Privacy Policy

Privacy Policy in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), Articles 13 and 21 of the GDPR of PALUX Aktiengesellschaft

We from PALUX We are delighted by your interest in our company and our products and thank you for visiting our website.

The protection of personal data is of paramount importance to the management of PALUX Aktiengesellschaft, and therefore the protection of your privacy when using our websites is a matter of great concern to us.

Below, we would like to inform you about the collection and processing of personal data that may be associated with the use of our website and about the rights of data subjects in this context. Definitions of some of the terms used below can be found below.

I. Name and address of the data controller

The controller within the meaning of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature in connection with the use of our website https://www.palux.de and the associated social media presence is the

PALUX Aktiengesellschaft
Wilhelm-Frank-Straße 36
97980 Bad Mergentheim
Germany
Phone: +49 7931 55 0
Email: info@palux.de
Website: https://www.palux.de

This responsibility does not extend to the websites of other providers that may be linked to from PALUX websites.

II. Address of the Data Protection Officer

If you have any questions about this privacy policy, your rights to information, or our data protection practices on the web, please contact:

PALUX Aktiengesellschaft
Data protection officer
Wilhelm-Frank-Straße 36
97980 Bad Mergentheim
Phone: +49 7931 55 0
Email: Data protection officer@palux.de

III. Collection, processing and use of personal data by automated means in connection with the use of our website, as well as the type and purpose of the use

a. SSL encryption
For security reasons and to protect the transmission of personal data via our website, such as your inquiries to us, we use SSL encryption. You can recognize an encrypted connection by the fact that the browser's address bar changes from "http://" to "https://" and by the padlock symbol at the beginning of your browser's address bar. All data transmitted using this technology is encrypted before being sent to us. We also store the IP address of the requesting system to protect our users and ourselves from misuse.

b. Storage in log files
When you access our website, a number of general data and information are stored in log files on our web server. Specifically, the following may be recorded:

the IP address of the requesting device (PC, tablet, smartphone),
the operating system used by the calling system,
the browser type and version used
the website from which the calling system accesses our website (so-called referrer),
the other websites which are accessed by a calling system on our website,
the date and time of a visit to our website,
the Internet service provider of the calling system,
other comparable data and information that serve to avert danger in the event of attacks on our server systems and to prosecute in the event of misuse.

We do not link this stored data to the data subject. The processing of this log file data serves to ensure the correct delivery of our website content, to guarantee the functionality of our IT systems, and to improve the content of our websites and the associated advertising.

In the event of misuse or cyberattacks on our systems, we can provide the authorities with the information necessary for prosecution based on these log files.

Should we also use the log files to create user profiles, whether for advertising, market research, or to tailor our website to user needs, the IP addresses will be anonymized beforehand. Otherwise, the IP addresses will be deleted from the log files. As a result, you will always remain anonymous, even with the automatic collection and temporary storage of your IP address. The server log file data is always stored separately from personal data.

c. Use of cookies

We use cookies on the PALUX websites. Cookies are small files that allow us to store specific, device-related information on users' access devices (PCs, smartphones, etc.). They serve two purposes: firstly, to improve the user-friendliness of our websites and thus benefit you as a user (e.g., by storing login data); and secondly, to allow us to collect statistical data on website usage and to analyze how we can further improve our website.

Although cookies are only relevant under data protection law if they contain personal data, some internet users are generally skeptical of these small data packets. We would therefore like to point out that you can protect yourself against cookies being stored on your computer and/or view the contents of cookies. Modern browsers offer various functions for this purpose, which you can learn more about in your browser's help section. For example, you can simply configure your internet browser to automatically block all cookies or to warn you before a cookie is stored. However, please note that if you disable cookies, you may not be able to fully use all the functions of our website.

d. Contact form
Our website includes a contact form which can be used for electronic communication.

When you submit inquiries to PALUX Aktiengesellschaft via the contact form, the personal data you voluntarily provide, including your inquiry from the contact form, will be automatically stored by PALUX Aktiengesellschaft solely for the purpose of processing your inquiry and for any follow-up questions. To process your specific inquiry, we may transfer your personal data to one or more data processors or forward it to a sister company of PALUX Aktiengesellschaft, such as SERVATOR ServiceLine GmbH.

Alternatively, you can contact us at the following email address: info@palux.de Please submit your questions via email.

By registering on our website, the IP address of the data subject, the date, and the time of registration are also stored. This data is stored to prevent misuse of our services and to enable us to investigate criminal offenses if necessary. Therefore, storing this data is necessary to protect the data controller.

e. Seminar registration
Within our website there is a registration form for participation in the seminars we offer, which can be used for electronic registration.

When you register for a seminar with PALUX AG using the registration form, the personal data you voluntarily provide will be automatically stored solely for the purpose of processing your registration and sending you further information from PALUX AG. To register your application, we require the information in the fields marked as mandatory on the electronic registration form. If you do not wish to provide this information, we cannot process your registration and will not be able to allow you to participate in the seminars.

Alternatively, you can contact us at the following email address: info@palux.de Please submit your registration via email.

f. Analytics service Matomo (formerly Piwik)
Our website uses Matomo (formerly Piwik), a web analytics service. Matomo uses "cookies," which are text files placed on your computer, to help us analyze how users use the site. For this purpose, the usage information generated by the cookie (including your truncated IP address) is transmitted to our server and stored for analysis purposes, which helps us optimize our website. Your IP address is immediately anonymized during this process, so you remain anonymous to us. The information generated by the cookie about your use of this website will not be shared with third parties. You can prevent the use of cookies by selecting the appropriate settings in your browser software; however, please note that if you do this, you may not be able to use the full functionality of this website.

If you do not agree to the storage and analysis of this data from your visit, you can object to its storage and use at any time by clicking below. In this case, an opt-out cookie will be stored in your browser, which means that Matomo will no longer collect any session data from that point on. Please note: If you delete your cookies, the opt-out cookie will also be deleted and may need to be reactivated.

https://analytics.palux.de/index.php?module=CoreAdminHome&action=optOut&language=de&backgroundColor=&fontColor=&fontSize=&fontFamily=Source+Sans+Pro

g. Social Media Plugins
To increase the brand awareness of PALUX Aktiengesellschaft and to expand communication with our customers and prospective customers, we use social media plugins from the networks Facebook, Instagram, LinkedIn, Xing, kununu, YouTube and Pinterest on our website.
In accordance with the GDPR, we consider the advertising purpose pursued here to be a legitimate interest pursuant to Art. 6 I lit. f. Each provider is responsible for the data protection-compliant operation of the networks.

(1) Facebook plugins
Our website uses plugins from the social network Facebook, provided by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, is responsible for processing the personal data of individuals residing outside the USA or Canada.

You can recognize the Facebook plugins by the Facebook logo on our site.
An overview of the Facebook plugins can be found here: https://developers.facebook.com/docs/plugins/?locale=de_DE.

When you visit our website or any of its subpages, each time you access a page containing a Facebook plugin, the plugin establishes a direct connection between your browser and the Facebook server. Facebook then receives the information that you have visited our site with your IP address. Please note that as the website provider, we have no knowledge of the content of the transmitted data or how Facebook uses it. Further information on this, as well as on how you can control Facebook's collection of your personal data, can be found in Facebook's privacy policy at [link to Facebook's privacy policy]. https://de-de.facebook.com/about/privacy.

If you do not want Facebook to be able to associate your visit to our pages with your Facebook user account, please log out of your Facebook user account before visiting our pages.

(2) Instagram
Our website integrates features of the Instagram service. These features are provided by Instagram LLC, 1601 Willow Road, Menlo Park, CA 95025, USA. If you are logged into your Instagram account, you can link the content of our website to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to our website with your user account. Please note that as the website provider, we have no knowledge of the content of the transmitted data or its use by Instagram.

Further information can be found in Instagram's privacy policy at: https://instagram.com/about/legal/privacy/.

If you do not want Instagram to be able to associate your visit to our pages with your Instagram user account, please log out of your Instagram user account before visiting our pages.

(3) LinkedIn
Our website uses features of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Ct. Ste. 200 Mountain View, CA 94043, USA.

LinkedIn Ireland Unlimited Company, Privacy Policy Issues, Wilton Place, Dublin 2, Ireland, is responsible for data protection matters outside the USA.

Each time you access one of our pages that includes LinkedIn features, a connection is established with LinkedIn's servers. LinkedIn is informed that you have visited our website with your IP address. Please note that as the provider of these pages, we have no knowledge of the content of the transmitted data or how LinkedIn uses it.
For more information, see LinkedIn's Privacy Statement at: https://www.linkedin.com/legal/privacy-policy.

If you do not want LinkedIn to be able to associate your visit to our pages with your LinkedIn user account, please log out of your LinkedIn user account before visiting our pages.

(4) Xing / kununu
Our website uses features of the Xing network. This includes the review portal kununu. The provider is Xing SE, Dammtorstraße 29-32, 20354 Hamburg, Germany. Each time you access one of our pages that contains Xing/kununu features, a connection to Xing's servers is established. Please note that as the website provider, we have no knowledge of the content of the transmitted data or its use by Xing. Further information on data protection and the Xing Share button can be found in Xing's privacy policy at: https://www.xing.com/app/share?op=data_protection.

If you do not want Xing to be able to associate your visit to our pages with your Xing user account, please log out of your Xing user account before visiting our pages.

(5) YouTube
On our website, we use plugins (videos) from YouTube, LLC, 901 Cherry Ave., 94066 San Bruno, CA 94066, USA. For embedded videos, we use the "enhanced privacy mode" option provided by YouTube. When you visit one of our pages that contains an embedded YouTube video, a connection is established to the YouTube servers, and the content is displayed on our website by sending a message to your browser. According to YouTube, in "enhanced privacy mode," data is only transmitted to the YouTube server—specifically, information about which of our web pages you have visited—when you play and watch the video.

If you are logged into your YouTube account, you are allowing YouTube to directly associate your browsing behavior with your personal profile. Further information on how user data is handled can be found in YouTube's privacy policy at: https://www.google.de/intl/de/policies/privacy.

If you do not want YouTube to be able to associate your visit to our pages with your YouTube user account, please log out of your YouTube user account before visiting our pages.

(6) Pinterest
Our website uses plugins from the Pinterest network. This network is operated by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland. When you visit one of our pages that includes a Pinterest plugin, a connection is established to Pinterest's servers. This informs the Pinterest server which of our pages you have visited.

If you are logged into your Pinterest account, you are allowing Pinterest to directly associate your browsing behavior with your personal profile. Further information on how user data is handled can be found in Pinterest's privacy policy at: https://policy.pinterest.com/de/privacy-policy.

If you do not want Pinterest to be able to associate your visit to our pages with your Pinterest user account, please log out of your Pinterest user account before visiting our pages.

IV. Legal basis for processing

Article 6 I lit. a GDPR serves as the legal basis for processing operations where we obtain consent for a specific processing purpose.
If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, as is the case, for example, with processing operations necessary for the delivery of goods or the provision of other services or consideration, then the processing is based on Article 6(1)(b) GDPR. The same applies to such processing operations that are necessary for carrying out pre-contractual measures, such as in cases of inquiries about our services.
If we are subject to a legal obligation that requires the processing of personal data, such as for the fulfillment of tax obligations, the processing is based on Art. 6 I lit. c GDPR.
Ultimately, processing operations could be based on Article 6(1)(f) GDPR. This legal basis applies to processing operations not covered by any of the aforementioned legal bases if the processing is necessary for the purposes of the legitimate interests pursued by PALUX Aktiengesellschaft or one of its sister companies or by a third party (e.g., a supplier), except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject. With regard to our website, this applies in particular to the processing operations described in Section III of this Privacy Policy. Such processing operations are permitted in particular because they have been specifically mentioned by the European legislator. The legislator took the view that a legitimate interest could be assumed where the data subject is a customer of the controller. A further legitimate interest is the conduct of our business activities for the benefit of all our employees and shareholders, as well as processing for direct marketing purposes, in particular for sending product information, industry news, invitations, event announcements, and similar information.

V. Collection and processing of personal data in applications and the application process

For the purpose of processing applications for employment at PALUX Aktiengesellschaft, we collect and process personal data from applicants.

Processing can also be carried out electronically. In particular, this applies if the applicant sends the application documents electronically, for example by email, to the data controller via the separate email address we have provided for applications.

If an employment relationship is established with the applicant after the selection process has been completed, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with legal regulations.

If no employment relationship is established with the applicant, the application documents will be automatically deleted after notification of the rejection decision, unless other legitimate interests of the data controller preclude deletion. A legitimate interest in this sense is, for example, preserving the possibility of presenting evidence in potential legal proceedings under the General Equal Treatment Act (AGG).

In addition, we may store the applicant's application documents based on separate voluntary consent for a possible later need.

VI. Duration for which the personal data will be stored

The criterion for the duration of storage of personal data is the respective statutory retention period. After this period expires, the corresponding data is routinely deleted, unless and to the extent that it is still required for contract fulfillment or initiation, or the legitimate interests of the controller outweigh the data subject's interest in erasure – for example, access to order documents and related technical documentation for service purposes or for processing follow-up inquiries regarding previous installations. Since the customer's usage period of our products regularly exceeds the statutory retention periods, this constitutes a legitimate interest of the controller to continue storing these documents. The documents may also be stored permanently to safeguard legal defense options and liability insurance coverage, particularly with regard to product liability for our products. If such a legitimate interest ceases to exist at a later date, this data will also be routinely deleted.

VII. Disclosure of personal data

We only disclose personal data to third parties if there is a legal basis for doing so under data protection law. This may be the case, for example, according to Section IV of this Privacy Policy. Third parties may also include external service providers who process personal data on our behalf and only within the framework of strictly instructed data processing agreements. Data processing outside the EU or the EEA generally does not take place. Should such a data transfer be necessary in a specific case, it will only occur on the basis of the EU Standard Contractual Clauses or to countries for which the EU has issued an adequacy decision, and within the framework of data processing agreements.

VIII. Rights of data subjects

Data subjects have the right to obtain confirmation from the controller as to whether or not personal data concerning them are being processed. If this is the case, the data subject has the right to...

In accordance with Article 7 Paragraph 3 of the GDPR, you have the right to withdraw your consent at any time with effect for the future;
Information pursuant to Article 15 GDPR about
- the processing purposes,
- the categories of personal data processed,
- the recipients or categories of recipients to whom the personal data have been disclosed,
- the planned storage duration of the data or the criteria for determining the storage duration,
- the right to rectification or erasure of the data or to restriction of processing by the controller or to object to such processing,
- the existence of a right of appeal,
- the origin of their data, unless it was collected from the data subject themselves,
- as well as to request information about the existence of automated decision-making, including profiling, and, where applicable, meaningful information about its process;
pursuant to Article 16 GDPR
- the correction of inaccurate personal data,
- with regard to the purposes for which the data were processed, to request the completion of incomplete personal data;
In accordance with Article 17 of the GDPR, you have the right to request the erasure of your personal data stored by us, insofar as
- they are no longer necessary for the purposes for which they were collected,
- she revokes given consent and there is no other legal basis for processing the data,
- if she objects to the processing pursuant to Art. 19 para. 1 GDPR and there are no overriding legitimate grounds for the processing,
- she objects to the processing pursuant to Art. 19 para. 2 GDPR,
- the data were processed unlawfully,
- the data must be deleted to fulfill a legal obligation,
- The data were collected in accordance with Article 8 Paragraph 1 of the GDPR.
  
  and the processing of the collected data not
- to exercise the right to freedom of expression and information,
- to fulfill a legal obligation,
- for reasons of public interest or
- necessary for the assertion, exercise or even potential defense of legal claims;
to request the restriction of the processing of their personal data in accordance with Article 18 GDPR, insofar as
- The accuracy of the data is disputed by her.
- the processing is unlawful, but she refuses to have it deleted,
- the controller no longer needs the data, but the data subject requires it for the establishment, exercise or defense of legal claims or
- the data subject has objected to the processing pursuant to Article 21 GDPR;
In accordance with Article 20 GDPR, to receive the personal data concerning them which they have provided to a controller in a structured, commonly used and machine-readable format or to request its transmission to another controller;
According to Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes this GDPR.

IX. Right of objection

If personal data is processed on the basis of legitimate interests pursuant to Article 6(1)(f) GDPR, the data subject has the right to object to the processing of his or her personal data pursuant to Article 21 GDPR, provided there are grounds relating to his or her particular situation or the objection is directed against direct marketing. In the latter case, the data subject has a general right to object, which we will respect without requiring the specification of a particular situation.

If you would like to exercise your right of revocation or objection, please send an e-mail to info@palux.de

X. Updates and Changes to this Privacy Policy

This privacy policy is the currently valid version and is dated July 2019.

We reserve the right to amend this privacy policy in accordance with changing legal or regulatory provisions, due to the further development of our website, or due to our efforts to continuously improve this policy.

The current privacy policy can be viewed at any time on our website at https://www.palux.de/datenschutz They can be retrieved and printed. The respective previous version can be found here. here.

Definitions

With the privacy policy we have published, we want to provide our customers, prospective customers and business partners with a transparent overview of the processing of personal data we carry out.

The privacy policy of PALUX Aktiengesellschaft is strictly aligned with the provisions of the General Data Protection Regulation and uses the terminology of this regulation.

To ensure the ease of reading this statement and to develop a uniform understanding of the terms used, we have listed the legal definitions of the most important terms below:

1) personal data
Personal data is any information relating to an identified or identifiable natural person (hereinafter the "data subject"). A natural person is considered to be identifiable who, directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier or one or more special features, expresses the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person can be identified.

2) affected person
Concerned person is any identified or identifiable natural person whose personal data is processed by the controller.

3) Processing
Processing means any process or series of operations related to personal data, such as collecting, recording, organizing, arranging, storing, adapting or modifying, reading, querying, using, with or without the aid of automated procedures; disclosure by submission, dissemination or other form of provision, reconciliation or association, restriction, erasure or destruction.

4) Restriction of processing
Restriction of the processing is the marking of stored personal data with the aim to limit their future processing.

5) profiling
Profiling is any kind of automated processing of personal data that consists in using that personal information to evaluate certain personal aspects relating to a natural person, in particular aspects regarding analysing or predicting job performance, economic situation, health, personal preferences, interests, reliability, behavior, whereabouts or relocation of that natural person.

6) Pseudonymization
Pseudonymisation is the processing of personal data in such a way that personal data can no longer be attributed to a specific data subject without the need for additional information, provided that such additional information is kept separate and subject to technical and organizational measures to ensure that the personal data not assigned to an identified or identifiable natural person.

7) Controller or data controller
The controller or the person responsible for the processing is the natural or legal person, public authority, body or body that, alone or in concert with others, decides on the purposes and means of processing personal data. Where the purposes and means of such processing are determined by Union law or the law of the Member States, the controller or the specific criteria for his designation may be provided for under Union or national law.

8) Processors
The processor is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the responsible party.

9) Recipient
Recipient is a natural or legal person, agency, institution or other entity to whom Personal Data is disclosed, whether or not it is a third party. However, authorities which may receive personal data under Union or national law in connection with a particular mission are not considered as beneficiaries.

10) third party
A third party is a natural or legal person, public authority, agency or institution other than the data subject, the controller, the processor and the persons authorized under the direct responsibility of the controller or the processor to process the personal data.

11) Consent
Consent is any voluntarily given and unambiguously expressed in the form of a statement or other unambiguous confirmatory act by the data subject for the particular case, by which the data subject indicates that they consent to the processing of the personal data concerning him / her is.