible party, then the latter is obliged to inform all recipients, to which the personal data relating to you was disclosed, of this correction or erasure of the data or of the restricting of the processing, unless this proves itself to be impossi­ble or linked with unreasonable expenditure.

You are entitled to the right vis à vis the responsible party to be informed about these recipients.

Right to data portability

You have the right to receive the personal data relating to yourself, which you made available to the responsible party, in a structured, conventional and machine-reada­ble format. In addition, you have the right to transmit this data to another responsible party without hindrance by the responsible party to whom the personal data was made available, in so far as

• the processing is based on consent in accordance with Article 6 Para. 1 lit. a GDPR or Article 9 Para. 2 lit. a GDPR or on a contract in accordance with Arti­cle 6 Para. 1 lit. b GDPR and
• the processing is carried out by means of automated processes.

In exercising this right, you have in addition the right to obtain the personal data re­lating to you is transferred directly from one responsible party to another responsible party in so far as this is technically possible. The freedoms and rights of other per­sons may not be impaired thereby.

The right to data portability applies not for the processing of personal data, which is necessary for the carrying out of a task, which lies in the public interest or in the ex­ercising of public authority and which task was transferred to the responsible party.

Right to object

For reasons which result from your particular situation you have the right to advance at any time objection to the processing of the personal data relating to you, which processing is carried out on the basis of Article 6 Para. 1 lit. e or f GDPR. This right also applies to the profiling based on these provisions.

The responsible party shall then no longer process the personal data relating to you, unless he/she can prove compelling reasons worthy of protection, which reasons overweigh your interests, rights and freedoms or where the processing serves the advancing, exercising or defending of legal claims.

If the personal data relating to you is processed for the purpose of direct advertising, then you have the right to advance at any time objection to the processing of the per­sonal data relating to you for purposes of such advertising. This applies also to the profiling in so far as this is carried out in connection with such direct advertising.

If you object to the processing for purposes of direct advertising, then the personal data relating to you will no longer be processed for these purposes.

You have the opportunity – in connection with the use of services of the information society and regardless of directive 2002/58/EC – to exercise your right of objection with the aid of automated processes in which technical specifications are used.

You have also the right for reasons which result from your particular situation to ad­vance at any time objection to the processing of the personal data relating to you which processing is carried out for scientific or historic purposes or for statistical pur­poses according to Article 89 Para. 1 GDPR.

Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your consent at any time. On withdrawal we immedi­ately will delete your personal data and no longer process it. The legality of the pro­cessing carried out prior to your withdrawal on the base of your given consent is not affected by you withdrawal.

Right to complain at a supervisory authority

Regardless of another regulatory or judicial remedy, you are entitled to the right to lodge a complaint at a supervisory authority and here in particular at a supervisory authority in the member state of your place of residence, of your place of work or of the place where the suspected infringement took place when you are of the opinion that the processing of the personal data relating to you infringes the GDPR.

In this case the supervisory authority, at which the complaint was lodged, shall inform the complainant on the status and the results of the complaint including the possibility of a judicial remedy in accordance with Article 78 GDPR.

I. Name and address of the responsible party

The responsible party in the sense of the General Data Protection Regulation (GDPR) and of other national data protection regulations in force in the member states of European Union as well as of other regulations with a legal data-protecting character is the

CTP Advanced Materials GmbH

Stahlstrasse 60

D-65428 Ruesselsheim, Germany

Fon: +49 6142 91 85 0

Fax: +49 6142 91 85 55

Mail: ctp@ctpgmbh.de

 

The processing of some data takes place in joint responsibility according to Art. 26 GDPR with:

Aditya Birla Group
Aditya Birla Centre
S K Ahire Marg, Worli

Mumbai 400030, India

II. Name and address of the data protection officer

The data protection officer of the responsible party is:

daschug GmbH

Robert-Bosch-Strasse 7

64293 Darmstadt, Germany

Fon +49 6151 6673 440

Mail: datenschutz@ctpgmbh.de

III.    General information on data processing

Range of the processing of personal data

Generally, we collect and process personal data of users only as long as this is re­quired for providing a properly functioning website as well as delivering our contents and services. The collection and use of personal data of our users on a regular basis only takes place after consent of the data subject. An exception applies to those cases where obtaining consent prior to use is not possible based on matters of law and fact and the processing of data is allowed by legal regulations.

Legal fundamentals for the processing of personal data

In so far as we obtain the consent of the data subject for the processing of personal data Article 6 Para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the foundation for the processing of personal data.

Article 6 Para. 1 lit. b GDPR serves as the legal foundation for the processing of per­sonal data which is necessary for the fulfilment of a contract if the data subject is party to this contract. This applies also to the processing processes which are neces­sary for the execution of pre-contractual measures.

Article 6 Para. 1 lit. c GDPR serves as the legal foundation in so far as processing of personal data is necessary for the fulfilment of a legal obligation applying to our en­terprise.

Article 6 Para. 1 lit. d GDPR serves as the legal foundation for the situation that vital interests of the data subject or another natural person make the processing of per­sonal data necessary.

Article 6 Para. 1 lit. f GDPR serves as the legal foundation for the situation that pro­cessing is necessary to ensure a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not exceed the first named interest.

Deletion of data and duration of storage

The personal data of the data subject are deleted or disabled as soon as the purpose for which the data was stored lapses. In addition, storage can take place if this was stipulated by the European or national legislatures in orders, laws or other regulations in accordance with European Union law to which the responsible party is subject. Disabling or deletion of the data is also carried out if a storage period prescribed by the standards as named expires unless there is a necessity for the continued storage of the data for the concluding or fulfilling of a contract.

IV. Making available of our website and creation of logfiles

Description and range of data processing

On every visit on our website our system automatically collects data and information of the computer system calling. The following data is collected:

• Information on the type of browser and its version used
• The operating system of the user
• The internet-service-provider of the user
• The IP-address of the user
• Date and time of the access
• The website, from which an accessing system reaches our website
• Websites, which are accessed by the computer system of the user via our web­site

This data is also stored in the logfiles of our system. However, IP-addresses of the users or other data, which would allow the assignment of the data to a particular user, are not stored. Also, this data is not stored together with other personal data of the user.

Legal foundations for the data processing

Article 6 Para. 1 lit. f GDPR is the legal foundation for the temporary storage of data and logfiles.

Purpose of data processing

The temporary storage of the IP-address by the system is necessary to enable the delivery of the website to the computer of the user. For achieving this the IP-address of the user must remain stored for the duration of the session.

The storage in logfiles occurs to enable the proper functioning of the website. Fur­thermore, this data serves to optimize the website and to enable the security of our IT-systems. An analysis of the data for marketing purposes does not happen.

The legal foundation is our legitimate interest in data processing according to Article 6 Para.1 lit. f GDPR.

Duration of storage

The data is deleted or disabled as soon as the purpose for which the data was stored lapses. This is the case when the particular session has ended in situations where the data is collected for making the website available.

This is the case at the latest seven days after the time when the data was stored in log files. A storage exceeding this period is possible. In this case the IP-addresses of the users are deleted or distorted so that an assignment of the client calling in is no longer possible.

Possibility for objection and deletion

The collection of data for the making available of the website and the storage of data in logfiles is compulsory for operating the website. Thus, there is no right to object by the user.

Use of cookies

1. a) Description and range of data processing

Our website uses cookies. In general, cookies are small text files which are stored on your computer and which store certain settings and data for exchange with the online offer from us via your browser. If a user calls in a website, a cookie can be stored in the operating system of the user’s computer. This cookie usually contains a unique string of characters, which allows an unambiguous identification of the browser when calling in the website again.

We are using cookies to improve our online offer. Some elements of our website re­quire that a browser calling in can be identified after a changeover.

The following data is stored and transmitted:

• Language settings
• Log-In-information

The data of the user collected in this way is pseudonymized by technical processes. Accordingly, assignment of the data to the user calling in is no longer possible. The data collected is not stored together with other personal data of the user.

When our website is called, the users are informed by means of an information ban­ner about the use of cookies for analytical purposes and are referred to this data protection information. In this connection reference is given to how storage of cookies can be prevented by the browser settings.

In this connection follows a reference to how that storing of cookies can be prevented by appropriate browser settings.

1. b) Legal foundation of data processing

The legal foundation for the processing of personal data by using cookies is Article 6 Para. 1 lit. f GDPR.

1. c) Purpose of data processing

The purpose behind the use of strictly technically essential cookies is to facilitate the use of the website for the user. Certain functions of our website cannot be offered without the use of cookies. For these functions it is necessary that the browser is recognized even after a page change.

We need cookies for the following application:

• Adoption of language settings

Analysis cookies are used for the purpose of improving the quality of our website and its content. By the analysis cookies we learn how the website is used and thus are able to continually optimize our offer. These purposes also include our legitimate in­terest in the processing of the personal data in accordance with Article 6 Para. 1 lit. f GDPR.

1. d) Duration of storage, possibilities for objection and elimination

Cookies are stored on the user’s computer and are transmitted from this to our web­site. Accordingly, you as user have full control over the use of cookies. By a change of the settings of your internet browser you are able to deactivate or restrict the transmissions of cookies. Cookies already being stored can be deleted at any time. This can also be carried out automatically. However, if cookies for our website are deactivated, it may no longer be possible to fully use all functions of the website. The transmission of flash cookies cannot be prevented by the browser settings but re­quires changes of the settings of the flash player.

 

VI. E-Mail-contact

Description and range of data processing

Contacting us is possible by using the e-mail address provided. In this case personal data of the user transmitted with the e-mail is stored. In this connection no data is passed on to third parties. The data is used exclusively for the processing of the con­versation and will immediately be deleted if it is no longer needed.

Legal foundation of data processing

Legal foundation for the processing of the data after application of the user for a newsletter in case of consent of the user is Article 6 Para. 1 lit. a GDPR.

Legal foundation for the processing of data in case of the transmission of an e-mail is Article 6 Para. 1 lit. f GDPR. Is the e-mail contact directed at closing a contract addi­tional legal foundation for the processing of data is Article 6 Para. 1 lit. b GDPR.

Purpose of data processing

The processing of the personal data from the input mask/e-mail serves us solely for the processing of the contact. In case of contacting by e-mail this is also the neces­sary legitimate interest in the processing of the data.

Other personal data processed during the sending-off process serves to prevent abuse of the contact form and to ensure the security of our IT systems.

Duration of storage

The data is deleted as soon as it is no longer needed for achieving the purpose of their collection. This is the case for the personal data from the input mask of the contact form and those which are sent by e-mail when the particular conversation with the user has ended.

The conversation has ended when the circumstances allow the conclusion that the matter in question has been finally clarified.

The additional personal data collected during the sending-off process is deleted the latest after a period of seven days.

Possibilities for objection and elimination

At any time the user has the opportunity to withdraw his consent on the processing of personal data. If the user is contacting us by e-mail, he can object to the storage of his personal data at any time. In this case the conversation cannot be continued.

VII.       Rights of the data subject

If your personal data is processed, then you are the data subject in the sense of the GDPR and you are entitled to the following rights vis à vis the responsible party:

Right of access by the data subject

You can demand from the responsible party confirmation as to whether personal data that relates to you has been processed by us. If such processing has taken place, you can demand information from the responsible party on the following:

• The purposes for which the personal data is processed;
• The categories of personal data which are processed;
• The recipients or, resp., the categories of recipients to which the personal data relating to you has been disclosed or will be disclosed;
• The planned duration of the storage of the personal data relating to you or, if dis­tinct statements on this are not possible, the criteria for the laying down of duration of storage;
• The existence of a right to correction or deletion of the personal data relating to yourself, of a right to a restriction of the processing by the responsible party or of a right of objection to this processing;
• The existence of a right of appeal at a supervisory authority;
• All available information on the origin of the data if the personal data was not collected at the data subject;
• The existence of an automated decision-finding process including profiling in ac­cordance with Article 22 Para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and its scope and the effects strived for of such a processing for the data subject in question.

You are entitled to the right to demand information on whether the personal data re­lating to yourself is transmitted to a third country or an international organization. In this connection you can demand to be instructed on the suitable guarantees in ac­cordance with Article 46 GDPR in connection with the transmission.

Right to correction

You have a right to correction and/or completion vis à vis the responsible party in so far as the personal data as processed and which relates to yourself is incorrect or incomplete. The responsible party has to carry out the correction without delay.

Right to restrict the processing of personal data

Provided the following preconditions are met you can demand restriction of the pro­cessing of the personal data relating to you:

• if you dispute the correctness of the personal data relating to yourself for a pe­riod which makes it possible for the responsible party to check the correctness of the personal data;
• if the processing is unlawful and you reject deletion of the personal data and de­mand restriction of the use of the personal data instead;
• if the responsible party no longer needs the personal data for purposes of the processing but you need the data for the advancing, exercising or defending of legal claims, or
• if you have advanced objection to the processing in accordance with Article 21 Para. 1 GDPR but it has not yet been established whether the justified rea­sons of the responsible party outweigh your reasons.

If the processing of the personal data relating to yourself has been restricted, then this data – apart from the storage of it – may only be processed with your consent or for the assertion, exercising or defending of legal claims or for the protection of the rights of another natural person or legal entity or for reasons relating to an important public interest of the European Union or of a member state.

If the restriction of the processing has been restricted in accordance with the afore-mentioned preconditions, then you will be informed by the responsible party before the restriction is cancelled.

Right to erasure

1. a) Deletion obligation

You can demand by the responsible party that the personal data relating to yourself is deleted without delay and the responsible party is then obliged to delete this data without delay in so far as one of the following reasons applies:

• The personal data relating to you is no longer required for the purposes for which it was collected or for which it was processed.
• You revoke your consent, on which processing in accordance with Article 6 Para. 1 lit. a or Article 9 Para.2 lit. a GDPR was based, and there is no other legal foundation for the processing.
• You submit an objection to the processing in accordance with Article 21 Para. 1 GDPR and there are no justified reasons for the processing with a higher priority, or you submit an objection to the processing in accordance with Article 21 Para. 2 GDPR.
• The personal data relating to you was processed unlawfully.
• The deletion of the personal data relating to you is required to fulfil a legal obliga­tion in accordance with European Union law or the law of the member states, which laws the responsible party is subject to.
• The personal data relating to you was collected in relation to services offered by the information society in accordance with Article 8 Para. 1 GDPR.

1. b) Information to third parties

If the responsible party has made the personal data relating to you public and if he/she is obliged to delete this data in accordance with Article 17 Para. 1 GDPR, then he/she shall take reasonable measures including technical ones – whereby ac­count shall be taken of the available technology and the implementation costs – to inform the responsible parties for the data processing which process the personal data that you as data subject have demanded from them the deletion of all links to this personal data or of copies or replicates of these.

1. c) Exceptions

The right to erasure does not exist in so far as the processing is necessary for

• the exercising of the right of free expression of opinion and to information;
• for the fulfilment of a legal obligation, which requires the processing in accord­ance with the law of the European Union or the law of the member states, which laws the responsible party is subject to, or for the carrying out of a task, which lies in the public interest or which is carried out in the exercising of pub­lic authority, which authority was transferred to the responsible party;
• for reasons of public interest in the field of public health in accordance with Arti­cle 9 Para. 2 lit. h and i as well as Article 9 Para. 3 GDPR;
• for archiving purposes, scientific or historical research purposes lying in the pub­lic interest or for statistical purposes in accordance with Article 89 Para. 1 GDPR, in so far as the right named in section a) probably makes achieving of the objectives of the processing impossible or impairs it seriously, or
• for the advancing, exercising or defending of legal claims.

Right to information

If you have advanced the right to the correcting, erasure or restricting of the pro­cessing to the responsible party, then the latter is obliged to inform all recipients, to which the personal data relating to you was disclosed, of this correction or erasure of the data or of the restricting of the processing, unless this proves itself to be impossi­ble or linked with unreasonable expenditure.

You are entitled to the right vis à vis the responsible party to be informed about these recipients.

Right to data portability

You have the right to receive the personal data relating to yourself, which you made available to the responsible party, in a structured, conventional and machine-reada­ble format. In addition, you have the right to transmit this data to another responsible party without hindrance by the responsible party to whom the personal data was made available, in so far as

• the processing is based on consent in accordance with Article 6 Para. 1 lit. a GDPR or Article 9 Para. 2 lit. a GDPR or on a contract in accordance with Arti­cle 6 Para. 1 lit. b GDPR and
• the processing is carried out by means of automated processes.

In exercising this right, you have in addition the right to obtain the personal data re­lating to you is transferred directly from one responsible party to another responsible party in so far as this is technically possible. The freedoms and rights of other per­sons may not be impaired thereby.

The right to data portability applies not for the processing of personal data, which is necessary for the carrying out of a task, which lies in the public interest or in the ex­ercising of public authority and which task was transferred to the responsible party.

Right to object

For reasons which result from your particular situation you have the right to advance at any time objection to the processing of the personal data relating to you, which processing is carried out on the basis of Article 6 Para. 1 lit. e or f GDPR. This right also applies to the profiling based on these provisions.

The responsible party shall then no longer process the personal data relating to you, unless he/she can prove compelling reasons worthy of protection, which reasons overweigh your interests, rights and freedoms or where the processing serves the advancing, exercising or defending of legal claims.

If the personal data relating to you is processed for the purpose of direct advertising, then you have the right to advance at any time objection to the processing of the per­sonal data relating to you for purposes of such advertising. This applies also to the profiling in so far as this is carried out in connection with such direct advertising.

If you object to the processing for purposes of direct advertising, then the personal data relating to you will no longer be processed for these purposes.

You have the opportunity – in connection with the use of services of the information society and regardless of directive 2002/58/EC – to exercise your right of objection with the aid of automated processes in which technical specifications are used.

You have also the right for reasons which result from your particular situation to ad­vance at any time objection to the processing of the personal data relating to you which processing is carried out for scientific or historic purposes or for statistical pur­poses according to Article 89 Para. 1 GDPR.

Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your consent at any time. On withdrawal we immedi­ately will delete your personal data and no longer process it. The legality of the pro­cessing carried out prior to your withdrawal on the base of your given consent is not affected by you withdrawal.

Right to complain at a supervisory authority

Regardless of another regulatory or judicial remedy, you are entitled to the right to lodge a complaint at a supervisory authority and here in particular at a supervisory authority in the member state of your place of residence, of your place of work or of the place where the suspected infringement took place when you are of the opinion that the processing of the personal data relating to you infringes the GDPR.

In this case the supervisory authority, at which the complaint was lodged, shall inform the complainant on the status and the results of the complaint including the possibility of a judicial remedy in accordance with Article 78 GDPR.

I. Name and address of the responsible party

The responsible party in the sense of the General Data Protection Regulation (GDPR) and of other national data protection regulations in force in the member states of European Union as well as of other regulations with a legal data-protecting character is the

CTP Advanced Materials GmbH

Stahlstrasse 60

D-65428 Ruesselsheim, Germany

Fon: +49 6142 91 85 0

Fax: +49 6142 91 85 55

Mail: ctp@ctpgmbh.de

 

The processing of some data takes place in joint responsibility according to Art. 26 GDPR with:

Aditya Birla Group
Aditya Birla Centre
S K Ahire Marg, Worli

Mumbai 400030, India

II. Name and address of the data protection officer

The data protection officer of the responsible party is:

daschug GmbH

Robert-Bosch-Strasse 7

64293 Darmstadt, Germany

Fon +49 6151 6673 440

Mail: datenschutz@ctpgmbh.de

III.    General information on data processing

Range of the processing of personal data

Generally, we collect and process personal data of users only as long as this is re­quired for providing a properly functioning website as well as delivering our contents and services. The collection and use of personal data of our users on a regular basis only takes place after consent of the data subject. An exception applies to those cases where obtaining consent prior to use is not possible based on matters of law and fact and the processing of data is allowed by legal regulations.

Legal fundamentals for the processing of personal data

In so far as we obtain the consent of the data subject for the processing of personal data Article 6 Para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the foundation for the processing of personal data.

Article 6 Para. 1 lit. b GDPR serves as the legal foundation for the processing of per­sonal data which is necessary for the fulfilment of a contract if the data subject is party to this contract. This applies also to the processing processes which are neces­sary for the execution of pre-contractual measures.

Article 6 Para. 1 lit. c GDPR serves as the legal foundation in so far as processing of personal data is necessary for the fulfilment of a legal obligation applying to our en­terprise.

Article 6 Para. 1 lit. d GDPR serves as the legal foundation for the situation that vital interests of the data subject or another natural person make the processing of per­sonal data necessary.

Article 6 Para. 1 lit. f GDPR serves as the legal foundation for the situation that pro­cessing is necessary to ensure a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not exceed the first named interest.

Deletion of data and duration of storage

The personal data of the data subject are deleted or disabled as soon as the purpose for which the data was stored lapses. In addition, storage can take place if this was stipulated by the European or national legislatures in orders, laws or other regulations in accordance with European Union law to which the responsible party is subject. Disabling or deletion of the data is also carried out if a storage period prescribed by the standards as named expires unless there is a necessity for the continued storage of the data for the concluding or fulfilling of a contract.

IV. Making available of our website and creation of logfiles

Description and range of data processing

On every visit on our website our system automatically collects data and information of the computer system calling. The following data is collected:

• Information on the type of browser and its version used
• The operating system of the user
• The internet-service-provider of the user
• The IP-address of the user
• Date and time of the access
• The website, from which an accessing system reaches our website
• Websites, which are accessed by the computer system of the user via our web­site

This data is also stored in the logfiles of our system. However, IP-addresses of the users or other data, which would allow the assignment of the data to a particular user, are not stored. Also, this data is not stored together with other personal data of the user.

Legal foundations for the data processing

Article 6 Para. 1 lit. f GDPR is the legal foundation for the temporary storage of data and logfiles.

Purpose of data processing

The temporary storage of the IP-address by the system is necessary to enable the delivery of the website to the computer of the user. For achieving this the IP-address of the user must remain stored for the duration of the session.

The storage in logfiles occurs to enable the proper functioning of the website. Fur­thermore, this data serves to optimize the website and to enable the security of our IT-systems. An analysis of the data for marketing purposes does not happen.

The legal foundation is our legitimate interest in data processing according to Article 6 Para.1 lit. f GDPR.

Duration of storage

The data is deleted or disabled as soon as the purpose for which the data was stored lapses. This is the case when the particular session has ended in situations where the data is collected for making the website available.

This is the case at the latest seven days after the time when the data was stored in log files. A storage exceeding this period is possible. In this case the IP-addresses of the users are deleted or distorted so that an assignment of the client calling in is no longer possible.

Possibility for objection and deletion

The collection of data for the making available of the website and the storage of data in logfiles is compulsory for operating the website. Thus, there is no right to object by the user.

Use of cookies

1. a) Description and range of data processing

Our website uses cookies. In general, cookies are small text files which are stored on your computer and which store certain settings and data for exchange with the online offer from us via your browser. If a user calls in a website, a cookie can be stored in the operating system of the user’s computer. This cookie usually contains a unique string of characters, which allows an unambiguous identification of the browser when calling in the website again.

We are using cookies to improve our online offer. Some elements of our website re­quire that a browser calling in can be identified after a changeover.

The following data is stored and transmitted:

• Language settings
• Log-In-information

The data of the user collected in this way is pseudonymized by technical processes. Accordingly, assignment of the data to the user calling in is no longer possible. The data collected is not stored together with other personal data of the user.

When our website is called, the users are informed by means of an information ban­ner about the use of cookies for analytical purposes and are referred to this data protection information. In this connection reference is given to how storage of cookies can be prevented by the browser settings.

In this connection follows a reference to how that storing of cookies can be prevented by appropriate browser settings.

1. b) Legal foundation of data processing

The legal foundation for the processing of personal data by using cookies is Article 6 Para. 1 lit. f GDPR.

1. c) Purpose of data processing

The purpose behind the use of strictly technically essential cookies is to facilitate the use of the website for the user. Certain functions of our website cannot be offered without the use of cookies. For these functions it is necessary that the browser is recognized even after a page change.

We need cookies for the following application:

• Adoption of language settings

Analysis cookies are used for the purpose of improving the quality of our website and its content. By the analysis cookies we learn how the website is used and thus are able to continually optimize our offer. These purposes also include our legitimate in­terest in the processing of the personal data in accordance with Article 6 Para. 1 lit. f GDPR.

1. d) Duration of storage, possibilities for objection and elimination

Cookies are stored on the user’s computer and are transmitted from this to our web­site. Accordingly, you as user have full control over the use of cookies. By a change of the settings of your internet browser you are able to deactivate or restrict the transmissions of cookies. Cookies already being stored can be deleted at any time. This can also be carried out automatically. However, if cookies for our website are deactivated, it may no longer be possible to fully use all functions of the website. The transmission of flash cookies cannot be prevented by the browser settings but re­quires changes of the settings of the flash player.

 

VI. E-Mail-contact

Description and range of data processing

Contacting us is possible by using the e-mail address provided. In this case personal data of the user transmitted with the e-mail is stored. In this connection no data is passed on to third parties. The data is used exclusively for the processing of the con­versation and will immediately be deleted if it is no longer needed.

Legal foundation of data processing

Legal foundation for the processing of the data after application of the user for a newsletter in case of consent of the user is Article 6 Para. 1 lit. a GDPR.

Legal foundation for the processing of data in case of the transmission of an e-mail is Article 6 Para. 1 lit. f GDPR. Is the e-mail contact directed at closing a contract addi­tional legal foundation for the processing of data is Article 6 Para. 1 lit. b GDPR.

Purpose of data processing

The processing of the personal data from the input mask/e-mail serves us solely for the processing of the contact. In case of contacting by e-mail this is also the neces­sary legitimate interest in the processing of the data.

Other personal data processed during the sending-off process serves to prevent abuse of the contact form and to ensure the security of our IT systems.

Duration of storage

The data is deleted as soon as it is no longer needed for achieving the purpose of their collection. This is the case for the personal data from the input mask of the contact form and those which are sent by e-mail when the particular conversation with the user has ended.

The conversation has ended when the circumstances allow the conclusion that the matter in question has been finally clarified.

The additional personal data collected during the sending-off process is deleted the latest after a period of seven days.

Possibilities for objection and elimination

At any time the user has the opportunity to withdraw his consent on the processing of personal data. If the user is contacting us by e-mail, he can object to the storage of his personal data at any time. In this case the conversation cannot be continued.

VII.       Rights of the data subject

If your personal data is processed, then you are the data subject in the sense of the GDPR and you are entitled to the following rights vis à vis the responsible party:

Right of access by the data subject

You can demand from the responsible party confirmation as to whether personal data that relates to you has been processed by us. If such processing has taken place, you can demand information from the responsible party on the following:

• The purposes for which the personal data is processed;
• The categories of personal data which are processed;
• The recipients or, resp., the categories of recipients to which the personal data relating to you has been disclosed or will be disclosed;
• The planned duration of the storage of the personal data relating to you or, if dis­tinct statements on this are not possible, the criteria for the laying down of duration of storage;
• The existence of a right to correction or deletion of the personal data relating to yourself, of a right to a restriction of the processing by the responsible party or of a right of objection to this processing;
• The existence of a right of appeal at a supervisory authority;
• All available information on the origin of the data if the personal data was not collected at the data subject;
• The existence of an automated decision-finding process including profiling in ac­cordance with Article 22 Para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and its scope and the effects strived for of such a processing for the data subject in question.

You are entitled to the right to demand information on whether the personal data re­lating to yourself is transmitted to a third country or an international organization. In this connection you can demand to be instructed on the suitable guarantees in ac­cordance with Article 46 GDPR in connection with the transmission.

Right to correction

You have a right to correction and/or completion vis à vis the responsible party in so far as the personal data as processed and which relates to yourself is incorrect or incomplete. The responsible party has to carry out the correction without delay.

Right to restrict the processing of personal data

Provided the following preconditions are met you can demand restriction of the pro­cessing of the personal data relating to you:

• if you dispute the correctness of the personal data relating to yourself for a pe­riod which makes it possible for the responsible party to check the correctness of the personal data;
• if the processing is unlawful and you reject deletion of the personal data and de­mand restriction of the use of the personal data instead;
• if the responsible party no longer needs the personal data for purposes of the processing but you need the data for the advancing, exercising or defending of legal claims, or
• if you have advanced objection to the processing in accordance with Article 21 Para. 1 GDPR but it has not yet been established whether the justified rea­sons of the responsible party outweigh your reasons.

If the processing of the personal data relating to yourself has been restricted, then this data – apart from the storage of it – may only be processed with your consent or for the assertion, exercising or defending of legal claims or for the protection of the rights of another natural person or legal entity or for reasons relating to an important public interest of the European Union or of a member state.

If the restriction of the processing has been restricted in accordance with the afore-mentioned preconditions, then you will be informed by the responsible party before the restriction is cancelled.

Right to erasure

1. a) Deletion obligation

You can demand by the responsible party that the personal data relating to yourself is deleted without delay and the responsible party is then obliged to delete this data without delay in so far as one of the following reasons applies:

• The personal data relating to you is no longer required for the purposes for which it was collected or for which it was processed.
• You revoke your consent, on which processing in accordance with Article 6 Para. 1 lit. a or Article 9 Para.2 lit. a GDPR was based, and there is no other legal foundation for the processing.
• You submit an objection to the processing in accordance with Article 21 Para. 1 GDPR and there are no justified reasons for the processing with a higher priority, or you submit an objection to the processing in accordance with Article 21 Para. 2 GDPR.
• The personal data relating to you was processed unlawfully.
• The deletion of the personal data relating to you is required to fulfil a legal obliga­tion in accordance with European Union law or the law of the member states, which laws the responsible party is subject to.
• The personal data relating to you was collected in relation to services offered by the information society in accordance with Article 8 Para. 1 GDPR.

1. b) Information to third parties

If the responsible party has made the personal data relating to you public and if he/she is obliged to delete this data in accordance with Article 17 Para. 1 GDPR, then he/she shall take reasonable measures including technical ones – whereby ac­count shall be taken of the available technology and the implementation costs – to inform the responsible parties for the data processing which process the personal data that you as data subject have demanded from them the deletion of all links to this personal data or of copies or replicates of these.

1. c) Exceptions

The right to erasure does not exist in so far as the processing is necessary for

• the exercising of the right of free expression of opinion and to information;
• for the fulfilment of a legal obligation, which requires the processing in accord­ance with the law of the European Union or the law of the member states, which laws the responsible party is subject to, or for the carrying out of a task, which lies in the public interest or which is carried out in the exercising of pub­lic authority, which authority was transferred to the responsible party;
• for reasons of public interest in the field of public health in accordance with Arti­cle 9 Para. 2 lit. h and i as well as Article 9 Para. 3 GDPR;
• for archiving purposes, scientific or historical research purposes lying in the pub­lic interest or for statistical purposes in accordance with Article 89 Para. 1 GDPR, in so far as the right named in section a) probably makes achieving of the objectives of the processing impossible or impairs it seriously, or
• for the advancing, exercising or defending of legal claims.

Right to information

If you have advanced the right to the correcting, erasure or restricting of the pro­cessing to the responsible party, then the latter is obliged to inform all recipients, to which the personal data relating to you was disclosed, of this correction or erasure of the data or of the restricting of the processing, unless this proves itself to be impossi­ble or linked with unreasonable expenditure.

You are entitled to the right vis à vis the responsible party to be informed about these recipients.

Right to data portability

You have the right to receive the personal data relating to yourself, which you made available to the responsible party, in a structured, conventional and machine-reada­ble format. In addition, you have the right to transmit this data to another responsible party without hindrance by the responsible party to whom the personal data was made available, in so far as

• the processing is based on consent in accordance with Article 6 Para. 1 lit. a GDPR or Article 9 Para. 2 lit. a GDPR or on a contract in accordance with Arti­cle 6 Para. 1 lit. b GDPR and
• the processing is carried out by means of automated processes.

In exercising this right, you have in addition the right to obtain the personal data re­lating to you is transferred directly from one responsible party to another responsible party in so far as this is technically possible. The freedoms and rights of other per­sons may not be impaired thereby.

The right to data portability applies not for the processing of personal data, which is necessary for the carrying out of a task, which lies in the public interest or in the ex­ercising of public authority and which task was transferred to the responsible party.

Right to object

For reasons which result from your particular situation you have the right to advance at any time objection to the processing of the personal data relating to you, which processing is carried out on the basis of Article 6 Para. 1 lit. e or f GDPR. This right also applies to the profiling based on these provisions.

The responsible party shall then no longer process the personal data relating to you, unless he/she can prove compelling reasons worthy of protection, which reasons overweigh your interests, rights and freedoms or where the processing serves the advancing, exercising or defending of legal claims.

If the personal data relating to you is processed for the purpose of direct advertising, then you have the right to advance at any time objection to the processing of the per­sonal data relating to you for purposes of such advertising. This applies also to the profiling in so far as this is carried out in connection with such direct advertising.

If you object to the processing for purposes of direct advertising, then the personal data relating to you will no longer be processed for these purposes.

You have the opportunity – in connection with the use of services of the information society and regardless of directive 2002/58/EC – to exercise your right of objection with the aid of automated processes in which technical specifications are used.

You have also the right for reasons which result from your particular situation to ad­vance at any time objection to the processing of the personal data relating to you which processing is carried out for scientific or historic purposes or for statistical pur­poses according to Article 89 Para. 1 GDPR.

Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your consent at any time. On withdrawal we immedi­ately will delete your personal data and no longer process it. The legality of the pro­cessing carried out prior to your withdrawal on the base of your given consent is not affected by you withdrawal.

Right to complain at a supervisory authority

Regardless of another regulatory or judicial remedy, you are entitled to the right to lodge a complaint at a supervisory authority and here in particular at a supervisory authority in the member state of your place of residence, of your place of work or of the place where the suspected infringement took place when you are of the opinion that the processing of the personal data relating to you infringes the GDPR.

In this case the supervisory authority, at which the complaint was lodged, shall inform the complainant on the status and the results of the complaint including the possibility of a judicial remedy in accordance with Article 78 GDPR.

I. Name and address of the responsible party

The responsible party in the sense of the General Data Protection Regulation (GDPR) and of other national data protection regulations in force in the member states of European Union as well as of other regulations with a legal data-protecting character is the

CTP Advanced Materials GmbH

Stahlstrasse 60

D-65428 Ruesselsheim, Germany

Fon: +49 6142 91 85 0

Fax: +49 6142 91 85 55

Mail: ctp@ctpgmbh.de

 

The processing of some data takes place in joint responsibility according to Art. 26 GDPR with:

Aditya Birla Group
Aditya Birla Centre
S K Ahire Marg, Worli

Mumbai 400030, India

II. Name and address of the data protection officer

The data protection officer of the responsible party is:

daschug GmbH

Robert-Bosch-Strasse 7

64293 Darmstadt, Germany

Fon +49 6151 6673 440

Mail: datenschutz@ctpgmbh.de

III.    General information on data processing

Range of the processing of personal data

Generally, we collect and process personal data of users only as long as this is re­quired for providing a properly functioning website as well as delivering our contents and services. The collection and use of personal data of our users on a regular basis only takes place after consent of the data subject. An exception applies to those cases where obtaining consent prior to use is not possible based on matters of law and fact and the processing of data is allowed by legal regulations.

Legal fundamentals for the processing of personal data

In so far as we obtain the consent of the data subject for the processing of personal data Article 6 Para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the foundation for the processing of personal data.

Article 6 Para. 1 lit. b GDPR serves as the legal foundation for the processing of per­sonal data which is necessary for the fulfilment of a contract if the data subject is party to this contract. This applies also to the processing processes which are neces­sary for the execution of pre-contractual measures.

Article 6 Para. 1 lit. c GDPR serves as the legal foundation in so far as processing of personal data is necessary for the fulfilment of a legal obligation applying to our en­terprise.

Article 6 Para. 1 lit. d GDPR serves as the legal foundation for the situation that vital interests of the data subject or another natural person make the processing of per­sonal data necessary.

Article 6 Para. 1 lit. f GDPR serves as the legal foundation for the situation that pro­cessing is necessary to ensure a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not exceed the first named interest.

Deletion of data and duration of storage

The personal data of the data subject are deleted or disabled as soon as the purpose for which the data was stored lapses. In addition, storage can take place if this was stipulated by the European or national legislatures in orders, laws or other regulations in accordance with European Union law to which the responsible party is subject. Disabling or deletion of the data is also carried out if a storage period prescribed by the standards as named expires unless there is a necessity for the continued storage of the data for the concluding or fulfilling of a contract.

IV. Making available of our website and creation of logfiles

Description and range of data processing

On every visit on our website our system automatically collects data and information of the computer system calling. The following data is collected:

• Information on the type of browser and its version used
• The operating system of the user
• The internet-service-provider of the user
• The IP-address of the user
• Date and time of the access
• The website, from which an accessing system reaches our website
• Websites, which are accessed by the computer system of the user via our web­site

This data is also stored in the logfiles of our system. However, IP-addresses of the users or other data, which would allow the assignment of the data to a particular user, are not stored. Also, this data is not stored together with other personal data of the user.

Legal foundations for the data processing

Article 6 Para. 1 lit. f GDPR is the legal foundation for the temporary storage of data and logfiles.

Purpose of data processing

The temporary storage of the IP-address by the system is necessary to enable the delivery of the website to the computer of the user. For achieving this the IP-address of the user must remain stored for the duration of the session.

The storage in logfiles occurs to enable the proper functioning of the website. Fur­thermore, this data serves to optimize the website and to enable the security of our IT-systems. An analysis of the data for marketing purposes does not happen.

The legal foundation is our legitimate interest in data processing according to Article 6 Para.1 lit. f GDPR.

Duration of storage

The data is deleted or disabled as soon as the purpose for which the data was stored lapses. This is the case when the particular session has ended in situations where the data is collected for making the website available.

This is the case at the latest seven days after the time when the data was stored in log files. A storage exceeding this period is possible. In this case the IP-addresses of the users are deleted or distorted so that an assignment of the client calling in is no longer possible.

Possibility for objection and deletion

The collection of data for the making available of the website and the storage of data in logfiles is compulsory for operating the website. Thus, there is no right to object by the user.

Use of cookies

1. a) Description and range of data processing

Our website uses cookies. In general, cookies are small text files which are stored on your computer and which store certain settings and data for exchange with the online offer from us via your browser. If a user calls in a website, a cookie can be stored in the operating system of the user’s computer. This cookie usually contains a unique string of characters, which allows an unambiguous identification of the browser when calling in the website again.

We are using cookies to improve our online offer. Some elements of our website re­quire that a browser calling in can be identified after a changeover.

The following data is stored and transmitted:

• Language settings
• Log-In-information

The data of the user collected in this way is pseudonymized by technical processes. Accordingly, assignment of the data to the user calling in is no longer possible. The data collected is not stored together with other personal data of the user.

When our website is called, the users are informed by means of an information ban­ner about the use of cookies for analytical purposes and are referred to this data protection information. In this connection reference is given to how storage of cookies can be prevented by the browser settings.

In this connection follows a reference to how that storing of cookies can be prevented by appropriate browser settings.

1. b) Legal foundation of data processing

The legal foundation for the processing of personal data by using cookies is Article 6 Para. 1 lit. f GDPR.

1. c) Purpose of data processing

The purpose behind the use of strictly technically essential cookies is to facilitate the use of the website for the user. Certain functions of our website cannot be offered without the use of cookies. For these functions it is necessary that the browser is recognized even after a page change.

We need cookies for the following application:

• Adoption of language settings

Analysis cookies are used for the purpose of improving the quality of our website and its content. By the analysis cookies we learn how the website is used and thus are able to continually optimize our offer. These purposes also include our legitimate in­terest in the processing of the personal data in accordance with Article 6 Para. 1 lit. f GDPR.

1. d) Duration of storage, possibilities for objection and elimination

Cookies are stored on the user’s computer and are transmitted from this to our web­site. Accordingly, you as user have full control over the use of cookies. By a change of the settings of your internet browser you are able to deactivate or restrict the transmissions of cookies. Cookies already being stored can be deleted at any time. This can also be carried out automatically. However, if cookies for our website are deactivated, it may no longer be possible to fully use all functions of the website. The transmission of flash cookies cannot be prevented by the browser settings but re­quires changes of the settings of the flash player.

 

VI. E-Mail-contact

Description and range of data processing

Contacting us is possible by using the e-mail address provided. In this case personal data of the user transmitted with the e-mail is stored. In this connection no data is passed on to third parties. The data is used exclusively for the processing of the con­versation and will immediately be deleted if it is no longer needed.

Legal foundation of data processing

Legal foundation for the processing of the data after application of the user for a newsletter in case of consent of the user is Article 6 Para. 1 lit. a GDPR.

Legal foundation for the processing of data in case of the transmission of an e-mail is Article 6 Para. 1 lit. f GDPR. Is the e-mail contact directed at closing a contract addi­tional legal foundation for the processing of data is Article 6 Para. 1 lit. b GDPR.

Purpose of data processing

The processing of the personal data from the input mask/e-mail serves us solely for the processing of the contact. In case of contacting by e-mail this is also the neces­sary legitimate interest in the processing of the data.

Other personal data processed during the sending-off process serves to prevent abuse of the contact form and to ensure the security of our IT systems.

Duration of storage

The data is deleted as soon as it is no longer needed for achieving the purpose of their collection. This is the case for the personal data from the input mask of the contact form and those which are sent by e-mail when the particular conversation with the user has ended.

The conversation has ended when the circumstances allow the conclusion that the matter in question has been finally clarified.

The additional personal data collected during the sending-off process is deleted the latest after a period of seven days.

Possibilities for objection and elimination

At any time the user has the opportunity to withdraw his consent on the processing of personal data. If the user is contacting us by e-mail, he can object to the storage of his personal data at any time. In this case the conversation cannot be continued.

VII.       Rights of the data subject

If your personal data is processed, then you are the data subject in the sense of the GDPR and you are entitled to the following rights vis à vis the responsible party:

Right of access by the data subject

You can demand from the responsible party confirmation as to whether personal data that relates to you has been processed by us. If such processing has taken place, you can demand information from the responsible party on the following:

• The purposes for which the personal data is processed;
• The categories of personal data which are processed;
• The recipients or, resp., the categories of recipients to which the personal data relating to you has been disclosed or will be disclosed;
• The planned duration of the storage of the personal data relating to you or, if dis­tinct statements on this are not possible, the criteria for the laying down of duration of storage;
• The existence of a right to correction or deletion of the personal data relating to yourself, of a right to a restriction of the processing by the responsible party or of a right of objection to this processing;
• The existence of a right of appeal at a supervisory authority;
• All available information on the origin of the data if the personal data was not collected at the data subject;
• The existence of an automated decision-finding process including profiling in ac­cordance with Article 22 Para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and its scope and the effects strived for of such a processing for the data subject in question.

You are entitled to the right to demand information on whether the personal data re­lating to yourself is transmitted to a third country or an international organization. In this connection you can demand to be instructed on the suitable guarantees in ac­cordance with Article 46 GDPR in connection with the transmission.

Right to correction

You have a right to correction and/or completion vis à vis the responsible party in so far as the personal data as processed and which relates to yourself is incorrect or incomplete. The responsible party has to carry out the correction without delay.

Right to restrict the processing of personal data

Provided the following preconditions are met you can demand restriction of the pro­cessing of the personal data relating to you:

• if you dispute the correctness of the personal data relating to yourself for a pe­riod which makes it possible for the responsible party to check the correctness of the personal data;
• if the processing is unlawful and you reject deletion of the personal data and de­mand restriction of the use of the personal data instead;
• if the responsible party no longer needs the personal data for purposes of the processing but you need the data for the advancing, exercising or defending of legal claims, or
• if you have advanced objection to the processing in accordance with Article 21 Para. 1 GDPR but it has not yet been established whether the justified rea­sons of the responsible party outweigh your reasons.

If the processing of the personal data relating to yourself has been restricted, then this data – apart from the storage of it – may only be processed with your consent or for the assertion, exercising or defending of legal claims or for the protection of the rights of another natural person or legal entity or for reasons relating to an important public interest of the European Union or of a member state.

If the restriction of the processing has been restricted in accordance with the afore-mentioned preconditions, then you will be informed by the responsible party before the restriction is cancelled.

Right to erasure

1. a) Deletion obligation

You can demand by the responsible party that the personal data relating to yourself is deleted without delay and the responsible party is then obliged to delete this data without delay in so far as one of the following reasons applies:

• The personal data relating to you is no longer required for the purposes for which it was collected or for which it was processed.
• You revoke your consent, on which processing in accordance with Article 6 Para. 1 lit. a or Article 9 Para.2 lit. a GDPR was based, and there is no other legal foundation for the processing.
• You submit an objection to the processing in accordance with Article 21 Para. 1 GDPR and there are no justified reasons for the processing with a higher priority, or you submit an objection to the processing in accordance with Article 21 Para. 2 GDPR.
• The personal data relating to you was processed unlawfully.
• The deletion of the personal data relating to you is required to fulfil a legal obliga­tion in accordance with European Union law or the law of the member states, which laws the responsible party is subject to.
• The personal data relating to you was collected in relation to services offered by the information society in accordance with Article 8 Para. 1 GDPR.

1. b) Information to third parties

If the responsible party has made the personal data relating to you public and if he/she is obliged to delete this data in accordance with Article 17 Para. 1 GDPR, then he/she shall take reasonable measures including technical ones – whereby ac­count shall be taken of the available technology and the implementation costs – to inform the responsible parties for the data processing which process the personal data that you as data subject have demanded from them the deletion of all links to this personal data or of copies or replicates of these.

1. c) Exceptions

The right to erasure does not exist in so far as the processing is necessary for

• the exercising of the right of free expression of opinion and to information;
• for the fulfilment of a legal obligation, which requires the processing in accord­ance with the law of the European Union or the law of the member states, which laws the responsible party is subject to, or for the carrying out of a task, which lies in the public interest or which is carried out in the exercising of pub­lic authority, which authority was transferred to the responsible party;
• for reasons of public interest in the field of public health in accordance with Arti­cle 9 Para. 2 lit. h and i as well as Article 9 Para. 3 GDPR;
• for archiving purposes, scientific or historical research purposes lying in the pub­lic interest or for statistical purposes in accordance with Article 89 Para. 1 GDPR, in so far as the right named in section a) probably makes achieving of the objectives of the processing impossible or impairs it seriously, or
• for the advancing, exercising or defending of legal claims.

Right to information

If you have advanced the right to the correcting, erasure or restricting of the pro­cessing to the responsible party, then the latter is obliged to inform all recipients, to which the personal data relating to you was disclosed, of this correction or erasure of the data or of the restricting of the processing, unless this proves itself to be impossi­ble or linked with unreasonable expenditure.

You are entitled to the right vis à vis the responsible party to be informed about these recipients.

Right to data portability

You have the right to receive the personal data relating to yourself, which you made available to the responsible party, in a structured, conventional and machine-reada­ble format. In addition, you have the right to transmit this data to another responsible party without hindrance by the responsible party to whom the personal data was made available, in so far as

• the processing is based on consent in accordance with Article 6 Para. 1 lit. a GDPR or Article 9 Para. 2 lit. a GDPR or on a contract in accordance with Arti­cle 6 Para. 1 lit. b GDPR and
• the processing is carried out by means of automated processes.

In exercising this right, you have in addition the right to obtain the personal data re­lating to you is transferred directly from one responsible party to another responsible party in so far as this is technically possible. The freedoms and rights of other per­sons may not be impaired thereby.

The right to data portability applies not for the processing of personal data, which is necessary for the carrying out of a task, which lies in the public interest or in the ex­ercising of public authority and which task was transferred to the responsible party.

Right to object

For reasons which result from your particular situation you have the right to advance at any time objection to the processing of the personal data relating to you, which processing is carried out on the basis of Article 6 Para. 1 lit. e or f GDPR. This right also applies to the profiling based on these provisions.

The responsible party shall then no longer process the personal data relating to you, unless he/she can prove compelling reasons worthy of protection, which reasons overweigh your interests, rights and freedoms or where the processing serves the advancing, exercising or defending of legal claims.

If the personal data relating to you is processed for the purpose of direct advertising, then you have the right to advance at any time objection to the processing of the per­sonal data relating to you for purposes of such advertising. This applies also to the profiling in so far as this is carried out in connection with such direct advertising.

If you object to the processing for purposes of direct advertising, then the personal data relating to you will no longer be processed for these purposes.

You have the opportunity – in connection with the use of services of the information society and regardless of directive 2002/58/EC – to exercise your right of objection with the aid of automated processes in which technical specifications are used.

You have also the right for reasons which result from your particular situation to ad­vance at any time objection to the processing of the personal data relating to you which processing is carried out for scientific or historic purposes or for statistical pur­poses according to Article 89 Para. 1 GDPR.

Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your consent at any time. On withdrawal we immedi­ately will delete your personal data and no longer process it. The legality of the pro­cessing carried out prior to your withdrawal on the base of your given consent is not affected by you withdrawal.

Right to complain at a supervisory authority

Regardless of another regulatory or judicial remedy, you are entitled to the right to lodge a complaint at a supervisory authority and here in particular at a supervisory authority in the member state of your place of residence, of your place of work or of the place where the suspected infringement took place when you are of the opinion that the processing of the personal data relating to you infringes the GDPR.

In this case the supervisory authority, at which the complaint was lodged, shall inform the complainant on the status and the results of the complaint including the possibility of a judicial remedy in accordance with Article 78 GDPR.

I. Name and address of the responsible party

The responsible party in the sense of the General Data Protection Regulation (GDPR) and of other national data protection regulations in force in the member states of European Union as well as of other regulations with a legal data-protecting character is the

CTP Advanced Materials GmbH

Stahlstrasse 60

D-65428 Ruesselsheim, Germany

Fon: +49 6142 91 85 0

Fax: +49 6142 91 85 55

Mail: ctp@ctpgmbh.de

 

The processing of some data takes place in joint responsibility according to Art. 26 GDPR with:

Aditya Birla Group
Aditya Birla Centre
S K Ahire Marg, Worli

Mumbai 400030, India

II. Name and address of the data protection officer

The data protection officer of the responsible party is:

daschug GmbH

Robert-Bosch-Strasse 7

64293 Darmstadt, Germany

Fon +49 6151 6673 440

Mail: datenschutz@ctpgmbh.de

III.    General information on data processing

Range of the processing of personal data

Generally, we collect and process personal data of users only as long as this is re­quired for providing a properly functioning website as well as delivering our contents and services. The collection and use of personal data of our users on a regular basis only takes place after consent of the data subject. An exception applies to those cases where obtaining consent prior to use is not possible based on matters of law and fact and the processing of data is allowed by legal regulations.

Legal fundamentals for the processing of personal data

In so far as we obtain the consent of the data subject for the processing of personal data Article 6 Para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the foundation for the processing of personal data.

Article 6 Para. 1 lit. b GDPR serves as the legal foundation for the processing of per­sonal data which is necessary for the fulfilment of a contract if the data subject is party to this contract. This applies also to the processing processes which are neces­sary for the execution of pre-contractual measures.

Article 6 Para. 1 lit. c GDPR serves as the legal foundation in so far as processing of personal data is necessary for the fulfilment of a legal obligation applying to our en­terprise.

Article 6 Para. 1 lit. d GDPR serves as the legal foundation for the situation that vital interests of the data subject or another natural person make the processing of per­sonal data necessary.

Article 6 Para. 1 lit. f GDPR serves as the legal foundation for the situation that pro­cessing is necessary to ensure a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not exceed the first named interest.

Deletion of data and duration of storage

The personal data of the data subject are deleted or disabled as soon as the purpose for which the data was stored lapses. In addition, storage can take place if this was stipulated by the European or national legislatures in orders, laws or other regulations in accordance with European Union law to which the responsible party is subject. Disabling or deletion of the data is also carried out if a storage period prescribed by the standards as named expires unless there is a necessity for the continued storage of the data for the concluding or fulfilling of a contract.

IV. Making available of our website and creation of logfiles

Description and range of data processing

On every visit on our website our system automatically collects data and information of the computer system calling. The following data is collected:

• Information on the type of browser and its version used
• The operating system of the user
• The internet-service-provider of the user
• The IP-address of the user
• Date and time of the access
• The website, from which an accessing system reaches our website
• Websites, which are accessed by the computer system of the user via our web­site

This data is also stored in the logfiles of our system. However, IP-addresses of the users or other data, which would allow the assignment of the data to a particular user, are not stored. Also, this data is not stored together with other personal data of the user.

Legal foundations for the data processing

Article 6 Para. 1 lit. f GDPR is the legal foundation for the temporary storage of data and logfiles.

Purpose of data processing

The temporary storage of the IP-address by the system is necessary to enable the delivery of the website to the computer of the user. For achieving this the IP-address of the user must remain stored for the duration of the session.

The storage in logfiles occurs to enable the proper functioning of the website. Fur­thermore, this data serves to optimize the website and to enable the security of our IT-systems. An analysis of the data for marketing purposes does not happen.

The legal foundation is our legitimate interest in data processing according to Article 6 Para.1 lit. f GDPR.

Duration of storage

The data is deleted or disabled as soon as the purpose for which the data was stored lapses. This is the case when the particular session has ended in situations where the data is collected for making the website available.

This is the case at the latest seven days after the time when the data was stored in log files. A storage exceeding this period is possible. In this case the IP-addresses of the users are deleted or distorted so that an assignment of the client calling in is no longer possible.

Possibility for objection and deletion

The collection of data for the making available of the website and the storage of data in logfiles is compulsory for operating the website. Thus, there is no right to object by the user.

Use of cookies

1. a) Description and range of data processing

Our website uses cookies. In general, cookies are small text files which are stored on your computer and which store certain settings and data for exchange with the online offer from us via your browser. If a user calls in a website, a cookie can be stored in the operating system of the user’s computer. This cookie usually contains a unique string of characters, which allows an unambiguous identification of the browser when calling in the website again.

We are using cookies to improve our online offer. Some elements of our website re­quire that a browser calling in can be identified after a changeover.

The following data is stored and transmitted:

• Language settings
• Log-In-information

The data of the user collected in this way is pseudonymized by technical processes. Accordingly, assignment of the data to the user calling in is no longer possible. The data collected is not stored together with other personal data of the user.

When our website is called, the users are informed by means of an information ban­ner about the use of cookies for analytical purposes and are referred to this data protection information. In this connection reference is given to how storage of cookies can be prevented by the browser settings.

In this connection follows a reference to how that storing of cookies can be prevented by appropriate browser settings.

1. b) Legal foundation of data processing

The legal foundation for the processing of personal data by using cookies is Article 6 Para. 1 lit. f GDPR.

1. c) Purpose of data processing

The purpose behind the use of strictly technically essential cookies is to facilitate the use of the website for the user. Certain functions of our website cannot be offered without the use of cookies. For these functions it is necessary that the browser is recognized even after a page change.

We need cookies for the following application:

• Adoption of language settings

Analysis cookies are used for the purpose of improving the quality of our website and its content. By the analysis cookies we learn how the website is used and thus are able to continually optimize our offer. These purposes also include our legitimate in­terest in the processing of the personal data in accordance with Article 6 Para. 1 lit. f GDPR.

1. d) Duration of storage, possibilities for objection and elimination

Cookies are stored on the user’s computer and are transmitted from this to our web­site. Accordingly, you as user have full control over the use of cookies. By a change of the settings of your internet browser you are able to deactivate or restrict the transmissions of cookies. Cookies already being stored can be deleted at any time. This can also be carried out automatically. However, if cookies for our website are deactivated, it may no longer be possible to fully use all functions of the website. The transmission of flash cookies cannot be prevented by the browser settings but re­quires changes of the settings of the flash player.

 

VI. E-Mail-contact

Description and range of data processing

Contacting us is possible by using the e-mail address provided. In this case personal data of the user transmitted with the e-mail is stored. In this connection no data is passed on to third parties. The data is used exclusively for the processing of the con­versation and will immediately be deleted if it is no longer needed.

Legal foundation of data processing

Legal foundation for the processing of the data after application of the user for a newsletter in case of consent of the user is Article 6 Para. 1 lit. a GDPR.

Legal foundation for the processing of data in case of the transmission of an e-mail is Article 6 Para. 1 lit. f GDPR. Is the e-mail contact directed at closing a contract addi­tional legal foundation for the processing of data is Article 6 Para. 1 lit. b GDPR.

Purpose of data processing

The processing of the personal data from the input mask/e-mail serves us solely for the processing of the contact. In case of contacting by e-mail this is also the neces­sary legitimate interest in the processing of the data.

Other personal data processed during the sending-off process serves to prevent abuse of the contact form and to ensure the security of our IT systems.

Duration of storage

The data is deleted as soon as it is no longer needed for achieving the purpose of their collection. This is the case for the personal data from the input mask of the contact form and those which are sent by e-mail when the particular conversation with the user has ended.

The conversation has ended when the circumstances allow the conclusion that the matter in question has been finally clarified.

The additional personal data collected during the sending-off process is deleted the latest after a period of seven days.

Possibilities for objection and elimination

At any time the user has the opportunity to withdraw his consent on the processing of personal data. If the user is contacting us by e-mail, he can object to the storage of his personal data at any time. In this case the conversation cannot be continued.

VII.       Rights of the data subject

If your personal data is processed, then you are the data subject in the sense of the GDPR and you are entitled to the following rights vis à vis the responsible party:

Right of access by the data subject

You can demand from the responsible party confirmation as to whether personal data that relates to you has been processed by us. If such processing has taken place, you can demand information from the responsible party on the following:

• The purposes for which the personal data is processed;
• The categories of personal data which are processed;
• The recipients or, resp., the categories of recipients to which the personal data relating to you has been disclosed or will be disclosed;
• The planned duration of the storage of the personal data relating to you or, if dis­tinct statements on this are not possible, the criteria for the laying down of duration of storage;
• The existence of a right to correction or deletion of the personal data relating to yourself, of a right to a restriction of the processing by the responsible party or of a right of objection to this processing;
• The existence of a right of appeal at a supervisory authority;
• All available information on the origin of the data if the personal data was not collected at the data subject;
• The existence of an automated decision-finding process including profiling in ac­cordance with Article 22 Para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and its scope and the effects strived for of such a processing for the data subject in question.

You are entitled to the right to demand information on whether the personal data re­lating to yourself is transmitted to a third country or an international organization. In this connection you can demand to be instructed on the suitable guarantees in ac­cordance with Article 46 GDPR in connection with the transmission.

Right to correction

You have a right to correction and/or completion vis à vis the responsible party in so far as the personal data as processed and which relates to yourself is incorrect or incomplete. The responsible party has to carry out the correction without delay.

Right to restrict the processing of personal data

Provided the following preconditions are met you can demand restriction of the pro­cessing of the personal data relating to you:

• if you dispute the correctness of the personal data relating to yourself for a pe­riod which makes it possible for the responsible party to check the correctness of the personal data;
• if the processing is unlawful and you reject deletion of the personal data and de­mand restriction of the use of the personal data instead;
• if the responsible party no longer needs the personal data for purposes of the processing but you need the data for the advancing, exercising or defending of legal claims, or
• if you have advanced objection to the processing in accordance with Article 21 Para. 1 GDPR but it has not yet been established whether the justified rea­sons of the responsible party outweigh your reasons.

If the processing of the personal data relating to yourself has been restricted, then this data – apart from the storage of it – may only be processed with your consent or for the assertion, exercising or defending of legal claims or for the protection of the rights of another natural person or legal entity or for reasons relating to an important public interest of the European Union or of a member state.

If the restriction of the processing has been restricted in accordance with the afore-mentioned preconditions, then you will be informed by the responsible party before the restriction is cancelled.

Right to erasure

1. a) Deletion obligation

You can demand by the responsible party that the personal data relating to yourself is deleted without delay and the responsible party is then obliged to delete this data without delay in so far as one of the following reasons applies:

• The personal data relating to you is no longer required for the purposes for which it was collected or for which it was processed.
• You revoke your consent, on which processing in accordance with Article 6 Para. 1 lit. a or Article 9 Para.2 lit. a GDPR was based, and there is no other legal foundation for the processing.
• You submit an objection to the processing in accordance with Article 21 Para. 1 GDPR and there are no justified reasons for the processing with a higher priority, or you submit an objection to the processing in accordance with Article 21 Para. 2 GDPR.
• The personal data relating to you was processed unlawfully.
• The deletion of the personal data relating to you is required to fulfil a legal obliga­tion in accordance with European Union law or the law of the member states, which laws the responsible party is subject to.
• The personal data relating to you was collected in relation to services offered by the information society in accordance with Article 8 Para. 1 GDPR.

1. b) Information to third parties

If the responsible party has made the personal data relating to you public and if he/she is obliged to delete this data in accordance with Article 17 Para. 1 GDPR, then he/she shall take reasonable measures including technical ones – whereby ac­count shall be taken of the available technology and the implementation costs – to inform the responsible parties for the data processing which process the personal data that you as data subject have demanded from them the deletion of all links to this personal data or of copies or replicates of these.

1. c) Exceptions

The right to erasure does not exist in so far as the processing is necessary for

• the exercising of the right of free expression of opinion and to information;
• for the fulfilment of a legal obligation, which requires the processing in accord­ance with the law of the European Union or the law of the member states, which laws the responsible party is subject to, or for the carrying out of a task, which lies in the public interest or which is carried out in the exercising of pub­lic authority, which authority was transferred to the responsible party;
• for reasons of public interest in the field of public health in accordance with Arti­cle 9 Para. 2 lit. h and i as well as Article 9 Para. 3 GDPR;
• for archiving purposes, scientific or historical research purposes lying in the pub­lic interest or for statistical purposes in accordance with Article 89 Para. 1 GDPR, in so far as the right named in section a) probably makes achieving of the objectives of the processing impossible or impairs it seriously, or
• for the advancing, exercising or defending of legal claims.

Right to information

If you have advanced the right to the correcting, erasure or restricting of the pro­cessing to the responsible party, then the latter is obliged to inform all recipients, to which the personal data relating to you was disclosed, of this correction or erasure of the data or of the restricting of the processing, unless this proves itself to be impossi­ble or linked with unreasonable expenditure.

You are entitled to the right vis à vis the responsible party to be informed about these recipients.

Right to data portability

You have the right to receive the personal data relating to yourself, which you made available to the responsible party, in a structured, conventional and machine-reada­ble format. In addition, you have the right to transmit this data to another responsible party without hindrance by the responsible party to whom the personal data was made available, in so far as

• the processing is based on consent in accordance with Article 6 Para. 1 lit. a GDPR or Article 9 Para. 2 lit. a GDPR or on a contract in accordance with Arti­cle 6 Para. 1 lit. b GDPR and
• the processing is carried out by means of automated processes.

In exercising this right, you have in addition the right to obtain the personal data re­lating to you is transferred directly from one responsible party to another responsible party in so far as this is technically possible. The freedoms and rights of other per­sons may not be impaired thereby.

The right to data portability applies not for the processing of personal data, which is necessary for the carrying out of a task, which lies in the public interest or in the ex­ercising of public authority and which task was transferred to the responsible party.

Right to object

For reasons which result from your particular situation you have the right to advance at any time objection to the processing of the personal data relating to you, which processing is carried out on the basis of Article 6 Para. 1 lit. e or f GDPR. This right also applies to the profiling based on these provisions.

The responsible party shall then no longer process the personal data relating to you, unless he/she can prove compelling reasons worthy of protection, which reasons overweigh your interests, rights and freedoms or where the processing serves the advancing, exercising or defending of legal claims.

If the personal data relating to you is processed for the purpose of direct advertising, then you have the right to advance at any time objection to the processing of the per­sonal data relating to you for purposes of such advertising. This applies also to the profiling in so far as this is carried out in connection with such direct advertising.

If you object to the processing for purposes of direct advertising, then the personal data relating to you will no longer be processed for these purposes.

You have the opportunity – in connection with the use of services of the information society and regardless of directive 2002/58/EC – to exercise your right of objection with the aid of automated processes in which technical specifications are used.

You have also the right for reasons which result from your particular situation to ad­vance at any time objection to the processing of the personal data relating to you which processing is carried out for scientific or historic purposes or for statistical pur­poses according to Article 89 Para. 1 GDPR.

Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your consent at any time. On withdrawal we immedi­ately will delete your personal data and no longer process it. The legality of the pro­cessing carried out prior to your withdrawal on the base of your given consent is not affected by you withdrawal.

Right to complain at a supervisory authority

Regardless of another regulatory or judicial remedy, you are entitled to the right to lodge a complaint at a supervisory authority and here in particular at a supervisory authority in the member state of your place of residence, of your place of work or of the place where the suspected infringement took place when you are of the opinion that the processing of the personal data relating to you infringes the GDPR.

In this case the supervisory authority, at which the complaint was lodged, shall inform the complainant on the status and the results of the complaint including the possibility of a judicial remedy in accordance with Article 78 GDPR.

I. Name and address of the responsible party

The responsible party in the sense of the General Data Protection Regulation (GDPR) and of other national data protection regulations in force in the member states of European Union as well as of other regulations with a legal data-protecting character is the

CTP Advanced Materials GmbH

Stahlstrasse 60

D-65428 Ruesselsheim, Germany

Fon: +49 6142 91 85 0

Fax: +49 6142 91 85 55

Mail: ctp@ctpgmbh.de

 

The processing of some data takes place in joint responsibility according to Art. 26 GDPR with:

Aditya Birla Group
Aditya Birla Centre
S K Ahire Marg, Worli

Mumbai 400030, India

II. Name and address of the data protection officer

The data protection officer of the responsible party is:

daschug GmbH

Robert-Bosch-Strasse 7

64293 Darmstadt, Germany

Fon +49 6151 6673 440

Mail: datenschutz@ctpgmbh.de

III.    General information on data processing

Range of the processing of personal data

Generally, we collect and process personal data of users only as long as this is re­quired for providing a properly functioning website as well as delivering our contents and services. The collection and use of personal data of our users on a regular basis only takes place after consent of the data subject. An exception applies to those cases where obtaining consent prior to use is not possible based on matters of law and fact and the processing of data is allowed by legal regulations.

Legal fundamentals for the processing of personal data

In so far as we obtain the consent of the data subject for the processing of personal data Article 6 Para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the foundation for the processing of personal data.

Article 6 Para. 1 lit. b GDPR serves as the legal foundation for the processing of per­sonal data which is necessary for the fulfilment of a contract if the data subject is party to this contract. This applies also to the processing processes which are neces­sary for the execution of pre-contractual measures.

Article 6 Para. 1 lit. c GDPR serves as the legal foundation in so far as processing of personal data is necessary for the fulfilment of a legal obligation applying to our en­terprise.

Article 6 Para. 1 lit. d GDPR serves as the legal foundation for the situation that vital interests of the data subject or another natural person make the processing of per­sonal data necessary.

Article 6 Para. 1 lit. f GDPR serves as the legal foundation for the situation that pro­cessing is necessary to ensure a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not exceed the first named interest.

Deletion of data and duration of storage

The personal data of the data subject are deleted or disabled as soon as the purpose for which the data was stored lapses. In addition, storage can take place if this was stipulated by the European or national legislatures in orders, laws or other regulations in accordance with European Union law to which the responsible party is subject. Disabling or deletion of the data is also carried out if a storage period prescribed by the standards as named expires unless there is a necessity for the continued storage of the data for the concluding or fulfilling of a contract.

IV. Making available of our website and creation of logfiles

Description and range of data processing

On every visit on our website our system automatically collects data and information of the computer system calling. The following data is collected:

• Information on the type of browser and its version used
• The operating system of the user
• The internet-service-provider of the user
• The IP-address of the user
• Date and time of the access
• The website, from which an accessing system reaches our website
• Websites, which are accessed by the computer system of the user via our web­site

This data is also stored in the logfiles of our system. However, IP-addresses of the users or other data, which would allow the assignment of the data to a particular user, are not stored. Also, this data is not stored together with other personal data of the user.

Legal foundations for the data processing

Article 6 Para. 1 lit. f GDPR is the legal foundation for the temporary storage of data and logfiles.

Purpose of data processing

The temporary storage of the IP-address by the system is necessary to enable the delivery of the website to the computer of the user. For achieving this the IP-address of the user must remain stored for the duration of the session.

The storage in logfiles occurs to enable the proper functioning of the website. Fur­thermore, this data serves to optimize the website and to enable the security of our IT-systems. An analysis of the data for marketing purposes does not happen.

The legal foundation is our legitimate interest in data processing according to Article 6 Para.1 lit. f GDPR.

Duration of storage

The data is deleted or disabled as soon as the purpose for which the data was stored lapses. This is the case when the particular session has ended in situations where the data is collected for making the website available.

This is the case at the latest seven days after the time when the data was stored in log files. A storage exceeding this period is possible. In this case the IP-addresses of the users are deleted or distorted so that an assignment of the client calling in is no longer possible.

Possibility for objection and deletion

The collection of data for the making available of the website and the storage of data in logfiles is compulsory for operating the website. Thus, there is no right to object by the user.

Use of cookies

1. a) Description and range of data processing

Our website uses cookies. In general, cookies are small text files which are stored on your computer and which store certain settings and data for exchange with the online offer from us via your browser. If a user calls in a website, a cookie can be stored in the operating system of the user’s computer. This cookie usually contains a unique string of characters, which allows an unambiguous identification of the browser when calling in the website again.

We are using cookies to improve our online offer. Some elements of our website re­quire that a browser calling in can be identified after a changeover.

The following data is stored and transmitted:

• Language settings
• Log-In-information

The data of the user collected in this way is pseudonymized by technical processes. Accordingly, assignment of the data to the user calling in is no longer possible. The data collected is not stored together with other personal data of the user.

When our website is called, the users are informed by means of an information ban­ner about the use of cookies for analytical purposes and are referred to this data protection information. In this connection reference is given to how storage of cookies can be prevented by the browser settings.

In this connection follows a reference to how that storing of cookies can be prevented by appropriate browser settings.

1. b) Legal foundation of data processing

The legal foundation for the processing of personal data by using cookies is Article 6 Para. 1 lit. f GDPR.

1. c) Purpose of data processing

The purpose behind the use of strictly technically essential cookies is to facilitate the use of the website for the user. Certain functions of our website cannot be offered without the use of cookies. For these functions it is necessary that the browser is recognized even after a page change.

We need cookies for the following application:

• Adoption of language settings

Analysis cookies are used for the purpose of improving the quality of our website and its content. By the analysis cookies we learn how the website is used and thus are able to continually optimize our offer. These purposes also include our legitimate in­terest in the processing of the personal data in accordance with Article 6 Para. 1 lit. f GDPR.

1. d) Duration of storage, possibilities for objection and elimination

Cookies are stored on the user’s computer and are transmitted from this to our web­site. Accordingly, you as user have full control over the use of cookies. By a change of the settings of your internet browser you are able to deactivate or restrict the transmissions of cookies. Cookies already being stored can be deleted at any time. This can also be carried out automatically. However, if cookies for our website are deactivated, it may no longer be possible to fully use all functions of the website. The transmission of flash cookies cannot be prevented by the browser settings but re­quires changes of the settings of the flash player.

 

VI. E-Mail-contact

Description and range of data processing

Contacting us is possible by using the e-mail address provided. In this case personal data of the user transmitted with the e-mail is stored. In this connection no data is passed on to third parties. The data is used exclusively for the processing of the con­versation and will immediately be deleted if it is no longer needed.

Legal foundation of data processing

Legal foundation for the processing of the data after application of the user for a newsletter in case of consent of the user is Article 6 Para. 1 lit. a GDPR.

Legal foundation for the processing of data in case of the transmission of an e-mail is Article 6 Para. 1 lit. f GDPR. Is the e-mail contact directed at closing a contract addi­tional legal foundation for the processing of data is Article 6 Para. 1 lit. b GDPR.

Purpose of data processing

The processing of the personal data from the input mask/e-mail serves us solely for the processing of the contact. In case of contacting by e-mail this is also the neces­sary legitimate interest in the processing of the data.

Other personal data processed during the sending-off process serves to prevent abuse of the contact form and to ensure the security of our IT systems.

Duration of storage

The data is deleted as soon as it is no longer needed for achieving the purpose of their collection. This is the case for the personal data from the input mask of the contact form and those which are sent by e-mail when the particular conversation with the user has ended.

The conversation has ended when the circumstances allow the conclusion that the matter in question has been finally clarified.

The additional personal data collected during the sending-off process is deleted the latest after a period of seven days.

Possibilities for objection and elimination

At any time the user has the opportunity to withdraw his consent on the processing of personal data. If the user is contacting us by e-mail, he can object to the storage of his personal data at any time. In this case the conversation cannot be continued.

VII.       Rights of the data subject

If your personal data is processed, then you are the data subject in the sense of the GDPR and you are entitled to the following rights vis à vis the responsible party:

Right of access by the data subject

You can demand from the responsible party confirmation as to whether personal data that relates to you has been processed by us. If such processing has taken place, you can demand information from the responsible party on the following:

• The purposes for which the personal data is processed;
• The categories of personal data which are processed;
• The recipients or, resp., the categories of recipients to which the personal data relating to you has been disclosed or will be disclosed;
• The planned duration of the storage of the personal data relating to you or, if dis­tinct statements on this are not possible, the criteria for the laying down of duration of storage;
• The existence of a right to correction or deletion of the personal data relating to yourself, of a right to a restriction of the processing by the responsible party or of a right of objection to this processing;
• The existence of a right of appeal at a supervisory authority;
• All available information on the origin of the data if the personal data was not collected at the data subject;
• The existence of an automated decision-finding process including profiling in ac­cordance with Article 22 Para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and its scope and the effects strived for of such a processing for the data subject in question.

You are entitled to the right to demand information on whether the personal data re­lating to yourself is transmitted to a third country or an international organization. In this connection you can demand to be instructed on the suitable guarantees in ac­cordance with Article 46 GDPR in connection with the transmission.

Right to correction

You have a right to correction and/or completion vis à vis the responsible party in so far as the personal data as processed and which relates to yourself is incorrect or incomplete. The responsible party has to carry out the correction without delay.

Right to restrict the processing of personal data

Provided the following preconditions are met you can demand restriction of the pro­cessing of the personal data relating to you:

• if you dispute the correctness of the personal data relating to yourself for a pe­riod which makes it possible for the responsible party to check the correctness of the personal data;
• if the processing is unlawful and you reject deletion of the personal data and de­mand restriction of the use of the personal data instead;
• if the responsible party no longer needs the personal data for purposes of the processing but you need the data for the advancing, exercising or defending of legal claims, or
• if you have advanced objection to the processing in accordance with Article 21 Para. 1 GDPR but it has not yet been established whether the justified rea­sons of the responsible party outweigh your reasons.

If the processing of the personal data relating to yourself has been restricted, then this data – apart from the storage of it – may only be processed with your consent or for the assertion, exercising or defending of legal claims or for the protection of the rights of another natural person or legal entity or for reasons relating to an important public interest of the European Union or of a member state.

If the restriction of the processing has been restricted in accordance with the afore-mentioned preconditions, then you will be informed by the responsible party before the restriction is cancelled.

Right to erasure

1. a) Deletion obligation

You can demand by the responsible party that the personal data relating to yourself is deleted without delay and the responsible party is then obliged to delete this data without delay in so far as one of the following reasons applies:

• The personal data relating to you is no longer required for the purposes for which it was collected or for which it was processed.
• You revoke your consent, on which processing in accordance with Article 6 Para. 1 lit. a or Article 9 Para.2 lit. a GDPR was based, and there is no other legal foundation for the processing.
• You submit an objection to the processing in accordance with Article 21 Para. 1 GDPR and there are no justified reasons for the processing with a higher priority, or you submit an objection to the processing in accordance with Article 21 Para. 2 GDPR.
• The personal data relating to you was processed unlawfully.
• The deletion of the personal data relating to you is required to fulfil a legal obliga­tion in accordance with European Union law or the law of the member states, which laws the responsible party is subject to.
• The personal data relating to you was collected in relation to services offered by the information society in accordance with Article 8 Para. 1 GDPR.

1. b) Information to third parties

If the responsible party has made the personal data relating to you public and if he/she is obliged to delete this data in accordance with Article 17 Para. 1 GDPR, then he/she shall take reasonable measures including technical ones – whereby ac­count shall be taken of the available technology and the implementation costs – to inform the responsible parties for the data processing which process the personal data that you as data subject have demanded from them the deletion of all links to this personal data or of copies or replicates of these.

1. c) Exceptions

The right to erasure does not exist in so far as the processing is necessary for

• the exercising of the right of free expression of opinion and to information;
• for the fulfilment of a legal obligation, which requires the processing in accord­ance with the law of the European Union or the law of the member states, which laws the responsible party is subject to, or for the carrying out of a task, which lies in the public interest or which is carried out in the exercising of pub­lic authority, which authority was transferred to the responsible party;
• for reasons of public interest in the field of public health in accordance with Arti­cle 9 Para. 2 lit. h and i as well as Article 9 Para. 3 GDPR;
• for archiving purposes, scientific or historical research purposes lying in the pub­lic interest or for statistical purposes in accordance with Article 89 Para. 1 GDPR, in so far as the right named in section a) probably makes achieving of the objectives of the processing impossible or impairs it seriously, or
• for the advancing, exercising or defending of legal claims.

Right to information

If you have advanced the right to the correcting, erasure or restricting of the pro­cessing to the responsible party, then the latter is obliged to inform all recipients, to which the personal data relating to you was disclosed, of this correction or erasure of the data or of the restricting of the processing, unless this proves itself to be impossi­ble or linked with unreasonable expenditure.

You are entitled to the right vis à vis the responsible party to be informed about these recipients.

Right to data portability

You have the right to receive the personal data relating to yourself, which you made available to the responsible party, in a structured, conventional and machine-reada­ble format. In addition, you have the right to transmit this data to another responsible party without hindrance by the responsible party to whom the personal data was made available, in so far as

• the processing is based on consent in accordance with Article 6 Para. 1 lit. a GDPR or Article 9 Para. 2 lit. a GDPR or on a contract in accordance with Arti­cle 6 Para. 1 lit. b GDPR and
• the processing is carried out by means of automated processes.

In exercising this right, you have in addition the right to obtain the personal data re­lating to you is transferred directly from one responsible party to another responsible party in so far as this is technically possible. The freedoms and rights of other per­sons may not be impaired thereby.

The right to data portability applies not for the processing of personal data, which is necessary for the carrying out of a task, which lies in the public interest or in the ex­ercising of public authority and which task was transferred to the responsible party.

Right to object

For reasons which result from your particular situation you have the right to advance at any time objection to the processing of the personal data relating to you, which processing is carried out on the basis of Article 6 Para. 1 lit. e or f GDPR. This right also applies to the profiling based on these provisions.

The responsible party shall then no longer process the personal data relating to you, unless he/she can prove compelling reasons worthy of protection, which reasons overweigh your interests, rights and freedoms or where the processing serves the advancing, exercising or defending of legal claims.

If the personal data relating to you is processed for the purpose of direct advertising, then you have the right to advance at any time objection to the processing of the per­sonal data relating to you for purposes of such advertising. This applies also to the profiling in so far as this is carried out in connection with such direct advertising.

If you object to the processing for purposes of direct advertising, then the personal data relating to you will no longer be processed for these purposes.

You have the opportunity – in connection with the use of services of the information society and regardless of directive 2002/58/EC – to exercise your right of objection with the aid of automated processes in which technical specifications are used.

You have also the right for reasons which result from your particular situation to ad­vance at any time objection to the processing of the personal data relating to you which processing is carried out for scientific or historic purposes or for statistical pur­poses according to Article 89 Para. 1 GDPR.

Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your consent at any time. On withdrawal we immedi­ately will delete your personal data and no longer process it. The legality of the pro­cessing carried out prior to your withdrawal on the base of your given consent is not affected by you withdrawal.

Right to complain at a supervisory authority

Regardless of another regulatory or judicial remedy, you are entitled to the right to lodge a complaint at a supervisory authority and here in particular at a supervisory authority in the member state of your place of residence, of your place of work or of the place where the suspected infringement took place when you are of the opinion that the processing of the personal data relating to you infringes the GDPR.

In this case the supervisory authority, at which the complaint was lodged, shall inform the complainant on the status and the results of the complaint including the possibility of a judicial remedy in accordance with Article 78 GDPR.

I. Name and address of the responsible party

The responsible party in the sense of the General Data Protection Regulation (GDPR) and of other national data protection regulations in force in the member states of European Union as well as of other regulations with a legal data-protecting character is the

CTP Advanced Materials GmbH

Stahlstrasse 60

D-65428 Ruesselsheim, Germany

Fon: +49 6142 91 85 0

Fax: +49 6142 91 85 55

Mail: ctp@ctpgmbh.de

 

The processing of some data takes place in joint responsibility according to Art. 26 GDPR with:

Aditya Birla Group
Aditya Birla Centre
S K Ahire Marg, Worli

Mumbai 400030, India

II. Name and address of the data protection officer

The data protection officer of the responsible party is:

daschug GmbH

Robert-Bosch-Strasse 7

64293 Darmstadt, Germany

Fon +49 6151 6673 440

Mail: datenschutz@ctpgmbh.de

III.    General information on data processing

Range of the processing of personal data

Generally, we collect and process personal data of users only as long as this is re­quired for providing a properly functioning website as well as delivering our contents and services. The collection and use of personal data of our users on a regular basis only takes place after consent of the data subject. An exception applies to those cases where obtaining consent prior to use is not possible based on matters of law and fact and the processing of data is allowed by legal regulations.

Legal fundamentals for the processing of personal data

In so far as we obtain the consent of the data subject for the processing of personal data Article 6 Para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the foundation for the processing of personal data.

Article 6 Para. 1 lit. b GDPR serves as the legal foundation for the processing of per­sonal data which is necessary for the fulfilment of a contract if the data subject is party to this contract. This applies also to the processing processes which are neces­sary for the execution of pre-contractual measures.

Article 6 Para. 1 lit. c GDPR serves as the legal foundation in so far as processing of personal data is necessary for the fulfilment of a legal obligation applying to our en­terprise.

Article 6 Para. 1 lit. d GDPR serves as the legal foundation for the situation that vital interests of the data subject or another natural person make the processing of per­sonal data necessary.

Article 6 Para. 1 lit. f GDPR serves as the legal foundation for the situation that pro­cessing is necessary to ensure a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not exceed the first named interest.

Deletion of data and duration of storage

The personal data of the data subject are deleted or disabled as soon as the purpose for which the data was stored lapses. In addition, storage can take place if this was stipulated by the European or national legislatures in orders, laws or other regulations in accordance with European Union law to which the responsible party is subject. Disabling or deletion of the data is also carried out if a storage period prescribed by the standards as named expires unless there is a necessity for the continued storage of the data for the concluding or fulfilling of a contract.

IV. Making available of our website and creation of logfiles

Description and range of data processing

On every visit on our website our system automatically collects data and information of the computer system calling. The following data is collected:

• Information on the type of browser and its version used
• The operating system of the user
• The internet-service-provider of the user
• The IP-address of the user
• Date and time of the access
• The website, from which an accessing system reaches our website
• Websites, which are accessed by the computer system of the user via our web­site

This data is also stored in the logfiles of our system. However, IP-addresses of the users or other data, which would allow the assignment of the data to a particular user, are not stored. Also, this data is not stored together with other personal data of the user.

Legal foundations for the data processing

Article 6 Para. 1 lit. f GDPR is the legal foundation for the temporary storage of data and logfiles.

Purpose of data processing

The temporary storage of the IP-address by the system is necessary to enable the delivery of the website to the computer of the user. For achieving this the IP-address of the user must remain stored for the duration of the session.

The storage in logfiles occurs to enable the proper functioning of the website. Fur­thermore, this data serves to optimize the website and to enable the security of our IT-systems. An analysis of the data for marketing purposes does not happen.

The legal foundation is our legitimate interest in data processing according to Article 6 Para.1 lit. f GDPR.

Duration of storage

The data is deleted or disabled as soon as the purpose for which the data was stored lapses. This is the case when the particular session has ended in situations where the data is collected for making the website available.

This is the case at the latest seven days after the time when the data was stored in log files. A storage exceeding this period is possible. In this case the IP-addresses of the users are deleted or distorted so that an assignment of the client calling in is no longer possible.

Possibility for objection and deletion

The collection of data for the making available of the website and the storage of data in logfiles is compulsory for operating the website. Thus, there is no right to object by the user.

Use of cookies

1. a) Description and range of data processing

Our website uses cookies. In general, cookies are small text files which are stored on your computer and which store certain settings and data for exchange with the online offer from us via your browser. If a user calls in a website, a cookie can be stored in the operating system of the user’s computer. This cookie usually contains a unique string of characters, which allows an unambiguous identification of the browser when calling in the website again.

We are using cookies to improve our online offer. Some elements of our website re­quire that a browser calling in can be identified after a changeover.

The following data is stored and transmitted:

• Language settings
• Log-In-information

The data of the user collected in this way is pseudonymized by technical processes. Accordingly, assignment of the data to the user calling in is no longer possible. The data collected is not stored together with other personal data of the user.

When our website is called, the users are informed by means of an information ban­ner about the use of cookies for analytical purposes and are referred to this data protection information. In this connection reference is given to how storage of cookies can be prevented by the browser settings.

In this connection follows a reference to how that storing of cookies can be prevented by appropriate browser settings.

1. b) Legal foundation of data processing

The legal foundation for the processing of personal data by using cookies is Article 6 Para. 1 lit. f GDPR.

1. c) Purpose of data processing

The purpose behind the use of strictly technically essential cookies is to facilitate the use of the website for the user. Certain functions of our website cannot be offered without the use of cookies. For these functions it is necessary that the browser is recognized even after a page change.

We need cookies for the following application:

• Adoption of language settings

Analysis cookies are used for the purpose of improving the quality of our website and its content. By the analysis cookies we learn how the website is used and thus are able to continually optimize our offer. These purposes also include our legitimate in­terest in the processing of the personal data in accordance with Article 6 Para. 1 lit. f GDPR.

1. d) Duration of storage, possibilities for objection and elimination

Cookies are stored on the user’s computer and are transmitted from this to our web­site. Accordingly, you as user have full control over the use of cookies. By a change of the settings of your internet browser you are able to deactivate or restrict the transmissions of cookies. Cookies already being stored can be deleted at any time. This can also be carried out automatically. However, if cookies for our website are deactivated, it may no longer be possible to fully use all functions of the website. The transmission of flash cookies cannot be prevented by the browser settings but re­quires changes of the settings of the flash player.

 

VI. E-Mail-contact

Description and range of data processing

Contacting us is possible by using the e-mail address provided. In this case personal data of the user transmitted with the e-mail is stored. In this connection no data is passed on to third parties. The data is used exclusively for the processing of the con­versation and will immediately be deleted if it is no longer needed.

Legal foundation of data processing

Legal foundation for the processing of the data after application of the user for a newsletter in case of consent of the user is Article 6 Para. 1 lit. a GDPR.

Legal foundation for the processing of data in case of the transmission of an e-mail is Article 6 Para. 1 lit. f GDPR. Is the e-mail contact directed at closing a contract addi­tional legal foundation for the processing of data is Article 6 Para. 1 lit. b GDPR.

Purpose of data processing

The processing of the personal data from the input mask/e-mail serves us solely for the processing of the contact. In case of contacting by e-mail this is also the neces­sary legitimate interest in the processing of the data.

Other personal data processed during the sending-off process serves to prevent abuse of the contact form and to ensure the security of our IT systems.

Duration of storage

The data is deleted as soon as it is no longer needed for achieving the purpose of their collection. This is the case for the personal data from the input mask of the contact form and those which are sent by e-mail when the particular conversation with the user has ended.

The conversation has ended when the circumstances allow the conclusion that the matter in question has been finally clarified.

The additional personal data collected during the sending-off process is deleted the latest after a period of seven days.

Possibilities for objection and elimination

At any time the user has the opportunity to withdraw his consent on the processing of personal data. If the user is contacting us by e-mail, he can object to the storage of his personal data at any time. In this case the conversation cannot be continued.

VII.       Rights of the data subject

If your personal data is processed, then you are the data subject in the sense of the GDPR and you are entitled to the following rights vis à vis the responsible party:

Right of access by the data subject

You can demand from the responsible party confirmation as to whether personal data that relates to you has been processed by us. If such processing has taken place, you can demand information from the responsible party on the following:

• The purposes for which the personal data is processed;
• The categories of personal data which are processed;
• The recipients or, resp., the categories of recipients to which the personal data relating to you has been disclosed or will be disclosed;
• The planned duration of the storage of the personal data relating to you or, if dis­tinct statements on this are not possible, the criteria for the laying down of duration of storage;
• The existence of a right to correction or deletion of the personal data relating to yourself, of a right to a restriction of the processing by the responsible party or of a right of objection to this processing;
• The existence of a right of appeal at a supervisory authority;
• All available information on the origin of the data if the personal data was not collected at the data subject;
• The existence of an automated decision-finding process including profiling in ac­cordance with Article 22 Para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and its scope and the effects strived for of such a processing for the data subject in question.

You are entitled to the right to demand information on whether the personal data re­lating to yourself is transmitted to a third country or an international organization. In this connection you can demand to be instructed on the suitable guarantees in ac­cordance with Article 46 GDPR in connection with the transmission.

Right to correction

You have a right to correction and/or completion vis à vis the responsible party in so far as the personal data as processed and which relates to yourself is incorrect or incomplete. The responsible party has to carry out the correction without delay.

Right to restrict the processing of personal data

Provided the following preconditions are met you can demand restriction of the pro­cessing of the personal data relating to you:

• if you dispute the correctness of the personal data relating to yourself for a pe­riod which makes it possible for the responsible party to check the correctness of the personal data;
• if the processing is unlawful and you reject deletion of the personal data and de­mand restriction of the use of the personal data instead;
• if the responsible party no longer needs the personal data for purposes of the processing but you need the data for the advancing, exercising or defending of legal claims, or
• if you have advanced objection to the processing in accordance with Article 21 Para. 1 GDPR but it has not yet been established whether the justified rea­sons of the responsible party outweigh your reasons.

If the processing of the personal data relating to yourself has been restricted, then this data – apart from the storage of it – may only be processed with your consent or for the assertion, exercising or defending of legal claims or for the protection of the rights of another natural person or legal entity or for reasons relating to an important public interest of the European Union or of a member state.

If the restriction of the processing has been restricted in accordance with the afore-mentioned preconditions, then you will be informed by the responsible party before the restriction is cancelled.

Right to erasure

1. a) Deletion obligation

You can demand by the responsible party that the personal data relating to yourself is deleted without delay and the responsible party is then obliged to delete this data without delay in so far as one of the following reasons applies:

• The personal data relating to you is no longer required for the purposes for which it was collected or for which it was processed.
• You revoke your consent, on which processing in accordance with Article 6 Para. 1 lit. a or Article 9 Para.2 lit. a GDPR was based, and there is no other legal foundation for the processing.
• You submit an objection to the processing in accordance with Article 21 Para. 1 GDPR and there are no justified reasons for the processing with a higher priority, or you submit an objection to the processing in accordance with Article 21 Para. 2 GDPR.
• The personal data relating to you was processed unlawfully.
• The deletion of the personal data relating to you is required to fulfil a legal obliga­tion in accordance with European Union law or the law of the member states, which laws the responsible party is subject to.
• The personal data relating to you was collected in relation to services offered by the information society in accordance with Article 8 Para. 1 GDPR.

1. b) Information to third parties

If the responsible party has made the personal data relating to you public and if he/she is obliged to delete this data in accordance with Article 17 Para. 1 GDPR, then he/she shall take reasonable measures including technical ones – whereby ac­count shall be taken of the available technology and the implementation costs – to inform the responsible parties for the data processing which process the personal data that you as data subject have demanded from them the deletion of all links to this personal data or of copies or replicates of these.

1. c) Exceptions

The right to erasure does not exist in so far as the processing is necessary for

• the exercising of the right of free expression of opinion and to information;
• for the fulfilment of a legal obligation, which requires the processing in accord­ance with the law of the European Union or the law of the member states, which laws the responsible party is subject to, or for the carrying out of a task, which lies in the public interest or which is carried out in the exercising of pub­lic authority, which authority was transferred to the responsible party;
• for reasons of public interest in the field of public health in accordance with Arti­cle 9 Para. 2 lit. h and i as well as Article 9 Para. 3 GDPR;
• for archiving purposes, scientific or historical research purposes lying in the pub­lic interest or for statistical purposes in accordance with Article 89 Para. 1 GDPR, in so far as the right named in section a) probably makes achieving of the objectives of the processing impossible or impairs it seriously, or
• for the advancing, exercising or defending of legal claims.

Right to information

If you have advanced the right to the correcting, erasure or restricting of the pro­cessing to the responsible party, then the latter is obliged to inform all recipients, to which the personal data relating to you was disclosed, of this correction or erasure of the data or of the restricting of the processing, unless this proves itself to be impossi­ble or linked with unreasonable expenditure.

You are entitled to the right vis à vis the responsible party to be informed about these recipients.

Right to data portability

You have the right to receive the personal data relating to yourself, which you made available to the responsible party, in a structured, conventional and machine-reada­ble format. In addition, you have the right to transmit this data to another responsible party without hindrance by the responsible party to whom the personal data was made available, in so far as

• the processing is based on consent in accordance with Article 6 Para. 1 lit. a GDPR or Article 9 Para. 2 lit. a GDPR or on a contract in accordance with Arti­cle 6 Para. 1 lit. b GDPR and
• the processing is carried out by means of automated processes.

In exercising this right, you have in addition the right to obtain the personal data re­lating to you is transferred directly from one responsible party to another responsible party in so far as this is technically possible. The freedoms and rights of other per­sons may not be impaired thereby.

The right to data portability applies not for the processing of personal data, which is necessary for the carrying out of a task, which lies in the public interest or in the ex­ercising of public authority and which task was transferred to the responsible party.

Right to object

For reasons which result from your particular situation you have the right to advance at any time objection to the processing of the personal data relating to you, which processing is carried out on the basis of Article 6 Para. 1 lit. e or f GDPR. This right also applies to the profiling based on these provisions.

The responsible party shall then no longer process the personal data relating to you, unless he/she can prove compelling reasons worthy of protection, which reasons overweigh your interests, rights and freedoms or where the processing serves the advancing, exercising or defending of legal claims.

If the personal data relating to you is processed for the purpose of direct advertising, then you have the right to advance at any time objection to the processing of the per­sonal data relating to you for purposes of such advertising. This applies also to the profiling in so far as this is carried out in connection with such direct advertising.

If you object to the processing for purposes of direct advertising, then the personal data relating to you will no longer be processed for these purposes.

You have the opportunity – in connection with the use of services of the information society and regardless of directive 2002/58/EC – to exercise your right of objection with the aid of automated processes in which technical specifications are used.

You have also the right for reasons which result from your particular situation to ad­vance at any time objection to the processing of the personal data relating to you which processing is carried out for scientific or historic purposes or for statistical pur­poses according to Article 89 Para. 1 GDPR.

Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your consent at any time. On withdrawal we immedi­ately will delete your personal data and no longer process it. The legality of the pro­cessing carried out prior to your withdrawal on the base of your given consent is not affected by you withdrawal.

Right to complain at a supervisory authority

Regardless of another regulatory or judicial remedy, you are entitled to the right to lodge a complaint at a supervisory authority and here in particular at a supervisory authority in the member state of your place of residence, of your place of work or of the place where the suspected infringement took place when you are of the opinion that the processing of the personal data relating to you infringes the GDPR.

In this case the supervisory authority, at which the complaint was lodged, shall inform the complainant on the status and the results of the complaint including the possibility of a judicial remedy in accordance with Article 78 GDPR.

I. Name and address of the responsible party

The responsible party in the sense of the General Data Protection Regulation (GDPR) and of other national data protection regulations in force in the member states of European Union as well as of other regulations with a legal data-protecting character is the

CTP Advanced Materials GmbH

Stahlstrasse 60

D-65428 Ruesselsheim, Germany

Fon: +49 6142 91 85 0

Fax: +49 6142 91 85 55

Mail: ctp@ctpgmbh.de

 

The processing of some data takes place in joint responsibility according to Art. 26 GDPR with:

Aditya Birla Group
Aditya Birla Centre
S K Ahire Marg, Worli

Mumbai 400030, India

II. Name and address of the data protection officer

The data protection officer of the responsible party is:

daschug GmbH

Robert-Bosch-Strasse 7

64293 Darmstadt, Germany

Fon +49 6151 6673 440

Mail: datenschutz@ctpgmbh.de

III.    General information on data processing

Range of the processing of personal data

Generally, we collect and process personal data of users only as long as this is re­quired for providing a properly functioning website as well as delivering our contents and services. The collection and use of personal data of our users on a regular basis only takes place after consent of the data subject. An exception applies to those cases where obtaining consent prior to use is not possible based on matters of law and fact and the processing of data is allowed by legal regulations.

Legal fundamentals for the processing of personal data

In so far as we obtain the consent of the data subject for the processing of personal data Article 6 Para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the foundation for the processing of personal data.

Article 6 Para. 1 lit. b GDPR serves as the legal foundation for the processing of per­sonal data which is necessary for the fulfilment of a contract if the data subject is party to this contract. This applies also to the processing processes which are neces­sary for the execution of pre-contractual measures.

Article 6 Para. 1 lit. c GDPR serves as the legal foundation in so far as processing of personal data is necessary for the fulfilment of a legal obligation applying to our en­terprise.

Article 6 Para. 1 lit. d GDPR serves as the legal foundation for the situation that vital interests of the data subject or another natural person make the processing of per­sonal data necessary.

Article 6 Para. 1 lit. f GDPR serves as the legal foundation for the situation that pro­cessing is necessary to ensure a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not exceed the first named interest.

Deletion of data and duration of storage

The personal data of the data subject are deleted or disabled as soon as the purpose for which the data was stored lapses. In addition, storage can take place if this was stipulated by the European or national legislatures in orders, laws or other regulations in accordance with European Union law to which the responsible party is subject. Disabling or deletion of the data is also carried out if a storage period prescribed by the standards as named expires unless there is a necessity for the continued storage of the data for the concluding or fulfilling of a contract.

IV. Making available of our website and creation of logfiles

Description and range of data processing

On every visit on our website our system automatically collects data and information of the computer system calling. The following data is collected:

• Information on the type of browser and its version used
• The operating system of the user
• The internet-service-provider of the user
• The IP-address of the user
• Date and time of the access
• The website, from which an accessing system reaches our website
• Websites, which are accessed by the computer system of the user via our web­site

This data is also stored in the logfiles of our system. However, IP-addresses of the users or other data, which would allow the assignment of the data to a particular user, are not stored. Also, this data is not stored together with other personal data of the user.

Legal foundations for the data processing

Article 6 Para. 1 lit. f GDPR is the legal foundation for the temporary storage of data and logfiles.

Purpose of data processing

The temporary storage of the IP-address by the system is necessary to enable the delivery of the website to the computer of the user. For achieving this the IP-address of the user must remain stored for the duration of the session.

The storage in logfiles occurs to enable the proper functioning of the website. Fur­thermore, this data serves to optimize the website and to enable the security of our IT-systems. An analysis of the data for marketing purposes does not happen.

The legal foundation is our legitimate interest in data processing according to Article 6 Para.1 lit. f GDPR.

Duration of storage

The data is deleted or disabled as soon as the purpose for which the data was stored lapses. This is the case when the particular session has ended in situations where the data is collected for making the website available.

This is the case at the latest seven days after the time when the data was stored in log files. A storage exceeding this period is possible. In this case the IP-addresses of the users are deleted or distorted so that an assignment of the client calling in is no longer possible.

Possibility for objection and deletion

The collection of data for the making available of the website and the storage of data in logfiles is compulsory for operating the website. Thus, there is no right to object by the user.

Use of cookies

1. a) Description and range of data processing

Our website uses cookies. In general, cookies are small text files which are stored on your computer and which store certain settings and data for exchange with the online offer from us via your browser. If a user calls in a website, a cookie can be stored in the operating system of the user’s computer. This cookie usually contains a unique string of characters, which allows an unambiguous identification of the browser when calling in the website again.

We are using cookies to improve our online offer. Some elements of our website re­quire that a browser calling in can be identified after a changeover.

The following data is stored and transmitted:

• Language settings
• Log-In-information

The data of the user collected in this way is pseudonymized by technical processes. Accordingly, assignment of the data to the user calling in is no longer possible. The data collected is not stored together with other personal data of the user.

When our website is called, the users are informed by means of an information ban­ner about the use of cookies for analytical purposes and are referred to this data protection information. In this connection reference is given to how storage of cookies can be prevented by the browser settings.

In this connection follows a reference to how that storing of cookies can be prevented by appropriate browser settings.

1. b) Legal foundation of data processing

The legal foundation for the processing of personal data by using cookies is Article 6 Para. 1 lit. f GDPR.

1. c) Purpose of data processing

The purpose behind the use of strictly technically essential cookies is to facilitate the use of the website for the user. Certain functions of our website cannot be offered without the use of cookies. For these functions it is necessary that the browser is recognized even after a page change.

We need cookies for the following application:

• Adoption of language settings

Analysis cookies are used for the purpose of improving the quality of our website and its content. By the analysis cookies we learn how the website is used and thus are able to continually optimize our offer. These purposes also include our legitimate in­terest in the processing of the personal data in accordance with Article 6 Para. 1 lit. f GDPR.

1. d) Duration of storage, possibilities for objection and elimination

Cookies are stored on the user’s computer and are transmitted from this to our web­site. Accordingly, you as user have full control over the use of cookies. By a change of the settings of your internet browser you are able to deactivate or restrict the transmissions of cookies. Cookies already being stored can be deleted at any time. This can also be carried out automatically. However, if cookies for our website are deactivated, it may no longer be possible to fully use all functions of the website. The transmission of flash cookies cannot be prevented by the browser settings but re­quires changes of the settings of the flash player.

 

VI. E-Mail-contact

Description and range of data processing

Contacting us is possible by using the e-mail address provided. In this case personal data of the user transmitted with the e-mail is stored. In this connection no data is passed on to third parties. The data is used exclusively for the processing of the con­versation and will immediately be deleted if it is no longer needed.

Legal foundation of data processing

Legal foundation for the processing of the data after application of the user for a newsletter in case of consent of the user is Article 6 Para. 1 lit. a GDPR.

Legal foundation for the processing of data in case of the transmission of an e-mail is Article 6 Para. 1 lit. f GDPR. Is the e-mail contact directed at closing a contract addi­tional legal foundation for the processing of data is Article 6 Para. 1 lit. b GDPR.

Purpose of data processing

The processing of the personal data from the input mask/e-mail serves us solely for the processing of the contact. In case of contacting by e-mail this is also the neces­sary legitimate interest in the processing of the data.

Other personal data processed during the sending-off process serves to prevent abuse of the contact form and to ensure the security of our IT systems.

Duration of storage

The data is deleted as soon as it is no longer needed for achieving the purpose of their collection. This is the case for the personal data from the input mask of the contact form and those which are sent by e-mail when the particular conversation with the user has ended.

The conversation has ended when the circumstances allow the conclusion that the matter in question has been finally clarified.

The additional personal data collected during the sending-off process is deleted the latest after a period of seven days.

Possibilities for objection and elimination

At any time the user has the opportunity to withdraw his consent on the processing of personal data. If the user is contacting us by e-mail, he can object to the storage of his personal data at any time. In this case the conversation cannot be continued.

VII.       Rights of the data subject

If your personal data is processed, then you are the data subject in the sense of the GDPR and you are entitled to the following rights vis à vis the responsible party:

Right of access by the data subject

You can demand from the responsible party confirmation as to whether personal data that relates to you has been processed by us. If such processing has taken place, you can demand information from the responsible party on the following:

• The purposes for which the personal data is processed;
• The categories of personal data which are processed;
• The recipients or, resp., the categories of recipients to which the personal data relating to you has been disclosed or will be disclosed;
• The planned duration of the storage of the personal data relating to you or, if dis­tinct statements on this are not possible, the criteria for the laying down of duration of storage;
• The existence of a right to correction or deletion of the personal data relating to yourself, of a right to a restriction of the processing by the responsible party or of a right of objection to this processing;
• The existence of a right of appeal at a supervisory authority;
• All available information on the origin of the data if the personal data was not collected at the data subject;
• The existence of an automated decision-finding process including profiling in ac­cordance with Article 22 Para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and its scope and the effects strived for of such a processing for the data subject in question.

You are entitled to the right to demand information on whether the personal data re­lating to yourself is transmitted to a third country or an international organization. In this connection you can demand to be instructed on the suitable guarantees in ac­cordance with Article 46 GDPR in connection with the transmission.

Right to correction

You have a right to correction and/or completion vis à vis the responsible party in so far as the personal data as processed and which relates to yourself is incorrect or incomplete. The responsible party has to carry out the correction without delay.

Right to restrict the processing of personal data

Provided the following preconditions are met you can demand restriction of the pro­cessing of the personal data relating to you:

• if you dispute the correctness of the personal data relating to yourself for a pe­riod which makes it possible for the responsible party to check the correctness of the personal data;
• if the processing is unlawful and you reject deletion of the personal data and de­mand restriction of the use of the personal data instead;
• if the responsible party no longer needs the personal data for purposes of the processing but you need the data for the advancing, exercising or defending of legal claims, or
• if you have advanced objection to the processing in accordance with Article 21 Para. 1 GDPR but it has not yet been established whether the justified rea­sons of the responsible party outweigh your reasons.

If the processing of the personal data relating to yourself has been restricted, then this data – apart from the storage of it – may only be processed with your consent or for the assertion, exercising or defending of legal claims or for the protection of the rights of another natural person or legal entity or for reasons relating to an important public interest of the European Union or of a member state.

If the restriction of the processing has been restricted in accordance with the afore-mentioned preconditions, then you will be informed by the responsible party before the restriction is cancelled.

Right to erasure

1. a) Deletion obligation

You can demand by the responsible party that the personal data relating to yourself is deleted without delay and the responsible party is then obliged to delete this data without delay in so far as one of the following reasons applies:

• The personal data relating to you is no longer required for the purposes for which it was collected or for which it was processed.
• You revoke your consent, on which processing in accordance with Article 6 Para. 1 lit. a or Article 9 Para.2 lit. a GDPR was based, and there is no other legal foundation for the processing.
• You submit an objection to the processing in accordance with Article 21 Para. 1 GDPR and there are no justified reasons for the processing with a higher priority, or you submit an objection to the processing in accordance with Article 21 Para. 2 GDPR.
• The personal data relating to you was processed unlawfully.
• The deletion of the personal data relating to you is required to fulfil a legal obliga­tion in accordance with European Union law or the law of the member states, which laws the responsible party is subject to.
• The personal data relating to you was collected in relation to services offered by the information society in accordance with Article 8 Para. 1 GDPR.

1. b) Information to third parties

If the responsible party has made the personal data relating to you public and if he/she is obliged to delete this data in accordance with Article 17 Para. 1 GDPR, then he/she shall take reasonable measures including technical ones – whereby ac­count shall be taken of the available technology and the implementation costs – to inform the responsible parties for the data processing which process the personal data that you as data subject have demanded from them the deletion of all links to this personal data or of copies or replicates of these.

1. c) Exceptions

The right to erasure does not exist in so far as the processing is necessary for

• the exercising of the right of free expression of opinion and to information;
• for the fulfilment of a legal obligation, which requires the processing in accord­ance with the law of the European Union or the law of the member states, which laws the responsible party is subject to, or for the carrying out of a task, which lies in the public interest or which is carried out in the exercising of pub­lic authority, which authority was transferred to the responsible party;
• for reasons of public interest in the field of public health in accordance with Arti­cle 9 Para. 2 lit. h and i as well as Article 9 Para. 3 GDPR;
• for archiving purposes, scientific or historical research purposes lying in the pub­lic interest or for statistical purposes in accordance with Article 89 Para. 1 GDPR, in so far as the right named in section a) probably makes achieving of the objectives of the processing impossible or impairs it seriously, or
• for the advancing, exercising or defending of legal claims.

Right to information

If you have advanced the right to the correcting, erasure or restricting of the pro­cessing to the responsible party, then the latter is obliged to inform all recipients, to which the personal data relating to you was disclosed, of this correction or erasure of the data or of the restricting of the processing, unless this proves itself to be impossi­ble or linked with unreasonable expenditure.

You are entitled to the right vis à vis the responsible party to be informed about these recipients.

Right to data portability

You have the right to receive the personal data relating to yourself, which you made available to the responsible party, in a structured, conventional and machine-reada­ble format. In addition, you have the right to transmit this data to another responsible party without hindrance by the responsible party to whom the personal data was made available, in so far as

• the processing is based on consent in accordance with Article 6 Para. 1 lit. a GDPR or Article 9 Para. 2 lit. a GDPR or on a contract in accordance with Arti­cle 6 Para. 1 lit. b GDPR and
• the processing is carried out by means of automated processes.

In exercising this right, you have in addition the right to obtain the personal data re­lating to you is transferred directly from one responsible party to another responsible party in so far as this is technically possible. The freedoms and rights of other per­sons may not be impaired thereby.

The right to data portability applies not for the processing of personal data, which is necessary for the carrying out of a task, which lies in the public interest or in the ex­ercising of public authority and which task was transferred to the responsible party.

Right to object

For reasons which result from your particular situation you have the right to advance at any time objection to the processing of the personal data relating to you, which processing is carried out on the basis of Article 6 Para. 1 lit. e or f GDPR. This right also applies to the profiling based on these provisions.

The responsible party shall then no longer process the personal data relating to you, unless he/she can prove compelling reasons worthy of protection, which reasons overweigh your interests, rights and freedoms or where the processing serves the advancing, exercising or defending of legal claims.

If the personal data relating to you is processed for the purpose of direct advertising, then you have the right to advance at any time objection to the processing of the per­sonal data relating to you for purposes of such advertising. This applies also to the profiling in so far as this is carried out in connection with such direct advertising.

If you object to the processing for purposes of direct advertising, then the personal data relating to you will no longer be processed for these purposes.

You have the opportunity – in connection with the use of services of the information society and regardless of directive 2002/58/EC – to exercise your right of objection with the aid of automated processes in which technical specifications are used.

You have also the right for reasons which result from your particular situation to ad­vance at any time objection to the processing of the personal data relating to you which processing is carried out for scientific or historic purposes or for statistical pur­poses according to Article 89 Para. 1 GDPR.

Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your consent at any time. On withdrawal we immedi­ately will delete your personal data and no longer process it. The legality of the pro­cessing carried out prior to your withdrawal on the base of your given consent is not affected by you withdrawal.

Right to complain at a supervisory authority

Regardless of another regulatory or judicial remedy, you are entitled to the right to lodge a complaint at a supervisory authority and here in particular at a supervisory authority in the member state of your place of residence, of your place of work or of the place where the suspected infringement took place when you are of the opinion that the processing of the personal data relating to you infringes the GDPR.

In this case the supervisory authority, at which the complaint was lodged, shall inform the complainant on the status and the results of the complaint including the possibility of a judicial remedy in accordance with Article 78 GDPR.

I. Name and address of the responsible party

The responsible party in the sense of the General Data Protection Regulation (GDPR) and of other national data protection regulations in force in the member states of European Union as well as of other regulations with a legal data-protecting character is the

CTP Advanced Materials GmbH

Stahlstrasse 60

D-65428 Ruesselsheim, Germany

Fon: +49 6142 91 85 0

Fax: +49 6142 91 85 55

Mail: ctp@ctpgmbh.de

 

The processing of some data takes place in joint responsibility according to Art. 26 GDPR with:

Aditya Birla Group
Aditya Birla Centre
S K Ahire Marg, Worli

Mumbai 400030, India

II. Name and address of the data protection officer

The data protection officer of the responsible party is:

daschug GmbH

Robert-Bosch-Strasse 7

64293 Darmstadt, Germany

Fon +49 6151 6673 440

Mail: datenschutz@ctpgmbh.de

III.    General information on data processing

Range of the processing of personal data

Generally, we collect and process personal data of users only as long as this is re­quired for providing a properly functioning website as well as delivering our contents and services. The collection and use of personal data of our users on a regular basis only takes place after consent of the data subject. An exception applies to those cases where obtaining consent prior to use is not possible based on matters of law and fact and the processing of data is allowed by legal regulations.

Legal fundamentals for the processing of personal data

In so far as we obtain the consent of the data subject for the processing of personal data Article 6 Para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the foundation for the processing of personal data.

Article 6 Para. 1 lit. b GDPR serves as the legal foundation for the processing of per­sonal data which is necessary for the fulfilment of a contract if the data subject is party to this contract. This applies also to the processing processes which are neces­sary for the execution of pre-contractual measures.

Article 6 Para. 1 lit. c GDPR serves as the legal foundation in so far as processing of personal data is necessary for the fulfilment of a legal obligation applying to our en­terprise.

Article 6 Para. 1 lit. d GDPR serves as the legal foundation for the situation that vital interests of the data subject or another natural person make the processing of per­sonal data necessary.

Article 6 Para. 1 lit. f GDPR serves as the legal foundation for the situation that pro­cessing is necessary to ensure a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not exceed the first named interest.

Deletion of data and duration of storage

The personal data of the data subject are deleted or disabled as soon as the purpose for which the data was stored lapses. In addition, storage can take place if this was stipulated by the European or national legislatures in orders, laws or other regulations in accordance with European Union law to which the responsible party is subject. Disabling or deletion of the data is also carried out if a storage period prescribed by the standards as named expires unless there is a necessity for the continued storage of the data for the concluding or fulfilling of a contract.

IV. Making available of our website and creation of logfiles

Description and range of data processing

On every visit on our website our system automatically collects data and information of the computer system calling. The following data is collected:

• Information on the type of browser and its version used
• The operating system of the user
• The internet-service-provider of the user
• The IP-address of the user
• Date and time of the access
• The website, from which an accessing system reaches our website
• Websites, which are accessed by the computer system of the user via our web­site

This data is also stored in the logfiles of our system. However, IP-addresses of the users or other data, which would allow the assignment of the data to a particular user, are not stored. Also, this data is not stored together with other personal data of the user.

Legal foundations for the data processing

Article 6 Para. 1 lit. f GDPR is the legal foundation for the temporary storage of data and logfiles.

Purpose of data processing

The temporary storage of the IP-address by the system is necessary to enable the delivery of the website to the computer of the user. For achieving this the IP-address of the user must remain stored for the duration of the session.

The storage in logfiles occurs to enable the proper functioning of the website. Fur­thermore, this data serves to optimize the website and to enable the security of our IT-systems. An analysis of the data for marketing purposes does not happen.

The legal foundation is our legitimate interest in data processing according to Article 6 Para.1 lit. f GDPR.

Duration of storage

The data is deleted or disabled as soon as the purpose for which the data was stored lapses. This is the case when the particular session has ended in situations where the data is collected for making the website available.

This is the case at the latest seven days after the time when the data was stored in log files. A storage exceeding this period is possible. In this case the IP-addresses of the users are deleted or distorted so that an assignment of the client calling in is no longer possible.

Possibility for objection and deletion

The collection of data for the making available of the website and the storage of data in logfiles is compulsory for operating the website. Thus, there is no right to object by the user.

Use of cookies

1. a) Description and range of data processing

Our website uses cookies. In general, cookies are small text files which are stored on your computer and which store certain settings and data for exchange with the online offer from us via your browser. If a user calls in a website, a cookie can be stored in the operating system of the user’s computer. This cookie usually contains a unique string of characters, which allows an unambiguous identification of the browser when calling in the website again.

We are using cookies to improve our online offer. Some elements of our website re­quire that a browser calling in can be identified after a changeover.

The following data is stored and transmitted:

• Language settings
• Log-In-information

The data of the user collected in this way is pseudonymized by technical processes. Accordingly, assignment of the data to the user calling in is no longer possible. The data collected is not stored together with other personal data of the user.

When our website is called, the users are informed by means of an information ban­ner about the use of cookies for analytical purposes and are referred to this data protection information. In this connection reference is given to how storage of cookies can be prevented by the browser settings.

In this connection follows a reference to how that storing of cookies can be prevented by appropriate browser settings.

1. b) Legal foundation of data processing

The legal foundation for the processing of personal data by using cookies is Article 6 Para. 1 lit. f GDPR.

1. c) Purpose of data processing

The purpose behind the use of strictly technically essential cookies is to facilitate the use of the website for the user. Certain functions of our website cannot be offered without the use of cookies. For these functions it is necessary that the browser is recognized even after a page change.

We need cookies for the following application:

• Adoption of language settings

Analysis cookies are used for the purpose of improving the quality of our website and its content. By the analysis cookies we learn how the website is used and thus are able to continually optimize our offer. These purposes also include our legitimate in­terest in the processing of the personal data in accordance with Article 6 Para. 1 lit. f GDPR.

1. d) Duration of storage, possibilities for objection and elimination

Cookies are stored on the user’s computer and are transmitted from this to our web­site. Accordingly, you as user have full control over the use of cookies. By a change of the settings of your internet browser you are able to deactivate or restrict the transmissions of cookies. Cookies already being stored can be deleted at any time. This can also be carried out automatically. However, if cookies for our website are deactivated, it may no longer be possible to fully use all functions of the website. The transmission of flash cookies cannot be prevented by the browser settings but re­quires changes of the settings of the flash player.

 

VI. E-Mail-contact

Description and range of data processing

Contacting us is possible by using the e-mail address provided. In this case personal data of the user transmitted with the e-mail is stored. In this connection no data is passed on to third parties. The data is used exclusively for the processing of the con­versation and will immediately be deleted if it is no longer needed.

Legal foundation of data processing

Legal foundation for the processing of the data after application of the user for a newsletter in case of consent of the user is Article 6 Para. 1 lit. a GDPR.

Legal foundation for the processing of data in case of the transmission of an e-mail is Article 6 Para. 1 lit. f GDPR. Is the e-mail contact directed at closing a contract addi­tional legal foundation for the processing of data is Article 6 Para. 1 lit. b GDPR.

Purpose of data processing

The processing of the personal data from the input mask/e-mail serves us solely for the processing of the contact. In case of contacting by e-mail this is also the neces­sary legitimate interest in the processing of the data.

Other personal data processed during the sending-off process serves to prevent abuse of the contact form and to ensure the security of our IT systems.

Duration of storage

The data is deleted as soon as it is no longer needed for achieving the purpose of their collection. This is the case for the personal data from the input mask of the contact form and those which are sent by e-mail when the particular conversation with the user has ended.

The conversation has ended when the circumstances allow the conclusion that the matter in question has been finally clarified.

The additional personal data collected during the sending-off process is deleted the latest after a period of seven days.

Possibilities for objection and elimination

At any time the user has the opportunity to withdraw his consent on the processing of personal data. If the user is contacting us by e-mail, he can object to the storage of his personal data at any time. In this case the conversation cannot be continued.

VII.       Rights of the data subject

If your personal data is processed, then you are the data subject in the sense of the GDPR and you are entitled to the following rights vis à vis the responsible party:

Right of access by the data subject

You can demand from the responsible party confirmation as to whether personal data that relates to you has been processed by us. If such processing has taken place, you can demand information from the responsible party on the following:

• The purposes for which the personal data is processed;
• The categories of personal data which are processed;
• The recipients or, resp., the categories of recipients to which the personal data relating to you has been disclosed or will be disclosed;
• The planned duration of the storage of the personal data relating to you or, if dis­tinct statements on this are not possible, the criteria for the laying down of duration of storage;
• The existence of a right to correction or deletion of the personal data relating to yourself, of a right to a restriction of the processing by the responsible party or of a right of objection to this processing;
• The existence of a right of appeal at a supervisory authority;
• All available information on the origin of the data if the personal data was not collected at the data subject;
• The existence of an automated decision-finding process including profiling in ac­cordance with Article 22 Para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and its scope and the effects strived for of such a processing for the data subject in question.

You are entitled to the right to demand information on whether the personal data re­lating to yourself is transmitted to a third country or an international organization. In this connection you can demand to be instructed on the suitable guarantees in ac­cordance with Article 46 GDPR in connection with the transmission.

Right to correction

You have a right to correction and/or completion vis à vis the responsible party in so far as the personal data as processed and which relates to yourself is incorrect or incomplete. The responsible party has to carry out the correction without delay.

Right to restrict the processing of personal data

Provided the following preconditions are met you can demand restriction of the pro­cessing of the personal data relating to you:

• if you dispute the correctness of the personal data relating to yourself for a pe­riod which makes it possible for the responsible party to check the correctness of the personal data;
• if the processing is unlawful and you reject deletion of the personal data and de­mand restriction of the use of the personal data instead;
• if the responsible party no longer needs the personal data for purposes of the processing but you need the data for the advancing, exercising or defending of legal claims, or
• if you have advanced objection to the processing in accordance with Article 21 Para. 1 GDPR but it has not yet been established whether the justified rea­sons of the responsible party outweigh your reasons.

If the processing of the personal data relating to yourself has been restricted, then this data – apart from the storage of it – may only be processed with your consent or for the assertion, exercising or defending of legal claims or for the protection of the rights of another natural person or legal entity or for reasons relating to an important public interest of the European Union or of a member state.

If the restriction of the processing has been restricted in accordance with the afore-mentioned preconditions, then you will be informed by the responsible party before the restriction is cancelled.

Right to erasure

1. a) Deletion obligation

You can demand by the responsible party that the personal data relating to yourself is deleted without delay and the responsible party is then obliged to delete this data without delay in so far as one of the following reasons applies:

• The personal data relating to you is no longer required for the purposes for which it was collected or for which it was processed.
• You revoke your consent, on which processing in accordance with Article 6 Para. 1 lit. a or Article 9 Para.2 lit. a GDPR was based, and there is no other legal foundation for the processing.
• You submit an objection to the processing in accordance with Article 21 Para. 1 GDPR and there are no justified reasons for the processing with a higher priority, or you submit an objection to the processing in accordance with Article 21 Para. 2 GDPR.
• The personal data relating to you was processed unlawfully.
• The deletion of the personal data relating to you is required to fulfil a legal obliga­tion in accordance with European Union law or the law of the member states, which laws the responsible party is subject to.
• The personal data relating to you was collected in relation to services offered by the information society in accordance with Article 8 Para. 1 GDPR.

1. b) Information to third parties

If the responsible party has made the personal data relating to you public and if he/she is obliged to delete this data in accordance with Article 17 Para. 1 GDPR, then he/she shall take reasonable measures including technical ones – whereby ac­count shall be taken of the available technology and the implementation costs – to inform the responsible parties for the data processing which process the personal data that you as data subject have demanded from them the deletion of all links to this personal data or of copies or replicates of these.

1. c) Exceptions

The right to erasure does not exist in so far as the processing is necessary for

• the exercising of the right of free expression of opinion and to information;
• for the fulfilment of a legal obligation, which requires the processing in accord­ance with the law of the European Union or the law of the member states, which laws the responsible party is subject to, or for the carrying out of a task, which lies in the public interest or which is carried out in the exercising of pub­lic authority, which authority was transferred to the responsible party;
• for reasons of public interest in the field of public health in accordance with Arti­cle 9 Para. 2 lit. h and i as well as Article 9 Para. 3 GDPR;
• for archiving purposes, scientific or historical research purposes lying in the pub­lic interest or for statistical purposes in accordance with Article 89 Para. 1 GDPR, in so far as the right named in section a) probably makes achieving of the objectives of the processing impossible or impairs it seriously, or
• for the advancing, exercising or defending of legal claims.

Right to information

If you have advanced the right to the correcting, erasure or restricting of the pro­cessing to the responsible party, then the latter is obliged to inform all recipients, to which the personal data relating to you was disclosed, of this correction or erasure of the data or of the restricting of the processing, unless this proves itself to be impossi­ble or linked with unreasonable expenditure.

You are entitled to the right vis à vis the responsible party to be informed about these recipients.

Right to data portability

You have the right to receive the personal data relating to yourself, which you made available to the responsible party, in a structured, conventional and machine-reada­ble format. In addition, you have the right to transmit this data to another responsible party without hindrance by the responsible party to whom the personal data was made available, in so far as

• the processing is based on consent in accordance with Article 6 Para. 1 lit. a GDPR or Article 9 Para. 2 lit. a GDPR or on a contract in accordance with Arti­cle 6 Para. 1 lit. b GDPR and
• the processing is carried out by means of automated processes.

In exercising this right, you have in addition the right to obtain the personal data re­lating to you is transferred directly from one responsible party to another responsible party in so far as this is technically possible. The freedoms and rights of other per­sons may not be impaired thereby.

The right to data portability applies not for the processing of personal data, which is necessary for the carrying out of a task, which lies in the public interest or in the ex­ercising of public authority and which task was transferred to the responsible party.

Right to object

For reasons which result from your particular situation you have the right to advance at any time objection to the processing of the personal data relating to you, which processing is carried out on the basis of Article 6 Para. 1 lit. e or f GDPR. This right also applies to the profiling based on these provisions.

The responsible party shall then no longer process the personal data relating to you, unless he/she can prove compelling reasons worthy of protection, which reasons overweigh your interests, rights and freedoms or where the processing serves the advancing, exercising or defending of legal claims.

If the personal data relating to you is processed for the purpose of direct advertising, then you have the right to advance at any time objection to the processing of the per­sonal data relating to you for purposes of such advertising. This applies also to the profiling in so far as this is carried out in connection with such direct advertising.

If you object to the processing for purposes of direct advertising, then the personal data relating to you will no longer be processed for these purposes.

You have the opportunity – in connection with the use of services of the information society and regardless of directive 2002/58/EC – to exercise your right of objection with the aid of automated processes in which technical specifications are used.

You have also the right for reasons which result from your particular situation to ad­vance at any time objection to the processing of the personal data relating to you which processing is carried out for scientific or historic purposes or for statistical pur­poses according to Article 89 Para. 1 GDPR.

Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your consent at any time. On withdrawal we immedi­ately will delete your personal data and no longer process it. The legality of the pro­cessing carried out prior to your withdrawal on the base of your given consent is not affected by you withdrawal.

Right to complain at a supervisory authority

Regardless of another regulatory or judicial remedy, you are entitled to the right to lodge a complaint at a supervisory authority and here in particular at a supervisory authority in the member state of your place of residence, of your place of work or of the place where the suspected infringement took place when you are of the opinion that the processing of the personal data relating to you infringes the GDPR.

In this case the supervisory authority, at which the complaint was lodged, shall inform the complainant on the status and the results of the complaint including the possibility of a judicial remedy in accordance with Article 78 GDPR.

I. Name and address of the responsible party

The responsible party in the sense of the General Data Protection Regulation (GDPR) and of other national data protection regulations in force in the member states of European Union as well as of other regulations with a legal data-protecting character is the

CTP Advanced Materials GmbH

Stahlstrasse 60

D-65428 Ruesselsheim, Germany

Fon: +49 6142 91 85 0

Fax: +49 6142 91 85 55

Mail: ctp@ctpgmbh.de

 

The processing of some data takes place in joint responsibility according to Art. 26 GDPR with:

Aditya Birla Group
Aditya Birla Centre
S K Ahire Marg, Worli

Mumbai 400030, India

II. Name and address of the data protection officer

The data protection officer of the responsible party is:

daschug GmbH

Robert-Bosch-Strasse 7

64293 Darmstadt, Germany

Fon +49 6151 6673 440

Mail: datenschutz@ctpgmbh.de

III.    General information on data processing

Range of the processing of personal data

Generally, we collect and process personal data of users only as long as this is re­quired for providing a properly functioning website as well as delivering our contents and services. The collection and use of personal data of our users on a regular basis only takes place after consent of the data subject. An exception applies to those cases where obtaining consent prior to use is not possible based on matters of law and fact and the processing of data is allowed by legal regulations.

Legal fundamentals for the processing of personal data

In so far as we obtain the consent of the data subject for the processing of personal data Article 6 Para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the foundation for the processing of personal data.

Article 6 Para. 1 lit. b GDPR serves as the legal foundation for the processing of per­sonal data which is necessary for the fulfilment of a contract if the data subject is party to this contract. This applies also to the processing processes which are neces­sary for the execution of pre-contractual measures.

Article 6 Para. 1 lit. c GDPR serves as the legal foundation in so far as processing of personal data is necessary for the fulfilment of a legal obligation applying to our en­terprise.

Article 6 Para. 1 lit. d GDPR serves as the legal foundation for the situation that vital interests of the data subject or another natural person make the processing of per­sonal data necessary.

Article 6 Para. 1 lit. f GDPR serves as the legal foundation for the situation that pro­cessing is necessary to ensure a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not exceed the first named interest.

Deletion of data and duration of storage

The personal data of the data subject are deleted or disabled as soon as the purpose for which the data was stored lapses. In addition, storage can take place if this was stipulated by the European or national legislatures in orders, laws or other regulations in accordance with European Union law to which the responsible party is subject. Disabling or deletion of the data is also carried out if a storage period prescribed by the standards as named expires unless there is a necessity for the continued storage of the data for the concluding or fulfilling of a contract.

IV. Making available of our website and creation of logfiles

Description and range of data processing

On every visit on our website our system automatically collects data and information of the computer system calling. The following data is collected:

• Information on the type of browser and its version used
• The operating system of the user
• The internet-service-provider of the user
• The IP-address of the user
• Date and time of the access
• The website, from which an accessing system reaches our website
• Websites, which are accessed by the computer system of the user via our web­site

This data is also stored in the logfiles of our system. However, IP-addresses of the users or other data, which would allow the assignment of the data to a particular user, are not stored. Also, this data is not stored together with other personal data of the user.

Legal foundations for the data processing

Article 6 Para. 1 lit. f GDPR is the legal foundation for the temporary storage of data and logfiles.

Purpose of data processing

The temporary storage of the IP-address by the system is necessary to enable the delivery of the website to the computer of the user. For achieving this the IP-address of the user must remain stored for the duration of the session.

The storage in logfiles occurs to enable the proper functioning of the website. Fur­thermore, this data serves to optimize the website and to enable the security of our IT-systems. An analysis of the data for marketing purposes does not happen.

The legal foundation is our legitimate interest in data processing according to Article 6 Para.1 lit. f GDPR.

Duration of storage

The data is deleted or disabled as soon as the purpose for which the data was stored lapses. This is the case when the particular session has ended in situations where the data is collected for making the website available.

This is the case at the latest seven days after the time when the data was stored in log files. A storage exceeding this period is possible. In this case the IP-addresses of the users are deleted or distorted so that an assignment of the client calling in is no longer possible.

Possibility for objection and deletion

The collection of data for the making available of the website and the storage of data in logfiles is compulsory for operating the website. Thus, there is no right to object by the user.

Use of cookies

1. a) Description and range of data processing

Our website uses cookies. In general, cookies are small text files which are stored on your computer and which store certain settings and data for exchange with the online offer from us via your browser. If a user calls in a website, a cookie can be stored in the operating system of the user’s computer. This cookie usually contains a unique string of characters, which allows an unambiguous identification of the browser when calling in the website again.

We are using cookies to improve our online offer. Some elements of our website re­quire that a browser calling in can be identified after a changeover.

The following data is stored and transmitted:

• Language settings
• Log-In-information

The data of the user collected in this way is pseudonymized by technical processes. Accordingly, assignment of the data to the user calling in is no longer possible. The data collected is not stored together with other personal data of the user.

When our website is called, the users are informed by means of an information ban­ner about the use of cookies for analytical purposes and are referred to this data protection information. In this connection reference is given to how storage of cookies can be prevented by the browser settings.

In this connection follows a reference to how that storing of cookies can be prevented by appropriate browser settings.

1. b) Legal foundation of data processing

The legal foundation for the processing of personal data by using cookies is Article 6 Para. 1 lit. f GDPR.

1. c) Purpose of data processing

The purpose behind the use of strictly technically essential cookies is to facilitate the use of the website for the user. Certain functions of our website cannot be offered without the use of cookies. For these functions it is necessary that the browser is recognized even after a page change.

We need cookies for the following application:

• Adoption of language settings

Analysis cookies are used for the purpose of improving the quality of our website and its content. By the analysis cookies we learn how the website is used and thus are able to continually optimize our offer. These purposes also include our legitimate in­terest in the processing of the personal data in accordance with Article 6 Para. 1 lit. f GDPR.

1. d) Duration of storage, possibilities for objection and elimination

Cookies are stored on the user’s computer and are transmitted from this to our web­site. Accordingly, you as user have full control over the use of cookies. By a change of the settings of your internet browser you are able to deactivate or restrict the transmissions of cookies. Cookies already being stored can be deleted at any time. This can also be carried out automatically. However, if cookies for our website are deactivated, it may no longer be possible to fully use all functions of the website. The transmission of flash cookies cannot be prevented by the browser settings but re­quires changes of the settings of the flash player.

 

VI. E-Mail-contact

Description and range of data processing

Contacting us is possible by using the e-mail address provided. In this case personal data of the user transmitted with the e-mail is stored. In this connection no data is passed on to third parties. The data is used exclusively for the processing of the con­versation and will immediately be deleted if it is no longer needed.

Legal foundation of data processing

Legal foundation for the processing of the data after application of the user for a newsletter in case of consent of the user is Article 6 Para. 1 lit. a GDPR.

Legal foundation for the processing of data in case of the transmission of an e-mail is Article 6 Para. 1 lit. f GDPR. Is the e-mail contact directed at closing a contract addi­tional legal foundation for the processing of data is Article 6 Para. 1 lit. b GDPR.

Purpose of data processing

The processing of the personal data from the input mask/e-mail serves us solely for the processing of the contact. In case of contacting by e-mail this is also the neces­sary legitimate interest in the processing of the data.

Other personal data processed during the sending-off process serves to prevent abuse of the contact form and to ensure the security of our IT systems.

Duration of storage

The data is deleted as soon as it is no longer needed for achieving the purpose of their collection. This is the case for the personal data from the input mask of the contact form and those which are sent by e-mail when the particular conversation with the user has ended.

The conversation has ended when the circumstances allow the conclusion that the matter in question has been finally clarified.

The additional personal data collected during the sending-off process is deleted the latest after a period of seven days.

Possibilities for objection and elimination

At any time the user has the opportunity to withdraw his consent on the processing of personal data. If the user is contacting us by e-mail, he can object to the storage of his personal data at any time. In this case the conversation cannot be continued.

VII.       Rights of the data subject

If your personal data is processed, then you are the data subject in the sense of the GDPR and you are entitled to the following rights vis à vis the responsible party:

Right of access by the data subject

You can demand from the responsible party confirmation as to whether personal data that relates to you has been processed by us. If such processing has taken place, you can demand information from the responsible party on the following:

• The purposes for which the personal data is processed;
• The categories of personal data which are processed;
• The recipients or, resp., the categories of recipients to which the personal data relating to you has been disclosed or will be disclosed;
• The planned duration of the storage of the personal data relating to you or, if dis­tinct statements on this are not possible, the criteria for the laying down of duration of storage;
• The existence of a right to correction or deletion of the personal data relating to yourself, of a right to a restriction of the processing by the responsible party or of a right of objection to this processing;
• The existence of a right of appeal at a supervisory authority;
• All available information on the origin of the data if the personal data was not collected at the data subject;
• The existence of an automated decision-finding process including profiling in ac­cordance with Article 22 Para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and its scope and the effects strived for of such a processing for the data subject in question.

You are entitled to the right to demand information on whether the personal data re­lating to yourself is transmitted to a third country or an international organization. In this connection you can demand to be instructed on the suitable guarantees in ac­cordance with Article 46 GDPR in connection with the transmission.

Right to correction

You have a right to correction and/or completion vis à vis the responsible party in so far as the personal data as processed and which relates to yourself is incorrect or incomplete. The responsible party has to carry out the correction without delay.

Right to restrict the processing of personal data

Provided the following preconditions are met you can demand restriction of the pro­cessing of the personal data relating to you:

• if you dispute the correctness of the personal data relating to yourself for a pe­riod which makes it possible for the responsible party to check the correctness of the personal data;
• if the processing is unlawful and you reject deletion of the personal data and de­mand restriction of the use of the personal data instead;
• if the responsible party no longer needs the personal data for purposes of the processing but you need the data for the advancing, exercising or defending of legal claims, or
• if you have advanced objection to the processing in accordance with Article 21 Para. 1 GDPR but it has not yet been established whether the justified rea­sons of the responsible party outweigh your reasons.

If the processing of the personal data relating to yourself has been restricted, then this data – apart from the storage of it – may only be processed with your consent or for the assertion, exercising or defending of legal claims or for the protection of the rights of another natural person or legal entity or for reasons relating to an important public interest of the European Union or of a member state.

If the restriction of the processing has been restricted in accordance with the afore-mentioned preconditions, then you will be informed by the responsible party before the restriction is cancelled.

Right to erasure

1. a) Deletion obligation

You can demand by the responsible party that the personal data relating to yourself is deleted without delay and the responsible party is then obliged to delete this data without delay in so far as one of the following reasons applies:

• The personal data relating to you is no longer required for the purposes for which it was collected or for which it was processed.
• You revoke your consent, on which processing in accordance with Article 6 Para. 1 lit. a or Article 9 Para.2 lit. a GDPR was based, and there is no other legal foundation for the processing.
• You submit an objection to the processing in accordance with Article 21 Para. 1 GDPR and there are no justified reasons for the processing with a higher priority, or you submit an objection to the processing in accordance with Article 21 Para. 2 GDPR.
• The personal data relating to you was processed unlawfully.
• The deletion of the personal data relating to you is required to fulfil a legal obliga­tion in accordance with European Union law or the law of the member states, which laws the responsible party is subject to.
• The personal data relating to you was collected in relation to services offered by the information society in accordance with Article 8 Para. 1 GDPR.

1. b) Information to third parties

If the responsible party has made the personal data relating to you public and if he/she is obliged to delete this data in accordance with Article 17 Para. 1 GDPR, then he/she shall take reasonable measures including technical ones – whereby ac­count shall be taken of the available technology and the implementation costs – to inform the responsible parties for the data processing which process the personal data that you as data subject have demanded from them the deletion of all links to this personal data or of copies or replicates of these.

1. c) Exceptions

The right to erasure does not exist in so far as the processing is necessary for

• the exercising of the right of free expression of opinion and to information;
• for the fulfilment of a legal obligation, which requires the processing in accord­ance with the law of the European Union or the law of the member states, which laws the responsible party is subject to, or for the carrying out of a task, which lies in the public interest or which is carried out in the exercising of pub­lic authority, which authority was transferred to the responsible party;
• for reasons of public interest in the field of public health in accordance with Arti­cle 9 Para. 2 lit. h and i as well as Article 9 Para. 3 GDPR;
• for archiving purposes, scientific or historical research purposes lying in the pub­lic interest or for statistical purposes in accordance with Article 89 Para. 1 GDPR, in so far as the right named in section a) probably makes achieving of the objectives of the processing impossible or impairs it seriously, or
• for the advancing, exercising or defending of legal claims.

Right to information

If you have advanced the right to the correcting, erasure or restricting of the pro­cessing to the responsible party, then the latter is obliged to inform all recipients, to which the personal data relating to you was disclosed, of this correction or erasure of the data or of the restricting of the processing, unless this proves itself to be impossi­ble or linked with unreasonable expenditure.

You are entitled to the right vis à vis the responsible party to be informed about these recipients.

Right to data portability

You have the right to receive the personal data relating to yourself, which you made available to the responsible party, in a structured, conventional and machine-reada­ble format. In addition, you have the right to transmit this data to another responsible party without hindrance by the responsible party to whom the personal data was made available, in so far as

• the processing is based on consent in accordance with Article 6 Para. 1 lit. a GDPR or Article 9 Para. 2 lit. a GDPR or on a contract in accordance with Arti­cle 6 Para. 1 lit. b GDPR and
• the processing is carried out by means of automated processes.

In exercising this right, you have in addition the right to obtain the personal data re­lating to you is transferred directly from one responsible party to another responsible party in so far as this is technically possible. The freedoms and rights of other per­sons may not be impaired thereby.

The right to data portability applies not for the processing of personal data, which is necessary for the carrying out of a task, which lies in the public interest or in the ex­ercising of public authority and which task was transferred to the responsible party.

Right to object

For reasons which result from your particular situation you have the right to advance at any time objection to the processing of the personal data relating to you, which processing is carried out on the basis of Article 6 Para. 1 lit. e or f GDPR. This right also applies to the profiling based on these provisions.

The responsible party shall then no longer process the personal data relating to you, unless he/she can prove compelling reasons worthy of protection, which reasons overweigh your interests, rights and freedoms or where the processing serves the advancing, exercising or defending of legal claims.

If the personal data relating to you is processed for the purpose of direct advertising, then you have the right to advance at any time objection to the processing of the per­sonal data relating to you for purposes of such advertising. This applies also to the profiling in so far as this is carried out in connection with such direct advertising.

If you object to the processing for purposes of direct advertising, then the personal data relating to you will no longer be processed for these purposes.

You have the opportunity – in connection with the use of services of the information society and regardless of directive 2002/58/EC – to exercise your right of objection with the aid of automated processes in which technical specifications are used.

You have also the right for reasons which result from your particular situation to ad­vance at any time objection to the processing of the personal data relating to you which processing is carried out for scientific or historic purposes or for statistical pur­poses according to Article 89 Para. 1 GDPR.

Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your consent at any time. On withdrawal we immedi­ately will delete your personal data and no longer process it. The legality of the pro­cessing carried out prior to your withdrawal on the base of your given consent is not affected by you withdrawal.

Right to complain at a supervisory authority

Regardless of another regulatory or judicial remedy, you are entitled to the right to lodge a complaint at a supervisory authority and here in particular at a supervisory authority in the member state of your place of residence, of your place of work or of the place where the suspected infringement took place when you are of the opinion that the processing of the personal data relating to you infringes the GDPR.

In this case the supervisory authority, at which the complaint was lodged, shall inform the complainant on the status and the results of the complaint including the possibility of a judicial remedy in accordance with Article 78 GDPR.

I. Name and address of the responsible party

The responsible party in the sense of the General Data Protection Regulation (GDPR) and of other national data protection regulations in force in the member states of European Union as well as of other regulations with a legal data-protecting character is the

CTP Advanced Materials GmbH

Stahlstrasse 60

D-65428 Ruesselsheim, Germany

Fon: +49 6142 91 85 0

Fax: +49 6142 91 85 55

Mail: ctp@ctpgmbh.de

 

The processing of some data takes place in joint responsibility according to Art. 26 GDPR with:

Aditya Birla Group
Aditya Birla Centre
S K Ahire Marg, Worli

Mumbai 400030, India

II. Name and address of the data protection officer

The data protection officer of the responsible party is:

daschug GmbH

Robert-Bosch-Strasse 7

64293 Darmstadt, Germany

Fon +49 6151 6673 440

Mail: datenschutz@ctpgmbh.de

III.    General information on data processing

Range of the processing of personal data

Generally, we collect and process personal data of users only as long as this is re­quired for providing a properly functioning website as well as delivering our contents and services. The collection and use of personal data of our users on a regular basis only takes place after consent of the data subject. An exception applies to those cases where obtaining consent prior to use is not possible based on matters of law and fact and the processing of data is allowed by legal regulations.

Legal fundamentals for the processing of personal data

In so far as we obtain the consent of the data subject for the processing of personal data Article 6 Para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the foundation for the processing of personal data.

Article 6 Para. 1 lit. b GDPR serves as the legal foundation for the processing of per­sonal data which is necessary for the fulfilment of a contract if the data subject is party to this contract. This applies also to the processing processes which are neces­sary for the execution of pre-contractual measures.

Article 6 Para. 1 lit. c GDPR serves as the legal foundation in so far as processing of personal data is necessary for the fulfilment of a legal obligation applying to our en­terprise.

Article 6 Para. 1 lit. d GDPR serves as the legal foundation for the situation that vital interests of the data subject or another natural person make the processing of per­sonal data necessary.

Article 6 Para. 1 lit. f GDPR serves as the legal foundation for the situation that pro­cessing is necessary to ensure a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not exceed the first named interest.

Deletion of data and duration of storage

The personal data of the data subject are deleted or disabled as soon as the purpose for which the data was stored lapses. In addition, storage can take place if this was stipulated by the European or national legislatures in orders, laws or other regulations in accordance with European Union law to which the responsible party is subject. Disabling or deletion of the data is also carried out if a storage period prescribed by the standards as named expires unless there is a necessity for the continued storage of the data for the concluding or fulfilling of a contract.

IV. Making available of our website and creation of logfiles

Description and range of data processing

On every visit on our website our system automatically collects data and information of the computer system calling. The following data is collected:

• Information on the type of browser and its version used
• The operating system of the user
• The internet-service-provider of the user
• The IP-address of the user
• Date and time of the access
• The website, from which an accessing system reaches our website
• Websites, which are accessed by the computer system of the user via our web­site

This data is also stored in the logfiles of our system. However, IP-addresses of the users or other data, which would allow the assignment of the data to a particular user, are not stored. Also, this data is not stored together with other personal data of the user.

Legal foundations for the data processing

Article 6 Para. 1 lit. f GDPR is the legal foundation for the temporary storage of data and logfiles.

Purpose of data processing

The temporary storage of the IP-address by the system is necessary to enable the delivery of the website to the computer of the user. For achieving this the IP-address of the user must remain stored for the duration of the session.

The storage in logfiles occurs to enable the proper functioning of the website. Fur­thermore, this data serves to optimize the website and to enable the security of our IT-systems. An analysis of the data for marketing purposes does not happen.

The legal foundation is our legitimate interest in data processing according to Article 6 Para.1 lit. f GDPR.

Duration of storage

The data is deleted or disabled as soon as the purpose for which the data was stored lapses. This is the case when the particular session has ended in situations where the data is collected for making the website available.

This is the case at the latest seven days after the time when the data was stored in log files. A storage exceeding this period is possible. In this case the IP-addresses of the users are deleted or distorted so that an assignment of the client calling in is no longer possible.

Possibility for objection and deletion

The collection of data for the making available of the website and the storage of data in logfiles is compulsory for operating the website. Thus, there is no right to object by the user.

Use of cookies

1. a) Description and range of data processing

Our website uses cookies. In general, cookies are small text files which are stored on your computer and which store certain settings and data for exchange with the online offer from us via your browser. If a user calls in a website, a cookie can be stored in the operating system of the user’s computer. This cookie usually contains a unique string of characters, which allows an unambiguous identification of the browser when calling in the website again.

We are using cookies to improve our online offer. Some elements of our website re­quire that a browser calling in can be identified after a changeover.

The following data is stored and transmitted:

• Language settings
• Log-In-information

The data of the user collected in this way is pseudonymized by technical processes. Accordingly, assignment of the data to the user calling in is no longer possible. The data collected is not stored together with other personal data of the user.

When our website is called, the users are informed by means of an information ban­ner about the use of cookies for analytical purposes and are referred to this data protection information. In this connection reference is given to how storage of cookies can be prevented by the browser settings.

In this connection follows a reference to how that storing of cookies can be prevented by appropriate browser settings.

1. b) Legal foundation of data processing

The legal foundation for the processing of personal data by using cookies is Article 6 Para. 1 lit. f GDPR.

1. c) Purpose of data processing

The purpose behind the use of strictly technically essential cookies is to facilitate the use of the website for the user. Certain functions of our website cannot be offered without the use of cookies. For these functions it is necessary that the browser is recognized even after a page change.

We need cookies for the following application:

• Adoption of language settings

Analysis cookies are used for the purpose of improving the quality of our website and its content. By the analysis cookies we learn how the website is used and thus are able to continually optimize our offer. These purposes also include our legitimate in­terest in the processing of the personal data in accordance with Article 6 Para. 1 lit. f GDPR.

1. d) Duration of storage, possibilities for objection and elimination

Cookies are stored on the user’s computer and are transmitted from this to our web­site. Accordingly, you as user have full control over the use of cookies. By a change of the settings of your internet browser you are able to deactivate or restrict the transmissions of cookies. Cookies already being stored can be deleted at any time. This can also be carried out automatically. However, if cookies for our website are deactivated, it may no longer be possible to fully use all functions of the website. The transmission of flash cookies cannot be prevented by the browser settings but re­quires changes of the settings of the flash player.

 

VI. E-Mail-contact

Description and range of data processing

Contacting us is possible by using the e-mail address provided. In this case personal data of the user transmitted with the e-mail is stored. In this connection no data is passed on to third parties. The data is used exclusively for the processing of the con­versation and will immediately be deleted if it is no longer needed.

Legal foundation of data processing

Legal foundation for the processing of the data after application of the user for a newsletter in case of consent of the user is Article 6 Para. 1 lit. a GDPR.

Legal foundation for the processing of data in case of the transmission of an e-mail is Article 6 Para. 1 lit. f GDPR. Is the e-mail contact directed at closing a contract addi­tional legal foundation for the processing of data is Article 6 Para. 1 lit. b GDPR.

Purpose of data processing

The processing of the personal data from the input mask/e-mail serves us solely for the processing of the contact. In case of contacting by e-mail this is also the neces­sary legitimate interest in the processing of the data.

Other personal data processed during the sending-off process serves to prevent abuse of the contact form and to ensure the security of our IT systems.

Duration of storage

The data is deleted as soon as it is no longer needed for achieving the purpose of their collection. This is the case for the personal data from the input mask of the contact form and those which are sent by e-mail when the particular conversation with the user has ended.

The conversation has ended when the circumstances allow the conclusion that the matter in question has been finally clarified.

The additional personal data collected during the sending-off process is deleted the latest after a period of seven days.

Possibilities for objection and elimination

At any time the user has the opportunity to withdraw his consent on the processing of personal data. If the user is contacting us by e-mail, he can object to the storage of his personal data at any time. In this case the conversation cannot be continued.

VII.       Rights of the data subject

If your personal data is processed, then you are the data subject in the sense of the GDPR and you are entitled to the following rights vis à vis the responsible party:

Right of access by the data subject

You can demand from the responsible party confirmation as to whether personal data that relates to you has been processed by us. If such processing has taken place, you can demand information from the responsible party on the following:

• The purposes for which the personal data is processed;
• The categories of personal data which are processed;
• The recipients or, resp., the categories of recipients to which the personal data relating to you has been disclosed or will be disclosed;
• The planned duration of the storage of the personal data relating to you or, if dis­tinct statements on this are not possible, the criteria for the laying down of duration of storage;
• The existence of a right to correction or deletion of the personal data relating to yourself, of a right to a restriction of the processing by the responsible party or of a right of objection to this processing;
• The existence of a right of appeal at a supervisory authority;
• All available information on the origin of the data if the personal data was not collected at the data subject;
• The existence of an automated decision-finding process including profiling in ac­cordance with Article 22 Para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and its scope and the effects strived for of such a processing for the data subject in question.

You are entitled to the right to demand information on whether the personal data re­lating to yourself is transmitted to a third country or an international organization. In this connection you can demand to be instructed on the suitable guarantees in ac­cordance with Article 46 GDPR in connection with the transmission.

Right to correction

You have a right to correction and/or completion vis à vis the responsible party in so far as the personal data as processed and which relates to yourself is incorrect or incomplete. The responsible party has to carry out the correction without delay.

Right to restrict the processing of personal data

Provided the following preconditions are met you can demand restriction of the pro­cessing of the personal data relating to you:

• if you dispute the correctness of the personal data relating to yourself for a pe­riod which makes it possible for the responsible party to check the correctness of the personal data;
• if the processing is unlawful and you reject deletion of the personal data and de­mand restriction of the use of the personal data instead;
• if the responsible party no longer needs the personal data for purposes of the processing but you need the data for the advancing, exercising or defending of legal claims, or
• if you have advanced objection to the processing in accordance with Article 21 Para. 1 GDPR but it has not yet been established whether the justified rea­sons of the responsible party outweigh your reasons.

If the processing of the personal data relating to yourself has been restricted, then this data – apart from the storage of it – may only be processed with your consent or for the assertion, exercising or defending of legal claims or for the protection of the rights of another natural person or legal entity or for reasons relating to an important public interest of the European Union or of a member state.

If the restriction of the processing has been restricted in accordance with the afore-mentioned preconditions, then you will be informed by the responsible party before the restriction is cancelled.

Right to erasure

1. a) Deletion obligation

You can demand by the responsible party that the personal data relating to yourself is deleted without delay and the responsible party is then obliged to delete this data without delay in so far as one of the following reasons applies:

• The personal data relating to you is no longer required for the purposes for which it was collected or for which it was processed.
• You revoke your consent, on which processing in accordance with Article 6 Para. 1 lit. a or Article 9 Para.2 lit. a GDPR was based, and there is no other legal foundation for the processing.
• You submit an objection to the processing in accordance with Article 21 Para. 1 GDPR and there are no justified reasons for the processing with a higher priority, or you submit an objection to the processing in accordance with Article 21 Para. 2 GDPR.
• The personal data relating to you was processed unlawfully.
• The deletion of the personal data relating to you is required to fulfil a legal obliga­tion in accordance with European Union law or the law of the member states, which laws the responsible party is subject to.
• The personal data relating to you was collected in relation to services offered by the information society in accordance with Article 8 Para. 1 GDPR.

1. b) Information to third parties

If the responsible party has made the personal data relating to you public and if he/she is obliged to delete this data in accordance with Article 17 Para. 1 GDPR, then he/she shall take reasonable measures including technical ones – whereby ac­count shall be taken of the available technology and the implementation costs – to inform the responsible parties for the data processing which process the personal data that you as data subject have demanded from them the deletion of all links to this personal data or of copies or replicates of these.

1. c) Exceptions

The right to erasure does not exist in so far as the processing is necessary for

• the exercising of the right of free expression of opinion and to information;
• for the fulfilment of a legal obligation, which requires the processing in accord­ance with the law of the European Union or the law of the member states, which laws the responsible party is subject to, or for the carrying out of a task, which lies in the public interest or which is carried out in the exercising of pub­lic authority, which authority was transferred to the responsible party;
• for reasons of public interest in the field of public health in accordance with Arti­cle 9 Para. 2 lit. h and i as well as Article 9 Para. 3 GDPR;
• for archiving purposes, scientific or historical research purposes lying in the pub­lic interest or for statistical purposes in accordance with Article 89 Para. 1 GDPR, in so far as the right named in section a) probably makes achieving of the objectives of the processing impossible or impairs it seriously, or
• for the advancing, exercising or defending of legal claims.

Right to information

If you have advanced the right to the correcting, erasure or restricting of the pro­cessing to the responsible party, then the latter is obliged to inform all recipients, to which the personal data relating to you was disclosed, of this correction or erasure of the data or of the restricting of the processing, unless this proves itself to be impossi­ble or linked with unreasonable expenditure.

You are entitled to the right vis à vis the responsible party to be informed about these recipients.

Right to data portability

You have the right to receive the personal data relating to yourself, which you made available to the responsible party, in a structured, conventional and machine-reada­ble format. In addition, you have the right to transmit this data to another responsible party without hindrance by the responsible party to whom the personal data was made available, in so far as

• the processing is based on consent in accordance with Article 6 Para. 1 lit. a GDPR or Article 9 Para. 2 lit. a GDPR or on a contract in accordance with Arti­cle 6 Para. 1 lit. b GDPR and
• the processing is carried out by means of automated processes.

In exercising this right, you have in addition the right to obtain the personal data re­lating to you is transferred directly from one responsible party to another responsible party in so far as this is technically possible. The freedoms and rights of other per­sons may not be impaired thereby.

The right to data portability applies not for the processing of personal data, which is necessary for the carrying out of a task, which lies in the public interest or in the ex­ercising of public authority and which task was transferred to the responsible party.

Right to object

For reasons which result from your particular situation you have the right to advance at any time objection to the processing of the personal data relating to you, which processing is carried out on the basis of Article 6 Para. 1 lit. e or f GDPR. This right also applies to the profiling based on these provisions.

The responsible party shall then no longer process the personal data relating to you, unless he/she can prove compelling reasons worthy of protection, which reasons overweigh your interests, rights and freedoms or where the processing serves the advancing, exercising or defending of legal claims.

If the personal data relating to you is processed for the purpose of direct advertising, then you have the right to advance at any time objection to the processing of the per­sonal data relating to you for purposes of such advertising. This applies also to the profiling in so far as this is carried out in connection with such direct advertising.

If you object to the processing for purposes of direct advertising, then the personal data relating to you will no longer be processed for these purposes.

You have the opportunity – in connection with the use of services of the information society and regardless of directive 2002/58/EC – to exercise your right of objection with the aid of automated processes in which technical specifications are used.

You have also the right for reasons which result from your particular situation to ad­vance at any time objection to the processing of the personal data relating to you which processing is carried out for scientific or historic purposes or for statistical pur­poses according to Article 89 Para. 1 GDPR.

Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your consent at any time. On withdrawal we immedi­ately will delete your personal data and no longer process it. The legality of the pro­cessing carried out prior to your withdrawal on the base of your given consent is not affected by you withdrawal.

Right to complain at a supervisory authority

Regardless of another regulatory or judicial remedy, you are entitled to the right to lodge a complaint at a supervisory authority and here in particular at a supervisory authority in the member state of your place of residence, of your place of work or of the place where the suspected infringement took place when you are of the opinion that the processing of the personal data relating to you infringes the GDPR.

In this case the supervisory authority, at which the complaint was lodged, shall inform the complainant on the status and the results of the complaint including the possibility of a judicial remedy in accordance with Article 78 GDPR.

I. Name and address of the responsible party

The responsible party in the sense of the General Data Protection Regulation (GDPR) and of other national data protection regulations in force in the member states of European Union as well as of other regulations with a legal data-protecting character is the

CTP Advanced Materials GmbH

Stahlstrasse 60

D-65428 Ruesselsheim, Germany

Fon: +49 6142 91 85 0

Fax: +49 6142 91 85 55

Mail: ctp@ctpgmbh.de

 

The processing of some data takes place in joint responsibility according to Art. 26 GDPR with:

Aditya Birla Group
Aditya Birla Centre
S K Ahire Marg, Worli

Mumbai 400030, India

II. Name and address of the data protection officer

The data protection officer of the responsible party is:

daschug GmbH

Robert-Bosch-Strasse 7

64293 Darmstadt, Germany

Fon +49 6151 6673 440

Mail: datenschutz@ctpgmbh.de

III.    General information on data processing

Range of the processing of personal data

Generally, we collect and process personal data of users only as long as this is re­quired for providing a properly functioning website as well as delivering our contents and services. The collection and use of personal data of our users on a regular basis only takes place after consent of the data subject. An exception applies to those cases where obtaining consent prior to use is not possible based on matters of law and fact and the processing of data is allowed by legal regulations.

Legal fundamentals for the processing of personal data

In so far as we obtain the consent of the data subject for the processing of personal data Article 6 Para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the foundation for the processing of personal data.

Article 6 Para. 1 lit. b GDPR serves as the legal foundation for the processing of per­sonal data which is necessary for the fulfilment of a contract if the data subject is party to this contract. This applies also to the processing processes which are neces­sary for the execution of pre-contractual measures.

Article 6 Para. 1 lit. c GDPR serves as the legal foundation in so far as processing of personal data is necessary for the fulfilment of a legal obligation applying to our en­terprise.

Article 6 Para. 1 lit. d GDPR serves as the legal foundation for the situation that vital interests of the data subject or another natural person make the processing of per­sonal data necessary.

Article 6 Para. 1 lit. f GDPR serves as the legal foundation for the situation that pro­cessing is necessary to ensure a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not exceed the first named interest.

Deletion of data and duration of storage

The personal data of the data subject are deleted or disabled as soon as the purpose for which the data was stored lapses. In addition, storage can take place if this was stipulated by the European or national legislatures in orders, laws or other regulations in accordance with European Union law to which the responsible party is subject. Disabling or deletion of the data is also carried out if a storage period prescribed by the standards as named expires unless there is a necessity for the continued storage of the data for the concluding or fulfilling of a contract.

IV. Making available of our website and creation of logfiles

Description and range of data processing

On every visit on our website our system automatically collects data and information of the computer system calling. The following data is collected:

• Information on the type of browser and its version used
• The operating system of the user
• The internet-service-provider of the user
• The IP-address of the user
• Date and time of the access
• The website, from which an accessing system reaches our website
• Websites, which are accessed by the computer system of the user via our web­site

This data is also stored in the logfiles of our system. However, IP-addresses of the users or other data, which would allow the assignment of the data to a particular user, are not stored. Also, this data is not stored together with other personal data of the user.

Legal foundations for the data processing

Article 6 Para. 1 lit. f GDPR is the legal foundation for the temporary storage of data and logfiles.

Purpose of data processing

The temporary storage of the IP-address by the system is necessary to enable the delivery of the website to the computer of the user. For achieving this the IP-address of the user must remain stored for the duration of the session.

The storage in logfiles occurs to enable the proper functioning of the website. Fur­thermore, this data serves to optimize the website and to enable the security of our IT-systems. An analysis of the data for marketing purposes does not happen.

The legal foundation is our legitimate interest in data processing according to Article 6 Para.1 lit. f GDPR.

Duration of storage

The data is deleted or disabled as soon as the purpose for which the data was stored lapses. This is the case when the particular session has ended in situations where the data is collected for making the website available.

This is the case at the latest seven days after the time when the data was stored in log files. A storage exceeding this period is possible. In this case the IP-addresses of the users are deleted or distorted so that an assignment of the client calling in is no longer possible.

Possibility for objection and deletion

The collection of data for the making available of the website and the storage of data in logfiles is compulsory for operating the website. Thus, there is no right to object by the user.

Use of cookies

1. a) Description and range of data processing

Our website uses cookies. In general, cookies are small text files which are stored on your computer and which store certain settings and data for exchange with the online offer from us via your browser. If a user calls in a website, a cookie can be stored in the operating system of the user’s computer. This cookie usually contains a unique string of characters, which allows an unambiguous identification of the browser when calling in the website again.

We are using cookies to improve our online offer. Some elements of our website re­quire that a browser calling in can be identified after a changeover.

The following data is stored and transmitted:

• Language settings
• Log-In-information

The data of the user collected in this way is pseudonymized by technical processes. Accordingly, assignment of the data to the user calling in is no longer possible. The data collected is not stored together with other personal data of the user.

When our website is called, the users are informed by means of an information ban­ner about the use of cookies for analytical purposes and are referred to this data protection information. In this connection reference is given to how storage of cookies can be prevented by the browser settings.

In this connection follows a reference to how that storing of cookies can be prevented by appropriate browser settings.

1. b) Legal foundation of data processing

The legal foundation for the processing of personal data by using cookies is Article 6 Para. 1 lit. f GDPR.

1. c) Purpose of data processing

The purpose behind the use of strictly technically essential cookies is to facilitate the use of the website for the user. Certain functions of our website cannot be offered without the use of cookies. For these functions it is necessary that the browser is recognized even after a page change.

We need cookies for the following application:

• Adoption of language settings

Analysis cookies are used for the purpose of improving the quality of our website and its content. By the analysis cookies we learn how the website is used and thus are able to continually optimize our offer. These purposes also include our legitimate in­terest in the processing of the personal data in accordance with Article 6 Para. 1 lit. f GDPR.

1. d) Duration of storage, possibilities for objection and elimination

Cookies are stored on the user’s computer and are transmitted from this to our web­site. Accordingly, you as user have full control over the use of cookies. By a change of the settings of your internet browser you are able to deactivate or restrict the transmissions of cookies. Cookies already being stored can be deleted at any time. This can also be carried out automatically. However, if cookies for our website are deactivated, it may no longer be possible to fully use all functions of the website. The transmission of flash cookies cannot be prevented by the browser settings but re­quires changes of the settings of the flash player.

 

VI. E-Mail-contact

Description and range of data processing

Contacting us is possible by using the e-mail address provided. In this case personal data of the user transmitted with the e-mail is stored. In this connection no data is passed on to third parties. The data is used exclusively for the processing of the con­versation and will immediately be deleted if it is no longer needed.

Legal foundation of data processing

Legal foundation for the processing of the data after application of the user for a newsletter in case of consent of the user is Article 6 Para. 1 lit. a GDPR.

Legal foundation for the processing of data in case of the transmission of an e-mail is Article 6 Para. 1 lit. f GDPR. Is the e-mail contact directed at closing a contract addi­tional legal foundation for the processing of data is Article 6 Para. 1 lit. b GDPR.

Purpose of data processing

The processing of the personal data from the input mask/e-mail serves us solely for the processing of the contact. In case of contacting by e-mail this is also the neces­sary legitimate interest in the processing of the data.

Other personal data processed during the sending-off process serves to prevent abuse of the contact form and to ensure the security of our IT systems.

Duration of storage

The data is deleted as soon as it is no longer needed for achieving the purpose of their collection. This is the case for the personal data from the input mask of the contact form and those which are sent by e-mail when the particular conversation with the user has ended.

The conversation has ended when the circumstances allow the conclusion that the matter in question has been finally clarified.

The additional personal data collected during the sending-off process is deleted the latest after a period of seven days.

Possibilities for objection and elimination

At any time the user has the opportunity to withdraw his consent on the processing of personal data. If the user is contacting us by e-mail, he can object to the storage of his personal data at any time. In this case the conversation cannot be continued.

VII.       Rights of the data subject

If your personal data is processed, then you are the data subject in the sense of the GDPR and you are entitled to the following rights vis à vis the responsible party:

Right of access by the data subject

You can demand from the responsible party confirmation as to whether personal data that relates to you has been processed by us. If such processing has taken place, you can demand information from the responsible party on the following:

• The purposes for which the personal data is processed;
• The categories of personal data which are processed;
• The recipients or, resp., the categories of recipients to which the personal data relating to you has been disclosed or will be disclosed;
• The planned duration of the storage of the personal data relating to you or, if dis­tinct statements on this are not possible, the criteria for the laying down of duration of storage;
• The existence of a right to correction or deletion of the personal data relating to yourself, of a right to a restriction of the processing by the responsible party or of a right of objection to this processing;
• The existence of a right of appeal at a supervisory authority;
• All available information on the origin of the data if the personal data was not collected at the data subject;
• The existence of an automated decision-finding process including profiling in ac­cordance with Article 22 Para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and its scope and the effects strived for of such a processing for the data subject in question.

You are entitled to the right to demand information on whether the personal data re­lating to yourself is transmitted to a third country or an international organization. In this connection you can demand to be instructed on the suitable guarantees in ac­cordance with Article 46 GDPR in connection with the transmission.

Right to correction

You have a right to correction and/or completion vis à vis the responsible party in so far as the personal data as processed and which relates to yourself is incorrect or incomplete. The responsible party has to carry out the correction without delay.

Right to restrict the processing of personal data

Provided the following preconditions are met you can demand restriction of the pro­cessing of the personal data relating to you:

• if you dispute the correctness of the personal data relating to yourself for a pe­riod which makes it possible for the responsible party to check the correctness of the personal data;
• if the processing is unlawful and you reject deletion of the personal data and de­mand restriction of the use of the personal data instead;
• if the responsible party no longer needs the personal data for purposes of the processing but you need the data for the advancing, exercising or defending of legal claims, or
• if you have advanced objection to the processing in accordance with Article 21 Para. 1 GDPR but it has not yet been established whether the justified rea­sons of the responsible party outweigh your reasons.

If the processing of the personal data relating to yourself has been restricted, then this data – apart from the storage of it – may only be processed with your consent or for the assertion, exercising or defending of legal claims or for the protection of the rights of another natural person or legal entity or for reasons relating to an important public interest of the European Union or of a member state.

If the restriction of the processing has been restricted in accordance with the afore-mentioned preconditions, then you will be informed by the responsible party before the restriction is cancelled.

Right to erasure

1. a) Deletion obligation

You can demand by the responsible party that the personal data relating to yourself is deleted without delay and the responsible party is then obliged to delete this data without delay in so far as one of the following reasons applies:

• The personal data relating to you is no longer required for the purposes for which it was collected or for which it was processed.
• You revoke your consent, on which processing in accordance with Article 6 Para. 1 lit. a or Article 9 Para.2 lit. a GDPR was based, and there is no other legal foundation for the processing.
• You submit an objection to the processing in accordance with Article 21 Para. 1 GDPR and there are no justified reasons for the processing with a higher priority, or you submit an objection to the processing in accordance with Article 21 Para. 2 GDPR.
• The personal data relating to you was processed unlawfully.
• The deletion of the personal data relating to you is required to fulfil a legal obliga­tion in accordance with European Union law or the law of the member states, which laws the responsible party is subject to.
• The personal data relating to you was collected in relation to services offered by the information society in accordance with Article 8 Para. 1 GDPR.

1. b) Information to third parties

If the responsible party has made the personal data relating to you public and if he/she is obliged to delete this data in accordance with Article 17 Para. 1 GDPR, then he/she shall take reasonable measures including technical ones – whereby ac­count shall be taken of the available technology and the implementation costs – to inform the responsible parties for the data processing which process the personal data that you as data subject have demanded from them the deletion of all links to this personal data or of copies or replicates of these.

1. c) Exceptions

The right to erasure does not exist in so far as the processing is necessary for

• the exercising of the right of free expression of opinion and to information;
• for the fulfilment of a legal obligation, which requires the processing in accord­ance with the law of the European Union or the law of the member states, which laws the responsible party is subject to, or for the carrying out of a task, which lies in the public interest or which is carried out in the exercising of pub­lic authority, which authority was transferred to the responsible party;
• for reasons of public interest in the field of public health in accordance with Arti­cle 9 Para. 2 lit. h and i as well as Article 9 Para. 3 GDPR;
• for archiving purposes, scientific or historical research purposes lying in the pub­lic interest or for statistical purposes in accordance with Article 89 Para. 1 GDPR, in so far as the right named in section a) probably makes achieving of the objectives of the processing impossible or impairs it seriously, or
• for the advancing, exercising or defending of legal claims.

Right to information

If you have advanced the right to the correcting, erasure or restricting of the pro­cessing to the responsible party, then the latter is obliged to inform all recipients, to which the personal data relating to you was disclosed, of this correction or erasure of the data or of the restricting of the processing, unless this proves itself to be impossi­ble or linked with unreasonable expenditure.

You are entitled to the right vis à vis the responsible party to be informed about these recipients.

Right to data portability

You have the right to receive the personal data relating to yourself, which you made available to the responsible party, in a structured, conventional and machine-reada­ble format. In addition, you have the right to transmit this data to another responsible party without hindrance by the responsible party to whom the personal data was made available, in so far as

• the processing is based on consent in accordance with Article 6 Para. 1 lit. a GDPR or Article 9 Para. 2 lit. a GDPR or on a contract in accordance with Arti­cle 6 Para. 1 lit. b GDPR and
• the processing is carried out by means of automated processes.

In exercising this right, you have in addition the right to obtain the personal data re­lating to you is transferred directly from one responsible party to another responsible party in so far as this is technically possible. The freedoms and rights of other per­sons may not be impaired thereby.

The right to data portability applies not for the processing of personal data, which is necessary for the carrying out of a task, which lies in the public interest or in the ex­ercising of public authority and which task was transferred to the responsible party.

Right to object

For reasons which result from your particular situation you have the right to advance at any time objection to the processing of the personal data relating to you, which processing is carried out on the basis of Article 6 Para. 1 lit. e or f GDPR. This right also applies to the profiling based on these provisions.

The responsible party shall then no longer process the personal data relating to you, unless he/she can prove compelling reasons worthy of protection, which reasons overweigh your interests, rights and freedoms or where the processing serves the advancing, exercising or defending of legal claims.

If the personal data relating to you is processed for the purpose of direct advertising, then you have the right to advance at any time objection to the processing of the per­sonal data relating to you for purposes of such advertising. This applies also to the profiling in so far as this is carried out in connection with such direct advertising.

If you object to the processing for purposes of direct advertising, then the personal data relating to you will no longer be processed for these purposes.

You have the opportunity – in connection with the use of services of the information society and regardless of directive 2002/58/EC – to exercise your right of objection with the aid of automated processes in which technical specifications are used.

You have also the right for reasons which result from your particular situation to ad­vance at any time objection to the processing of the personal data relating to you which processing is carried out for scientific or historic purposes or for statistical pur­poses according to Article 89 Para. 1 GDPR.

Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your consent at any time. On withdrawal we immedi­ately will delete your personal data and no longer process it. The legality of the pro­cessing carried out prior to your withdrawal on the base of your given consent is not affected by you withdrawal.

Right to complain at a supervisory authority

Regardless of another regulatory or judicial remedy, you are entitled to the right to lodge a complaint at a supervisory authority and here in particular at a supervisory authority in the member state of your place of residence, of your place of work or of the place where the suspected infringement took place when you are of the opinion that the processing of the personal data relating to you infringes the GDPR.

In this case the supervisory authority, at which the complaint was lodged, shall inform the complainant on the status and the results of the complaint including the possibility of a judicial remedy in accordance with Article 78 GDPR.

I. Name and address of the responsible party

The responsible party in the sense of the General Data Protection Regulation (GDPR) and of other national data protection regulations in force in the member states of European Union as well as of other regulations with a legal data-protecting character is the

CTP Advanced Materials GmbH

Stahlstrasse 60

D-65428 Ruesselsheim, Germany

Fon: +49 6142 91 85 0

Fax: +49 6142 91 85 55

Mail: ctp@ctpgmbh.de

 

The processing of some data takes place in joint responsibility according to Art. 26 GDPR with:

Aditya Birla Group
Aditya Birla Centre
S K Ahire Marg, Worli

Mumbai 400030, India

II. Name and address of the data protection officer

The data protection officer of the responsible party is:

daschug GmbH

Robert-Bosch-Strasse 7

64293 Darmstadt, Germany

Fon +49 6151 6673 440

Mail: datenschutz@ctpgmbh.de

III.    General information on data processing

Range of the processing of personal data

Generally, we collect and process personal data of users only as long as this is re­quired for providing a properly functioning website as well as delivering our contents and services. The collection and use of personal data of our users on a regular basis only takes place after consent of the data subject. An exception applies to those cases where obtaining consent prior to use is not possible based on matters of law and fact and the processing of data is allowed by legal regulations.

Legal fundamentals for the processing of personal data

In so far as we obtain the consent of the data subject for the processing of personal data Article 6 Para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the foundation for the processing of personal data.

Article 6 Para. 1 lit. b GDPR serves as the legal foundation for the processing of per­sonal data which is necessary for the fulfilment of a contract if the data subject is party to this contract. This applies also to the processing processes which are neces­sary for the execution of pre-contractual measures.

Article 6 Para. 1 lit. c GDPR serves as the legal foundation in so far as processing of personal data is necessary for the fulfilment of a legal obligation applying to our en­terprise.

Article 6 Para. 1 lit. d GDPR serves as the legal foundation for the situation that vital interests of the data subject or another natural person make the processing of per­sonal data necessary.

Article 6 Para. 1 lit. f GDPR serves as the legal foundation for the situation that pro­cessing is necessary to ensure a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not exceed the first named interest.

Deletion of data and duration of storage

The personal data of the data subject are deleted or disabled as soon as the purpose for which the data was stored lapses. In addition, storage can take place if this was stipulated by the European or national legislatures in orders, laws or other regulations in accordance with European Union law to which the responsible party is subject. Disabling or deletion of the data is also carried out if a storage period prescribed by the standards as named expires unless there is a necessity for the continued storage of the data for the concluding or fulfilling of a contract.

IV. Making available of our website and creation of logfiles

Description and range of data processing

On every visit on our website our system automatically collects data and information of the computer system calling. The following data is collected:

• Information on the type of browser and its version used
• The operating system of the user
• The internet-service-provider of the user
• The IP-address of the user
• Date and time of the access
• The website, from which an accessing system reaches our website
• Websites, which are accessed by the computer system of the user via our web­site

This data is also stored in the logfiles of our system. However, IP-addresses of the users or other data, which would allow the assignment of the data to a particular user, are not stored. Also, this data is not stored together with other personal data of the user.

Legal foundations for the data processing

Article 6 Para. 1 lit. f GDPR is the legal foundation for the temporary storage of data and logfiles.

Purpose of data processing

The temporary storage of the IP-address by the system is necessary to enable the delivery of the website to the computer of the user. For achieving this the IP-address of the user must remain stored for the duration of the session.

The storage in logfiles occurs to enable the proper functioning of the website. Fur­thermore, this data serves to optimize the website and to enable the security of our IT-systems. An analysis of the data for marketing purposes does not happen.

The legal foundation is our legitimate interest in data processing according to Article 6 Para.1 lit. f GDPR.

Duration of storage

The data is deleted or disabled as soon as the purpose for which the data was stored lapses. This is the case when the particular session has ended in situations where the data is collected for making the website available.

This is the case at the latest seven days after the time when the data was stored in log files. A storage exceeding this period is possible. In this case the IP-addresses of the users are deleted or distorted so that an assignment of the client calling in is no longer possible.

Possibility for objection and deletion

The collection of data for the making available of the website and the storage of data in logfiles is compulsory for operating the website. Thus, there is no right to object by the user.

Use of cookies

1. a) Description and range of data processing

Our website uses cookies. In general, cookies are small text files which are stored on your computer and which store certain settings and data for exchange with the online offer from us via your browser. If a user calls in a website, a cookie can be stored in the operating system of the user’s computer. This cookie usually contains a unique string of characters, which allows an unambiguous identification of the browser when calling in the website again.

We are using cookies to improve our online offer. Some elements of our website re­quire that a browser calling in can be identified after a changeover.

The following data is stored and transmitted:

• Language settings
• Log-In-information

The data of the user collected in this way is pseudonymized by technical processes. Accordingly, assignment of the data to the user calling in is no longer possible. The data collected is not stored together with other personal data of the user.

When our website is called, the users are informed by means of an information ban­ner about the use of cookies for analytical purposes and are referred to this data protection information. In this connection reference is given to how storage of cookies can be prevented by the browser settings.

In this connection follows a reference to how that storing of cookies can be prevented by appropriate browser settings.

1. b) Legal foundation of data processing

The legal foundation for the processing of personal data by using cookies is Article 6 Para. 1 lit. f GDPR.

1. c) Purpose of data processing

The purpose behind the use of strictly technically essential cookies is to facilitate the use of the website for the user. Certain functions of our website cannot be offered without the use of cookies. For these functions it is necessary that the browser is recognized even after a page change.

We need cookies for the following application:

• Adoption of language settings

Analysis cookies are used for the purpose of improving the quality of our website and its content. By the analysis cookies we learn how the website is used and thus are able to continually optimize our offer. These purposes also include our legitimate in­terest in the processing of the personal data in accordance with Article 6 Para. 1 lit. f GDPR.

1. d) Duration of storage, possibilities for objection and elimination

Cookies are stored on the user’s computer and are transmitted from this to our web­site. Accordingly, you as user have full control over the use of cookies. By a change of the settings of your internet browser you are able to deactivate or restrict the transmissions of cookies. Cookies already being stored can be deleted at any time. This can also be carried out automatically. However, if cookies for our website are deactivated, it may no longer be possible to fully use all functions of the website. The transmission of flash cookies cannot be prevented by the browser settings but re­quires changes of the settings of the flash player.

 

VI. E-Mail-contact

Description and range of data processing

Contacting us is possible by using the e-mail address provided. In this case personal data of the user transmitted with the e-mail is stored. In this connection no data is passed on to third parties. The data is used exclusively for the processing of the con­versation and will immediately be deleted if it is no longer needed.

Legal foundation of data processing

Legal foundation for the processing of the data after application of the user for a newsletter in case of consent of the user is Article 6 Para. 1 lit. a GDPR.

Legal foundation for the processing of data in case of the transmission of an e-mail is Article 6 Para. 1 lit. f GDPR. Is the e-mail contact directed at closing a contract addi­tional legal foundation for the processing of data is Article 6 Para. 1 lit. b GDPR.

Purpose of data processing

The processing of the personal data from the input mask/e-mail serves us solely for the processing of the contact. In case of contacting by e-mail this is also the neces­sary legitimate interest in the processing of the data.

Other personal data processed during the sending-off process serves to prevent abuse of the contact form and to ensure the security of our IT systems.

Duration of storage

The data is deleted as soon as it is no longer needed for achieving the purpose of their collection. This is the case for the personal data from the input mask of the contact form and those which are sent by e-mail when the particular conversation with the user has ended.

The conversation has ended when the circumstances allow the conclusion that the matter in question has been finally clarified.

The additional personal data collected during the sending-off process is deleted the latest after a period of seven days.

Possibilities for objection and elimination

At any time the user has the opportunity to withdraw his consent on the processing of personal data. If the user is contacting us by e-mail, he can object to the storage of his personal data at any time. In this case the conversation cannot be continued.

VII.       Rights of the data subject

If your personal data is processed, then you are the data subject in the sense of the GDPR and you are entitled to the following rights vis à vis the responsible party:

Right of access by the data subject

You can demand from the responsible party confirmation as to whether personal data that relates to you has been processed by us. If such processing has taken place, you can demand information from the responsible party on the following:

• The purposes for which the personal data is processed;
• The categories of personal data which are processed;
• The recipients or, resp., the categories of recipients to which the personal data relating to you has been disclosed or will be disclosed;
• The planned duration of the storage of the personal data relating to you or, if dis­tinct statements on this are not possible, the criteria for the laying down of duration of storage;
• The existence of a right to correction or deletion of the personal data relating to yourself, of a right to a restriction of the processing by the responsible party or of a right of objection to this processing;
• The existence of a right of appeal at a supervisory authority;
• All available information on the origin of the data if the personal data was not collected at the data subject;
• The existence of an automated decision-finding process including profiling in ac­cordance with Article 22 Para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and its scope and the effects strived for of such a processing for the data subject in question.

You are entitled to the right to demand information on whether the personal data re­lating to yourself is transmitted to a third country or an international organization. In this connection you can demand to be instructed on the suitable guarantees in ac­cordance with Article 46 GDPR in connection with the transmission.

Right to correction

You have a right to correction and/or completion vis à vis the responsible party in so far as the personal data as processed and which relates to yourself is incorrect or incomplete. The responsible party has to carry out the correction without delay.

Right to restrict the processing of personal data

Provided the following preconditions are met you can demand restriction of the pro­cessing of the personal data relating to you:

• if you dispute the correctness of the personal data relating to yourself for a pe­riod which makes it possible for the responsible party to check the correctness of the personal data;
• if the processing is unlawful and you reject deletion of the personal data and de­mand restriction of the use of the personal data instead;
• if the responsible party no longer needs the personal data for purposes of the processing but you need the data for the advancing, exercising or defending of legal claims, or
• if you have advanced objection to the processing in accordance with Article 21 Para. 1 GDPR but it has not yet been established whether the justified rea­sons of the responsible party outweigh your reasons.

If the processing of the personal data relating to yourself has been restricted, then this data – apart from the storage of it – may only be processed with your consent or for the assertion, exercising or defending of legal claims or for the protection of the rights of another natural person or legal entity or for reasons relating to an important public interest of the European Union or of a member state.

If the restriction of the processing has been restricted in accordance with the afore-mentioned preconditions, then you will be informed by the responsible party before the restriction is cancelled.

Right to erasure

1. a) Deletion obligation

You can demand by the responsible party that the personal data relating to yourself is deleted without delay and the responsible party is then obliged to delete this data without delay in so far as one of the following reasons applies:

• The personal data relating to you is no longer required for the purposes for which it was collected or for which it was processed.
• You revoke your consent, on which processing in accordance with Article 6 Para. 1 lit. a or Article 9 Para.2 lit. a GDPR was based, and there is no other legal foundation for the processing.
• You submit an objection to the processing in accordance with Article 21 Para. 1 GDPR and there are no justified reasons for the processing with a higher priority, or you submit an objection to the processing in accordance with Article 21 Para. 2 GDPR.
• The personal data relating to you was processed unlawfully.
• The deletion of the personal data relating to you is required to fulfil a legal obliga­tion in accordance with European Union law or the law of the member states, which laws the responsible party is subject to.
• The personal data relating to you was collected in relation to services offered by the information society in accordance with Article 8 Para. 1 GDPR.

1. b) Information to third parties

If the responsible party has made the personal data relating to you public and if he/she is obliged to delete this data in accordance with Article 17 Para. 1 GDPR, then he/she shall take reasonable measures including technical ones – whereby ac­count shall be taken of the available technology and the implementation costs – to inform the responsible parties for the data processing which process the personal data that you as data subject have demanded from them the deletion of all links to this personal data or of copies or replicates of these.

1. c) Exceptions

The right to erasure does not exist in so far as the processing is necessary for

• the exercising of the right of free expression of opinion and to information;
• for the fulfilment of a legal obligation, which requires the processing in accord­ance with the law of the European Union or the law of the member states, which laws the responsible party is subject to, or for the carrying out of a task, which lies in the public interest or which is carried out in the exercising of pub­lic authority, which authority was transferred to the responsible party;
• for reasons of public interest in the field of public health in accordance with Arti­cle 9 Para. 2 lit. h and i as well as Article 9 Para. 3 GDPR;
• for archiving purposes, scientific or historical research purposes lying in the pub­lic interest or for statistical purposes in accordance with Article 89 Para. 1 GDPR, in so far as the right named in section a) probably makes achieving of the objectives of the processing impossible or impairs it seriously, or
• for the advancing, exercising or defending of legal claims.

Right to information

If you have advanced the right to the correcting, erasure or restricting of the pro­cessing to the responsible party, then the latter is obliged to inform all recipients, to which the personal data relating to you was disclosed, of this correction or erasure of the data or of the restricting of the processing, unless this proves itself to be impossi­ble or linked with unreasonable expenditure.

You are entitled to the right vis à vis the responsible party to be informed about these recipients.

Right to data portability

You have the right to receive the personal data relating to yourself, which you made available to the responsible party, in a structured, conventional and machine-reada­ble format. In addition, you have the right to transmit this data to another responsible party without hindrance by the responsible party to whom the personal data was made available, in so far as

• the processing is based on consent in accordance with Article 6 Para. 1 lit. a GDPR or Article 9 Para. 2 lit. a GDPR or on a contract in accordance with Arti­cle 6 Para. 1 lit. b GDPR and
• the processing is carried out by means of automated processes.

In exercising this right, you have in addition the right to obtain the personal data re­lating to you is transferred directly from one responsible party to another responsible party in so far as this is technically possible. The freedoms and rights of other per­sons may not be impaired thereby.

The right to data portability applies not for the processing of personal data, which is necessary for the carrying out of a task, which lies in the public interest or in the ex­ercising of public authority and which task was transferred to the responsible party.

Right to object

For reasons which result from your particular situation you have the right to advance at any time objection to the processing of the personal data relating to you, which processing is carried out on the basis of Article 6 Para. 1 lit. e or f GDPR. This right also applies to the profiling based on these provisions.

The responsible party shall then no longer process the personal data relating to you, unless he/she can prove compelling reasons worthy of protection, which reasons overweigh your interests, rights and freedoms or where the processing serves the advancing, exercising or defending of legal claims.

If the personal data relating to you is processed for the purpose of direct advertising, then you have the right to advance at any time objection to the processing of the per­sonal data relating to you for purposes of such advertising. This applies also to the profiling in so far as this is carried out in connection with such direct advertising.

If you object to the processing for purposes of direct advertising, then the personal data relating to you will no longer be processed for these purposes.

You have the opportunity – in connection with the use of services of the information society and regardless of directive 2002/58/EC – to exercise your right of objection with the aid of automated processes in which technical specifications are used.

You have also the right for reasons which result from your particular situation to ad­vance at any time objection to the processing of the personal data relating to you which processing is carried out for scientific or historic purposes or for statistical pur­poses according to Article 89 Para. 1 GDPR.

Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your consent at any time. On withdrawal we immedi­ately will delete your personal data and no longer process it. The legality of the pro­cessing carried out prior to your withdrawal on the base of your given consent is not affected by you withdrawal.

Right to complain at a supervisory authority

Regardless of another regulatory or judicial remedy, you are entitled to the right to lodge a complaint at a supervisory authority and here in particular at a supervisory authority in the member state of your place of residence, of your place of work or of the place where the suspected infringement took place when you are of the opinion that the processing of the personal data relating to you infringes the GDPR.

In this case the supervisory authority, at which the complaint was lodged, shall inform the complainant on the status and the results of the complaint including the possibility of a judicial remedy in accordance with Article 78 GDPR.

I. Name and address of the responsible party

The responsible party in the sense of the General Data Protection Regulation (GDPR) and of other national data protection regulations in force in the member states of European Union as well as of other regulations with a legal data-protecting character is the

CTP Advanced Materials GmbH

Stahlstrasse 60

D-65428 Ruesselsheim, Germany

Fon: +49 6142 91 85 0

Fax: +49 6142 91 85 55

Mail: ctp@ctpgmbh.de

 

The processing of some data takes place in joint responsibility according to Art. 26 GDPR with:

Aditya Birla Group
Aditya Birla Centre
S K Ahire Marg, Worli

Mumbai 400030, India

II. Name and address of the data protection officer

The data protection officer of the responsible party is:

daschug GmbH

Robert-Bosch-Strasse 7

64293 Darmstadt, Germany

Fon +49 6151 6673 440

Mail: datenschutz@ctpgmbh.de

III.    General information on data processing

Range of the processing of personal data

Generally, we collect and process personal data of users only as long as this is re­quired for providing a properly functioning website as well as delivering our contents and services. The collection and use of personal data of our users on a regular basis only takes place after consent of the data subject. An exception applies to those cases where obtaining consent prior to use is not possible based on matters of law and fact and the processing of data is allowed by legal regulations.

Legal fundamentals for the processing of personal data

In so far as we obtain the consent of the data subject for the processing of personal data Article 6 Para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the foundation for the processing of personal data.

Article 6 Para. 1 lit. b GDPR serves as the legal foundation for the processing of per­sonal data which is necessary for the fulfilment of a contract if the data subject is party to this contract. This applies also to the processing processes which are neces­sary for the execution of pre-contractual measures.

Article 6 Para. 1 lit. c GDPR serves as the legal foundation in so far as processing of personal data is necessary for the fulfilment of a legal obligation applying to our en­terprise.

Article 6 Para. 1 lit. d GDPR serves as the legal foundation for the situation that vital interests of the data subject or another natural person make the processing of per­sonal data necessary.

Article 6 Para. 1 lit. f GDPR serves as the legal foundation for the situation that pro­cessing is necessary to ensure a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not exceed the first named interest.

Deletion of data and duration of storage

The personal data of the data subject are deleted or disabled as soon as the purpose for which the data was stored lapses. In addition, storage can take place if this was stipulated by the European or national legislatures in orders, laws or other regulations in accordance with European Union law to which the responsible party is subject. Disabling or deletion of the data is also carried out if a storage period prescribed by the standards as named expires unless there is a necessity for the continued storage of the data for the concluding or fulfilling of a contract.

IV. Making available of our website and creation of logfiles

Description and range of data processing

On every visit on our website our system automatically collects data and information of the computer system calling. The following data is collected:

• Information on the type of browser and its version used
• The operating system of the user
• The internet-service-provider of the user
• The IP-address of the user
• Date and time of the access
• The website, from which an accessing system reaches our website
• Websites, which are accessed by the computer system of the user via our web­site

This data is also stored in the logfiles of our system. However, IP-addresses of the users or other data, which would allow the assignment of the data to a particular user, are not stored. Also, this data is not stored together with other personal data of the user.

Legal foundations for the data processing

Article 6 Para. 1 lit. f GDPR is the legal foundation for the temporary storage of data and logfiles.

Purpose of data processing

The temporary storage of the IP-address by the system is necessary to enable the delivery of the website to the computer of the user. For achieving this the IP-address of the user must remain stored for the duration of the session.

The storage in logfiles occurs to enable the proper functioning of the website. Fur­thermore, this data serves to optimize the website and to enable the security of our IT-systems. An analysis of the data for marketing purposes does not happen.

The legal foundation is our legitimate interest in data processing according to Article 6 Para.1 lit. f GDPR.

Duration of storage

The data is deleted or disabled as soon as the purpose for which the data was stored lapses. This is the case when the particular session has ended in situations where the data is collected for making the website available.

This is the case at the latest seven days after the time when the data was stored in log files. A storage exceeding this period is possible. In this case the IP-addresses of the users are deleted or distorted so that an assignment of the client calling in is no longer possible.

Possibility for objection and deletion

The collection of data for the making available of the website and the storage of data in logfiles is compulsory for operating the website. Thus, there is no right to object by the user.

Use of cookies

1. a) Description and range of data processing

Our website uses cookies. In general, cookies are small text files which are stored on your computer and which store certain settings and data for exchange with the online offer from us via your browser. If a user calls in a website, a cookie can be stored in the operating system of the user’s computer. This cookie usually contains a unique string of characters, which allows an unambiguous identification of the browser when calling in the website again.

We are using cookies to improve our online offer. Some elements of our website re­quire that a browser calling in can be identified after a changeover.

The following data is stored and transmitted:

• Language settings
• Log-In-information

The data of the user collected in this way is pseudonymized by technical processes. Accordingly, assignment of the data to the user calling in is no longer possible. The data collected is not stored together with other personal data of the user.

When our website is called, the users are informed by means of an information ban­ner about the use of cookies for analytical purposes and are referred to this data protection information. In this connection reference is given to how storage of cookies can be prevented by the browser settings.

In this connection follows a reference to how that storing of cookies can be prevented by appropriate browser settings.

1. b) Legal foundation of data processing

The legal foundation for the processing of personal data by using cookies is Article 6 Para. 1 lit. f GDPR.

1. c) Purpose of data processing

The purpose behind the use of strictly technically essential cookies is to facilitate the use of the website for the user. Certain functions of our website cannot be offered without the use of cookies. For these functions it is necessary that the browser is recognized even after a page change.

We need cookies for the following application:

• Adoption of language settings

Analysis cookies are used for the purpose of improving the quality of our website and its content. By the analysis cookies we learn how the website is used and thus are able to continually optimize our offer. These purposes also include our legitimate in­terest in the processing of the personal data in accordance with Article 6 Para. 1 lit. f GDPR.

1. d) Duration of storage, possibilities for objection and elimination

Cookies are stored on the user’s computer and are transmitted from this to our web­site. Accordingly, you as user have full control over the use of cookies. By a change of the settings of your internet browser you are able to deactivate or restrict the transmissions of cookies. Cookies already being stored can be deleted at any time. This can also be carried out automatically. However, if cookies for our website are deactivated, it may no longer be possible to fully use all functions of the website. The transmission of flash cookies cannot be prevented by the browser settings but re­quires changes of the settings of the flash player.

 

VI. E-Mail-contact

Description and range of data processing

Contacting us is possible by using the e-mail address provided. In this case personal data of the user transmitted with the e-mail is stored. In this connection no data is passed on to third parties. The data is used exclusively for the processing of the con­versation and will immediately be deleted if it is no longer needed.

Legal foundation of data processing

Legal foundation for the processing of the data after application of the user for a newsletter in case of consent of the user is Article 6 Para. 1 lit. a GDPR.

Legal foundation for the processing of data in case of the transmission of an e-mail is Article 6 Para. 1 lit. f GDPR. Is the e-mail contact directed at closing a contract addi­tional legal foundation for the processing of data is Article 6 Para. 1 lit. b GDPR.

Purpose of data processing

The processing of the personal data from the input mask/e-mail serves us solely for the processing of the contact. In case of contacting by e-mail this is also the neces­sary legitimate interest in the processing of the data.

Other personal data processed during the sending-off process serves to prevent abuse of the contact form and to ensure the security of our IT systems.

Duration of storage

The data is deleted as soon as it is no longer needed for achieving the purpose of their collection. This is the case for the personal data from the input mask of the contact form and those which are sent by e-mail when the particular conversation with the user has ended.

The conversation has ended when the circumstances allow the conclusion that the matter in question has been finally clarified.

The additional personal data collected during the sending-off process is deleted the latest after a period of seven days.

Possibilities for objection and elimination

At any time the user has the opportunity to withdraw his consent on the processing of personal data. If the user is contacting us by e-mail, he can object to the storage of his personal data at any time. In this case the conversation cannot be continued.

VII.       Rights of the data subject

If your personal data is processed, then you are the data subject in the sense of the GDPR and you are entitled to the following rights vis à vis the responsible party:

Right of access by the data subject

You can demand from the responsible party confirmation as to whether personal data that relates to you has been processed by us. If such processing has taken place, you can demand information from the responsible party on the following:

• The purposes for which the personal data is processed;
• The categories of personal data which are processed;
• The recipients or, resp., the categories of recipients to which the personal data relating to you has been disclosed or will be disclosed;
• The planned duration of the storage of the personal data relating to you or, if dis­tinct statements on this are not possible, the criteria for the laying down of duration of storage;
• The existence of a right to correction or deletion of the personal data relating to yourself, of a right to a restriction of the processing by the responsible party or of a right of objection to this processing;
• The existence of a right of appeal at a supervisory authority;
• All available information on the origin of the data if the personal data was not collected at the data subject;
• The existence of an automated decision-finding process including profiling in ac­cordance with Article 22 Para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and its scope and the effects strived for of such a processing for the data subject in question.

You are entitled to the right to demand information on whether the personal data re­lating to yourself is transmitted to a third country or an international organization. In this connection you can demand to be instructed on the suitable guarantees in ac­cordance with Article 46 GDPR in connection with the transmission.

Right to correction

You have a right to correction and/or completion vis à vis the responsible party in so far as the personal data as processed and which relates to yourself is incorrect or incomplete. The responsible party has to carry out the correction without delay.

Right to restrict the processing of personal data

Provided the following preconditions are met you can demand restriction of the pro­cessing of the personal data relating to you:

• if you dispute the correctness of the personal data relating to yourself for a pe­riod which makes it possible for the responsible party to check the correctness of the personal data;
• if the processing is unlawful and you reject deletion of the personal data and de­mand restriction of the use of the personal data instead;
• if the responsible party no longer needs the personal data for purposes of the processing but you need the data for the advancing, exercising or defending of legal claims, or
• if you have advanced objection to the processing in accordance with Article 21 Para. 1 GDPR but it has not yet been established whether the justified rea­sons of the responsible party outweigh your reasons.

If the processing of the personal data relating to yourself has been restricted, then this data – apart from the storage of it – may only be processed with your consent or for the assertion, exercising or defending of legal claims or for the protection of the rights of another natural person or legal entity or for reasons relating to an important public interest of the European Union or of a member state.

If the restriction of the processing has been restricted in accordance with the afore-mentioned preconditions, then you will be informed by the responsible party before the restriction is cancelled.

Right to erasure

1. a) Deletion obligation

You can demand by the responsible party that the personal data relating to yourself is deleted without delay and the responsible party is then obliged to delete this data without delay in so far as one of the following reasons applies:

• The personal data relating to you is no longer required for the purposes for which it was collected or for which it was processed.
• You revoke your consent, on which processing in accordance with Article 6 Para. 1 lit. a or Article 9 Para.2 lit. a GDPR was based, and there is no other legal foundation for the processing.
• You submit an objection to the processing in accordance with Article 21 Para. 1 GDPR and there are no justified reasons for the processing with a higher priority, or you submit an objection to the processing in accordance with Article 21 Para. 2 GDPR.
• The personal data relating to you was processed unlawfully.
• The deletion of the personal data relating to you is required to fulfil a legal obliga­tion in accordance with European Union law or the law of the member states, which laws the responsible party is subject to.
• The personal data relating to you was collected in relation to services offered by the information society in accordance with Article 8 Para. 1 GDPR.

1. b) Information to third parties

If the responsible party has made the personal data relating to you public and if he/she is obliged to delete this data in accordance with Article 17 Para. 1 GDPR, then he/she shall take reasonable measures including technical ones – whereby ac­count shall be taken of the available technology and the implementation costs – to inform the responsible parties for the data processing which process the personal data that you as data subject have demanded from them the deletion of all links to this personal data or of copies or replicates of these.

1. c) Exceptions

The right to erasure does not exist in so far as the processing is necessary for

• the exercising of the right of free expression of opinion and to information;
• for the fulfilment of a legal obligation, which requires the processing in accord­ance with the law of the European Union or the law of the member states, which laws the responsible party is subject to, or for the carrying out of a task, which lies in the public interest or which is carried out in the exercising of pub­lic authority, which authority was transferred to the responsible party;
• for reasons of public interest in the field of public health in accordance with Arti­cle 9 Para. 2 lit. h and i as well as Article 9 Para. 3 GDPR;
• for archiving purposes, scientific or historical research purposes lying in the pub­lic interest or for statistical purposes in accordance with Article 89 Para. 1 GDPR, in so far as the right named in section a) probably makes achieving of the objectives of the processing impossible or impairs it seriously, or
• for the advancing, exercising or defending of legal claims.

Right to information

If you have advanced the right to the correcting, erasure or restricting of the pro­cessing to the responsible party, then the latter is obliged to inform all recipients, to which the personal data relating to you was disclosed, of this correction or erasure of the data or of the restricting of the processing, unless this proves itself to be impossi­ble or linked with unreasonable expenditure.

You are entitled to the right vis à vis the responsible party to be informed about these recipients.

Right to data portability

You have the right to receive the personal data relating to yourself, which you made available to the responsible party, in a structured, conventional and machine-reada­ble format. In addition, you have the right to transmit this data to another responsible party without hindrance by the responsible party to whom the personal data was made available, in so far as

• the processing is based on consent in accordance with Article 6 Para. 1 lit. a GDPR or Article 9 Para. 2 lit. a GDPR or on a contract in accordance with Arti­cle 6 Para. 1 lit. b GDPR and
• the processing is carried out by means of automated processes.

In exercising this right, you have in addition the right to obtain the personal data re­lating to you is transferred directly from one responsible party to another responsible party in so far as this is technically possible. The freedoms and rights of other per­sons may not be impaired thereby.

The right to data portability applies not for the processing of personal data, which is necessary for the carrying out of a task, which lies in the public interest or in the ex­ercising of public authority and which task was transferred to the responsible party.

Right to object

For reasons which result from your particular situation you have the right to advance at any time objection to the processing of the personal data relating to you, which processing is carried out on the basis of Article 6 Para. 1 lit. e or f GDPR. This right also applies to the profiling based on these provisions.

The responsible party shall then no longer process the personal data relating to you, unless he/she can prove compelling reasons worthy of protection, which reasons overweigh your interests, rights and freedoms or where the processing serves the advancing, exercising or defending of legal claims.

If the personal data relating to you is processed for the purpose of direct advertising, then you have the right to advance at any time objection to the processing of the per­sonal data relating to you for purposes of such advertising. This applies also to the profiling in so far as this is carried out in connection with such direct advertising.

If you object to the processing for purposes of direct advertising, then the personal data relating to you will no longer be processed for these purposes.

You have the opportunity – in connection with the use of services of the information society and regardless of directive 2002/58/EC – to exercise your right of objection with the aid of automated processes in which technical specifications are used.

You have also the right for reasons which result from your particular situation to ad­vance at any time objection to the processing of the personal data relating to you which processing is carried out for scientific or historic purposes or for statistical pur­poses according to Article 89 Para. 1 GDPR.

Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your consent at any time. On withdrawal we immedi­ately will delete your personal data and no longer process it. The legality of the pro­cessing carried out prior to your withdrawal on the base of your given consent is not affected by you withdrawal.

Right to complain at a supervisory authority

Regardless of another regulatory or judicial remedy, you are entitled to the right to lodge a complaint at a supervisory authority and here in particular at a supervisory authority in the member state of your place of residence, of your place of work or of the place where the suspected infringement took place when you are of the opinion that the processing of the personal data relating to you infringes the GDPR.

In this case the supervisory authority, at which the complaint was lodged, shall inform the complainant on the status and the results of the complaint including the possibility of a judicial remedy in accordance with Article 78 GDPR.