I. Name and address of the responsible party
The responsible party in the sense of the General Data Protection Regulation (GDPR) and of other national data protection regulations in force in the member states of European Union as well as of other regulations with a legal data-protecting character is the
CTP Advanced Materials GmbH
D-65428 Ruesselsheim, Germany
Fon: +49 6142 91 85 0
Fax: +49 6142 91 85 55
The processing of some data takes place in joint responsibility according to Art. 26 GDPR with:
Aditya Birla Group
Aditya Birla Centre
S K Ahire Marg, Worli
Mumbai 400030, India
II. Name and address of the data protection officer
The data protection officer of the responsible party is:
64293 Darmstadt, Germany
Fon +49 6151 6673 440
III. General information on data processing
Range of the processing of personal data
Generally, we collect and process personal data of users only as long as this is required for providing a properly functioning website as well as delivering our contents and services. The collection and use of personal data of our users on a regular basis only takes place after consent of the data subject. An exception applies to those cases where obtaining consent prior to use is not possible based on matters of law and fact and the processing of data is allowed by legal regulations.
Legal fundamentals for the processing of personal data
In so far as we obtain the consent of the data subject for the processing of personal data Article 6 Para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the foundation for the processing of personal data.
Article 6 Para. 1 lit. b GDPR serves as the legal foundation for the processing of personal data which is necessary for the fulfilment of a contract if the data subject is party to this contract. This applies also to the processing processes which are necessary for the execution of pre-contractual measures.
Article 6 Para. 1 lit. c GDPR serves as the legal foundation in so far as processing of personal data is necessary for the fulfilment of a legal obligation applying to our enterprise.
Article 6 Para. 1 lit. d GDPR serves as the legal foundation for the situation that vital interests of the data subject or another natural person make the processing of personal data necessary.
Article 6 Para. 1 lit. f GDPR serves as the legal foundation for the situation that processing is necessary to ensure a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not exceed the first named interest.
Deletion of data and duration of storage
The personal data of the data subject are deleted or disabled as soon as the purpose for which the data was stored lapses. In addition, storage can take place if this was stipulated by the European or national legislatures in orders, laws or other regulations in accordance with European Union law to which the responsible party is subject. Disabling or deletion of the data is also carried out if a storage period prescribed by the standards as named expires unless there is a necessity for the continued storage of the data for the concluding or fulfilling of a contract.
IV. Making available of our website and creation of logfiles
Description and range of data processing
On every visit on our website our system automatically collects data and information of the computer system calling. The following data is collected:
- Information on the type of browser and its version used
- The operating system of the user
- The internet-service-provider of the user
- The IP-address of the user
- Date and time of the access
- The website, from which an accessing system reaches our website
- Websites, which are accessed by the computer system of the user via our website
This data is also stored in the logfiles of our system. However, IP-addresses of the users or other data, which would allow the assignment of the data to a particular user, are not stored. Also, this data is not stored together with other personal data of the user.
Legal foundations for the data processing
Article 6 Para. 1 lit. f GDPR is the legal foundation for the temporary storage of data and logfiles.
Purpose of data processing
The temporary storage of the IP-address by the system is necessary to enable the delivery of the website to the computer of the user. For achieving this the IP-address of the user must remain stored for the duration of the session.
The storage in logfiles occurs to enable the proper functioning of the website. Furthermore, this data serves to optimize the website and to enable the security of our IT-systems. An analysis of the data for marketing purposes does not happen.
The legal foundation is our legitimate interest in data processing according to Article 6 Para.1 lit. f GDPR.
Duration of storage
The data is deleted or disabled as soon as the purpose for which the data was stored lapses. This is the case when the particular session has ended in situations where the data is collected for making the website available.
This is the case at the latest seven days after the time when the data was stored in log files. A storage exceeding this period is possible. In this case the IP-addresses of the users are deleted or distorted so that an assignment of the client calling in is no longer possible.
Possibility for objection and deletion
The collection of data for the making available of the website and the storage of data in logfiles is compulsory for operating the website. Thus, there is no right to object by the user.
- a) Description and range of data processing
We are using cookies to improve our online offer. Some elements of our website require that a browser calling in can be identified after a changeover.
The following data is stored and transmitted:
- Language settings
The data of the user collected in this way is pseudonymized by technical processes. Accordingly, assignment of the data to the user calling in is no longer possible. The data collected is not stored together with other personal data of the user.
In this connection follows a reference to how that storing of cookies can be prevented by appropriate browser settings.
- b) Legal foundation of data processing
The legal foundation for the processing of personal data by using cookies is Article 6 Para. 1 lit. f GDPR.
- c) Purpose of data processing
We need cookies for the following application:
- Adoption of language settings
Analysis cookies are used for the purpose of improving the quality of our website and its content. By the analysis cookies we learn how the website is used and thus are able to continually optimize our offer. These purposes also include our legitimate interest in the processing of the personal data in accordance with Article 6 Para. 1 lit. f GDPR.
- d) Duration of storage, possibilities for objection and elimination
Description and range of data processing
Contacting us is possible by using the e-mail address provided. In this case personal data of the user transmitted with the e-mail is stored. In this connection no data is passed on to third parties. The data is used exclusively for the processing of the conversation and will immediately be deleted if it is no longer needed.
Legal foundation of data processing
Legal foundation for the processing of the data after application of the user for a newsletter in case of consent of the user is Article 6 Para. 1 lit. a GDPR.
Legal foundation for the processing of data in case of the transmission of an e-mail is Article 6 Para. 1 lit. f GDPR. Is the e-mail contact directed at closing a contract additional legal foundation for the processing of data is Article 6 Para. 1 lit. b GDPR.
Purpose of data processing
The processing of the personal data from the input mask/e-mail serves us solely for the processing of the contact. In case of contacting by e-mail this is also the necessary legitimate interest in the processing of the data.
Other personal data processed during the sending-off process serves to prevent abuse of the contact form and to ensure the security of our IT systems.
Duration of storage
The data is deleted as soon as it is no longer needed for achieving the purpose of their collection. This is the case for the personal data from the input mask of the contact form and those which are sent by e-mail when the particular conversation with the user has ended.
The conversation has ended when the circumstances allow the conclusion that the matter in question has been finally clarified.
The additional personal data collected during the sending-off process is deleted the latest after a period of seven days.
Possibilities for objection and elimination
At any time the user has the opportunity to withdraw his consent on the processing of personal data. If the user is contacting us by e-mail, he can object to the storage of his personal data at any time. In this case the conversation cannot be continued.
VII. Rights of the data subject
If your personal data is processed, then you are the data subject in the sense of the GDPR and you are entitled to the following rights vis à vis the responsible party:
Right of access by the data subject
You can demand from the responsible party confirmation as to whether personal data that relates to you has been processed by us. If such processing has taken place, you can demand information from the responsible party on the following:
- The purposes for which the personal data is processed;
- The categories of personal data which are processed;
- The recipients or, resp., the categories of recipients to which the personal data relating to you has been disclosed or will be disclosed;
- The planned duration of the storage of the personal data relating to you or, if distinct statements on this are not possible, the criteria for the laying down of duration of storage;
- The existence of a right to correction or deletion of the personal data relating to yourself, of a right to a restriction of the processing by the responsible party or of a right of objection to this processing;
- The existence of a right of appeal at a supervisory authority;
- All available information on the origin of the data if the personal data was not collected at the data subject;
- The existence of an automated decision-finding process including profiling in accordance with Article 22 Para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and its scope and the effects strived for of such a processing for the data subject in question.
You are entitled to the right to demand information on whether the personal data relating to yourself is transmitted to a third country or an international organization. In this connection you can demand to be instructed on the suitable guarantees in accordance with Article 46 GDPR in connection with the transmission.
Right to correction
You have a right to correction and/or completion vis à vis the responsible party in so far as the personal data as processed and which relates to yourself is incorrect or incomplete. The responsible party has to carry out the correction without delay.
Right to restrict the processing of personal data
Provided the following preconditions are met you can demand restriction of the processing of the personal data relating to you:
- if you dispute the correctness of the personal data relating to yourself for a period which makes it possible for the responsible party to check the correctness of the personal data;
- if the processing is unlawful and you reject deletion of the personal data and demand restriction of the use of the personal data instead;
- if the responsible party no longer needs the personal data for purposes of the processing but you need the data for the advancing, exercising or defending of legal claims, or
- if you have advanced objection to the processing in accordance with Article 21 Para. 1 GDPR but it has not yet been established whether the justified reasons of the responsible party outweigh your reasons.
If the processing of the personal data relating to yourself has been restricted, then this data – apart from the storage of it – may only be processed with your consent or for the assertion, exercising or defending of legal claims or for the protection of the rights of another natural person or legal entity or for reasons relating to an important public interest of the European Union or of a member state.
If the restriction of the processing has been restricted in accordance with the afore-mentioned preconditions, then you will be informed by the responsible party before the restriction is cancelled.
Right to erasure
- a) Deletion obligation
You can demand by the responsible party that the personal data relating to yourself is deleted without delay and the responsible party is then obliged to delete this data without delay in so far as one of the following reasons applies:
- The personal data relating to you is no longer required for the purposes for which it was collected or for which it was processed.
- You revoke your consent, on which processing in accordance with Article 6 Para. 1 lit. a or Article 9 Para.2 lit. a GDPR was based, and there is no other legal foundation for the processing.
- You submit an objection to the processing in accordance with Article 21 Para. 1 GDPR and there are no justified reasons for the processing with a higher priority, or you submit an objection to the processing in accordance with Article 21 Para. 2 GDPR.
- The personal data relating to you was processed unlawfully.
- The deletion of the personal data relating to you is required to fulfil a legal obligation in accordance with European Union law or the law of the member states, which laws the responsible party is subject to.
- The personal data relating to you was collected in relation to services offered by the information society in accordance with Article 8 Para. 1 GDPR.
- b) Information to third parties
If the responsible party has made the personal data relating to you public and if he/she is obliged to delete this data in accordance with Article 17 Para. 1 GDPR, then he/she shall take reasonable measures including technical ones – whereby account shall be taken of the available technology and the implementation costs – to inform the responsible parties for the data processing which process the personal data that you as data subject have demanded from them the deletion of all links to this personal data or of copies or replicates of these.
- c) Exceptions
The right to erasure does not exist in so far as the processing is necessary for
- the exercising of the right of free expression of opinion and to information;
- for the fulfilment of a legal obligation, which requires the processing in accordance with the law of the European Union or the law of the member states, which laws the responsible party is subject to, or for the carrying out of a task, which lies in the public interest or which is carried out in the exercising of public authority, which authority was transferred to the responsible party;
- for reasons of public interest in the field of public health in accordance with Article 9 Para. 2 lit. h and i as well as Article 9 Para. 3 GDPR;
- for archiving purposes, scientific or historical research purposes lying in the public interest or for statistical purposes in accordance with Article 89 Para. 1 GDPR, in so far as the right named in section a) probably makes achieving of the objectives of the processing impossible or impairs it seriously, or
- for the advancing, exercising or defending of legal claims.
Right to information
If you have advanced the right to the correcting, erasure or restricting of the processing to the responsible party, then the latter is obliged to inform all recipients, to which the personal data relating to you was disclosed, of this correction or erasure of the data or of the restricting of the processing, unless this proves itself to be impossible or linked with unreasonable expenditure.
You are entitled to the right vis à vis the responsible party to be informed about these recipients.
Right to data portability
You have the right to receive the personal data relating to yourself, which you made available to the responsible party, in a structured, conventional and machine-readable format. In addition, you have the right to transmit this data to another responsible party without hindrance by the responsible party to whom the personal data was made available, in so far as
- the processing is based on consent in accordance with Article 6 Para. 1 lit. a GDPR or Article 9 Para. 2 lit. a GDPR or on a contract in accordance with Article 6 Para. 1 lit. b GDPR and
- the processing is carried out by means of automated processes.
In exercising this right, you have in addition the right to obtain the personal data relating to you is transferred directly from one responsible party to another responsible party in so far as this is technically possible. The freedoms and rights of other persons may not be impaired thereby.
The right to data portability applies not for the processing of personal data, which is necessary for the carrying out of a task, which lies in the public interest or in the exercising of public authority and which task was transferred to the responsible party.
Right to object
For reasons which result from your particular situation you have the right to advance at any time objection to the processing of the personal data relating to you, which processing is carried out on the basis of Article 6 Para. 1 lit. e or f GDPR. This right also applies to the profiling based on these provisions.
The responsible party shall then no longer process the personal data relating to you, unless he/she can prove compelling reasons worthy of protection, which reasons overweigh your interests, rights and freedoms or where the processing serves the advancing, exercising or defending of legal claims.
If the personal data relating to you is processed for the purpose of direct advertising, then you have the right to advance at any time objection to the processing of the personal data relating to you for purposes of such advertising. This applies also to the profiling in so far as this is carried out in connection with such direct advertising.
If you object to the processing for purposes of direct advertising, then the personal data relating to you will no longer be processed for these purposes.
You have the opportunity – in connection with the use of services of the information society and regardless of directive 2002/58/EC – to exercise your right of objection with the aid of automated processes in which technical specifications are used.
You have also the right for reasons which result from your particular situation to advance at any time objection to the processing of the personal data relating to you which processing is carried out for scientific or historic purposes or for statistical purposes according to Article 89 Para. 1 GDPR.
Right to withdraw the declaration of consent under data protection law
You have the right to withdraw your consent at any time. On withdrawal we immediately will delete your personal data and no longer process it. The legality of the processing carried out prior to your withdrawal on the base of your given consent is not affected by you withdrawal.
Right to complain at a supervisory authority
Regardless of another regulatory or judicial remedy, you are entitled to the right to lodge a complaint at a supervisory authority and here in particular at a supervisory authority in the member state of your place of residence, of your place of work or of the place where the suspected infringement took place when you are of the opinion that the processing of the personal data relating to you infringes the GDPR.
In this case the supervisory authority, at which the complaint was lodged, shall inform the complainant on the status and the results of the complaint including the possibility of a judicial remedy in accordance with Article 78 GDPR.