Data Protection

Privacy at a Glance

Personal data is any information that can be used to identify you. This policy explains what happens with such data when you visit this website, why we process it and which rights you have. In short: some data arises simply because you open the site, some you give us yourself (for example through a contact form or an email), and some is only collected if you agree to it in our cookie banner. We use data to run the website reliably and securely, to answer your inquiries and, with your consent, to understand how the site is used.

‍

Who Is Responsible

The data on this website is processed by the website operator. The controller within the meaning of the GDPR is:

Ekaterini Tolis
Phone: +49 7458 977 22 332
Mobile: +49 1573 228 79 25
Email: tolis.ekaterini@aerochem.aero

The controller is the natural person or legal entity that alone or together with others decides on the purposes and means of processing personal data, such as names or email addresses.

We take the protection of your data seriously. We treat it as confidential and handle it in line with the statutory data protection rules and this policy.

‍

When You Open the Website

Whenever you visit the site, your browser connects to the servers of our hosting and network providers. Technical information such as your IP address, browser, operating system and the time of access is recorded automatically. This is partly needed to deliver the site without errors, and some of it may also be used to analyze usage.

‍

Webflow

Our website is hosted by Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA ("Webflow"). Webflow is a tool for building and hosting websites. When you visit, Webflow records log files, including your IP address, and stores cookies or similar technologies that are needed to display the site, to provide certain functions and to keep it secure (necessary cookies). Details are in Webflow's privacy policy: https://webflow.com/legal/eu-privacy-policy .

We use Webflow on the basis of Art. 6(1)(f) GDPR, because we have a legitimate interest in presenting our website as reliably as possible. Where we have asked for your consent, processing is based exclusively on Art. 6(1)(a) GDPR and § 25 (1) TDDDG (formerly TTDSG), insofar as the consent covers storing cookies or accessing information on your device, for example through device fingerprinting. You can revoke this consent at any time.

Data is transferred to the United States on the basis of the Standard Contractual Clauses of the EU Commission (details: https://webflow.com/legal/eu-privacy-policy ). In addition, Webflow is certified under the "EU-US Data Privacy Framework" (DPF), an agreement between the European Union and the US meant to ensure European data protection standards for data processing in the US. Every certified company commits to those standards. Certification details: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000TT9jAAG&status=Active

We have concluded a data processing agreement with Webflow. This is a contract required by data protection law which ensures that Webflow processes the personal data of our visitors only on our instructions and in line with the GDPR.

‍

Cloudflare

We use the service of Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA ("Cloudflare"). Cloudflare runs a worldwide content delivery network with DNS. Because of this, the data traffic between your browser and our website is technically routed through Cloudflare's network. That allows Cloudflare to analyze the traffic and to act as a filter against harmful requests from the internet. Cloudflare may also use cookies or comparable technologies to recognize visitors, but only for this purpose.

‍

We use Cloudflare because we have a legitimate interest in offering our website as error free and secure as possible (Art. 6(1)(f) GDPR). Data is transferred to the US on the basis of the Standard Contractual Clauses (SCC) of the European Commission (https://www.cloudflare.com/privacypolicy/ ). More about Cloudflare's security measures and privacy practices: https://www.cloudflare.com/privacypolicy/ . Cloudflare is also certified under the "EU-US Data Privacy Framework" (DPF), which obliges it to comply with European data protection standards. Certification details: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000GnZKAA0&status=Active

‍

Amazon CloudFront CDN

We also use the content delivery network Amazon CloudFront CDN, provided by Amazon Web Services EMEA SARL, 38 avenue John F. Kennedy, L-1855 Luxembourg ("Amazon"). It is a globally distributed network, and the data traffic between your browser and our website is technically routed through it. This improves the availability and speed of our site worldwide.

‍

The legal basis is our legitimate interest in presenting our web services as error free and secure as possible (Art. 6(1)(f) GDPR). Data is transferred to the United States on the basis of the Standard Contractual Clauses of the EU Commission (details: https://aws.amazon.com/de/blogs/security/aws-gdpr-data-processing-addendum/ ). More information: https://d1.awsstatic.com/legal/privacypolicy/AWS_Privacy_Notice__German_Translation.pdf . Amazon is certified under the "EU-US Data Privacy Framework" (DPF) and is therefore committed to European data protection standards. Certification details: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000TOWQAA4&status=Active

‍

Encrypted Connection (SSL/TLS)

To protect confidential content such as inquiries you send us, this website uses SSL or TLS encryption. You can recognize an encrypted connection by the address line of your browser switching from "http://" to "https://" and by the lock icon in the browser. With encryption active, third parties cannot read the data you send to us.

‍

Cookies and Your Consent

Our website uses cookies. These are small data packages that do not harm your device. Session cookies are stored temporarily and deleted automatically when you close your visit. Permanent cookies stay on your device until you delete them or your browser removes them. Cookies can come from us or from external companies whose services are integrated into the site, for example for payment services.

‍

Cookies serve different purposes. Many are technically necessary because certain functions would not work without them, such as a shopping cart or showing videos. Others are used to analyze behavior or for advertising. Cookies that are needed to carry out electronic communication, to provide functions you requested or to optimize the site (for example cookies that give measurable insights into the audience) are stored on the basis of Art. 6(1)(f) GDPR, unless another legal basis is named. We have a legitimate interest in storing necessary cookies so that our services work technically without errors and in an optimized way. Where we ask for your consent to cookies and similar technologies, processing is based exclusively on that consent (Art. 6(1)(a) GDPR and § 25 (1) TDDDG, formerly TTDSG), and you can revoke it at any time.

‍

You can set your browser to notify you whenever a cookie is placed, to accept cookies only in certain cases, to exclude them in general or to delete them automatically when the browser closes. If cookies are deactivated, some functions of this website may be limited. Which cookies and services we use is described in this policy.

‍

Cookie-Script

To obtain and document your cookie consent in line with data protection rules, we use the consent technology of Objectis Ltd., Žalgirio st. 88, LT-09303 Vilnius, Lithuania ("Cookie-Script"). When you enter our website, your browser connects to the servers of Cookie-Script to retrieve your consents and other declarations about cookies. Cookie-Script then stores a cookie in your browser so that your consent or its withdrawal can be assigned to you. The data collected this way is stored until you ask us to delete it, delete the Cookie-Script cookie yourself or the purpose of storage ends. Statutory retention periods remain unaffected. The legal basis is Art. 6(1)(c) GDPR, because we are legally required to obtain consent for cookies.

‍

When You Contact Us

If you contact us by email, phone or fax, we store and process your request including the personal data it contains (such as your name and your message) in order to handle it. We do not pass this data on without your consent.

If your inquiry relates to a contract or to steps before a contract is concluded, processing is based on Art. 6(1)(b) GDPR. In all other cases it is based on our legitimate interest in handling inquiries effectively (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), if we asked for it. You can revoke consent at any time. Your data stays with us until you ask us to delete it, revoke your consent or the purpose of storage ends, for example once your request is fully dealt with. Mandatory statutory provisions, in particular retention periods, remain unaffected.

Please be aware that data transmission over the internet, for example by email, can have security gaps. Complete protection against access by third parties is not possible.

‍

Analytics and Tag Management

Your usage of this website can be analyzed statistically with analysis tools. The following tools are in use.

‍

Google Tag Manager

We use Google Tag Manager, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It lets us integrate tracking and statistics tools and other technologies on our site. The Tag Manager itself creates no user profiles, stores no cookies and performs no analyses of its own. It only manages and runs the tools integrated through it. It does, however, collect your IP address, which may be transferred to Google's parent company in the United States.

We use it on the basis of Art. 6(1)(f) GDPR, because we have a legitimate interest in integrating and managing tools quickly and easily. Where we have asked for consent, processing is based exclusively on Art. 6(1)(a) GDPR and § 25 (1) TDDDG (formerly TTDSG), insofar as the consent covers cookies or access to information on your device. You can revoke it at any time. Google is certified under the "EU-US Data Privacy Framework" (DPF). Certification details: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

‍

Google Analytics

We use the web analysis service Google Analytics, provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. It helps us understand how visitors use the site. We receive data such as pages viewed, time spent on a page, operating system used and where visitors come from. This data is assigned to the visitor's device, not to a user ID. Google Analytics can also record mouse and scroll movements and clicks. It uses modeling methods to supplement the collected data and applies machine learning in the analysis. To recognize users for this purpose it uses technologies such as cookies or device fingerprinting. The recorded usage information is generally transferred to a Google server in the United States and stored there.

‍

We use Google Analytics on the basis of your consent under Art. 6(1)(a) GDPR and § 25 (1) TDDDG (formerly TTDSG). You can revoke your consent at any time. Data is transferred to the US on the basis of the Standard Contractual Clauses (SCC) of the European Commission (https://privacy.google.com/businesses/controllerterms/mccs/ ). Google is also certified under the "EU-US Data Privacy Framework" (DPF). Certification details: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

IP anonymization is active. Google shortens your IP address within the member states of the European Union or other states party to the Agreement on the European Economic Area before it is transmitted to the United States. Only in exceptional cases is the full IP address sent to a Google server in the US and shortened there. On our behalf, Google uses this information to evaluate your use of the website, to compile reports on website activity and to provide further services related to website and internet usage. The IP address transmitted by your browser through Google Analytics is not merged with other data held by Google.

‍

You can prevent Google from recording and processing your data by installing the browser plugin available here: https://tools.google.com/dlpage/gaoptout?hl=en . More about how Google Analytics handles user data: https://support.google.com/analytics/answer/6004245?hl=en .

‍

Embedded Videos: YouTube

This website embeds videos from YouTube, operated by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. When you open a page with an embedded YouTube video, your browser connects to YouTube's servers, and YouTube learns which of our pages you visited. YouTube may also place cookies or use comparable recognition technologies such as device fingerprinting on your device. This lets YouTube gather information about visitors, which is used, among other things, for video statistics, to improve user friendliness and to prevent fraud. If you are logged into your YouTube account while visiting, YouTube can assign your browsing behavior directly to your personal profile. You can prevent this by logging out first.

‍

We embed YouTube because we want to present our content in an appealing way, which is a legitimate interest under Art. 6(1)(f) GDPR. Where we have asked for consent, processing is based exclusively on Art. 6(1)(a) GDPR and § 25 (1) TDDDG (formerly TTDSG), insofar as the consent covers cookies or access to information on your device. You can revoke it at any time. More on how YouTube handles user data: https://policies.google.com/privacy?hl=en . Google is certified under the "EU-US Data Privacy Framework" (DPF). Certification details: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

‍

How Long We Keep Data, Legal Bases and Recipients

Unless this policy names a specific storage period, we keep your personal data until the purpose for which we collected it no longer applies. If you make a justified request for deletion or revoke your consent, we delete your data, unless other legally permitted reasons require us to keep it, such as tax or commercial law retention periods. In that case, deletion follows once those reasons end.

‍

If you have consented to processing, we rely on Art. 6(1)(a) GDPR, or Art. 9 (2)(a) GDPR if special categories of data under Art. 9 (1) GDPR are involved. If you consented to a transfer of personal data to third countries, Art. 49 (1)(a) GDPR applies as well. If you consented to cookies or to access to information on your device, § 25 (1) TDDDG (formerly TTDSG) is an additional basis. If we need your data to fulfill a contract or to take steps before a contract is concluded, the basis is Art. 6(1)(b) GDPR. If we need it to meet a legal obligation, it is Art. 6(1)(c) GDPR. Processing can also rest on our legitimate interests under Art. 6(1)(f) GDPR. For each case, the sections above state which basis applies.

In our business activities we work with various external parties, which sometimes requires passing personal data to them. We only do so if it is needed to fulfill a contract, if we are legally obliged to (for example towards tax authorities), if we have a legitimate interest under Art. 6(1)(f) GDPR or if another legal basis permits it. When we use processors, we pass on personal data of our customers only on the basis of a valid data processing agreement. In the case of joint processing, we conclude a joint processing agreement.

‍

Your Rights

You want to know what we hold about you, or have it corrected or deleted. Within the scope of the statutory provisions, you can ask us at any time, free of charge, for information about the personal data we store, its source, its recipients and the purpose of processing. You may also have the right to have your data corrected or deleted.

You changed your mind about a consent. Many processing activities are only possible with your express consent. You can revoke any consent at any time. Processing that took place before your revocation remains lawful.

You object to processing. If we process data on the basis of Art. 6(1)(e) or (f) GDPR, you have the right to object at any time to the processing of your personal data on grounds arising from your particular situation. This also applies to profiling based on these provisions. The legal basis for each processing activity is stated in this policy. If you object, we will no longer process the affected data, unless we can show compelling legitimate grounds that outweigh your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims (objection under Art. 21(1) GDPR). If we process your data for direct advertising, you can object at any time to the use of your data for that purpose. This also applies to profiling connected with such advertising. After your objection, we will no longer use your data for direct advertising (objection under Art. 21(2) GDPR).

‍

You want us to pause processing. You can ask us at any time to restrict the processing of your data. This applies if you dispute the accuracy of your data (we then need time to check, and during that time you can demand restriction), if the processing is or was unlawful and you prefer restriction to deletion, if we no longer need your data but you need it to establish, exercise or defend legal claims, or if you have objected under Art. 21(1) GDPR and it is not yet clear whose interests prevail. While processing is restricted, we may, apart from storing the data, only use it with your consent, to establish, exercise or defend legal claims, to protect the rights of other persons or for important public interest reasons of the European Union or a member state.

‍

You want to take your data with you. You have the right to receive data that we process automatically on the basis of your consent or to fulfill a contract, in a common, machine readable format, either for yourself or for another controller. If you ask us to transfer it directly to another controller, we do so as far as technically feasible.

You want to complain. If you believe the GDPR has been violated, you can lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged violation. This right exists independently of any other administrative or judicial remedies.

If you have questions about any of this or about data protection in general, you can contact us at any time using the contact details above.