Privacy Policy

Correct at: 25 May 2018

Paragraph 1 Information on the Collection of Personal Data

(1) Below we provide information on the collection of personal data when using our website www.amor.ag (“the website”). Personal data are all data that can be connected with you personally, such as your name, postal address and email address or user behaviour.

(2) The responsible party under the terms of Section 4, Subsection 7, of the EU’s General Data Protection Regulation (GDPR) is AMOR Gummiwaren GmbH, August-Rost-Strasse 4, 99310 Arnstadt (see our Legal Notes).

(3) When you contact us by email or using a contact form, the data you provide (your email address, your name and telephone number if applicable) will be stored by us in order to answer your questions. We will delete the data arising in this connection after storage is no longer necessary or if it restricts processing if there are legal obligations to retain data.

(4) If we wish to use contracted service providers for individual functions of our offer or use your data for advertising purposes, we will inform you in detail about the respective processes below. We will also state the specified criteria for the storage period.

Paragraph 2 Rights of Data Subjects

The user and other affected persons have the following rights with us regarding their personal data:

• right of access to the personal data concerned (Section 15, GDPR);
• right of correction (Section 16, GDPR);
• right of cancellation (Section 17, GDPR);
• right to restrict processing (Section 18, GDPR);
• right to object to processing if data processing is carried out on the basis of Section 6. Subsection 1, (e) or (f), GDPR (Section 21, GDPR). See also the following reference to the right to object under Section 21, GDPR;
• right to data transferability (Section 20, GDPR);
• the right to withdraw previously-issued consent at any time without prejudice to the legality of processing carried out on the basis of the consent until consent to data processing as completed is withdrawn if processing is based on consent pursuant to Section 6 (1) (a) or Section 9 (2) (a), GDPR.

You are also entitled to complain to a data protection supervisory authority about the processing of your personal data by us (Section 77, GDPR).

Paragraph 3 Collection of Personal Data when Visiting our Website

(1) When using the website merely for information purposes, i.e. if you do not register or otherwise provide us with information, we will only collect the personal data that your browser sends to our server. If you wish to view our website, we will collect the following data which are technically necessary for us to display our website and to ensure its stability and security (the legal basis for this is Section 6, Subsection 1, Sentence 1 (f), GDPR):

• IP address;
• date and time of enquiry;
• time-zone difference to Greenwich Mean Time (GMT);
• content of request (actual page);
• access status/HTTP status code;
• amount of data transferred in each case;
• website from which the request originates;
• browser, language and version of browser software;
• operating system and its interface.

(2) In addition to the abovementioned data, so-called cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard disk, assigned to the browser you are using and through which certain information flows to the site (in this case to us) that installs the cookie. Cookies cannot execute programs or transfer viruses to your computer. They are used to make the overall internet offer more user-friendly and effective.

(3) Use of Cookies:
a) This website uses the following types of cookies, the scope and function of which are explained below:

• transient cookies (see “b”) and
• persistent cookies (see “c”).

Cookies connected with third party services as described below:

The flash cookies we use are not registered by your browser but by your flash plug-in. These save the necessary data regardless of the browser you use and do not have an automatic expiration date. If you do not want the flash cookies to be processed, you will need to install an appropriate add-on.

Web beacons are electronic characters (also known as “clear GIFs” or “web bugs”) that allow us to count the number of users who have visited our website.

b) Transient cookies are automatically deleted when you close your browser. In particular, this includes session cookies. These store a so-called session ID which can be used to assign various enquiries from your browser to the shared session. This enables us to recognise your computer when you return to our website. The session cookies are deleted when you log out or close your browser.

c) Persistent cookies are automatically deleted after a specified period of time; this period may vary, depending on the cookie. You can delete the cookies in the security settings of your browser at any time.

d) You can configure your browser settings any way you wish and – for example – decline to accept third-party cookies or all cookies. Information on the administration and deletion of cookies and instructions on how to do this for the usual browsers can also be found at www.meine-cookies.org. However, we would point out that if you do this, you may not be able to use all the functions of our website.

e) This stored information may be stored separately from any other data that may be provided to us. In particular, the cookie data will not be linked to your other data if such data are transmitted.

Paragraph 4 Other Functions and Offers on Our Website

(1) In addition to the purely informative use of our website, we offer various services which you can use if you are interested. For this purpose you will normally have to provide additional personal data which we will use to provide the relevant service and to which the aforementioned data processing principles will apply.

(2) In some cases we use external service providers to process your data. These have been carefully selected and contracted by us, are bound by our instructions and are monitored regularly.

(3) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the offer.

(4) We do not carry out any automated decision-making or profiling.

Paragraph 5 Objecting to or Cancelling the Processing of Your Data

A. Right of Objection due to Special Situations

For reasons arising from your particular situation, you are entitled to object at any time to the processing of your personal data that is carried out on the basis of Article 6, Subsection 1 (e)  (Public Security) or (f) (Data Processing Based on a Balancing of Interests), GDPR; this also applies to profiling based on these provisions. We will no longer process personal data unless we can demonstrate compelling legitimate reasons for doing so that outweigh your interests, rights and freedoms or unless processing serves to assert, exercise or defend legal claims.

B. Right of Objection in the Case of Direct Marketing

If we process personal data about you for direct marketing purposes, you will be entitled to object at any time to the processing of personal data about you for the purposes of such marketing; this includes profiling to the extent it is connected with such direct marketing. If you object to processing for the purposes of direct marketing, your personal data will no longer be processed for those purposes.

C. Exercising Your Right to Object

You can exercise your right of objection informally, for example by letter to Amor Gummiwaren GmbH, August-Rost-Strasse 4, 99310 Arnstadt or by email to: info@amor.ag.

Paragraph 6 Web-Tracking and Other Third-Party Services

1. Use of Google Analytics

(1) This website uses Google Analytics, a web analysis service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

Google Analytics uses so-called “cookies”, which are text files stored on your computer to help analyse how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. In the event that IP anonymization is activated on this website, your IP address will be shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before this is done.

Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, compile reports on website activities and provide

(2) The IP address transmitted by your browser within the framework of Google Analytics will not be combined with other data from Google.

(3) You may decline the use of cookies by selecting the appropriate settings on your browser. However, please note that if you do this, you may not be able to use all the functions of this website to their full extent. You can also prevent the collection of data generated by the cookie related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

(4) This website uses Google Analytics with the extension “_anonymizeIp()”. This enables IP addresses to be further processed in abbreviated form, thereby excluding the possibility of personal references. If the data collected about you contains a personal reference, this will be immediately excluded and the personal data will be immediately deleted.

(5) We use Google Analytics to analyse and regularly improve the use of our website. We may use the statistics obtained to improve our offer and make it more interesting for you as a user. In the exceptional cases in which personal data are transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Section 6, Subsection 1 Sentence 1 (f), GDPR.

We have concluded an agreement with Google for contract data processing and we fully implement the strict requirements of the German data protection authorities when using Google Analytics.

(6) Information of the third party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436-1001.

Terms of Use: http://www.google.com/analytics/terms/de.html,

Data Protection Overview: http://www.google.com/intl/de/analytics/learn/privacy.html,

and the Privacy Policy: http://www.google.de/intl/de/policies/privacy.

2. Google Web Fonts

External fonts or Google fonts are also used on these internet pages. Google Fonts is a service of Google Inc. (“Google”). These web fonts are integrated by a server call, usually a Google server in the USA. This transfers to the server information showing which of our internet pages you have visited. The IP address of the browser of the end device of the visitor to these internet pages is also stored by Google. You will find more detailed information in the Google data protection information, which you can download, here:

www.google.com/fonts#AboutPlace:about

www.google.com/policies/privacy/

The data processing is carried out on the legal basis of Section 6, Subsection 1 (f), GDPR.

3. Social Media Plugins / Shariff

So-called “social plugins” are used on our website. Currently these are the plugins of the services Facebook, Twitter and Google+. Data, including personal data, can be sent via these plugins to the US service providers and used by them if necessary.

However, we ourselves do not collect any personal data via the social media plugins or their use. To prevent data from being transferred to service providers in the USA without the user’s knowledge, we use the so-called Shariff solution. This solution ensures that no personal data is initially transferred to the providers of the individual social media plugins when you visit our website. Only when you click on one of the social media plugins can data be transferred to the service provider and stored there. You can find more information about the Shariff solution on the pages of the provider Heise Medien Gmbh & Co. KG: http://m.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html.

The data is processed on the legal basis of Section 6, Subsection 1 (f) GDPR.

4. YouTube

We integrate the videos of the “YouTube” platform of provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Privacy policy: https://www.google.com/policies/privacy/

Opt-out: https://adssettings.google.com/authenticated.

Paragraph 7 Newsletter

(1) With your consent you can subscribe to our newsletter in which we tell you about our latest interesting offers. The goods and services advertised are named in the declaration of consent.

(2) We use the so-called double-opt-in procedure to subscribe to our newsletter. This means that after your registration, we will send you an email to the email address you have provided in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. We also store your IP address and the time of registration and confirmation. The purpose of this procedure is to verify your registration and, if necessary, explain any possible misuse of your personal data.

(3) Your email address is the only information required for sending the newsletter. The provision of further separately-marked data is voluntary and will be used to address you personally. After confirmation by you, we will save your email address in order to send you the newsletter. The legal basis is Section 6, Subsection 1, Sentence 1 (a), GDPR.

(4) You can revoke your consent to being sent the newsletter and unsubscribe from it at any time. You can revoke your consent by clicking on the link provided in each newsletter email, by email to newsletter@amor.ag or by sending a message to the contact details given in the Legal Notes.

Paragraph 8 Subcontractors and Recipients of Personal Data

(1) We use sub-contractors to process personal data and conclude agreements with these contract processors in accordance with the requirements of Section 28, GDPR.

As subcontractor for hosting the website, we use [   ].

(2) Your personal data will not be transferred to companies other than those already mentioned in this Privacy Policy.

Article 9 Protection of Personal Data

We take technical and organisational measures in accordance with the requirements of Section 32, GDPR to protect the user’s personal data. All our employees involved in processing personal data are obliged to maintain data secrecy. Personal data of the user are encrypted using HTTPS when transmitted to the website.

Paragraph 10 Legal Basis

In accordance with Section 13, GDPR, the legal bases for our data processing are the following:

• Insofar as we obtain the consent of the data subject for processing of personal data, Section 6 Subsection 1 (a), GDPR, serves as the legal basis.
• When processing personal data required to perform a contract to which the data subject is a party, Section 6, Subsection 1 (b), GDPR, serves as the legal basis. This also applies to processing procedures required to carry out pre-contractual measures.
• Section 6, Subsection 1 (c), GDPR, serves as the legal basis for processing the personal data required to fulfil a legal obligation to which we are subject.
• The legal basis for the temporary storage of data and log files is Section 6, Subsection 1 (f), GDPR.
• The legal basis for processing personal data using cookies required for technical reasons is Section 6, Subsection 1 (f), GDPR. The legal basis for processing personal data using cookies for analytical purposes is Section 6, Subsection 1 (f), GDPR.
• If processing is necessary to safeguard a legitimate interest of ours or of a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest/s, Section 6, Subsection 1 (f), GDPR, serves as the legal basis for processing.