Corporate

Privacy Policy

§ 1 – Information Regarding the Collection of Personal Data

  1. The following constitutes notice regarding the processing of personal data in connection with the use of this website. Personal data shall mean all data that can be directly or indirectly attributed to a specific natural person, including, without limitation, name, address, electronic mail addresses, and usage behaviour. This notice is intended to inform data subjects of our processing operations and to fulfil our statutory obligations, in particular those arising under the EU General Data Protection Regulation (GDPR).
  2. The Controller within the meaning of Art. 4(7) GDPR is PVA TePla AG, Im Westpark 10–12, 35435 Wettenberg, info@pvatepla.com (see Legal Notice). The Data Protection Officer may be contacted at Dataprotection@pvatepla.com.
  3. Upon contact via electronic mail or a contact form, the data communicated by the data subject (electronic mail address, and where applicable, name and telephone number) shall be stored for the purpose of responding to enquiries. Data arising in this context shall be deleted — where the enquiry is attributable to a contractual relationship — upon expiry of the applicable contractual retention period. Otherwise, such data shall be deleted upon cessation of the necessity for its storage, at the latest three (3) years after its creation upon expiry of the general statute of limitations, or its processing shall be restricted where statutory retention obligations apply.
  4. Where third-party service providers are engaged for individual functions of our services, or where personal data are intended to be used for promotional purposes, such service providers shall be selected and monitored with due diligence, and detailed information regarding the respective processing operations shall be provided hereinafter.
     

§ 2 – Rights of the Data Subject

(1) Data subjects are entitled to assert the following rights against the Controller with respect to their personal data:

  • Right of access
  • Right to rectification or erasure
  • Right to restriction of processing
  • Right to object to processing
  • Right to data portability
  • Right to object to direct marketing and right to withdraw consent

(2) Data subjects shall furthermore have the right to lodge a complaint with a competent data protection supervisory authority regarding the processing of their personal data by the Controller.
 

§ 3 – Processing of Personal Data Upon Visiting the Website

  1. In the context of purely informational use of the website — i.e., mere browsing without registration and without the communication of further information to the Controller — the personal data transmitted by the data subject's browser to our servers shall be processed. The data described hereinafter are technically required to display the website and to ensure its stability and security, and must therefore be processed accordingly. The legal basis is Art. 6(1)(1)(f) GDPR.
  2. The consent granted applies to the entire PVA TePla Group.
  3. For the purpose of tailoring communications to the interests and behaviour of the data subject and providing an optimally personalised experience, the Controller may analyse and combine additional personal data, which may include the following categories:
    • Name
    • Electronic mail address
    • Postal address
    • Gender
    • Telephone number
    • Data provided by the data subject via social networks
    • IP address
    • Cookies
    • Information clicked by the data subject
    • Location data
    • Websites visited by the data subject
  4. The provision of such data is voluntary. However, in the absence thereof, the Controller shall be unable to provide the corresponding information to the data subject.
     

§ 4 – Disclosure of Data for Marketing Purposes to Entities within the PVA TePla Group

  1. To the extent necessary for the attainment of the aforementioned purposes, the personal data referred to above shall be transferred between entities within the PVA TePla Group.
  2. The legal basis for the transfer and further processing by entities within the PVA TePla Group is the consent granted by the data subject pursuant to Art. 6(1)(a) GDPR.
  3. Where personal data are transferred to entities within the PVA TePla Group or to third-party recipients outside the European Union or the European Economic Area, such transfers shall be carried out exclusively in compliance with the requirements of the GDPR.
     

§ 5 – Disclosure of Data in Connection with the Use of Plug-ins and Tools on the Website

  1. Third-party content has been integrated into the website. Such content is loaded from the servers of the respective providers, causing the data subject's device to transmit certain technically necessary data, including the data subject's IP address, to these third-party providers. Said providers may use such data to trace browsing behaviour and may additionally process further technical information (including, inter alia, browser type and version, operating system used, the previously visited page, hostname of the accessing device, time of access, and further data relating to the use of the online service). Further information regarding the processing of personal data by third-party providers can be found in the respective privacy policies of those providers, to which reference is made hereinafter.
  2. The integration of third-party content is carried out on the basis of the Controller's legitimate interest in making the corresponding content and functionalities available to users and in operating the website on a commercially viable basis, pursuant to Art. 6(1)(f) GDPR.
  3. The services integrated by the Controller make use of cookies and similar technologies. The legal basis for the use of such cookies and similar technologies is the data subject's consent pursuant to Art. 6(1)(a) GDPR. This legal basis also covers the processing of personal data for analytical and optimisation purposes.
  4. The data subject may revoke consent at any time with prospective effect by making the corresponding changes in the cookie settings via the Cookie Settings function.
     

The following third-party content is integrated:

YouTube

  1. This website uses plugins from the YouTube service operated by Google LLC. The provider and operator is YouTube, LLC, located at 901 Cherry Ave., San Bruno, CA 94066, USA.
  2. When visiting one of our web pages that contains a YouTube plugin, a connection to YouTube's servers is automatically established. This informs the YouTube server which specific pages of our website have been accessed by the user.
  3. If the user is logged into their YouTube account while visiting our website, YouTube is able to directly associate their browsing behavior with their personal profile. This association can be prevented by logging out of the YouTube account before visiting our website.
  4. The integration of YouTube plugins is based on our legitimate interest in providing an appealing and user-friendly presentation of our online services, in accordance with Art. 6(1)(1)(f) of Regulation (EU) 2016/679 (General Data Protection Regulation, hereinafter: GDPR). No overriding legitimate interest of the user that would preclude the present processing is apparent.
  5. For further information on how user data is handled, please refer to YouTube's Privacy Policy at: https://www.google.com/intl/en/policies/privacy

Google Web Fonts

  1. This website uses so-called Web Fonts provided by Google for the uniform display of typefaces. When a page is accessed, your browser loads the required Web Fonts into its browser cache in order to display texts and typefaces correctly.
  2. For this purpose, the browser you are using must establish a connection to Google's servers. As a result, Google obtains knowledge that our website was accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online services. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) of Regulation (EU) 2016/679 (General Data Protection Regulation, hereinafter: GDPR).
  3. If your browser does not support Web Fonts, a default font installed on your device will be used.
  4. Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's Privacy Policy: https://policies.google.com/privacy.

Google Maps

  1. This website uses the Google Maps mapping service via an API. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
  2. In order to use the functions of Google Maps, it is necessary to store your IP address. This information is generally transmitted to and stored on a Google server in the United States. The provider of this website has no influence over this data transmission.
  3. The use of Google Maps is in the interest of providing an appealing presentation of our online services and ensuring that the locations specified on our website are easy to find. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) of Regulation (EU) 2016/679 (General Data Protection Regulation, hereinafter: GDPR).
  4. For further information on how Google handles user data, please refer to Google's Privacy Policy: https://policies.google.com/privacy.

Vimeo

  1. We embed videos from Vimeo. Vimeo is a service provided by Vimeo.com, Inc., 330 West 34th Street, 5th Floor, New York, New York 10001, USA ("Vimeo").
  2. The processing of your personal data takes place in the United States. An adequacy decision by the European Commission exists pursuant to Art. 45(1) of Regulation (EU) 2016/679 (GDPR) for the EU–U.S. Data Privacy Framework, which serves as the legal basis for data transfers to certified companies and organizations in the United States. Vimeo is a company certified under the Data Privacy Framework.
  3. On some of the (sub-)pages of our website, we have integrated the Vimeo Player to enable you to access certain Vimeo videos. When you visit one of these pages, your browser transmits your personal data — such as your IP address and the websites or (sub-)pages through which you access the Vimeo Player — to servers provided by Vimeo.
  4. If you have a Vimeo account and are logged into it when accessing the relevant page, Vimeo will associate the transmitted information with your account.
  5. Vimeo's Privacy Policy can be found at: https://vimeo.com/legal/privacy. There you will also find information on the available settings for your Vimeo account. Please note that if you are logged into your Vimeo account, Vimeo may directly associate your browsing behavior with your personal profile.
     

§ 6 – Release of Audiovisual and Multimedia Content

  1. In certain circumstances, we may ask you to grant us permission to use specific content (e.g. photos, audio and video recordings, or posts) that you have published on social media platforms. In addition, we offer you the opportunity — either on our website or in connection with specific campaigns — to provide us with certain content directly (e.g. by uploading it to our website or via specific platforms).
  2. In such cases, we process your personal data, including the content you have submitted, for the purposes set out in the licensing terms you have accepted and within the scope agreed therein.
  3. The legal basis for this processing is Art. 6(1)(b) of Regulation (EU) 2016/679 (General Data Protection Regulation, hereinafter: GDPR). The processing is necessary for the performance of the contract concluded with you.
     

§ 7 – Disclosure of Data Upon Access to Social Media Accounts

The PVA TePla Group accesses the technical platforms and services of the following companies for the information services offered herein and may, on the basis of the data subject's consent pursuant to Art. 6(1)(a) GDPR, transmit certain data thereto:
 

1. Instagram and Facebook

  1. We aim to ensure that advertisements are only displayed to users who have an interest in our promotional content. For this purpose, we use services provided by Facebook/Instagram to show you personalized advertising. The operator of Facebook and Instagram for users outside the United States and Canada is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For users in the United States and Canada, the operator is Meta Platforms, Inc., 1601 South California Avenue, Palo Alto, CA 94304, USA.

  2. If you have a Facebook or Instagram profile, Meta Platforms Ireland Limited may match this data with information already held about you on Facebook/Instagram. Meta Platforms Ireland Limited may also combine this data with other data.

  3. Meta Platforms Ireland Limited may share your data within the Meta group of companies or with other third parties. This may involve the transfer of personal data to the United States — in particular to Meta Platforms, Inc. — and to third countries for which no adequacy decision by the European Commission exists. For data transfers to the United States, an adequacy decision by the European Commission exists pursuant to Art. 45(1) GDPR for the EU–U.S. Data Privacy Framework, which serves as the legal basis for data transfers to certified companies and organizations in the United States. Meta Platforms, Inc. is a company certified under the EU–U.S. Data Privacy Framework. In all other cases, Meta Platforms Ireland Limited will rely on the Standard Contractual Clauses approved by the European Commission pursuant to Art. 46(2)(c) GDPR to ensure an adequate level of data protection.

  4. General information on the further processing and use of your data by Meta Platforms Ireland Limited, as well as your privacy settings options on Facebook, can be found in Meta's Privacy Policy at https://www.facebook.com/about/privacy/ and on Instagram at https://privacycenter.instagram.com/policy as well as at https://www.facebook.com/legal/terms/information_about_page_insights_data.

2. TikTok

  1. For users in the European Economic Area, Switzerland, and the United Kingdom, TikTok is operated under joint controllership by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, and TikTok Information Technologies UK Limited, 4 Lindsey Street, Barbican, London, EC1A 9HP, United Kingdom (collectively "TikTok"). TikTok's Privacy Policy can be found at: www.tiktok.com/legal/page/eea/privacy-policy/en
  2. TikTok provides us with so-called TikTok Analytics for our TikTok profile. Using this analytics data, TikTok evaluates the behavior and interactions of users on our TikTok profile and makes this information available to us in non-personal form. With the help of TikTok Analytics, we are able to evaluate and filter our reach, follower development, profile and video views, and the number of interactions (likes, comments, video shares) within selected time periods. In addition, we can use the analytics data to apply individual filters for each of our videos — enabling us to evaluate and filter the number of views, interactions (likes, comments, video shares), average view duration, and the proportion of users who watched the entire video for specific time periods. This also includes information on where users discovered our videos (e.g. on our profile or in the For You Feed) and the region from which our users originate.
  3. TikTok Analytics also provides additional filters and evaluation options with regard to our followers. For specific time periods, we are able to evaluate where our followers come from, at what times they are active, and compare the development of our follower numbers.
  4. This information enables us to analyze and optimize the effectiveness of our TikTok activities. The processing carried out in this context serves our legitimate interests in optimizing our TikTok activities, pursuant to Art. 6(1)(f) of Regulation (EU) 2016/679 (General Data Protection Regulation, hereinafter: GDPR).

LinkedIn

  1. LinkedIn Ireland uses cookies and similar technologies. LinkedIn Ireland provides information on this at https://www.linkedin.com/legal/cookie-policy and in its Privacy Policy at https://www.linkedin.com/legal/privacy-policy
  2. We use the Page Insights feature. In this context, we receive non-personal information and analytics from LinkedIn Ireland regarding the use of our company page and your interactions with our posts (e.g. clicks on custom buttons in our posts). This information enables us to analyze and optimize the effectiveness of our LinkedIn activities. For this purpose, LinkedIn Ireland processes in particular data that you have made available to LinkedIn Ireland through the information provided in your profile. This includes, for example, data relating to job function, country, industry, professional seniority, company size, and employment status. In addition, LinkedIn Ireland will process information as to whether you are a follower of our LinkedIn company page. We are able to filter this information according to the demographic criteria mentioned above.
  3. We are also jointly responsible with LinkedIn Ireland for the processing of Page Insights data when our LinkedIn company page is visited. For this purpose, we have entered into a joint controllership agreement with LinkedIn Ireland, which can be accessed here: https://legal.linkedin.com/pages-joint-controller-addendum
    In this agreement, LinkedIn Ireland undertakes, among other things, to assume primary responsibility under the GDPR for the processing of Page Insights data and to fulfill all obligations under the GDPR with respect to the processing of Page Insights data

  4. The processing serves our legitimate commercial interests in optimizing and tailoring our LinkedIn company page to the needs of our target audience, pursuant to Art. 6(1)(f) of Regulation (EU) 2016/679 (General Data Protection Regulation, hereinafter: GDPR).

     

§ 8 – Newsletter Tracking

  1. Where the data subject wishes to subscribe to the newsletter offered on the website, an electronic mail address is required, together with information enabling verification that the data subject is the holder of the specified electronic mail address and consents to receipt of the newsletter. No additional data shall be collected, or shall be collected on a voluntary basis only. Such data shall be used exclusively for the dispatch of requested information and shall not be disclosed to third parties.
  2. The processing of data entered in the newsletter subscription form is carried out exclusively on the basis of the data subject's consent pursuant to Art. 6(1)(a) GDPR. Consent to the storage of data, the electronic mail address, and their use for the dispatch of the newsletter may be revoked at any time, for example via the "unsubscribe" link contained in each newsletter. The lawfulness of processing operations carried out prior to revocation shall remain unaffected.
  3. Data stored for the purpose of newsletter subscription shall be retained until the data subject's cancellation of the subscription and deleted upon cancellation thereof. Data stored for other purposes shall remain unaffected.
     

§ 9 – Processing of Data from End Devices (Cookie Policy)

1. General Information Regarding the Use of Cookies

  1. In addition to the data mentioned above, we use technical tools for various functions when you visit our website, which may be stored on your end device. These technical tools are in particular cookies, but may also include other means. When accessing our website — and at any time thereafter — you have the choice of whether you wish to permit the use of individual or all additional functions in general. Changes can be made in your browser settings or via our Consent Manager. The following sections first describe the technical functions (2), before elaborating on your individual options by describing technically necessary functions (3) and functions that you may voluntarily enable or disable (4).
  2. We use technical functions to provide you with additional services, primarily cookies. Cookies are text files or information stored in a database on your hard drive and associated with the browser you are using, so that certain information can be passed to the party that sets the cookie. Cookies cannot execute programs or transmit viruses to your computer; they serve primarily to make our online services faster and more user-friendly, and to recognize you upon a subsequent visit. You can view the cookies that have been set and their expiry periods at any time in your browser settings and delete them manually.
  3. Mandatory functions that are technically necessary for the display of the website: The technical structure of the website requires us to use technologies, in particular cookies. Without these technologies, our website cannot be displayed (fully correctly) or its support functions cannot be made available. These are generally transient cookies that are deleted at the end of your website visit, at the latest when you close your browser. You cannot opt out of these cookies if you wish to use our website. The individual cookies can be viewed in the Consent Manager. The legal basis for this processing is Art. 6(1)(1)(f) of Regulation (EU) 2016/679 (General Data Protection Regulation, hereinafter: GDPR).
  4. Optional functions: Various cookies or other technologies are only used with your prior consent, which you can provide via the Consent Manager. These functions are activated only in the event of your consent and may serve in particular to enable us to analyze and improve visits to our website, to facilitate your use across different browsers or end devices, to recognize you upon a visit, or to display advertisements (including, where applicable, interest-based advertising, measurement of the effectiveness of advertisements, or the display of targeted advertising). The legal basis for this processing is Art. 6(1)(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out prior to such withdrawal.

2. Usercentrics

  1. We verify your consent through the use of the so-called opt-in procedure with the help of the Consent Management Platform "Usercentrics". This means that we request active confirmation of your consent via email to the email address you have provided. The Consent Management Platform provides us with a tool for obtaining, storing, and documenting your consent with regard to tracking, cookies, and marketing tools.
  2. The legal basis for the processing of your personal data for the purpose of the opt-in procedure and for the purpose of evidencing your consent is Art. 6(1)(c) of Regulation (EU) 2016/679 (General Data Protection Regulation, hereinafter: GDPR) in conjunction with Art. 7(1)(3) GDPR. We are legally obligated to maintain evidence of your consent.

3. Google Ads Conversion

  1. The PVA TePla Group uses Google Ads Conversion to draw attention to its technologies and products on external websites through the use of advertising media (so-called Google Ads). The PVA TePla Group is able to determine, in relation to the data from its advertising campaigns, how successful individual advertising measures are. Its aim is to display advertisements that are relevant to you, to make its website more appealing to you, and to ensure a fair calculation of advertising costs.
  2. These advertising media are delivered by Google via so-called "ad servers". For this purpose, the PVA TePla Group uses ad server cookies, through which certain parameters for measuring success — such as ad impressions or clicks by users — can be tracked. If you reach our website via a Google ad, a cookie will be stored on your end device by Google Ads. These cookies generally expire after 30 days and are not intended to personally identify you. The data typically stored in connection with these cookies includes the unique cookie ID, the number of ad impressions per placement (frequency), the last impression (relevant for post-view conversions), and opt-out information (a marker indicating that the user no longer wishes to be targeted).
  3. These cookies enable Google to recognize your internet browser. If a user visits certain pages of an Ads customer's website and the cookie stored on their device has not yet expired, both Google and the customer can identify that the user clicked on the advertisement and was redirected to that page. Each Ads customer is assigned a different cookie. Cookies therefore cannot be tracked across the websites of different Ads customers. The PVA TePla Group itself does not collect or process any personal data in connection with the aforementioned advertising measures. It receives only statistical analyses from Google. Based on these analyses, it can identify which of the advertising measures employed are particularly effective. It does not receive any further data from the use of the advertising media and, in particular, cannot identify users on the basis of this information.
  4. Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. The PVA TePla Group has no influence over the scope and further use of the data collected by Google through the use of this tool and therefore informs you to the best of its knowledge as follows: Through the integration of Ads Conversion, Google receives the information that you have accessed the relevant part of its website or clicked on one of its advertisements. If you are registered with a Google service, Google may associate the visit with your account. Even if you are not registered with Google or are not logged in, it is possible that Google may obtain and store your IP address.

4. Google Analytics

  1. Our website uses the analytics service Google Analytics (now Google Analytics 4). This web analytics service is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as: "Google").
  2. This analytics tool operates on the basis of cookies. A cookie is a text file that is sent when a website is visited and temporarily stored on the hard drive of the user's device in order to enable an analysis of your use of the website. The information stored by the cookie is generally transmitted to and stored on a Google server in the United States.
  3. In the context of IP anonymization, your IP address is truncated by Google prior to transmission within a Member State of the European Union or another contracting state to the Agreement on the European Economic Area. On our behalf, Google will use the transmitted information to compile a report on the use of the website. The IP address transmitted in the context of Google Analytics will not be merged with any other data held by Google.
  4. If you wish to prevent the use of cookies, you may do so by adjusting the local settings of the internet browser installed on your computer (e.g. Safari, Internet Explorer, Opera, Firefox, etc.) — that is, the program used to open and display websites. You may also prevent the collection and processing of your data by Google's cookie by downloading and installing the browser plug-in provided by Google at the following link: https://tools.google.com/dlpage/gaoptout.
     

§ 10 – Objection or Revocation of Consent to the Processing of Data

  1. Where the data subject has granted consent to the processing of personal data, such consent may be revoked at any time. Revocation shall affect the permissibility of the processing of personal data from the date on which revocation is communicated to the Controller. The lawfulness of processing carried out prior to revocation shall remain unaffected.
  2. Where processing is based on the balancing of legitimate interests, the data subject may lodge an objection to the processing. This applies in particular where processing is not necessary for the performance of a contractual relationship with the data subject, as indicated in the descriptions of the respective functions hereinafter. In the event of such an objection, the data subject is requested to set forth the reasons why personal data should not be processed as carried out by the Controller. The Controller shall review the matter and shall either adjust or cease the data processing, or shall demonstrate compelling legitimate grounds for the continuation of processing.
  3. The data subject may object at any time to the processing of personal data for advertising and data analysis purposes. Objections to advertising may be submitted to the Controller using the contact details set forth above.
     

§ 11 – Provision of Data

  1. The user of this website bears full responsibility for all information submitted to PVA TePla AG, including its content and accuracy, as well as for ensuring that no third-party rights are infringed. The user agrees that PVA TePla AG may store this information and use it for statistical analyses or other specified business purposes, provided that such information does not constitute personal data beyond inventory data or usage data within the meaning of Sections 5 and 6 of the German Teleservices Data Protection Act (Teledienstedatenschutzgesetz – TDDSG).
  2. International Users This website is controlled, operated, and maintained by PVA TePla AG at its location in Wettenberg, Germany. It is intended for international use. However, PVA TePla AG makes no warranty that the information presented on this website is accurate worldwide, and in particular does not warrant that the products and services are available worldwide in the same presentation, size, and under the same terms and conditions. If you access this website and/or download any content, you are solely responsible for ensuring that such access and/or download complies with the local laws applicable in your country of residence.
  3. Applicable Law Any legal claims or proceedings arising in connection with this website or its use shall be governed by and construed in accordance with the laws of the Federal Republic of Germany, excluding the provisions of private international law and the uniform law on the international sale of goods under the Hague Convention on the Law Applicable to International Sales of Goods of 1 July 1964 and the United Nations Convention on Contracts for the International Sale of Goods (CISG) of 11 April 1980.
  4. Forward-Looking Statements This website may contain certain forward-looking statements based on the current assumptions and forecasts of the management of PVA TePla AG and its subsidiaries. Various known and unknown risks, uncertainties, and other factors may cause the actual results, financial position, development, or performance of the Company to differ materially from the assessments expressed herein. These factors include those described by PVA TePla AG in its published reports. Such reports are available on the PVA TePla AG website at www.pvatepla.com. The Company assumes no obligation to update such forward-looking statements or to adapt them to future events or developments.
Corporate