Privacy Statement

The CTP GmbH, Saalfelder Str. 35 h, 07338 Leutenberg, is the operator of the website www.bluechemgb.com and would therefore like to inform you of the following privacy policy regarding the extent to which data is collected when using our website and for what purpose this data is used.

Furthermore, CTP GmbH would like to point out which rights you are entitled to in this context. Please note: This Privacy Policy applies solely to the www.bluechemgb.com site, including any subpages or subdomains (such as kmc.bluechemgroup.com). At www.bluechemgb.com you have the opportunity to switch to other websites. Each of these pages has its own data protection declarations, which are available on the respective pages.

Careful handling of your personal data is a top priority at CTP GmbH. We adhere to the statutory provisions of the General Data Protection Regulation (GDPR) as well as to the associated national regulations.

When you visit our website, for the purpose of system security, web servers store, by default and temporarily, the connection data of the requesting computer, the sub-pages you visit, the date and duration of the visit, the recognition data of the browser and OS type and the website from which you visit us.

This record consists of:

• the page from which the file was requested,
• the name of the file,
• the date and time of the query,
• the amount of data transferred,
• the access status (file transfer, file not found),
• the description of the type of web browser used and
• the IP address of the requesting computer anonymized (shortened by the last three digits).

This data is stored anonymously. The creation of personal user profiles is thus excluded. This data will be deleted or anonymized after the connection has ended.

In addition, we collect personal information from you in other cases:

• when contacting us via e-mail or contact forms
• when using the protected areas, My Account ‘in the Online Shop
• when subscribing to our newsletter / press releases / digital communications
• by the software used for website tracking
• to secure our web server and to ensure the functionality of our online services
• in the order processing via our online shops and
• in the application process.

The processing of personal data is exclusively marked (purpose limitation principle). We also regularly review our data-processing practices to ensure that we process as little personal information as possible (data minimization principle).

Below you will find the details of the responsible person i.S.v. Art. 4 No. 17 GDPR:

Personal data is any information that relates to an identified or identifiable natural person. Identifiable is a natural person who can be identified directly or indirectly, in particular by association with an identifier such as a name. Personal data includes information such as: For example, your name, address, phone number, and birth date (if applicable). Statistical information that cannot be directly or indirectly linked to you – such as: Eg the popularity of individual websites of our website or the number of users of a website – are not personal data.

Our website is not intended for minors and we do not knowingly collect personal information from minors.

If persons under the age of 16 transfer personal data to us, this is only permitted if the parent or guardian has consented or consented to the adolescent’s consent. In accordance with Art. 8 para. 2 GDPR, the contact details of the legal guardian must be provided to us in order to convince us of the consent or consent of the legal guardian. This data and the data of the minor will then be processed in accordance with this Privacy Policy.

If we find that a minor under the age of 16 has sent us personal information without the parent’s consent or consent of the minor, we will promptly delete the information.

The processing of your personal data takes place for the following purposes on the basis of the following legal bases:

• Contract initiation pursuant to Art. 6 para. 1 lit. a) and b) GDPR
• Contract execution in accordance with Art. 6 para. 1 lit. b) GDPR
• Customer management in accordance with Art. 6 para. 1 lit. b) and c) GDPR
• Communication and data exchange according to Art. 6 para. 1 lit. a), b), c), f) GDPR
• External presentation and advertising in accordance with Art. 6 para. 1 lit. f) GDPR
• Implementation of declarations of consent in accordance with Art. 6 para. 1 lit. a) GDPR
• Ensuring the proper operation of a data processing system in accordance with Art. 6 para. 1 lit. c) and f) GDPR
• Applicant selection procedure in the context of personnel and resource management on the basis of Art. 6 para. 1 lit. a) GDPR.

We store personal data within the scope of statutory provisions or your consent.

To determine the concrete storage period, we use the following criteria:

• Statutory storage obligations, for example according to AO and HGB
• Presence of consent, e.g. your consent or revocation to the newsletter
• Duration of a prize game and award ceremony
• Contractual retention obligations, for example, in order to display past orders in the context of a customer account
• Existence of a contractual relationship, e.g. last activity, if there is no continuing obligation
• Discontinuation of the purpose of data collection and data storage, e.g. termination of an applicant selection process in the context of our application process
• Technological and forensic requirements, for example to ward off attacks and persecution.

7.1. Right to information and data portability

You have the right to information about your personal data processed by us in accordance with Art. 15 GDPR at any time. If the data processing is based on your agreement or in accordance with Art. 6 (1) (b) GDPR, you may request, pursuant to Art. 20 para. 1 GDPR, the personal data stored about you in a structured, common and machine-readable format or to have them transferred to a system of a third party. You are therefore entitled to direct forwarding of your data.

7.2. Right to rectification, restriction and cancellation

Furthermore, in accordance with Art. 16 to 18 GDPR, you may require us to correct, restrict (block) or delete your personal data if the data has been processed incorrectly by us, if there is a reason for limiting further data processing, or Data processing has become unlawful for various reasons, or if its storage is inadmissible for other legal reasons. We point out that your right to cancellation may be limited by statutory retention periods.

7.3. right of appeal

If our data processing is based exclusively on our legitimate interest in accordance with Art. 6 (1) (f) GDPR, you can object to this processing in accordance with Art. 21 (1) GDPR. We will then cease processing your data unless we can demonstrate legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, pursuing or defending a legal claim.

7.4. Withdrawal

If you have allowed us to process your personal data by consent, you have a right of revocation in accordance with Art. 7 para. 3 GDPR with effect for the future.

7.5. Right to complain to the supervisory authority

You are free to form a complaint with a supervisory authority if you believe that our processing of your personal data violates the European General Data Protection Regulation or other national and international data protection laws, Art. 77 GDPR.

The contact details of our supervisory authority are:

Thuringian State Commissioner for Data Protection and Freedom of Information
PO Box 900455
99107 Erfurt

or

Häßlerstraße 8 (4th floor)
99096 Erfurt

7.6. contact details

To exercise your rights, you can send us an informal message to the following contact details. Likewise, please direct the revocation of your consent with the statement, which consent form you wish to revoke, to the following contact details:

8.1. Contact form via www.bluechemgroup.com/en/service/contact

Using the web form at www.bluechemgroup.com/en/service/contact we ask for the following data:

• Message
• E-mail address
• Surname
• Phone
• Country
• Company.

Data that you send us via the contact form will be processed for the purpose of communication and data exchange in accordance with Art. 6 para. 1 lit. a), b), c), f) GDPR. This data is only stored for as long as their processing is required for these purposes or until expiration of any subsequent retention periods.

8.2. Contact form via kmc.bluechemgroup.com/en/default/contact

Using the web form at kmc.bluechemgroup.com/en/default/contact we ask for the following data:

• E-mail address
• Name / Company
• Subject
• Message
• Telephone number.

Data that you send us via the contact form will be processed for the purpose of communication and data exchange in accordance with Art. 6 para. 1 lit. a), b), c), f) GDPR. This data is only stored for as long as their processing is required for these purposes or until expiration of any subsequent retention periods.

8.3. Contact forms Shops

About the web forms under

• https://www.pro-tec-shop.de/de/contacts/
• https://www.autoprofishop.de/de/contacts/
• https://www.mxforlife.com/en/contacts/

We ask for the following data:

• E-mail address
• Surname
• Subject
• Message
• Telephone number.

Data that you send us via the contact form will be processed for the purpose of communication and data exchange in accordance with Art. 6 para. 1 lit. a), b), c), f) GDPR. This data is only stored for as long as their processing is required for these purposes or until expiration of any subsequent retention periods.

8.4. Contact by e-mail

Data that you send us by e-mail for the purpose of contacting us will be used for the purposes of communication and data exchange in accordance with Art. 6 para. 1 lit. a), b), c), f) GDPR processed. This data is stored for as long as their processing is required for these purposes or until the expiration of any subsequent retention periods.

We offer you the possibility to set up a personal customer account. Before the first use, you must register once. For this we need the following information from you:

• First Name, Last Name
• E-mail address
• Password.

For the processing of orders in our online shops, we also require the following information from you:

• billing address (first name, last name, e-mail, company name, street, house number, zip code, city, country, state)
• delivery address (first name, last name, company name, street, house number, zip code, city, country, state),
• Payment data (PayPal data).

Your customer account will also automatically be assigned a customer number.
In addition, you can voluntarily add the following information to your customer account:

• Telephone number, fax number.

Data that you transmit to us during registration and ordering in the online shop is used for the following purposes on the basis of the following legal bases:

• Contract initiation pursuant to Art. 6 para. 1 lit. a) and b) GDPR, communication and data exchange pursuant to Art. 6 para. 1 lit. a), b), c), f) GDPR, ensuring proper operation of a data processing system pursuant to Art. 6 para. 1 lit. c) and f) GDPR:
  • Provision of the customer account.
  • Making your customer profile available on our website.
  • Use of our online shops.
  • Authentication of registered users.
• Contract execution in accordance with Art. 6 para. 1 lit. b) GDPR, customer management in accordance with Art. 6 para. 1 lit. b) GDPR, communication and data exchange pursuant to Art. 6 para. 1 lit. a), b), f) GDPR:
  • Delivery of deliveries.
  • Payment processing.
  • Queries relating to your customer account and / or posted items.
  • Information about changes to the terms and conditions or privacy notices.
  • Provision of a shopping list.
• External presentation and advertising in accordance with Art. 6 para. 1 lit. a) and f) GDPR:
  • Internal statistical market research.
  • Sending our newsletter, if explicitly ordered.
  • Sending product recommendations for our own similar offers, unless explicitly stated undesirable.
  • Sending information, if requested.
  • Sending postal advertising, unless explicitly stated undesirable.

As part of the use of our online shops, other personal and transaction-based data, for example, data on ordered compilations of shopping baskets and their possible delivery, the created shopping lists as well as data on orders are collected and stored. CTP GmbH will process these personal and transaction-based data on its own behalf in technical and logistical terms, Art. 6 para. 1 lit. b) and f) GDPR, so far as necessary for the performance of the desired services.

For orders with a value of more than 250 €, which are placed by legal persons (capital, partnership), a credit check carried out by us is done automatically with the help of “Creditreform (Verband der Vereine Creditreform e.V., Hellersbergstrasse 12, 41460 Neuss)”.

For the credit check on the following data to “Creditreform”:

• Company name
• Surname
• Street, house number, zip code and city
• Phone number.

This translation only applies to identity / credit checks and risk identification. To decide on the profitability of a credit insurance (Creditreform) and go beyond their personal payment goals (so called scoring). The calculation of the scoring is carried out on the basis of scientific-mathematical-statistical methods.

The following privacy policy of “Creditreform” can be found at: www.creditreform.de.

Electronic applications can be sent to us by e-mail at personal@bluechemgroup.com. It is assumed that the electronic application data is received by the HR department and that they fulfill a specific function, forwarding to a person in charge of handling the application. All participants receive their application documents with care and absolute confidentiality. The data processing is based on art. 6 para. 1 lit. a) GDPR. With the entries of the advertising data documents by you in the context of the application procedure too.

After completing the selection process, we will keep your application for 6 months and then delete it or destroy any copies if we have not made an employment contract with you. In the notification you can actively consent to the further storage of your documents. If you agree to keep your records, they will be stored with us for one year. Please note that applications that you send us by e-mail will be sent to us unencrypted.

We use your data, as described in more detail below, also for purposes of external presentation and advertising in accordance with Art. 6 para. 1 lit. a) and f) GDPR.

13.1. Newsletter

You have the opportunity to visit our website www.bluechemgroup.com/newsletter to view our digital communication. Through the digital communication you will be informed about current offers from the CTP GmbH. For the registration we need your e-mail address. You can tell us your name, but you do not have to. If you tell us your name, we will use it to speak to you personally. Afterwards you will receive an e-mail to the given e-mail address with the request to click on a link shown here to confirm the subscription to the newsletter. Only after your confirmation your e-mail address will be released for sending the newsletter (double-opt-in procedure).

As far as you have registered for the digital communication, you have submitted the following declaration of consent:

Yes, I would like to be informed by digital communication about current products, news and offers of CTP GmbH free of charge.

Optionally, you can also confirm:

I have read and agree to the privacy policy and the consent therein.

Of course, you can revoke your consent with effect for the future or contradict the further processing of your personal data for sending the newsletter at any time, by pressing, attached for this purpose, in the newsletter link “unsubscribe”.

13.2. Cookies and web tracking procedures

13.2.1. Cookies

The profiling is based on Art. 6 para. 1 lit. a) or f) GDPR.

In some areas of our website, we use so-called cookies, for example, to identify the preferences of the visitors and to be able to design the website accordingly. This allows easier navigation and a high degree of user-friendliness of a website. Cookies also help us identify particularly popular areas of our website. Cookies are small files that are stored on the hard disk of a visitor. They allow information to be kept for a certain period of time and to identify the visitor’s computer.

For better user guidance and individual performance we use permanent cookies. We also use so-called session cookies, which are automatically deleted when you close your browser. You can set your browser to inform you about the placement of cookies. So the use of cookies becomes transparent for you. If you completely exclude the use of cookies, you may not be able to use individual functions of our website. We use the following categories of cookies on our website:
Necessary cookies: These cookies are necessary for you to be able to navigate the web site and use its functions, for example when accessing password-protected areas. Without these cookies, we will not be able to provide you with certain services requested by you. We use essential cookies to uniquely identify registered users so that they will be recognized during their stay and when they visit the site again.

The following cookies are used by us – if you allow this and have not set one or more opt-out cookies – for a specific purpose:

Functionality / Personalization cookies: These cookies allow websites to remember past information about you (e.g. username, language, etc.) to provide optimized, visitor-centric features. For example, a web page can provide you with up-to-date information by storing your current location in a cookie. These cookies are also used to maintain settings that you make on the website (e.g. font or size, and other user-customizable options).

They also serve to provide you with requested services, such as when you want to watch a video. These cookies are not able to track your browsing activity on other websites. They do not collect any information about you that can be used for promotional purposes and cannot understand where you were on the Internet outside of our website. We therefore only use Functionality / Personalization cookies to recognize you when you revisit our website and to personalize content and save your settings.

13.2.2. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to and stored by Google on servers in the United States. However, if IP anonymization is activated on this website, your IP address will be shortened by Google beforehand within member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address sent by your browser as part of Google Analytics.

Data Recipient: Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. The information generated by the cookie about your use of this website is stored with us for the duration resulting from the intended purpose duration and then deleted. Session cookies are deleted directly after the session. Further cookies remain longer and expire after two years at the latest.

13.2.3. YouTube video embedded via iFrame

We use YouTube, a service provided by Google, to show you video content. To protect your privacy, we have activated the extended privacy mode. YouTube also uses cookies to collect information about visitors to its website. YouTube uses it to capture video statistics, prevent fraud, and improve usability. Calling a video usually also leads to a connection to the Google DoubleClick network. Starting the video could trigger further data processing, especially if you are already logged in to YouTube. We have no influence on that. For more information about privacy at YouTube, please see their privacy policy (http://www.youtube.com/t/privacy_at_youtube) Recipient of the data: Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

13.2.4. Social media plug-ins

We use social media buttons on our website (YouTube, Twitter and Facebook) from Facebook Inc., Twitter Inc., Google Inc. etc. (“Provider”). These social media buttons are not integrated as plug-ins via a so-called iFrame, but as links. By pressing the Social Media Buttons you will be forwarded directly to the page of the respective provider. For the adherence to the data protection regulations and for correctness, topicality as well as completeness of the information provided there for the data processing then the appropriate provider is responsible i.S.v. Art. 4 No. 17 GDPR.

Facebook

This website uses so-called social plug-ins from the social network facebook.com, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). They are i.d.R. recognizable by the Facebook logo. For an overview of Facebook social plug-ins, visit http://developers.facebook.com/plugins.

When opening this website, a connection is established between your browser and the Facebook servers. The content of the plug-in is transmitted by Facebook directly to your browser and incorporated by him into the website. Unfortunately, we therefore have no influence or knowledge about the amount of data Facebook uses for this plug-in.

By integrating the plug-ins, Facebook receives the information that a user has accessed the corresponding page. If you are logged in to Facebook, Facebook can assign the visit to your Facebook account. If you select the plug-ins (click on), the corresponding information is transmitted from your browser directly to Facebook and stored there. Even if you are not a member of Facebook, it is possible that Facebook will receive and store your IP address. According to Facebook, the IP address is stored in Germany only anonymously.

Further information on the purpose and scope of the data collection and the further processing and use of the data by Facebook along with information about rights and settings options can be found here: http://www.facebook.com/policy.php.

It is also possible to block Facebook social plug-ins with add-ons for your browser, for example with the “Facebook Blocker” or the add-on “AdBlock Plus” for Firefox.

Google+ button

This website uses the “+1” button on the Google Plus social network operated by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, United States (“Google”).

When this website is accessed, it will connect to Google’s servers. Since Google’s “+1” button is sent directly to the browser and is incorporated into the website by the browser, we have no influence on it and no knowledge of the extent to which Google collects data using the button. Google declares to the users that no personal data would be collected without a click on the button. Only with logged in members such data, among other things the IP address, would be collected and processed.

For more information about the purpose and scope of the data collection, its processing and use by Google, as well as their rights and privacy settings, users can visit Google here: http://www.google.com/intl/de/+/policy/+1button.html.

Twitter

This website contains the Twitter button (retweet button). This is offered by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. It is recognizable by the Twitter logo. With the button it is possible to share a post or a page of this website on Twitter or follow us on Twitter.

When you visit this website, you will be connected to the Twitter servers. The content of the Twitter buttons is transmitted by Twitter directly to the user’s browser. Therefore, we have no influence and no knowledge of the amount of data collected by Twitter via the button. According to current knowledge, only the IP address of the user and the URL of the respective website when the button is received, but not used for purposes other than the presentation of the button.

Further information can be found in the privacy policy of Twitter at http://twitter.com/privacy.

Further social media

We also use plug-ins from other social networks, which you can recognize by the corresponding symbols. This is z. E.g. linkedIn.com, WhatsApp, WeChat. If you click on a corresponding button, the desired information is transmitted directly to these companies or services and stored there. Their hints for dealing with the data protection can be found on their websites. To avoid communication with these networks, do not press these buttons when in doubt or do not log in or out there.

Foreign content

Third party content (e.g. YouTube videos or videos of other providers, Google maps, RSS feeds, etc.) may also be integrated on the website. The providers of this content store i.d.R. Cookies on the user’s computer. This can be prevented by appropriate settings of your browser, which, however, may mean that this content is not displayed correctly.

In addition, many (third party) providers store the IP address of the users in order to be able to send the corresponding content to the user’s browser. On the use of the IP address at the (third) provider, we have no influence.

Access to your personal data stored by us is limited to our employees and the service providers commissioned by us, who have to deal with these personal data based on their tasks. As far as third parties have access to your data, we have obtained from you the permission or there is here-for a legal basis.

We use service providers for the provision of services and for the processing of your data (including the hosting of your data in a secure data center, the delivery of ordered goods, the sending of letters or e-mails as well as the maintenance and analysis of databases, for the destruction of documents and files, so-called order processing according to Art. 28 GDPR). The service providers process the data exclusively on the instructions of us and have been obliged to comply with the applicable data protection regulations. All processors have been carefully selected and will only have access to your data required for the provision of the Services to the extent and for the period required, or to the extent to which you have consented to the processing and use of the data. As part of the web tracking process, the following recipients are added:

Google Inc. for Google Analytics, YouTube videos via iFrame

A data exchange within the group of companies to which we belong serves only for internal administrative purposes. By “group of companies” we mean affiliated companies within the meaning of Art. 4 no. 19 GDPR.

A transfer of personal data to third countries is only in the context of the use of Google Analytics on the basis of the adequacy decision of the EU Commission on the EU-US Privacy Shield under Art. 45 GDPR and in the context of activating the YouTube videos, if you have consented Art. 49 para. 1 lit. a GDPR.

The servers of some of the service providers we use are located in the US and other countries outside the European Union. Companies in these countries are subject to a data protection law that generally does not protect personal data to the same extent as is the case in the Member States of the European Union. If your data is processed in a country which does not have a recognized high level of data protection such as the European Union, this is done on the basis of the EU Commission’s decision on the EU-US Privacy Shield pursuant to Art. 45 GDPR or of the EU standard contract 2010 pursuant to Art. 46 para. 2 lit. c GDPR i. V. m. the decision of the European Commission dated 05.02.2010 (2010/87 / EU) or according to Art. 49 para. 1 lit. a GDPR.

In exceptional cases, we provide personal information to law enforcement and criminal investigation agencies. This happens due to appropriate legal obligations, e.g. B. from the Code of Criminal Procedure, the Tax Code, the Money Laundering Act or National Police laws.

We maintain various security measures i.S.v. Art. 32 GDPR (technical and organizational measures) for the protection of your personal data. For a secure transmission of the data that you send us, we offer you on our website an SSL / TLS encryption with the current encryption protocols TLS v1.1. and TLS v1.2. We point out that the comprehensive encryption of the transmission path also depends on your Internet browser. We therefore recommend that you keep your internet browser up-to-date so that the encryption according to TLS v1.1. or TLS v1.2 when you visit our website.

If you contact us by e-mail, we point out that the confidentiality of the information transmitted is not guaranteed. The content of the e-mails may be viewed by third parties. We therefore recommend that you send us confidential information by post.