Information for customers, suppliers and other business partners in accordance with article 13 EU General Data Protection Regulation
Thank you for your interest in our company and your visit to our website or mobile application. We take the protection of your personal data very seriously.
We process all your personal data such as your name, address, e-mail address and telephone number in accordance with the EU General Data Protection Regulation (GDPR) and other applicable data protection legislation in Germany.
With this data protection policy, we want to inform you of the purpose, nature and scope of the personal data we collect, store, process and inform you about our data protection and security measures. We also wish to inform you of your rights under the new EU regulation.
1. Name and address of data controller
Data controller in accordance with EU General Data Protection Regulation and other data protection legislation that applies in EU Member States:
2. Persons covered by our data protection policy
This data protection policy applies to all persons who are customers, suppliers or other business partners of Pollmeier Massivholz GmbH & Co.KG, as well as their employees. This document explains how Pollmeier Massivholz GmbH & Co.KG, Pferdsdorfer Weg 6, 99831 Creuzburg (hereafter referred to as “Pollmeier” or “we”) and companies owned by or affiliated with Pollmeier handle and process personal data obtained in the course of their normal business.
3. Personal data
Provided that we are entitled to do so by law, Pollmeier collects and processes the following personal data:
- Title / job title / gender / profession
- Work contact details (address, telephone, fax, e-mail address)
- Name of employer
- Communicated content (texts of e-mails, minutes of meetings, business correspondence, etc.)
- Contract details
- Offered or performed services / offered or delivered products
- Invoice and payment details
- Information regarding business relationship
- Information on planned construction projects, including parties involved in project
4. Purpose of data collection and processing
We only process your personal data for the purpose of establishing a customer relationship with you. Your details are thus processed for:
- the handling of your queries and complaints
- the correction of your personal data, for instance if contact details have changed
- the performance of pre-contract tasks
- the fulfilment of contracts entered into with you
- the processing of invoices
- general communication with you
- the documentation of our business relationship
- the distribution of marketing material, product information and special offer alerts
- the safeguarding of our IT systems
5. Legal bases for data processing
Your personal data is collected, processed and stored according to the GDPR and the applicable national data protection regulations.
The main legal bases are outlined below. Please note however that this information is not exhaustive and only covers the main legal provisions.
Consent (article 6 paragraph 1 lit. a GDPR)
Certain personal data is only processed with your explicit prior consent, for instance where you entitled us to use it to send you marketing material or information on products and special offers. You have the right to withdraw your consent at any time.
Performance of a contract with you (article 6 paragraph 1 lit. b GDPR)
Certain personal data is required by us in order to fulfil a contract or perform certain pre-contract tasks. We only process your personal data as far as this is required in order to meet our contractual obligations.
Compliance with a legal obligation (article 6 paragraph 1 lit. c GDPR)
Pollmeier must meet a range of statutory obligations. These include the processing of certain personal data, for instance in connection with statutory filing requirements, tax law or customs regulations.
Protection of legitimate interests of Pollmeier or third parties (article 6 paragraph 1 lit. f GDPR)
Pollmeier is entitled to process certain personal data in order to pursue its own legitimate interests or to protect such interests of third parties. This is however only done, if your interests do not take precedence over those of Pollmeier.
6. Authorisation of access to your personal data
Pollmeier ensures that your personal data is only accessible to a limited number of specifically authorised persons who need your data for the purposes outlined above.
We do not make your personal data available to third parties, unless this is necessary for the fulfilment of a contract or where we have received your consent.
For the processing of your queries and certain services, we might contract external data processors. These service providers are contractually obliged to adhere to all applicable data protection regulations, and only process your personal data according to our instructions.
Such service providers are contract data processors or other companies that provide services such as:
- Technical support and maintenance services for our IT infrastructure and applications
- Data destruction
- Payment processing and collection procedures
- Customer management
- Letter shops
- Marketing (e.g. newsletter)
- Website management
- Multimedia technology
- Funds transfer
- Procurement / purchasing
All data processing takes place in Germany or another EU Member State. Should personal data collected and processed by us be transferred to a third party based outside the European Economic Area (EEA), we take suitable measures to ensure that the requirements of the GDPR are met at all times, for instance by entering into contracts based on EU sample agreements, through Privacy Shield Certification (US), recognised codes of conduct or other certification mechanisms in accordance with article 42 GDPR.
7. Duration of data storage
In accordance with article 17 paragraph 1 lit. a GDPR, your personal data is routinely erased the moment it is no longer required for the fulfilment of a contract, and when the statutory filing period has elapsed.
Data that cannot be erased, for instance due to special filing obligations under commercial and tax law, open claims or limitations of statue, is blocked.
8. Automated individual decision-making
We do not use automated individual decision-making according to article 22 GDPR for the establishment and maintenance of business relationships. Should we decide to use such methods in individual cases, we will inform you in advance in accordance with the law.
9. Data security
Pollmeier has taken technical and organisational measures that are deemed suitable to protect your personal data against unauthorised and illegal access or disclosure. We have also put mechanisms in place that protect your data against inadvertent or unauthorised falsification, loss or destruction. These measures guarantee a data security level that is appropriate for the nature, scope and type of personal data we collect and the potential risks of illegal access and abuse.
We continually revise and improve our data security measures to keep them up to date.
10. Collection of personal data when visiting our websites
When visiting our website, we may collect certain technical data relating to users that their web browser automatically transmits to us when they access a website on the Internet or use an application on a mobile device.
This data is automatically recorded by our servers. This includes, but is not limited to, the IP address, browser type, browser language, the date and time of their visit, and Uniform Resource Locators or URLs (i.e., website addresses) they accessed before visiting our websites or after.
Depending on the location of the user and the data involved in each case, such technical data may be personal data.
Consent Tool – Access to your settings
To obtain and manage the consent you have given, we use the Usercentrics Consent Management Platform on our websites as a consent management tool as part of Analytics activities. Through this tool, you have the opportunity to decide on the setting of cookies on our websites according to your specifications. You are able to view information about the cookies used at any time via the settings options of the tool, as well as to change the decision made there and to subsequently grant or revoke your consent.
In order to make visiting our website more attractive and to enable the use of certain functions, we use so-called “cookies” on some pages. These are small text files that are stored on your computer. After the end of the browser session, most of the cookies we use are deleted from your hard drive (“session cookies”). The so-called “permanent cookies”, on the other hand, remain on your computer and thus enable us to recognize you on your next visit. Our partner companies are not permitted to collect, process or use personal data via our website using cookies.
You have the option of preventing cookies from being stored on your computer by making the appropriate browser settings, although this may restrict the range of functions offered by our website.
Analytics and cookies
You can prevent the collection by Google Analytics by clicking on the following link. An opt-out cookie will be set that prevents future collection of your data when visiting this website: Disable Google Analytics
We have embedded YouTube videos of the provider YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA (YouTube), represented by Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland (Google), in our online offer, which are stored on http://www.YouTube.com and can be played directly from our website to improve the user-friendliness and presentation of various contents (e.g. our activities). We have embedded our videos in the so-called “extended data protection mode” to provide you with a data protection-friendly view. When you play the videos, a connection to a YouTube server is established. This transmits to YouTube which of our Internet pages you have visited. If you are logged in to YouTube as a member, YouTube assigns this information to your personal user account. When using the service, such as clicking on the start button of a video, this information is also assigned to your user account. You can prevent this assignment by logging out of your YouTube user account as well as other user accounts of the companies YouTube and Google before using our website and deleting the corresponding cookies of the companies.
Further information on data processing and notes on data protection by YouTube can be found at https://policies.google.com/privacy?hl=de&gl=de. Google also processes your personal data in the USA. More about this:
On this website we use the offer of Google Maps. This allows us to show you interactive maps directly in the website and enables you to use the map function comfortably.
By visiting the website, Google receives the information that you have called up the corresponding sub-page of our website. This occurs regardless of whether Google provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.
We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on our websites. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). The purpose of reCAPTCHA is to verify whether data entry on our websites (e.g. in a contact form) is made by a human or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent by the website visitor on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google.
The reCAPTCHA analyses run entirely in the background. Website visitors are not made aware that an analysis is taking place.
The data processing is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in protecting its web offers from abusive automated spying and from SPAM.
Google Tag Manager
We use “Google Tag Manager” on our website, a service provided by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as “Google”). Google Tag Manager can be used to set up and manage tags. Tags are code used to measure visitor traffic and visitor behavior.
The Google Tag Manager is a cookie-less domain and does not collect any personal data itself. The Google Tag Manager provides for the triggering of other tags, which in turn may collect data, but the service does not access this data.
If a deactivation has been made at the domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager.
Appearances in social media channels
We maintain presences in social media channels (currently: facebook, Instagram, linkedin and twitter). Insofar as we have control over the processing of your data, we ensure that the applicable data protection provisions are complied with.
Responsible for the company presences in terms of the DSGVO as well as other data protection regulations are, in addition to us:
facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland).
Instagram (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
LnkedIn (LinkedIn Ireland Unlimited Company, Gardner House Wilton Place, Dublin 2, Ireland)
Pinterest (Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland)
YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland)
We would like to point out that in doing so, your data may be processed outside the area of the European Union. The legal basis for the processing of your personal data by us is Art. 6 (1) lit. f DSGVO. Our legitimate interest is to provide effective information and communication.
Here you can find more detailed information on data protection with regard to our company presences in social media channels:
The personal data collected when you register for the newsletter with your consent pursuant to Art. 6 (1) a DSGVO will only be used for communication with you (e.g. e-mails to confirm your registration) and for sending the newsletter.
You can object to the use of your email address and to the processing and use of the data to create usage profiles at any time by sending a message to firstname.lastname@example.org or via the unsubscribe link of the newsletter.
11. Your rights
If you have any queries or concerns regarding the handling of your personal data by Pollmeier, please contact our Data Protection Officer. He and his team would be delighted to answer your questions and address your concerns.
Contact details of Data Protection Officer of Pollmeier:
As a data subject, you have a number of rights with regard to how your personal data collected and processed by Pollmeier.
By law, you have the following rights:
- Right of information about data relating to you (right of information)
- Right to request that incorrect data is corrected and incomplete data is completed, taking into account the purpose for which the data is used (right of rectification)
and, if there are sound reasons and legal grounds:
- Right of deletion of personal data (right to being forgotten)
- Right to request that the processing of your personal data is restricted (right of limitation of processing)
- Right to request that your personal data made available to us is transferred to another data controller (right of data transfer)
- Right to object to the processing of your personal data (right of objection)
In addition, you are at all times entitled to lodge a complaint with the relevant data protection authorities.
12. Validity of data protection policy
This data protection policy came into force on 16/09/2022.