+49 (0) 80 21 - 504 29-0
 

Privacy policy information of Saint-Gobain Performance Plastics Biolink GmbH

Updated: May 2018

Since 25 May 2018, the EU General Data Protection Regulation (hereinafter: GDPR) requirements have become effective throughout Europe. In the following we would like to inform you about the processing of personal data by Saint-Gobain XY GmbH in accordance with this new regulation (cf. Article 13 GDPR). Please read our data protection information carefully. If you have any queries or remarks concerning this data protection information, you may contact us at any time by accessing the links mentioned under point 2.



Table of contents

1. Overview
2. Name and contact information of the controller and of the company data protection officer
3. Purposes of data processing, legal basis and legitimate interests followed by Saint-Gobain Performance Plastics Biolink GmbH or a third party and categories of recipients
3.1. Accessing our website or application
3.2. Conclusion, execution or termination of a contract
3.3. Data processing for marketing purposes
3.4. Online presence and optimisation of the website
4. Transfers to recipients outside the EU
5. Your rights
6. Data protection measures



1. Overview

The following data protection guidelines inform you of the nature and extent of the processing of so-called personal data by Saint-Gobain Performance Plastics Biolink GmbH. Personal data is information which is, or can be, directly or indirectly referring to your person.

The data processing by Saint-Gobain Performance Plastics Biolink GmbH can basically be divided into two categories:

  • All data required for the execution of a contract with Saint-Gobain Performance Plastics Biolink GmbH will be processed for the purpose of contract performance. If external services such as logistics companies or subcontractors are involved in the performance of the contract, your data shall be transferred to these to the extent to which it is required in each case.
  • Upon accessing the website/application of Saint-Gobain Performance Plastics Biolink GmbH, various pieces of information are exchanged between your end device and our server. This can also include personal data. The information which is collected in this manner will be used, among other things, to optimise our website or to display advertising in your end device’s browser.  


According to the provisions of the GDPR, you have various rights you can assert against us. These include the right to object to the processing of certain data, especially of data used for marketing purposes.

If you have any queries about our privacy policy information, you may at any time turn to our company data protection officer. He or she can be contacted below.



2. Name and contact information of the controller and of the company data protection officer

This data protection information applies to data processing by 

Saint-Gobain Performance Plastics Biolink GmbH
Brunnenweg 38
83666 Waakirchen, Germany
Phone: +49 (0) 8021 50429-0
info@biolink-tapes.com

("Controller"), and for the following websites and applications: www.biolink-tapes.com, www.biolink-tapes.de, www.biolink-tapes.co.uk, www.biolink-tapes.fr, www.biolink-tapes.es . The company data protection officer of Saint-Gobain Performance Plastics Biolink GmbH can be reached under the above address. 



3. Purposes of data processing, legal basis and legitimate interests followed by Saint-Gobain Performance Plastics Biolink GmbH or a third party and categories of recipients

3.1. Accessing our website/application
When you access our website/application, the browser you use on your end device automatically sends information to the server of our website/application which is temporarily stored in a log file. This is a process over which we have no influence. The following information is collected in this process without any manual input from you and will be stored until its automatic erasure:

  • the IP address of the web-enabled requesting device, 
  • the date and time of access,
  • the name and URL of the accessed file, 

  • the website/application from which access originated (referrer URL), 

  • the browser you use and, where appropriate, the operating system of your web-enabled computer as well as the name of your access provider. 



The legal basis for the processing of your IP address is point (f) of Article 6(1) GDPR. Our legitimate interest results from the purposes of the data processing listed below. We are not able to identify you directly on the basis of the collected data, and do not draw any conclusions about your person.

The IP address of your end device and the aforementioned information is used by us for the following purposes:

  • guaranteeing a trouble-free connection set-up,
  • guaranteeing convenient use of our website/application, 
  • evaluating system security and stability. 


The data is stored for the duration of 14 months and thereafter erased automatically. Additionally, we use cookies, tracking tools and social media plug-ins for our website/application. More information as to precisely which procedure is used and what happens to your data is explained in more detail under point 3.4. below. 


If you have consented to the so-called geo-localisation process in your browser, operating system or other settings in your end device, we utilise this feature in order to be able to offer you tailor-made services connected to your current location (e.g. how to find the nearest company branch). Your location data is used only for this purpose. As soon as you stop using our services, your data is erased.


3.2. Conclusion, execution or termination of a contract

3.2.1. Data processing at the conclusion of a contract

The business activities of Saint-Gobain Performance Plastics Biolink GmbH are the manufacture and development of solvent-free adhesive tapes, foils and film. We implement your data to initiate business, to fulfil contractual and legal duties, for contractual relationship processing, to enable us to offer products and services, and to strengthen customer ties, a measure which can also involve analyses for marketing purposes and direct marketing.


In this context we process the data needed to conclude, implement or terminate a contract with you. This includes:

  • company, first name, surname
  • billing and delivery address
  • email address (where applicable) 
  • invoice and payment data 
  • date of birth (where applicable)
  • phone number (where applicable)

The legal basis for this is point (b) of Article 6(1) GDPR, i.e. you provide us with the data on the basis of the contractual relationship you have with us. As long as we do not use your contact data for marketing purposes (cf. point 3.3. below), we store the data gathered for contract processing until expiry of the legal or possible contractual warranty and guarantee rights. After expiry of this deadline, we retain the information from the contractual relationship required according to commercial and tax law for a prescribed period. For this period (usually lasting ten years after conclusion of contract) the data is only processed again if it has to be reviewed by the tax authorities.

3.2.2. Identity, creditworthiness and transfer to credit agencies
If necessary, we check your identity with the help of information from service providers. The legal basis for this is point b as well as point (f) of Article 6(1) GDPR. The authorisation for this is derived from the need to protect your identity and to prevent fraud at our expense. The circumstance and the result of our request will be stored along with your customer account for the duration of the contractual relationship.

If you have already bought anything from us, so-called score values may be added to the data we have stored concerning you. The term Scoring means that a forecast is made of future events with the help of collected information and experiences from the past. The stored data concerning you is allocated to statistical groups of persons who have in the past had similar entries. The procedure used is based on a sound mathematical-statistical forecasting method which has been field-tested over a long period to determine the probability of risk.

In the case of a delay in payment, we transfer the necessary data, in accordance with other legal provisions, to a company which has been contracted to enforce the claim. The legal bases for this are both point (b) of Article 6(1) and point (f) of Article 6(1) GDPR. The enforcement of a contractual claim can be defined as a legitimate interest within the meaning of the latter regulation. We also transfer information about the delay in payment or any other failure to meet our demands to credit agencies which cooperate with us in accordance with other legal provisions. The legal basis for this is point (f) of Article 6(1) GDPR. The legitimate interest necessary hereafter is derived from our interest and that of third parties in reducing contract risks for future contracts.


3.3. Data processing for marketing purposes
The details which follow refer to the processing of personal data for marketing purposes. The GDPR declares data processing of this kind on the basis of point (f) of Article 6(1) as entirely feasible and as a legitimate interest. The duration of data storage for marketing purposes does not follow a rigid principle and is centred on the question as to whether storage is required for promotional purposes. To see how we proceed when you object to something, please turn to point 3.3.3.

3.3.1. Marketing purposes of Saint-Gobain Performance Plastics Biolink GmbH and of third parties
As long as you conclude a contract with us, we list you as an existing client. In this case, we process your postal contact details outside the scope of your explicit consent in order to send you information on new products and services. We process your email address in order to send you, outside the scope of your explicit consent, information about similar products of our own.

3.3.2. Advertisements which are of interest to you 
To make sure you only receive marketing information which caters for your own presumed interests, we categorise and extend your customer profile further. For this purpose, we implement both statistical information and information concerning your person (e.g. basic data from your customer profile). The aim is to provide you with advertisements which cater for your real or supposed requirements, and at the same time avoid annoying you with useless adverts.

3.3.3. Right to object
You have at any time with effect for the future the right to object, free of charge, in connection with the particular communication channel used, to data processing for the aforementioned purposes. An email or a letter in the post to the contact address mentioned in point 2 will suffice.

Insofar as you lodge a complaint, the relevant contact address shall be blocked from further promotional data processing. We kindly remind you that in isolated cases promotional material may be temporarily delivered to you even after your complaint has reached us. There are technical reasons for this due to the necessary interim period for promotional material, and it is not a sign that we have failed to take notice of your objection. Thank you for your understanding.


3.4. Online presence and optimisation of the website

3.4.1. Cookies – general remarks

On our website we implement so-called cookies. As long as these cookies deal with personal data, they are applied on the basis of point (f) of Article 6(1) GDPR. In this context, our interest in optimising our website is legitimate in accordance with the aforementioned regulation. Cookies are small files which are created automatically by your browser and stored on your end device (laptop, tabled PC, smart phone, etc.) whenever you visit our site. Cookies cause no damage to your end device; they do not contain viruses, Trojans or other malware. The information deposited in the cookie is in each case connected to the specific end device in use, although this does not mean that because of this we obtain direct knowledge of your identity. On the one hand, the implementation of cookies helps make your use of our service more convenient. To do this, we implement session cookies in order to discover which individual pages on our website you have visited already, or to see if you have now logged into your customer account. These are deleted automatically when you leave our site. Furthermore, for the purpose of user-friendliness, we also use temporary cookies which are stored on your end device for a certain fixed time period. If you revisit our site to make use of our services, these can automatically tell if you have already visited us and can recognise your input and settings, so as to save you from repeatedly having to enter this data on every visit. 

On the other hand we implement cookies to generate statistics about usage of our website, to monitor optimisation of our service to you, and to be able to display information which has been tailor-made especially for you. When you revisit us, these cookies allow us to recognise whether or not you have already surfed our site. These cookies are automatically erased after the expiry of a defined period of time. Most browsers accept cookies automatically. However, you can configure your browser so that no cookies will be stored on your computer or that you receive a notification before a new cookie is stored. However, disabling cookies fully can mean that you may not be able to use all features of our website to the full. The storage period of cookies depends on the purpose of your visit and is not identical throughout. 

3.4.2. Google Analytics
In order to make our pages user-friendly and to continually be able to optimise these, we implement Google Analytics, a web analysis service of Google Inc. ("Google"). In this context, pseudonymised user profiles are generated and cookies used. The information generated by the cookie concerning your use of this website such as

  • type/version of browser,
  • operating system in use,
  • referrer URL (the page visited beforehand),
  • hostname of the accessing computer (IP address), 
  • time of server request, 


is transferred to a Google server in the USA and stored there. The information is used to analyse your use of the website, to compile reports on website activity, and to provide further services connected to website and Internet usage for the purposes of market research and user-friendly design of these web pages. The information may in certain cases be transferred to third parties where this is required by law or in cases where third parties process this data on behalf of us. Your IP address will under no circumstances be combined with other Google data. The IP addresses are anonymised, so that they cannot be assigned to a particular individual (so-called IP masking). 


You may prevent the storage of cookies by setting your browser software correspondingly, but we must remind you that in this case you will probably be unable to use all features of our website to the full. Apart from that, you can prevent Google from collecting and processing the data generated by the cookie (including your IP address) and relating to your use of the site by downloading and installing this browser add-on Alternatively, especially in the case of browsers on mobile terminals, you can prevent registration by Google Analytics by clicking this link. An opt-out cookie will be placed which prevents the future collection of your data whenever you visit this website. The opt-out cookie is only valid in this browser and for our website and is placed in your device. If you erase the cookies in this browser, you will have to place the opt-out cookie again. Further information on Google Analytics’ privacy policy is available on the Google Analytics website.

3.4.3. Google Maps
This website uses Google Maps (API) of Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Maps is a web service capable of displaying interactive maps which can visually display geographic information. By using this service, we can show you where we are based, and if need be facilitate navigation to the site.

The moment you access the subpages containing a particular, information about your usage of our website (e.g. your IP address) is transferred to a Google server in the USA and stored there. This happens regardless of whether Google provides a user account into which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not want the data to be assigned to your Google profile, you must log out before activating the button. Google stores your data (even in the case of logged out users) as a user profile, and analyses this. Such an analysis takes place in particular pursuant to point (f) of Article 6(1) GDPR on the basis of Google’s legitimate interest in displaying personalised advertisements, conducting market research, and/or designing its website to suit the purposes of the users. You have the right to object to the creation of such user profiles; if you intend to exercise this right, please contact YouTube.


4. Recipients outside the EU

With the exception of processing as described individually in point 3, we do not transfer your data to recipients based outside the European Union or outside the European Economic Area. If the data mentioned in point 3 happens to get transmitted to recipients based outside the European Union or outside the European Economic Area, the relevant servers are in this case located in the USA. The relevant transfer of data is in accordance with the principles of the Privacy Shield Privacy Shield and is also based on standard contractual clauses pertaining to the EU Commission.



5. Your rights

5.1 Overview
Apart from the right to object to the consent you have given to us to process data, you have further rights you may exercise provided the statutory prerequisites are met:

  • right of access to the personal data we have stored concerning you pursuant to Article 15 GDPR; in particular you have the right to obtain information about the purposes of the processing, the category of the personal data concerned, the categories of recipients to whom the personal data has been or will be disclosed, the envisaged period of storage, and the source of your data, as long as it is not collected directly from you,
  • right to rectification of inaccurate data and to have incomplete data completed pursuant to Article 16 GDPR,
  • right to erasure of data we have stored concerning you pursuant to Article 17 GDPR as long as no legal or contractual retention periods or other legal duties or rights allowing further storage have to be observed, 
  • right to restriction of processing of your data pursuant to Article 18 GDPR, as long as you contest the accuracy of the data, the processing is unlawful but you oppose its erasure; the controller no longer needs the data, but you require it for the establishment, exercise or defence of legal claims or you have objected to processing pursuant to Article 21 GDPR,
  • right to data portability pursuant to Article 20 GDPR, i.e. the right to receive selected data concerning you in a structured, commonly used and machine-readable format, or to demand transmission to another controller
  • right to lodge a complaint to a supervisory authority. As a rule, you can contact the supervisory authority at your habitual place of residence or work or the supervisory authority at our place of business for this purpose.



5.2 Right to object
Under the prerequisites of Article 21(1) GDPR, you have the right to object, on grounds relating to your particular situation, to processing of your data.

The foregoing general right to object applies to all processing purposes described in the privacy policy information file which are handled on the basis of point (f) of Article 6(1) GDPR. Unlike the special right to object targeted towards data processing for marketing purposes, we are, according to the GDPR, only obliged to implement such a general right to object if you name overriding grounds (e.g. a possible danger to someone’s life or health). Apart from that, you are welcome to consult the supervisory authority responsible for Saint-Gobain Performance Plastics Biolink GmbH, i.e. the data protection officer for the State of Hesse in Wiesbaden. 



 

6. Data security

All your submitted personal data, including your payment data, is transferred by means of the generally accepted and secure standard SSL (Secure Socket Layer). SSL is a safe and trusted standard which is also, for example, used in online banking. One way of recognising a safe SSL connection is to look out for the "s" added to "http" (in other words, the "https://...") in the address bar of your browser, or the padlock icon at the bottom of your browser.

Apart from the above, we use technical and organisational security measures to protect the personal data concerning you which we have in storage against manipulation as well as partial or complete loss, and against unauthorised access by third parties.