Privacy Statement

The provisions of the basic EU data protection regulation (hereinafter DSGVO) apply throughout Europe. We would like to inform you about the processing of personal data carried out by our company in accordance with this Regulation (see Articles 13 and 14 DSGVO). If you have any questions or comments about this data protection declaration, you can send them at any time to the e-mail address given under item 2 or 3.

I. Overview

In this section of the data protection declaration you will find information on the scope of application, the person responsible for data processing, his data protection officer and data security.

1. Scope of application

Data processing by ARDEX can essentially be divided into two categories:

- All data necessary for the execution of a contract with ARDEX will be processed for the purpose of contract execution. If external service providers are also involved in the processing of the contract, e.g. logistics companies or payment service providers, your data will be passed on to them to the required extent.

- When you access the ARDEX website/application, various information is exchanged between your end device and our server. This may also include personal data. The information collected in this way is used, among other things, to optimize our website or to display advertising in your terminal's browser.

This data protection declaration applies to the following offers:

- our newsletter offer available at www.ardex.de/newsletter

- our Internet pages, e.g. www.ardex.de, www.pandomo.de, http://www.perfektimsystem.de/, www.echte-teufelskerle.de, www.ardex-campus.de, www.ardex.nl, www.ardex.eu, etc.

- our online shop available at https://ardex.smake.com/

- our apps like ARDEX and ARDEX Natural Stone

- if otherwise from one of our offers (e.g. websites, subdomains, mobile applications, web services or integration into third party sites) is referred to this data protection declaration, regardless of how you access or use it.

All these offers are also collectively referred to as "Services".

2. Responsible party

The party responsible for data processing - i.e. the one who decides on the purposes and means of processing personal data - in connection with the services is ARDEX GmbH

Friedrich-Ebert-Str. 45
58453 Witten
Telephone: 02302 664 0
E-Mail: info(at)ardex.de

3. Data protection officer

You can contact our data protection officer as follows:

Contact form:

www.dsextern.de/anfragen

DS EXTERN GmbH

Dipl.-Kfm. Marc Althaus

Bredkamp 53a 

D-22589 Hamburg

4. Data privacy

In order to develop the measures required in Art. 32 DSGVO and thus achieve a level of protection appropriate to the risk, we have established the information security standard in our company on the basis of VdS 3473.

II. The data processing in detail

In this section of the data protection declaration we inform you in detail about the processing of personal data within the scope of our services. For better clarity, we structure this information according to certain functionalities of our services. In the normal use of the services, different functionalities and thus also different processes can come into effect one after the other or simultaneously.

1. General information about data processing

Unless otherwise stated, the following applies to all processing operations described below:

a. No obligation to provide
There is no contractual or legal obligation to provide personal data. You are not obliged to provide data.

 

b. Consequences of nonprovision
Failure to provide the required data (data marked as mandatory during entry) means that the service in question cannot be provided. Otherwise, failure to make our services available may mean that they cannot be provided in the same form and quality.

 

c. Acquiescence

In various cases, you also have the option of giving us your consent (possibly for part of the data) to further processing in connection with the processing described below. In this case, we will inform you separately in connection with the submission of the respective declaration of consent about all modalities and the scope of the consent and about the purposes which we pursue with these processing steps.

 

d. Transfer of personal data to third countries
If we transfer data to third countries, i.e. countries outside the European Union, then the transfer takes place exclusively in compliance with the legally regulated admissibility requirements.

The admissibility requirements are regulated by Arts. 44 -49 DSGVO.

 

e. Hosting with external service providers

Our data processing takes place to a large extent with the involvement of so-called hosting service providers, who provide us with storage space and processing capacities in their data centers and also process personal data on our behalf in accordance with our instructions. These service providers process data either exclusively in the EU or we have guaranteed an adequate level of data protection through the EU standard data protection clauses.

 

f. Transmission to state authorities

We transmit personal data to state authorities (including law enforcement authorities) if this is necessary to fulfil a legal obligation to which we are subject (legal basis: Art. 6 para. 1 c) DSGVO) or if it is necessary to assert, exercise or defend legal claims (legal basis: Art. 6 para. 1 f) DSGVO).

 

g. Storage period
We do not store your data longer than we need it for the respective processing purposes. If the data are no longer required for the fulfilment of contractual or legal obligations, they are regularly deleted, unless their temporary storage is still necessary. Reasons for this could be, for example, the following:

·       The fulfilment of commercial and tax retention obligations

·       Obtaining evidence for legal disputes within the framework of the statutory statute of limitations

 

It is also possible for us to continue to store your data with us if you have given your express consent.

 

h. Categories of data

Account information: Login-/User identification and password

Personal data: Title, Salutation/Gender, First name, Last name, Date of birth

- Occupational group

- Address: Street, house number, additional address (if applicable), postcode, city, country

Contact info:  Telephone number(s), fax number(s), e-mail address(es)

- Registration details: Information about the service through which you have registered; dates and technical information on registration, confirmation and cancellation; data provided by you when you registered

Order details: Ordered products, prices, payment and delivery information

Payment details: Account data, credit card data, data on other payment services such as Paypal

Access data: Date and time of the visit to our service; the page from which the accessing system came to our site; pages accessed during use; session ID data; also the following information about the accessing computer system: Internet protocol address used (IP address), browser type and version, device type, operating system and similar technical information.

- Application details: Curriculum vitae, certificates, proofs, work samples, certificates, pictures.

- Data according to Art. 9 DSGVO: Data revealing racial and ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, as well as genetic data, biometric data uniquely identifying a natural person, health data or data relating to a natural person's sex life or sexual orientation.

2. Calling the website/application

This section describes how we process your personal data when you access our services. We would particularly like to point out that the transmission of access data to external content providers (see b.) is unavoidable due to the technical functioning of information transmission on the Internet. 

a. Information to process

Data category
Access data

Assigned purpose
Connection establishment, presentation of the contents of the service, detection of attacks on our site based on unusual activities, fault diagnosis.

Legal basis
Art. 6 para. 1 f) DSGVO

Storage period
7 days

b. Recipient of personal data

Recipient category

External content providers that provide content (such as images, videos, social network embedded postings, banners, fonts, update information) required to view the Service.

Data concerned
access data

Legal basis of the transmission
Order processing (Art. 28 DSGVO)

Legitimate interest, if applicable
proper functioning of the services, (accelerated) presentation of content

Recipient category
Internal IT security

Data concerned
Access data

Legal basis for the transfer
Order processing (Art. 28 DSGVO)

Legitimate interest, if applicable
Prevention of attacks by exploiting security holes / vulnerabilities

Recipient category
Hosting service provider

Data concerned
Access data

Legal basis of the transmission
Order processing (Art. 28 DSGVO)

Legitimate interest, if applicable
Hosting of the website

3. Newsletter

We describe here what happens to your personal data in connection with a subscription to our newsletter:

a. Information to process

Data category
E-Mail-address

Assigned purpose
Verification of registration (double opt-in procedure), sending of newsletters

Legal basis
Art. 6 para. 1 letter b) DSGVO

Storage period
Duration of the newsletter subscription, consent can be revoked at any time

Data category
Personal data

Assigned purpose
Personalization of the newsletter

Legal basis
Art. 6 para. 1 letter b) DSGVO

Storage period
Duration of the newsletter subscription, consent can be revoked at any time

Data category
Registration data

Assigned purpose
Traceability of newsletter subscription/confirmation/unsubscription

Legal basis 
Article 6(1)(b), (f) DSBER

Legitimate interest, if applicable
Proof of newsletter subscription/confirmation/unsubscription

Storage time
Duration of the newsletter subscription, consent can be revoked at any time

Data category 
User profile data Newsletter

Assigned purpose
Design of the newsletter in line with your interests

Legal basis
Article 6, paragraph 1, letter f) DSGVO

Legitimate interest, if applicable
Improvement of our service, advertising purposes

Storage time
Duration of the newsletter subscription, consent can be revoked at any time

b. Recipient of personal data

Recipient category
Service provider for newsletter dispatch (CleverReach® GmbH & Co. KG)

Data concerned
All data mentioned under a.

Legal basis of the transmission
Order processing (Art. 28 DSGVO)

Legitimate interest, if applicable
Sending of the newsletter/storage and processing of the order data

Recipient category
ARDEX GmbH

Data concerned
all data mentioned under a.

Legal basis of the transmission
Order processing (Art. 28 DSGVO)

Legitimate interest, if applicable
Advertising purposes and individualized newsletters

4. Application process

In an ongoing application process with regard to applications received from candidates (m/f) or through the provision of application documents by personnel consultants, etc., we process your personal data in the following manner:

Information to process

Data category
Address data, contact details

intended purpose 
Identification, contact, communication for contract initiation

Legal basis
Art. 6 para. 1 b) DSGVO

Storage period 
If the application does not lead to an employment: 6 months,
as far as no consent for further storage is available.

Data category
Personal data

Assigned purpose
Identification, contacting, content checking

Art. 6 para. 1 b) DSGVO

Storage data
6 months, regulations as before

Data category
Application data

Assigned purpose
Selection of applicants

Legal basis
Art. 6 para. 1 b) DSGVO

Storage period
6 months, regulations as before

5. Purchasing

If you are a contact person of one of our suppliers, we process your personal data in the following way:

a. Information on processing

Data category
Personal master data, address data, contact data

Assigned purpose
Establishing contacts, communication for contract initiation and execution (especially delivery of goods)

Legal basis
Art. 6 para. 1 b) DSGVO

Storage period
3 years after the end of the business relationship

b. Recipients of personal data

Recipient category

Contact person data will only be passed on internally

6. Sales

If you are a contact person for one of our customers, we process your personal data in the following way:

a. Information to process

Category of data 
Personal data, address, contact data

Assigned purpose
Establishing contacts, communication for contract initiation and execution (especially delivery of goods)

Legal basis 
Art. 6 para. 1 b), f) DSGVO

Legitimate interest, if applicable 
Customer relationship management

Storage period
3 years after the end of the business relationship

b. Recipients of personal data

Recipient category 
Contact person data will only be passed on internally

7. Customer support

How we process your personal data when you contact our customer service can be found here:

a. Information to process

Data category
Personal data, contact data, contents of inquiries/complaints

Assigned purpose
Handling of customer inquiries and user complaints

Legal basis 
Art. 6 para. 1 b), f)

Legitimate interest, if applicable
Customer loyalty, improvement of our service

Storage period
Processing of the request

b. Recipients of personal data

Recipient category 
Personal data will only be passed on internally

8. Training courses

The following information describes how your personal data is processed when you register for and attend our training courses:

- Registration for the seminar via the registration form of ARDEX area managers or via the website
   http://www.ardex.de/ardex/ardexacademy/seminare

- Feedback questionnaires and participation forms following a training course are available in the training centres

- ARDEX certificates that are subsequently sent to customers

a. Information to process

Data category
Personal data, contact details

Designated purpose 
Processing of customer enquiries, sending the seminar programme/certificate

Legal basis 
Art. 6 para. 1 b), f)

Legitimate interest, if applicable
Customer loyalty, improvement of our service, issue of ARDEX certificates

Storage period 
Duration of the customer relationship, consent can be revoked at any time

Category of data
Contents of the questionnaires/evaluations of the seminars

Designated purpose
Processing of customer feedback

Legal basis 
Art. 6 para. 1 b), f)

Justifiable interest, if applicable
Improving our service

Storage data 
Duration of the customer relationship, consent can be revoked at any time

b. Recipient of personal data

Recipient category 
Personal data will only be passed on internally

Data concerned
all data mentioned under a.

Legitimate interest, if applicable
Improvement of our range of seminars, issue of certificates

9. Shopping in the online shop

The following information describes how your personal data is processed when you shop in our online shop.

a. Information to process

Category of data 
Persona data, contact data

Designated purpose
Processing of purchases of advertising material

Legal basis 
Art. 6 para. 1 b), f)

Legitimate interest
Sale/purchase of advertising materials

Storage data
Duration of the customer relationship, consent can be revoked at any time

b. Recipient of personal data

Recipient category 
Service provider for the webshop

Data concerned 
all data mentioned under a.

Legal basis of the transmission
Order processing (Art. 28 DSGVO)Legal basis of the transmission

10. Tracking

Below we describe how your personal data is processed using tracking technologies to analyze and optimize our services and for advertising purposes.

The description of the tracking procedures also includes information on how you can prevent or object to data processing. Please note that the so-called "Opt-out", i.e. the refusal of processing, is usually stored via cookies. If you use our services via a new terminal or in another browser or if you have deleted the cookies set by your browser, you must declare your rejection again.

The tracking procedures shown process personal data only in pseudonymous form. A connection with a concrete, identified natural person, i.e. a combination of the data with information about the bearer of the pseudonym, does not take place.

a. Tracking to analyse and optimise our services and their use, to measure the success of advertising campaigns and to optimise the display of advertising

 

(1) Purposes of the processing

The analysis of user behavior via tracking helps us to check the effectiveness of our services, to optimize and adapt them to the needs of the users and to correct errors. Furthermore, it serves to statistically determine characteristic values about the use of our services (range, intensity of use, surfing behaviour of users) - on the basis of uniform standard procedures - and thus to obtain market-wide comparable values.

Tracking to measure the success of advertising campaigns serves to optimize our ads for the future and to enable marketers and advertisers to optimize their ads accordingly. The purpose of tracking to optimize the display of advertising is to show users advertising tailored to their interests, to increase the success of advertising and thus also advertising revenues.

 

(2) Legal basis of the processing

For services that make the behaviour of affected persons on the Internet comprehensible and for the creation of user profiles, informed consent within the meaning of the DSGVO is required.

 

(3) The tracking procedure used in detail:

Name of the service
Google Analytics

Operating principle
Webanalyse

Possibility to prevent processing (opt-out) 
tools.google.com/dlpage/gaoptout?hl=de

Data transmission to third countries?
no

Name of the service
Double Click

operating principle
commercial

Possibility to prevent processing (opt-out) 
https://www.google.com/settings/ads/

Data transmission to third parties?
yes

Where appropriate, appropriate guarantees (Art. 46 DSGVO)
EU-U.S.  Privacy Shield

Name of the service
GA Audiences

Operating principle 
commercial

Possibility to prevent processing (opt-out)
tools.google.com/dlpage/gaoptout?hl=de

Data transmission to third parties?
no

If you wish to opt-out of interest-based advertising, you can also visit http://www.youronlinechoices.com/de/, click on "Preference Management" and follow the instructions to completely or individually prevent the use of data for interest-based advertising by the service providers listed there. You will still receive advertising that is not interest-based.

III. Rights concerned

1. Right of objection

If we process your personal data for direct marketing purposes, you have the right to object at any time with future effect to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling, insofar as it is associated with such direct marketing.

You also have the right to object at any time, for reasons arising from your particular situation, with future effect, to the processing of personal data concerning you in accordance with Article 6(1)(e) or (f) DSGVO; this also applies to profiling based on these provisions.

You can try out your right of objection free of charge.

You can contact us via the contact details listed under I.2.

2. Right to information

You have the right to know whether we process personal data concerning you, what personal data this may be, and further information in accordance with Art. 15 DSGVO.

3. Right of rectification

You have the right to request us to correct any incorrect personal data concerning you without delay (Art. 16 DSGVO). Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data - also by means of a supplementary declaration.

4. Right to cancellation ("Right to oblivion")

You have the right to request us to delete personal data relating to you without delay, provided that one of the reasons stated in Art. 17 para. 1 DSGVO applies and the processing is not necessary for one of the purposes regulated in Art. 17 para. 3 DSGVO.

5. Right to limitation of processing

You are entitled to demand a restriction on the processing of your personal data if one of the conditions laid down in Article 18, paragraph 1, letters a) to d) DSGVO is met.

6. Right to data transferability

You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. Furthermore, you have the right to transmit this data to another person responsible without any hindrance by us or to arrange for direct transmission by us, if this is technically possible. This should always apply if the basis of data processing is consent or a contract and the data is processed automatically. This does not apply to data stored in paper form only.

7.  Right of revocation in case of consent

If the processing is based on your consent, you have the right to revoke the consent at any time. This does not affect the legality of the processing carried out on the basis of the consent until revocation.

8. Right of appeal

You have a right of appeal to a supervisory authority.

IV. Glossary

Contract processor: A natural or legal person, authority, institution or other body processing personal data on behalf of the data controller.

Browser: Computer program for displaying websites (e.g. Chrome, Firefox, Safari)

Cookies: A "cookie" describes a small text file that is stored locally on the user's computer when visiting a website. This file stores data about the user's behaviour. If the browser is called up and the corresponding website is visited repeatedly, the cookie is used and gives the web server information about the user's surfing behaviour using the stored data.

In this context, cookies are not cookies, but information that a website stores locally on the visitor's computer in a small text file. This can be settings already made by the user on a page, but also information that the website has collected completely independently from the user. Later, these locally stored text files can be read out again from the same web server from which they were created. Most browsers automatically accept cookies. You can manage cookies using the browser functions (usually under "Options" or "Settings"). As a result, the storage of cookies can be deactivated, made dependent on your consent in individual cases or otherwise restricted. You can also delete cookies at any time.

Third countries: Country which is not bound to the legal requirements of the EU Data Protection Directive (country outside the EEA).

Personal data: All information relating to an identified or identifiable natural person. Identifiable is a natural person who can be identified directly or indirectly, in particular by assignment to an identifier such as a name, an identification number, location data, an online identifier or one or more special characteristics that express the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.

Pixel: Pixels are also called tracking pixels, web beacons or web bugs. These are small, invisible graphics in HTML e-mails or on web pages. When a document is opened, this small image is loaded from a server on the Internet, where the download is registered. This allows the server operator to see if and when an e-mail has been opened or a website visited. This function is usually implemented by calling a small program (Javascript). This allows certain types of information on your computer system to be recognized and passed on, such as the content of cookies, the time and date of page views and a description of the page on which the pixel-code is located.

Profiling: any automated processing of personal data consisting in the use of such personal data to evaluate or predict certain personal aspects relating to a natural person, in particular aspects relating to his/her work performance, economic situation, health, personal preferences, interests, reliability, conduct, whereabouts or relocation

Services: Our offers to which this data protection declaration applies (see Scope of application).

Tracking: The collection of data and its evaluation with regard to the behaviour of visitors to our services.

Tracking-Technologies: Tracking can be done using the activity logs (log files) stored on our web servers or by collecting data from your end device via pixels, cookies and similar tracking technologies.

Processing: Any operation or series of operations carried out with or without the aid of automated procedures in connection with personal data, such as the collection, collection, organisation, sorting, storage, adaptation or modification, reading, querying, use, disclosure by transmission, dissemination or any other form of provision, comparison or linking, restriction, deletion or destruction.

Witten, May 2018