|

Data privacy statement

Data protection terms & conditions

We appreciate your interest in our website ctc-composites.com (hereinafter referred to as the "website").

Introduction
CTC GmbH
Airbus-Straße 1
21684 Stade
Fax:+49 (0)4141/938 530
E-Mail:

(hereinafter "we", "us") is, as the operator of the website, responsible for the personal data of users (hereinafter "you") of the website within the meaning of the General Data Protection Regulations (hereinafter "GDPR").

The responsible in the sense of the GDPR is:

CTC GmbH
Data Protection
Airbus-Straße 1
21684 Stade

The protection of your privacy is a great and very important concern for us. We collect, process and use your personal information in accordance with the terms of this Data Protection Policy and the applicable data protection regulations.

„"Personal data" are, according to the GDPR, all information relating to an identified or identifiable natural person (hereinafter "the data subject"); a natural person is considered to be identifiable, directly or indirectly, in particular by means of an identifier such as a name, an identification number, location data, an online identifier or one or more special features expressing the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person. In other words, personally identifiable information about you is information that relates to you or that may say something about you personally and be associated with you, either on its own or in combination with other information.

In this Data Protection Policy we would like to inform you in detail about which personal data we collect, process and use that relates to you when you visit our website. We would therefore ask you to read the following instructions carefully.

1. Collection and Purpose for Use of Personal Data

In principle, we process your personal data only to the extent necessary to provide a functioning website. In addition, we only process data that you have provided to us in the context of contacting us.

1.1 Website Visits

Each time you visit our website, your browser automatically sends certain information to the server of our website, which it then stores in a log file (hereinafter "logfile"). These are information about

  • the type and version about your used web browser,
  • the operating system of your device (PC, notebook, smartphone, etc.) that you use
  • the website from which you came to our website,
  • the host name (hereafter "IP address") of your end device
  • the time of your visit
  • the amount of transferred data and the access status (file transfer, file not found etc.).

The legal basis for the collection and processing of the information stored in a log file is Article 6 (1) lit. f) GDPR.
We use this data to ensure the functionality of the website, in particular to detect and eliminate website errors, to determine the utilization of the website and to make adjustments or improvements. This is also the purpose of our legitimate interest in data processing. The processing is expressly not for the purpose of gaining knowledge of your person as a visitor to the site.
The information stored in a log file is deleted as soon as it is no longer necessary for the purpose of its collection. We will delete your IP address after leaving our website. Further storage of the data in log files is possible. In this case, your IP address is disassociated so that it is no longer possible to associate it with the visiting client.
The collection of data for the provision of our website and the storage of data in log files is essential for the operation of our website. Consequently, you are not entitled to object in this matter.
In addition, we use cookies on our website. Further details can be found in Section 2 of this Data Protection Policy.

1.2 Email Contact

On our website, an email address is provided, which can be used for electronic contact. If you do this, your personal data transmitted by email will be stored.
In this context, there is no disclosure of the data to third parties. The data is used exclusively for processing the conversation.

The legal basis for processing data transmitted in the course of sending an email is Article 6 (1) lit. f GDPR. If the intention of email contact is to conclude a contract, then additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

The processing of personal data when contacting us by email serves only to process the contact. This also includes the required legitimate interest in processing the data.

The data will be deleted as soon as it is no longer necessary for the purpose of its collection. For the personal data sent by email, this is the case when the conversation with you has ended. The conversation is ended when it can be inferred from the circumstances that the relevant facts have been finally clarified. If the data collected during contact is required to fulfil a contract, deletion of the data is only possible, so long as there are no contractual or legal obligations against deletion.
You can object to the storage of your personal data by contacting us by email at any time. In such a case, the conversation cannot continue.

All personal data stored in the course of contacting will be deleted in this case. Legal requirements for the storage of personal data during the execution of the contract, in particular those which we have to keep for tax reasons, remain unaffected.

2. Use of Cookies

Our website uses cookies. Cookies are very small text files used by websites that your browser stores on your device.

We only use so-called session cookies (also referred to as temporary cookies), i.e. those that are cached exclusively for the duration of your use of one of our internet pages. The purpose of these cookies is to facilitate the use of our website. For example, you can use the session cookies to see whether you have already visited the individual pages on our website. After leaving the website, these session cookies are automatically deleted.

You can set your browser to not accept cookies in general, or accept them only after explicit confirmation by you. You can easily find out how this works by using the help function of your browser. If your browser does not accept cookies, the functionality of our website may be limited or unavailable.

The data processed by cookies for the aforementioned purposes are justified for safeguarding our legitimate interests under Art. 6 para. 1 lit. f) GDPR.

3. Disclosure of Personal Data

Personal data are disclosed to third parties, if

  • this has been expressly approved by the data subject pursuant to Art. 6 para. 1 lit. a) GDPR
  • disclosure pursuant to Art. 6 para. 1 lit. f) GDPR is required to assert, exercise or defend legal claims and there is no reason to believe that the data subject has an overriding legitimate interest in not disclosing their data
  • a statutory, regulatory and/or judicial obligation exists for the transfer of data pursuant to Art. 6 para. 1 lit. c) GDPR
  • this is required for the fulfilment of a contractual relationship with the data subject pursuant to Art. 6 para. 1 lit. b) GDPR .

In other cases, personal data will not be disclosed to third parties.

4. Data Protection and Third Party Websites

Our website may contain hyperlinks to and from third party websites. If you follow a hyperlink to any of these websites, please note that we cannot accept any responsibility or liability for third party content or privacy. Please familiarize yourself with their data protection policy before submitting personal information to these websites.

5. Your Rights as the Data Subject and Contact

As far as your personal data are processed during the visit of our website, you have the following rights as "data subject" within the meaning of the GDPR:

5.1 Right of Access

You may request confirmation from us as to whether personal information concerning you is processed by us. If such processing exists, you can request information from us about the following data:

  • the purposes for which the personal data are processed;
  • the categories of personal data that are processed;
  • the recipients or categories of recipients to whom the personal data relating to you have been disclosed or are still being disclosed;
  • the planned duration of storage of your personal data or, if specific information is not available, criteria for determining the duration of storage;
  • the existence of a right to rectification or deletion of your personal data, a right of restriction of our processing or a right to object to such processing;
  • the existence of a right of appeal to a supervisory authority;
  • all available information on the source of the data if the personal data are not collected from the data subject;
  • the existence of automated decision-making including profiling according to Art. 22 (1) and (4) GDPR and - at least in these cases meaningful information about the logic involved, and the scope and intended impact of such processing on the data subject.

You have the right to request information about whether your personal information relates to a foreign country or an international organization. In this connection, you can request the appropriate guarantees in accordance with Art. 46 GDPR in connection with the transfer.

5.2 Right of Correction

You have a right to correction and/or completion with respect to us, if the personal data processed is incorrect or incomplete. We are obligated to perform the correction immediately.

5.3 Right to Restriction of Processing

You may request restriction of the processing of your personal data under the following conditions:

  • if you contest the accuracy of your personal information for a period that allows us to verify the accuracy of your personal information;
  • processing is unlawful and you refuse to delete the personal data and instead request restriction of the use of the personal data;
  • we no longer need your personal information for the purposes of processing, but you need it to assert, exercise or defend your rights;
  • if you have objected to processing pursuant to Art. 21 (1) GDPR and it is not yet certain whether our legitimate reasons prevail over your reasons.

If the processing of personal data concerning you has been restricted, this data may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest of the union or member state.
If processing restrictions are limited according to the aforementioned conditions, you will be informed by us before the limitations are lifted.

5.4 Right to Deletion

You may request us to delete your personal information without delay and we are required to delete that information immediately, if any of the following applies:

  • Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
  • You revoke your consent to the processing pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. GDPR and there is no other legal basis for processing.
  • You object pursuant to Art. 21 para. 1 GDPR to the processing and there are no prior justifiable reasons for the processing, or you object to processing pursuant to Art. 21 para. 2 GDPR.
  • Your personal data has been processed unlawfully.
  • The deletion of personal data concerning you is required to fulfil a legal obligation under EU law or the law of the member states to which the controller is subject.
  • The personal data concerning you were collected in relation to information society services offered pursuant to Art. 8 (1) GDPR.

The right to deletion does not exist if processing is necessary

  • to exercise the right to freedom of expression and information;
  • to fulfil a legal obligation required by the EU law or the laws of the member states to which the controller is subject, or to perform a task of public interest or in the exercise of official authority conferred on the controller;
  • for reasons of public interest in the field of public health pursuant to Art. 9 (2) lit. h and i and Art. 9 (3) GDPR;
  • for archival purposes of public interest, scientific or historical research purposes or for statistical purposes acc. Article 89 (1) GDPR, to the extent that the law referred to in subparagraph (a) is likely to render impossible or seriously affect the achievement of the objectives of that processing, or
  • to assert, exercise or defend legal claims.

5.5 Right to Information

If you have asserted your right to rectify, delete or restrict processing, we are obliged to notify all recipients to whom your personal data have been disclosed of this correction or deletion of the data or restriction of processing, unless this proves to be impossible or involves a disproportionate effort.
You have the right to be informed about these recipients.

5.6 Right of Data Transferability

You have the right to receive personally identifiable information you provide us in a structured, common and machine-readable format. You also have the right to transfer this data to another person, who has been provided with the personal data, without hindrance from us, provided that

  • processing is based on consent pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. GDPR or a contract pursuant to Art. 6 para. 1 lit. b GDPR and
    processing is performed using automated procedures.
  • in exercising this right, you also have the right to ensure that personal data relating to you are transmitted directly by us to another responsible person, insofar as this is technically feasible. Freedoms and rights of other persons may not be affected.

The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority that has been delegated to us.

5.7 Right to Revoke Consent

You have the right at any time, for reasons that arise from your particular situation, to revoke consent to the processing of your personal data, which pursuant to Art. 6 para. 1 lit. e or f GDPR; this also applies to profiling based on these provisions.

We will no longer process personal information relating to you unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or processing for the purposes of asserting, pursuing or defending legal claims.

Regardless of Directive 2002/58 / EC, you have the option, in the context of making use of services of the information society, of exercising your right to object through automated procedures that use technical specifications.

5.8 Right to Revoke the Data Protection Declaration of Consent

You have the right to revoke your data protection declaration at any time. The revocation of consent does not affect the legality of the processing performed on the basis of the consent until the revocation.

5.9 Automated Decision on an Individual Basis Including Profiling

You have the right not to be subjected to a decision based solely on automated processing - including profiling - that will have legal ramifications or similarly affect you in a similar manner. This does not apply if the decision

  • is required for the conclusion or performance of a contract between you and the controller,
  • is permissible on the basis of EU law or the laws of the member state to which the controller is subject, and that legislation contains adequate measures to safeguard your rights and freedoms and your legitimate interests or
  • is performed with your express consent.

However, these decisions must not be based on special categories of personal data under Art. 9 (1) GDPR, unless Art. 9 (2) lit. a or g GDPR applies and reasonable measures have been taken to protect the rights and freedoms as well as your legitimate interests.
With regard to the first and last mentioned cases, we shall take reasonable steps to uphold the rights and freedoms and your legitimate interests, including at least the right to obtain the intervention of a person through us, to express one's own position and to contest the decision.

5.9.1 Right to Complain to the Regulatory Authorities

Without prejudice to any other administrative or judicial remedy, you shall be entitled to complain to a regulatory authority, in particular within the member state of your residence, place of work or place of the alleged infringement, if you believe that the processing of the personal data concerning you violates the GDPR.
The regulatory authority to which the complaint has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy pursuant to Article 78 of the GDPR.

5.9.2 Contact

To assert any of your rights and/or to receive more information about this, please contact our data protection officer by post

CTC GmbH
Data Protection
Airbus-Straße 1
21684 Stade

Proof of your identity may be required before your request is implemented. This serves to protect your data against manipulation or deletion by third parties.

6. Data Protection Provisions for Applicants

The data you send to us together with your application is processed in order to clarify professional aptitude and go through the application process. The legal basis for processing your data is Art. 6 para. 1 lit. a GDPR.

Your data will be forwarded to the relevant department for review and a possible application process. Any transfer of your data to third parties or their transmission to third countries will not take place without your separate consent.

Your application data (contact details / application documents) will be deleted six months after completing the application process, unless we are obliged to store them due to legal requirements.

6.1 Your Rights as a Data Subject

Regarding the processing of your personal data, you have the following rights: first, you have the right to information (Art. 15 GDPR) and, if necessary, correction (Art. 16 GDPR) and/or deletion (Art. 17 GDPR) and/or blocking of your personal data. You also have the right to restrict processing (Art. 18 GDPR) as well as a right to data portability (Art. 20 GDPR).

In addition, you have the right to object to the processing of data concerning you at any time without giving any reason (Art. 21 GDPR) and to change or revoke consent statements with effect for the future. Any data processing performed until revocation is not affected. You may submit the withdrawal by email, fax or post.
To assert your rights, please contact the contact address specified under 5.9.2.

7. State and Updating of this Data Protection Policy

This data protection policy is effective as of May 25, 2018. We reserve the right to update our data protection policy in due course to improve data protection and/or amend it according to changes in regulatory practice or jurisdiction.