Data protection declaration

Version dated: 27 May 2020

Ensinger GmbH thanks you for visiting its website, using its Online Shop https://filaments.ensingerplastics.com (“Online Shop”) and for your trust and interest in our products. The protection of your personal data during processing, and thus the preservation of your personal rights to informational self-determination, is a central concern for us. We would like you to feel safe at all times when visiting our website and using our Online Shop. This data protection declaration applies to the use of the Online Shop. You can find the general data protection declaration for use of our website here.
In the following, we provide you with an overview of the information we capture during your use of our Online Shop and how these data are used:

1. GENERAL INFORMATION

Personal data is information that relates to you personally. This may include, for example, name, address, telephone number, email address. Your personal data will be processed according to the German and European data protection provisions.
We have taken technical and organisational security measures to protect your personal information against loss, destruction, manipulation, and unauthorised access. All of our employees and any third parties that are involved in data processing have been obligated to adhere to the EU General Data Protection Regulation (“EU GDPR”) and the German Federal Data Protection Act (Bundesdatenschutzgesetz) and to treat personal data as private and confidential. When personal data are processed via our website, their transfer will be encrypted in order to prevent misuse of data by third parties. Our security measures are regularly revised in accordance with technological developments.

2. DATA PROCESSING IN OUR ONLINE SHOP

a) Shopify
We use a platform of Shopify Inc. and its affiliates (“Shopify”) (https://www.shopify.com) for our Online Shop. Shopify collects from you as our customer your name, email address, shipping and billing address, payment data, company name, telephone number, IP address, information regarding orders that you place, information regarding merchants’ shops supported by Shopify that you visit, as well as information regarding the device used and the browser. This information is required for order processing, risk and fraud assessment, authentication, and payments and to improve our offer. Some of the personal data you share with us will be used for partially automated decision-making (e.g. IP addresses or payment data) so that certain potentially fraudulent transactions are automatically blocked for a short period.

Shopify collects this information directly from you or your device when you use or access the Online Shop, for example, when you visit it, place an order, or register for an account. These data are specifically used to ensure the operation and security of the Online Shop and to fulfil our contractual obligations.
Data are therefore processed on the basis of Article 6 (1) letters b and f of the EU GDPR.
Your data will be saved until your enquiry is completely processed and then be deleted if it is no longer required. We regularly review the need to use this data.
This does not include data that are necessary for accounting or bookkeeping purposes or that are subject to the statutory retention obligation; in Germany, the duration of storage of such personal data is based on Section 257 of the Commercial Code and Section 147 of the Tax Code.

b) Registration/creation of a customer account
In order to avoid having to re-enter your data to process orders during subsequent purchases in our Online Shop, you can register as a user on our website. In doing so, the data are entered in an entry form and transmitted to us and saved when you click on the button “Save this information for next time”.
The following data are collected during the registration process:
First name
Last name
Email address
Street and house number
Postcode
Town
Country
Company name (optional for companies)
Data are not transmitted to third parties, with the exception of the processing banks/payment service providers for the purpose of debiting the purchase price; the transport/shipping company hired by us for the purpose of delivering the goods; and our accountant for the purpose of fulfilling our tax obligations.
After cancellation of the purchase process, the data saved by us are erased. If a contract is concluded, all data are saved until the statutory retention obligation has expired; in Germany, the duration of storage of such personal data is based on Section 257 of the Commercial Code and Section 147 of the Tax Code.
 
Data are processed on the basis of Article 6 (1) letters a, b, and f of the EU GDPR. This is based on either your consent as a user and/or our legitimate interest in contractual performance.

c) Cookies
Depending on your browser’s settings, we collect information about your use of our Online Shop by utilising cookies. Cookies are small text files that are stored on your computer when you visit our Online Shop. Cookies help us to determine frequency of use and the number of users of our website and to design our offerings in a way that is most comfortable and efficient for you. Firstly, we use so-called “session cookies,” which are temporarily stored solely for the duration of your use of our Online Shop. In addition, we use “permanent cookies” to record information about computers that repeatedly access our Online Shop. Because of this, we are able to offer you better user guidance, “recognise” you, and present you with the most varied shop site possible, as well as new content, when you visit again. Specifically, we use permanent cookies to record the number of your visits, the duration of visits to our Online Shop, the beginning and end of use, and product interest.
The content of a permanent cookie is limited to an identification number. Name, IP address, and other information concerning your actual identity are not stored, nor do we create any individual profiles concerning your use behaviour. Permanent cookies are automatically erased. The period of storage varies depending on the cookie. You can erase the permanent cookies in your browser’s security settings at any time.
If cookies are used in the processing of personal data, the processing takes place on the basis of Article 6 (1) letter f of the EU GDPR. This is the basis of our legitimate interest in the advertising.

d) Google Analytics
Our Online Shop uses Google Analytics, a web analysis service provided by Google Inc. (www.google.de). Google Analytics uses “cookies”, text files stored on your computer that enable an analysis to be made of your use of the Online Shop. The information generated by the cookie regarding your use is generally transmitted to a Google server in the USA and stored there. In the event of activation of IP anonymisation in our Online Shop, however, your IP address will first be truncated by Google within member states of the European Union or other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there. IP anonymisation is active in this Online Shop. On behalf of Ensinger GmbH, Google uses this information to evaluate your use of the Online Shop, compile reports on website activity, and provide other services to Ensinger GmbH related to website use and Internet use. The IP address transmitted by your browser within the framework of Google Analytics is not combined with other Google data. Your data will be deleted after a maximum of 14 months.
You can prevent the storage of cookies by selecting the appropriate settings in your browser software (see section 6 below); however, we would point out that by doing so, you may not be able to enjoy the full functionality of the Online Shop.
The processing of personal data by Google Analytics takes place on the basis of Article 6 (1) letter f of the EU GDPR. This is the basis of our legitimate interest in the advertising.

e) PayPal

We have incorporated components of the PayPal payment service provider into our Online Shop. Payments are processed via PayPal accounts, which are virtual private or company accounts. PayPal also provides the option of processing virtual payments via credit card if a user does not have a PayPal account. A PayPal account is managed via an email address, which is why there is no traditional account number. PayPal allows for online payments to be made to third parties and for payments to be received. PayPal also assumes fiduciary functions and offers buyer protection services.
 
The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.
If you as the data subject select “PayPal” as the payment option in our Online Shop during the purchase process, the data required from you for the payment will be automatically transmitted to PayPal. By selecting this payment option, you agree to the required transmission of your personal data for payment processing.
The personal data transmitted to PayPal is generally your first name, last name, address, email address, IP address, telephone number, mobile phone number, or other data required for payment processing. Such personal data related to the respective order is also necessary to process the sales agreement.
The purpose of transmitting the data is to process payments and to prevent fraud. The controller will transmit personal data to PayPal if a legitimate interest for transmission exists. The personal data exchanged between PayPal and the controller will be transmitted by PayPal to credit bureaus under certain circumstances. The purpose of such transmission is to verify identity and creditworthiness.
PayPal may forward personal data to affiliated companies and service providers or subcontractors, if necessary, provided that this is necessary for the fulfilment of contractual obligations or data processing is to be subcontracted.
The processing of personal data with the involvement of PayPal takes place on the basis of Article 6 (1) letter b of the EU GDPR. This is based on our legitimate interest in the performance of the contractual relationship.
As the data subject, you have the option to withdraw from PayPal your consent to the handling of personal data at any time. Withdrawal does not affect personal data that must be processed, used, or transmitted for (contractually agreed) payment processing.
The applicable privacy policy of PayPal can be viewed at https://www.paypal.com/de/webapps/mpp/ua/privacy-full

f) Contact form
You can use the Online Shop’s contact form to send us messages and questions. The data that you enter in the contact form (your email address in all cases, and your name and telephone number if applicable) will first be transmitted to Ensinger GmbH in Germany. Depending on the content of your enquiry, your data will then be forwarded to the appropriate company within the Ensinger group of companies for the processing of your enquiry and will then be erased. We use your data exclusively to answer your contact enquiry.
There is no legal or contractual obligation to provide personal data when making contact. Please note, however, that we will not be able to process your enquiry if you do not provide information that is designated as necessary.
For the purpose of processing your enquiry, your data will be stored until your enquiry is fully processed, and will then be erased if it is no longer necessary. We regularly review the need to use these data. This does not include data that are necessary for accounting or bookkeeping purposes or that are subject to the statutory retention obligation; in Germany, the duration of storage of such personal data is based on Section 257 of the Commercial Code and Section 147 of the Tax Code.
Your transmitted data are processed on the basis of Article 6 (1) letter b of the EU GDPR.

3. DISCLOSURE OF PERSONAL DATA

We will disclose your data that are transmitted to us via the Ensinger GmbH website to the following recipients or categories of recipients:

• Google, Inc.
• PayPal (Europe) S.à.r.l.
• The following companies of the Ensinger group of companies:
• Ensinger Sintimid GmbH
• Ensinger Indústria de Plásticos Técnicos Ltda.
• Ensinger China Co., Ltd.
• ENSINGER (Shanghai) Engineering Plastics Co., Ltd.
• Ensinger, s.r.o.
• Ensinger Danmark A/S
• ENSINGER France S.A.R.L.
• Ensinger India Engineering Plastics Private Ltd.
• Ensinger Italia Srl.
• Ensinger Japan Co., Ltd.
• Ensinger Polska Sp. z.o.o.
• Ensinger Korea Ltd.
• Ensinger Asia Holding Pte. Ltd. - Singapore
• ENSINGER S.A.
• ENSINGER Sweden AB
• Ensinger Turkey Teknik Danışmanlık Ltd. Şti.
• Ensinger Ltd., UK
• Ensinger, Inc., USA
• Ensinger Plastics Canada, Ltd.
• Various service providers who are hired in connection with the contractual performance of Ensinger GmbH (e.g. transport companies).
• Public and non-public bodies to which we must disclose personal data in fulfilment of a statutory obligation.

 

4. TRANSMISSION OF PERSONAL DATA TO THIRD COUNTRIES

We also intend to transmit your personal data to recipients in so-called “third countries.” “Third countries” are countries outside of the European Union and the Agreement on the European Economic Area, in which it cannot be assumed that a level of data protection exists that is comparable to that of the European Union.
Prior to any such transmission, we will make sure that the necessary and appropriate level of protection is guaranteed in the respective third country or on the part of the recipient in the third country. This can result, in particular, from a so-called “adequacy decision” of the European Commission, by which an adequate level of data protection is determined to exist for a specific third country as a whole. Alternatively, we can also base the data transmission on the so-called “EU Standard Contractual Clauses” agreed upon with a recipient or -- in the case of recipients in the USA that possess a valid EU-US Privacy Shield certification - compliance with the principles of the so-called “EU-US Privacy Shield”.
We will be happy to provide you with additional information upon request concerning the suitable and appropriate guarantees with respect to adherence to an adequate level of data protection; you will find the contact information at the end of this data protection declaration. You will also find information concerning the participants in the EU-US Privacy Shield here: www.privacyshield.gov/list.

5. YOUR RIGHTS IN CONNECTION WITH THE PROCESSING OF PERSONAL DATA

You have specific rights in accordance with the applicable provisions of data protection law -- particularly the EU GDPR and the corresponding provisions under the applicable law of a member state of the European Union:

• You can demand information concerning the stored personal data relating to you.
• You can demand the rectification of incorrect personal data
• You can demand the erasure or restriction of processing of your personal data and
• You can demand to receive the personal data which you have provided in a structured, commonly used, and machine-readable format.

If you have given us consent, you also have the right to withdraw your consent with future effect at any time.
You can assert the aforementioned rights against us, for example, by means of a communication using one of the contact methods indicated at the end of this data protection declaration.

You also have the opportunity to contact the supervisory authority concerned in the event of complaints concerning the handling of your personal data.

6. YOUR RIGHT TO OBJECT

You have the right to object to the processing of personal data relating to you that takes place on the basis of Article 6 (1) letter e or f of the EU GDPR at any time for reasons arising from your particular situation.
Ensinger GmbH will no longer process the personal data relating to you, unless it can prove compelling reasons worthy of protection for the processing that outweigh your interests, rights and freedoms, or unless the processing is used for asserting, exercising or defending legal claims.
In the context of the use of information society services -- and notwithstanding Directive 2002/58/EC -- you have the opportunity to exercise your right of objection by means of an automated procedure in which technical specifications are used.

Cookies
In your respective browser, you can deactivate the storage of cookies under Extras/Internet options, limit it to specific websites, or set your browser to notify you as soon as a cookie is sent. If you want, you can delete the cookies at any time. Please note, however, that a limited presentation of the website and limited user guidance must be expected in the event of deactivation or erasure.

Google Analytics
You can prevent Google from collecting the data generated by cookies and related to your use of the website (incl. your IP address) and from processing such data by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de
For more information, please visit http://tools.google.com/dlpage/gaoptout or www.google.com/intl/de/analytics/privacyoverview.html (general information on Google Analytics and data protection). We would like to point out that Google Analytics has been extended on our website to include the “gat._anonymizeIp();” code, in order to guarantee anonymised capture of IP addresses (so-called IP masking).
As an alternative to the browser plugin, you may click on this link to prevent collection by Google Analytics on this website in the future. An opt-out cookie will be saved on your end device.

 

7. CONTACT INFORMATION

If you have further questions about our information, data protection, and how we process your personal data, you can also contact us directly at any time. We are also happy to help you at any time if you have information requests, suggestions, or complaints.

For the collection, processing, and use of your personal data, the following party is responsible (“Controller”):
Ensinger GmbH
Rudolf-Diesel-Strasse 8
71154 Nufringen
Germany

Ensinger GmbH has appointed an external data protection officer. He can be reached by mail at

Dr Christian Borchers
Datenschutz Süd GmbH
Wörthstrasse 15
97082 Würzburg
Germany
Tel. +49 931 304976 0
Fax +49 931 304976 10
and via email at

and at