The KAFRIL group
Data protection

Privacy policy

Thank you for your interest in the KAFRIL Group, where we take data protection very seriously. You don’t need to enter any personal data in order to visit the KAFRIL Group’s website. However, if you want to use particular services provided via our website, it may be necessary to process your personal data. Whenever this is the case but there is no legal basis for such processing, we will always request your consent first.

Personal data (such as your name, address, email address and phone number) is always processed in compliance with the GDPR (General Data Protection Regulation) as well as the national and regional data protection regulations applying to the KAFRIL Group. In this privacy policy, we’d like to inform you about the type and scope of personal data we collect as well as why we use and process it, and also explain your rights.

In its capacity as data controller, the KAFRIL Group has taken extensive technical and organizational action to maximize the protection of all personal data processed via this website. Nevertheless, because internet-based data transmission may contain security vulnerabilities, complete protection cannot be guaranteed. For this reason, you are at liberty to transmit personal data to us by alternative means, such as over the telephone.

Data collection on our website

Data is collected and processed on this website by its operator:

KAFRIL Unternehmensgruppe
Röcknitzer Str. 01
04808 Lossatal OT Großzschepa
Germany

Tel: +49 34 2 63 / 784-0
Fax: +49 34 2 63 / 784-40
info@kafril.de

Personal data - your rights

You have the right to obtain information about the personal data stored by us concerning you. You may exercise the following rights at any time:

  • Obtaining information about data stored by us concerning you and its processing
  • Having inaccurate data concerning you rectified
  • Having data concerning you erased
  • Restricting the processing of data concerning you if we are not yet allowed to erase your data owing to legal obligations
  • Objecting to the processing of data concerning you
  • Data portability, provided that processing is based on consent or a contract with us

If you have granted us consent, you may withdraw it at any time with future effect.

If you consider that your personal data has been processed unlawfully, under Article 77 GDPR, you may contact the competent supervisory authority at any time to lodge a complaint. For a list of supervisory authorities (for the non-public domain) and their addresses, please go to: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Purposes of data processing by the data controller and third parties

We process your personal data solely for the purposes specified in this privacy policy. Your personal data will not be transferred to third parties for any other purposes than those specified. We will only transfer your personal data to third parties if:

  • You have given consent to this
  • Processing is necessary for the performance of a contract to which you are party
  • Processing is necessary for compliance with a legal obligation to which you are subject
  • Processing is necessary to protect legitimate interests and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data

SSL encryption

We use state-of-the-art encryption technology (SSL, HTTPS) to protect the transmission of your data.

Email and contact form

If you contact us by email or using the contact form, you voluntarily grant us permission to contact you. The details you provide will be stored for the purpose of dealing with your enquiry and for any necessary follow-up. Personal data will be automatically deleted once your enquiry has been dealt with.

Server log files

The provider of this website automatically collects and stores information in server log files which is automatically sent to us by your browser, namely:

  • The type and version of the browser you use to access our website
  • The operating system of your device
  • The referrer URL (previously visited website)
  • The host name of the computer accessing our website
  • The time of the server request

This data cannot be linked to specific individuals, nor will it be combined with other data sources. We reserve the right to review this data at a later time if we become aware of specific evidence of unlawful use.

Cookies

Some features of our website require cookies to be stored on your computer. They do not contain any personal data and are not stored or processed by us. You can disable the storage of cookies in your browser.

Google Analytics

This website uses Google Analytics, a web analysis service by Google Inc. Google Analytics uses cookies – text files which are saved on your computer and enable your use of the website to be analysed. This information is generally transmitted to a server belonging to Google in the USA and stored there. However, should IP masking be activated on this website, your IP address will be truncated beforehand by Google within the European Union or in another signatory state of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.

On behalf of the operator of this website, Google will then use this information to analyse your use of the website in order to compile reports about your website activities and to provide other services for the website operator relating to website and internet usage. The IP address transmitted from your browser in connection with Google Analytics will not be combined with any other Google data.

Although you can set your browser to prevent the storage of cookies, please be aware that you may not then be able to use all the features of this website in full. Alternatively, you can prevent Google from collecting data generated by the cookie related to your use of the website (including your IP address) and processing this data by downloading and installing the Google Analytics opt-out browser add-on: https://tools.google.com/dlpage/gaoptout.

Google Maps

This website uses the map service Google Maps via an API. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To be able to use the features of Google Maps, your IP address has to be stored. This information is generally transmitted to a server belonging to Google LLC in the USA and stored there. The provider of this website has no control over this data transmission.

Google Maps is used to optimize the appearance of our website as well as to make it easy to find locations mentioned on the website. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR.

More information on the handling of user data is contained in Google’s privacy policy: https://www.google.de/intl/en/policies/privacy/.

Script libraries (Google Fonts)

Script and font libraries such as Google Fonts (fonts.google.com) are used on our website to ensure content is correctly displayed on different browsers and to optimize its appearance. Google Fonts are transferred to your browser’s cache to avoid loading them repeatedly. If your browser doesn’t support Google Fonts or prevents access to them, content is displayed using a standard font.

Activating script or font libraries will automatically establish a connection with the library’s operator. Theoretically, this might enable operators of such libraries to collect data from you, although whether this is actually the case and, if so, for what purpose is currently unknown.

The privacy policy of Google (the operator of this script library) can be viewed here: policies.google.com/privacy.

Duration of storage

The data stored in server log files is saved by our web hosting provider for a maximum of 7 days and then anonymized. Data which may constitute evidence and therefore needs to be stored for longer will not be anonymized until the relevant matter has been resolved. As the website operator, we only have access to website visitors’ data once it has been anonymized. Server logs are kept for five years and then erased.

Data collected and stored with Google Analytics and then anonymized is kept indefinitely.

Changes to our privacy policy

We reserve the right to amend this privacy policy to ensure it always complies with the latest legal requirements or in order to reflect changes to our existing services (e.g. the introduction of new services) in our privacy policy. Your next visit to our website will then be governed by the new privacy policy.