Privacy Policy

You can visit our web pages without providing any information about your person. Our website saves some personalized information as well as personal data about users. The law defines personal data as information about the personal and material circumstances of an identified or identifiable natural person (§ 3 Paragraph 1 Federal Data Protection Act). This includes, for example, the person’s name, address, email or telephone number. According to the prevailing view, the IP address assigned individually to each computer by a provider is also considered data that can be used to identify a person. Information that cannot be used to identify you (anonymized data) is not considered personal data, for example merely stating your age or gender without reference to your person.

Storage of data by our website/server data

Our website initially collects general information automatically (in other words, not by means of registration) that is not used as personal data, through server log files. By default, the web servers and statistics programs that we implement collect the following information, among other things:

language and version of the browser software
implemented operating system and its interface
hostname of the accessing computer (IP address)
date and time of the server request
time zone difference from Greenwich Mean Time (GMT)
access status/HTTP status code
volume of data transmitted in each case

This information is exclusively stored for the technical administration of our website. It is not shared with third parties.

Data collected from your provided information

Our website also actively collects information from you, for instance when you enter information into our contact form or subscribe to our newsletter. Naturally, this information is only used to provide the service that we are offering. The data is not transmitted to servers outside the EU.

The following provisions inform you about the type, scope and purpose of the provider’s collection, use and processing of personal data.

ZÜRN GmbH Co. KG
Bajuwarenring 19
82041 Oberhaching
T: +49 89 212396-0
info@zuern.com

We would like to point out that internet-based data transmission may be subject to security vulnerabilities, meaning that complete protection against access by third parties is not 100% guaranteed.

Storage

We only store your personal data after the end of the purpose for which the data was collected for as long as this is required by law (e.g. tax law). As soon as the storage purpose no longer applies, the personal data will be erased or blocked.

Purpose

In general, we use the personal data that you provide in order to respond to your inquiries, process your orders, execute contracts concluded with you, and provide you with access to specific information or offers.

Sharing your information

We will not share, sell, or otherwise market your personal data to third parties without your consent or notification.

You can prevent this use of your email address at any time by sending a message to the contact given below, without incurring any costs other than transmission costs at the basic rates.

Naturally, we will respect your wishes if you do not want to provide us with your personal data in order to support our customer relationship. If you do not wish to do this, you can send your consent or withdrawal of consent for the use of your personal data to the contact below at any time, with effect for the future.

Use for specific purposes

ZÜRN will only collect, process and use the personal data that you provide online for the specific purposes indicated to you, except where such collection, processing or use:

takes place for an additional purpose that is directly related to the original purpose for which the personal data was collected,
is necessary in order to prepare, negotiate and fulfill a contract with you,
is necessary on the basis of a legal obligation or an official or judicial order,
is necessary in order to establish or protect legal claims or in a defense against complaints,
serves to prevent misuse or other illegal activities, e.g. intentional attacks on IT systems, and to ensure data security.

Your rights (rights of the affected)

Access

You can request confirmation from us as to whether we are processing your personal data, if this is the case, you have the right to access this personal data as well as the additional information mentioned in Art. 15 GDPR.

Right to rectification

You have the right to obtain rectification of any incorrect personal data concerning you, and you can request the completion of any incomplete personal data pursuant to Art. 16 GDPR.

Right to erasure

You have the right to obtain from us the erasure of personal data concerning you without undue delay. We are obliged to delete this data immediately, in particular if one of the following reasons applies:

Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
You withdraw your consent on which the processing of your data was based and there is no other legal basis for the processing.
Your data has been processed unlawfully.

The right to erasure does not apply if your personal data is required in order to establish, exercise or defend our legal claims.

Right to restriction of processing

You have the right to demand that we restrict the processing of your personal data if

you contest the accuracy of the data and we must therefore verify its accuracy,
the processing is unlawful and you oppose the erasure and request the restriction of its use instead,
we no longer need the data, but you need it for the establishment, exercise or defence of legal claims,
you have objected to the processing of your data and it is not yet certain whether our legitimate reasons outweigh your reasons.

Right to data portability

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you have the right to transmit those data to another controller without hindrance from us, where the processing is based on consent or on a contract and the processing is carried out by automated means.

Right to withdraw consent

If the processing of your personal data is based on consent, you have the right to withdraw this consent at any time.

General and right to complain

The exercise of your above rights is generally free of charge for you. You have the right to lodge complaints directly with the supervisory authority responsible for us, the state data protection officer. The competent supervisory authority for data protection issues is the state data protection officer of the federal state in which our company is based. A list of data protection officers and their contact information can be found under the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Publication of job adverts/online job applications

Your application data will be collected and processed electronically by us for the purpose of handling the application process. If your application is followed by the conclusion of an employment contract, the data you have submitted may be stored by us in your personnel file for the purpose of the usual organisational and administrative process, in particular the implementation of the employment relationship, in compliance with the relevant legal regulations.

If your job application is rejected, the data you have submitted as part of the application process will be automatically deleted two months after notification of the rejection. This does not apply if longer storage is necessary due to legal requirements (e.g. the burden of proof under the General Equal Treatment Act) or if you have expressly consented to longer storage in our database of interested parties.

Newsletter

Our site offers you the option of subscribing to our newsletter. We use this newsletter to regularly inform you about our offerings, with your consent. In order to receive our newsletter, you must have a valid email address. We will verify the email address you provide to confirm that you are the owner of the email address and/or that the owner is authorized to receive the newsletter. When you subscribe to our newsletter, we will save your IP address as well as the date and time when you registered. This provides us with a safeguard in the event that a third party misuses your email address and subscribes to our newsletter without your knowledge. We do not collect any other data. The data collected in this way is exclusively used to deliver our newsletter. It is not shared with third parties. Data collected in this way is also not compared with any data collected by other components on our site.

To subscribe to the newsletter offered on our website, please register using our form. We are using what’s known as the double opt-in method here, meaning that once you’ve filled out the form you will be sent a confirmation e-mail asking you to confirm your registration. Your registration will not become effective until you have clicked on the activation link in the confirmation e-mail. We will only use the data you have provided us with to send you the newsletter, which may contain information or offers.

We use CleverReach to send out our newsletter. Your data will therefore be shared with die CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany. CleverReach is used to organise and analyse the sending of newsletters, among other things. The data you enter for the purpose of subscribing to the newsletter is stored on CleverReach’s servers in Germany. If you do not wish to be analysed by CleverReach, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message. E-mails sent with CleverReach contain a so-called tracking pixel for the purpose of analysis, which connects to the CleverReach servers when the e-mail is opened. In this way, it can be determined whether a newsletter message has been opened. We can also use CleverReach to determine whether and which links in the newsletter message have been clicked on. Optional links in the email can be set as tracking links, which can be used to count your clicks. The legal basis for data processing is Art. 6 para. 1 lit. a) GDPR. The recipient of the data is CleverReach GmbH & Co. KG. The data will not be transferred to third countries.

The data stored by us as part of your consent for the purpose of the newsletter will be stored by us until you unsubscribe from the newsletter and deleted from both our servers and the servers of CleverReach after you unsubscribe from the newsletter. Data stored by us for other purposes (e.g. e-mail addresses for the member area) remain unaffected by this. Your data will therefore be shared with CleverReach GmbH & Co. KG. CleverReach GmbH & Co. KG is prohibited from using your data for any purpose other than to send you our newsletter and is not permitted to forward or sell your data. CleverReach GmbH & Co. KG is a German certified newsletter software provider that has been carefully selected based on the requirements of the GDPR and the German Federal Data Protection Act (BDSG).

For more information, please refer to CleverReach’s data security information at: https://www.cleverreach.com/en-de/privacy-policy/ and https://www.cleverreach.com/en-de/data-security/ .

You can unsubscribe from the newsletter at any time and withdraw your consent with effect for the future. To do so, please click on the “Unsubscribe from newsletter” (“Vom Newsletter abmelden”) button in any newsletter you receive, or email us at info@zuern.com.

Contact via contact form

On our website, we offer you the opportunity to contact us by e-mail and via a contact form. Use of the contact form is voluntary, but we cannot provide it without your personal data. Mandatory information in the contact form is labelled as such, all other information is voluntary. We process the data provided exclusively for the purpose of responding to your enquiry. In this case, the information provided by the user will be stored and processed for the purpose of processing their enquiry. The data will not be passed on to third parties. It is not shared with third parties. Data collected in this way is also not compared with any data collected by other components on our site. The data you provide in this context (your e-mail address, possibly your name and telephone number) will be stored by us in order to answer your enquiry. We delete the data arising in this context after storage is no longer required, or restrict processing if there are statutory retention obligations. The legal basis for the aforementioned processing is Art. 6 para. 1 sentence 1 f GDPR.

Cookies

We use so-called cookies on our website to recognise multiple use of our website by the same user/internet connection owner. Cookies are small text files that your Internet browser stores on your computer. They are used to optimise our website and our offers. These are usually so-called “session cookies”, which are deleted again at the end of your visit.

However, some of these cookies provide information to recognise you automatically. This recognition is based on the IP address stored in the cookies. The information obtained in this way is used to optimise our services and make it easier for you to access our website.

You can prevent the installation of cookies by setting your browser accordingly; however, we would like to point out that in this case you may not be able to use all the functions of our website to their full extent.

To do this, please proceed as follows, depending on the browser you are using:

Microsoft Internet Explorer:

Select “Internet Options” from the “Tools” menu
Within the “Internet Options” menu, click on the “Privacy” tab.
Security settings for the various Internet zones can be made here. Here you can set whether and which cookies should be accepted or rejected.
Finally, the setting must be confirmed with “OK”.

Mozilla Firefox:

Select the “Settings” item in the “Extras” menu.
Now click on “Privacy & Security”.
In the “Privacy & Security” menu, use the drop-down menu to select the entry ” Use custom settings for history”.
You can now set whether cookies should be accepted or not. You can also specify here how long you want to keep these cookies and add any exceptions (websites) for this setting.
Finally, the setting must be confirmed with “OK”.

Google Chrome:

Click on the Chrome menu in the browser toolbar (top right).
Select the “Settings” item, scroll down to the “Show advanced settings” entry and click on this.
Click on “Content settings” under “Privacy”.
There you can make the following settings under “Cookies”:
– Delete cookies
– Block cookies by default
– Allow cookies by default
– Delete cookies and website data by default after closing the browser
– Allow exceptions for cookies from certain websites or domains
Then click on “Done” to save the settings.
The settings browser window can be closed.

Apple Safari:

Click on the cogwheel icon in the browser toolbar (top right).
Select the “Settings” item.”
In the menu that appears, select “Settings” again.
In the next window, please open the “Privacy” tab.
To deactivate cookies, please tick the “Always block” box under “Cookies and website data” section. If you want to enable cookies again, tick the “Always allow” box.
The settings must then be accepted.

If you do not use any of the above browsers, select the “Cookies” option in the “Help” function to find out where your cookies folder is stored.

Borlabs Cookie

This website uses Borlabs Cookie, which sets a technically necessary cookie (borlabs-cookie) to store your cookie consent. Borlabs Cookie does not process any personal data. The borlabs cookie stores the consent you gave when you entered the website. If you wish to revoke this consent, simply delete the cookie in your browser. When you re-enter/reload the website, you will be asked for your cookie consent again.

WPML

This website uses the language plugin WPML from OnTheGoSystems Limited, 22/F 3 Lockhart Road, Wanchai, Hong Kong, in order to be able to offer a German and English language version of the website. WPML uses cookies to determine the current language of the visitor, the last language visited and the language of users who have logged in. Information on the cookies used can be found at https://wpml.org/documentation/support/browser-cookies-stored-wpml.

Wordfence Security

This website uses the Wordfence Security plug-in to protect against viruses and malware and to defend against external attacks. The operator is Defiant, 800 5th Ave Ste 4100, Seattle, WA 98104, USA (https://www.defiant.com/). The plug-in uses cookies, for example, to recognise whether the visitor is a human or a robot. Here you can find information on which cookies are set: https://www.wordfence.com/help/general-data-protection-regulation/
IP addresses are stored on the Wordfence servers to protect against brute force and DDoS attacks or comment spam. IP addresses categorised as harmless are placed on a white list. Wordfence Security secures our website and thus protects website visitors from viruses and malware. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
The Live Traffic View option (real-time live traffic) of the plug-in is switched off. (https://www.wordfence.com/help/dashboard/options/?utm_source=pluginutm_medium=pluginUIutm_campaign=docsIcon#disable-cookies)
Terms of Use: https://www.wordfence.com/terms-of-use/
Privacy policy: https://www.wordfence.com/privacy-policy/
We have concluded an order processing contract with the above-mentioned operator Defiant and fully implement the strict requirements of the German data protection authorities when using Wordfence Security.

hcaptcha

The website uses the hCaptcha service from Intuition Machines, Inc, a US company based in Delaware (“IMI”), in the contact form. hCaptcha is used to check whether the data entered in the contact form was entered by a human or by a bot. To do this, hCaptcha analyses your behaviour on the website or on the basis of various characteristics. This analysis starts automatically as soon as you reach a part of the website or app with hCaptcha activated. For the analysis, hCaptcha evaluates various information (e.g. IP address, time spent by the visitor on the website or app or mouse movements made by the user). The data collected during the analysis is forwarded to IMI. The hCaptcha analysis in “invisible mode” can take place completely in the background. Website or app visitors are not informed that such an analysis is taking place if no challenge is displayed to the user. Data processing is carried out on the basis of Art. 6(1)(f) of the GDPR: The website operator has a legitimate interest in protecting its website from abusive automated crawling and spam. IMI acts as a “data processor” acting on behalf of its customers, as defined in the GDPR, and as a “service provider” within the meaning of the California Consumer Privacy Act (CCPA). For more information about hCaptcha and IMI’s privacy policy and terms of use, please visit the following links: https://hcaptcha.com/privacy/ and https://hcaptcha.com/terms .

SSL encryption

This site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as the enquiries you send to us as the site operator. This site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as the enquiries you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
If SSL encryption is activated, the data you send to us cannot be read by third parties.

Social Media

Use of social media plug-ins

Social media plug-ins from Facebook, Instagram, LinkedIn and the one-click solution with Shariff button are not (yet) used on our site. In the event of later use, we would like to point out the following: In the event that we do use such plug-ins at a later time, please note the following:

We currently use the following social media plug-ins: Facebook, Instagram, LinkedIn. We use the so-called one-click solution with the ‘Shariff’ button. This means that when you visit our website, no personal data is initially passed on to the providers of the plug-ins. You can recognise the provider of the plug-in by the marking on the box above its initial letter or the logo. We give you the option of communicating directly with the provider of the plug-in via the button. Only if you click on the marked field and thereby activate it will the plug-in provider receive the information that you have accessed the corresponding website of our online offering. In addition, the data mentioned under § 3 of this declaration will be transmitted. In the case of Facebook and Instagram, according to the respective providers in Germany, the IP address is anonymised immediately after collection. By activating the plug-in, your personal data is therefore transmitted to the respective plug-in provider and stored there (for US providers in the USA). Since the plug-in provider collects data in particular via cookies, we recommend that you delete all cookies via your browser’s security settings before clicking on the greyed-out box.
We have no influence on the data collected and data processing operations, nor are we aware of the full extent of data collection, the purposes of processing or the storage periods. We also have no information on the deletion of the data collected by the plug-in provider.
The plug-in provider stores the data collected about you as usage profiles and uses these for the purposes of advertising, market research and/or customising its website. Such an evaluation is carried out in particular (even for users who are not logged in) to display customised advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. We offer you the opportunity to interact with the social networks and other users via the plug-ins so that we can improve our offering and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 para. 1 sentence 1 lit. a GDPR.
Data is passed on regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, your data collected by us will be assigned directly to your existing account with the plug-in provider. If you click the activated button and, for example, link the page, the plug-in provider also saves this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this will prevent you from being assigned to your profile with the plug-in provider.
Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the data protection declarations of these providers provided below. There you will also find further information on your rights in this regard and setting options to protect your privacy.
Embedding is based on your consent in accordance with Art. 6 1 sentence 1 lit. a GDPR, provided that you have given your consent by clicking on the thumbnail image. Please note that the embedding of many social plugins means that your data will be processed outside the EU or EEA. In some countries, there is a risk that authorities may access the data for security and monitoring purposes without you being informed or being able to take legal action. If we use providers in unsafe third countries and you consent, the transfer to an unsafe third country is based on Art. 49 para. 1 lit. a GDPR.
If you no longer wish your personal data to be processed by the activated social plugins, you can prevent future processing by no longer clicking on the preview image or symbol of the respective social plugin.

Provider	Adequate level of data protection	Revocation of consent
LinkedIn (USA)	No adequate level of data protection. The transmission takes place on the basis of Art. 49 para. 1 lit a GDPR.	If you have clicked on a thumbnail, the content of the third-party provider will be loaded immediately. If you do not want such reloading on other pages, please do not click on the preview images.
Facebook (USA)	No adequate level of data protection. The transmission takes place on the basis of Art. 49 1 lit. a GDPR.	If you have clicked on a thumbnail, the content of the third-party provider will be loaded immediately. If you do not want such reloading on other pages, please do not click on the preview images.
Instragram (USA)	No adequate level of data protection. The transmission takes place on the basis of Art. 49 1 lit. a GDPR.	If you have clicked on a thumbnail, the content of the third-party provider will be loaded immediately. If you do not want such reloading on other pages, please do not click on the preview images.

Addresses of the respective plug-in providers and URL with their data protection notices:
a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php;
further information on data collection:
http://www.facebook.com/help/186325668085084,
http://www.facebook.com/about/privacy/your-info-on-other#applications
and
http://www.facebook.com/about/privacy/your-info#everyoneinfo.
Facebook has submitted to the EU-US Privacy Shield,
https://www.privacyshield.gov/EU-US-Framework.
b) Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) –
http://instagram.com/about/legal/privacy/.

c) LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA https://de.linkedin.com/legal/privacy-policy? https://www.linkedin.com/legal/professional-community-policies https://www.linkedin.com/legal/cookie-policy https://www.linkedin.com/legal/copyright-policy https://www.linkedin.com/legal/california-privacy-disclosure

AddThis bookmarking

AddThis plug-ins are not (yet) used on our web site. Before the AddThis plug-ins are used, standard data protection clauses are concluded with AddThis. In the event that we do use such plug-ins at a later time, please note the following:

Our websites also contain AddThis plug-ins. These plug-ins allow you to set bookmarks or share interesting content with other users. We offer you the opportunity to interact with the social networks and other users via the plug-ins so that we can improve our offering and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 para. 1 sentence 1 lit. a GDPR.
Via these plug-ins, your Internet browser establishes a direct connection with the AddThis servers and, if applicable, the selected social network or bookmarking service. The recipients receive the information that you have accessed the corresponding website of our online offer and the data mentioned under § 3 of this declaration. This information is processed on the AddThis servers in the USA. If you send content on our website to social networks or bookmarking services, a connection may be established between your visit to our website and your user profile on the relevant network. We have no influence on the data collected and data processing operations, nor are we aware of the full extent of data collection, the purposes of processing or the storage periods. We also have no information on the deletion of the data collected by the plug-in provider.
The plug-in provider stores this data as usage profiles and uses it for the purposes of advertising, market research and/or customised design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide customised advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right.
If you do not wish to participate in this procedure, you can object to the collection and storage of data at any time with effect for the future by setting an opt-out cookie: http://www.addthis.com/privacy/opt-out. Alternatively, you can set your browser to prevent the setting of cookies.
Further information on the purpose and scope of data collection and its processing by the plug-in provider as well as further information on your rights in this regard and setting options to protect your privacy can be obtained from: AddThis LLC, 1595 Spring Hill Road, Sweet 300, Vienna, VA 22182, USA, www.addthis.com/privacy.
Embedding is based on your consent in accordance with Art. 6 1 sentence 1 lit. a GDPR, provided that you have given your consent by clicking on the thumbnail image. Please note that the embedding of many videos means that your data will be processed outside the EU or EEA. In some countries, there is a risk that authorities may access the data for security and monitoring purposes without you being informed or being able to take legal action. If we use providers in unsafe third countries and you consent, the transfer to an unsafe third country is based on Art. 49 para. 1 lit. a GDPR.

Provider	Adequate level of data protection	Withdrawal of consent
AddThis Bookmarking	No adequate level of data protection. The transmission takes place on the basis of Art. 49 1 lit. a GDPR.	If you have clicked on a thumbnail, the content of the third-party provider will be loaded immediately. If you do not want such reloading on other pages, please do not click on the preview images.

Integration of YouTube videos

The integration of YouTube videos is not (yet) used on our site. In the event that we do use such plug-ins at a later time, please note the following:

We have integrated YouTube videos into our online offering, which are stored on http://www.youtube.com and can be played directly from our website. These are all integrated in “extended data protection mode”, i.e. no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transmitted. We have no influence on this data transfer.
By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under § 3 of this declaration will be transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or customising its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide customised advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.
Embedding is based on your consent in accordance with Art. 6 1 sentence 1 lit. a GDPR, provided that you have given your consent by clicking on the thumbnail image. Please note that the embedding of many videos means that your data will be processed outside the EU or EEA. In some countries, there is a risk that authorities may access the data for security and monitoring purposes without you being informed or being able to take legal action. If we use providers in unsafe third countries and you consent, the transfer to an unsafe third country is based on Art. 49 para. 1 lit. a GDPR.

Provider	Adequate level of data protection	Withdrawal of consent
YouTube / Google (USA)	No adequate level of data protection. The transmission takes place on the basis of Art. 49 1 lit. a GDPR.	If you have clicked on a thumbnail, the content of the third-party provider will be loaded immediately. If you do not want such reloading on other pages, please do not click on the preview images.

Data protection officer

To contact us, make enquiries regarding data protection, revocation, etc., you are welcome to contact us using the contact options below. Controller within the meaning of the GDPR:

ZÜRN GmbH Co KG
Data Protection Officer
Bajuwarenring 19
82041 Oberhaching

Telefon: +49 89 212396-0
E-mail: privacy@zuern.com

Contact details

ZÜRN GmbH Co KG
Data Protection Officer
Bajuwarenring 19
82041 Oberhaching