Protection of Data Privacy
Data protection declaration
Welcome to FUCHS PETROLUB SE!
We are very pleased that you are visiting our website and thank you for your interest in our company, products and websites. Data protection and data security when accessing our website are extremely important to us. We would therefore like to take this opportunity to inform you about the personal data relating to you that we capture when you visit our website and the purposes for which it is used. Please therefore take note of the information that follows.
As changes to the law or to our internal procedures may make it necessary to modify this data protection declaration, we would ask you to read through this data protection declaration regularly. The data protection declaration can be viewed, saved or printed out at any time by clicking on the “Data protection declaration” option.
§ 1 Controller and scope of application
The controller, within the meaning of the General Data Protection Regulation (hereinafter referred to as the GDPR) and other national data protection laws of member states as well as other data protection legislation, is:
FUCHS PETROLUB SE
Friesenheimer Straße 17
Tel: +49 (0) 621 3802 -0
Fax: +49 (0) 621 3802 -7190
Stefan R. Fuchs (Chairman)
Dr. Lutz Lindemann
Dr. Timo Reister
Dr. Ralph Rheinboldt
This data protection declaration covers the pages published on the internet by FUCHS PETROLUB SE, which can be viewed on the domain www.fuchs.com/gruppe as well as all sub-domains (hereinafter referred to as “our website”).
§ 2 Data protection officer
The external data protection officer for the controller is:
Dr. Karsten Kinast, LL.M., (attorney of law)
KINAST Rechtsanwaltsgesellschaft mbH
50672 Cologne, Germany
§ 3 Principles of data processing
Personal data is defined as all information which relates to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, email address, IP address or your usage behaviour. Information that does not allow us (or only allow with a disproportionate amount of effort) to connect the data to you as a person - e.g. through anonymising the information - is not counted as personal data. The processing of personal data (e.g. collecting, accessing, using, saving or relaying personal data) must always have a basis in law, or your consent must have been obtained. Processed personal data is erased as soon as the purpose of the processing has been fulfilled and there are no statutory record-keeping obligations to be met.
You will find below information on the specific processes, scope and purpose of data processing, the legal basis for the processing and the length of time for which data will be stored for those cases where we process your personal data in order to be able to provide you with certain services.
§ 4 Individual processes involving data processing
1. Provision and usage of the website
a. Type and scope of data processing
When you access and use our website, we capture the data that your browser automatically transmits to our server. This data is temporarily stored in a so-called log file.
When you use our website, we capture the following data that we need for technical reasons in order to be able to show you our website and to ensure its stability and security; and which is also analysed for statistical purposes only:
• IP address of the source computer
• Date and time of access
• Name and URL of the file accessed
• Website facilitating access (referrer URL)
• Controller sub-domains visited
• Browser used and, where applicable, your computer’s operating system and the name of your access provider
• Access status (http status code)
b. Legal basis
The legal basis for the data processing referred to above is provided by Art. 6 (1) (f) GDPR. The processing of the data referred to above is required for the provision of a website and thus necessary for the purposes of the legitimate interests pursued by our company.
c. Data storage duration
The log files created in conjunction with the usage of our website will be held for a period of 14 days and subsequently erased. The capture of the data and its storage in log files is required for the operation of the internet pages and for ensuring the stability and quality of this service. Greater and/or longer storage of data may apply in individual cases, if this is stipulated in law.
§ 5 Sharing of data with third parties
We only share your personal data with third parties if:
• You have given your express permission for us to do so, in accordance with Art. 6 (1) sent. 1 lit. a GDPR
• In accordance with Art. 6 (1) sent. 1 lit. c GDPR there is a legal obligation to do so
• This is legally permissible and in accordance with Art. 6 (1) sent. 1 lit. b GDPR necessary for the performance of contract with you
• In accordance with Art. 6 (1) sent. 1 lit. f GDPR the sharing of your data is necessary to safeguard a justified company interest on the part of FUCHS PETROLUB SE and there are no grounds for assuming you have an overriding right not to have your data shared with a third party, which is worthy of protection
• In accordance with Art. 6 (1) sent. 1 lit. f GDPR the sharing of your data is necessary to assert, exercise or defend a legal entitlement and there are no grounds for assuming you have an overriding right not to have your data shared with a third party, which is worthy of protection
§ 6 Usage of cookies
a. Type and scope of data processing
With the help of cookies we are able, amongst other things, to make our internet services more user-friendly and effective for you by, for example, being able to take account of your use of our website or establishing your preferred settings (for e.g. country and language). Where third parties process information through cookies they collect the information directly through your browser. Cookies do not cause any damage to your device. They cannot run programs and do not contain viruses.
The cookies we use go by the name of “session cookies”, a sub-category of the transient, temporary cookies. This type of cookie makes it possible to capture your session ID. This allows various queries from your browser to be attributed to a common session, which makes it possible for us to recognise your end device when you next visit our web pages. They are automatically erased once you have left our website(s). You can - of course - visit our website without cookies being deployed. This can, however, lead to limitations to the provision of our services.
b. Legal basis
c. Data storage duration
As soon as the data relayed to us via the cookies is no longer needed for the purpose described above, it will be erased. Greater and/or longer storage of data may apply in individual cases, if this is stipulated in law.
d. Configuring browser settings
The majority of browsers are pre-set to accept cookies as standard. You can, however, configure your browser to only accept certain cookies or, indeed, no cookies at all. But we would like to point out to you that you may not be able to use all the functions on our website if cookies are deactivated through your browser settings. You can also set your browser settings to delete cookies that are already stored in your browser. Furthermore, you can also set your browser to notify you prior to storing cookies. As the functionality of the various browsers can differ, please consult the help menu of your particular browser to see your configuration options.
If you would like a comprehensive overview of all the instances where third parties access your internet browser, we recommend installing a specially-developed plug-in for this purpose.
§ 7 Tracking and analysis tools – Google Analytics
We use tracking and analysis tools to ensure the ongoing optimisation and demand-oriented design of our website. Using tracking tools also allows us to establish statistics on usage of our website by visitors and, based on these insights, to further develop our online offerings for you. Based on these interests, the deployment of the tracking and analysis tools described below is justified in accordance with Art. 6 (1) sent. 1 lit. f GDPR. The intended purpose of processing and the data to be processed can be inferred from the description of the tracking and analysis tools that follows below.
Google Analytics, a web analysis service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (“Google”), is used on this website. Google Analytics uses so-called “cookies”, text files that are stored on your computer and allow your usage of the website to be analysed.
The information gleaned from these cookies - for example, the time, place and frequency of your usage of the website - is usually transmitted to a Google server in the US and stored there. The classical use of Google Analytics does not preclude other personal data in addition to the IP address being captured by the Google Analytics cookies. In order to ensure your privacy is protected as much as possible, FUCHS independently anonymises the IP addresses of visitors to its websites. Shortening the IP addresses ensures that no connection can be established to an individual website visitor.
We wish to point out to you that Google may share the information gleaned with third parties where this is stipulated in law or if the third parties are processing the data on Google’s behalf.
The information gleaned from the cookies is used by Google, working for the website operator, to analyse your usage of the website, draw up reports on website activity and provide further services for the website operator that are linked to website and internet usage.
The information gleaned from the cookies is usually transmitted to a Google server in the US and stored there. The IP anonymisation facility has been activated on this website, with the result that the IP addresses of Google users within the member states of the European Union or other contracting parties to the Agreement on the European Economic Area are shortened. As outlined above, this shortening of the IP address has already been put in place by FUCHS, so as to provide the highest possible level of security. Working for the website operator, the information gleaned is used by Google to analyse usage of the website by users, draw up reports on website activity and provide further services for the website operator that are linked to website and internet usage.
You can prevent cookies from storing the data by activating the relevant settings in your browser software; you will, however, be advised that if you do so, you may not be able to use all the functions of this website to the fullest extent. Users can also prevent the data produced by the cookie and relating to their usage of the website (including their IP address) being captured and processed by Google by downloading and installing the browser plug-in available through the link given below. The current link address is: https://tools.google.com/dlpage/gaoptout?hl=en.
This plug-in prevents information on your visit to the website being relayed to Google Analytics. This plug-in does not prevent analysis being performed by other parties.
§ 8 Plug-ins
1. Facebook and LinkedIn
Our websites contain social plug-ins for the “Facebook” (Facebook Inc., 1601 S. California Ave, Palo Alto, California 94304, USA) and “LinkedIn” (LinkedIn Headquarters 2029 Stierlin Ct. Ste. 200 Mountain View, CA 94043) social networks. It is possible that personal data on website visitors may be collected through these plug-ins and relayed and linked to the service in question.
FUCHS PETROLUB SE itself does not collect any personal data through the social plug-ins or the usage thereof. In order to prevent data being relayed to the service provider in the US without the user’s knowledge, we have deployed the so-called Shariff solution on our website. This causes the social plug-ins to be linked in purely as a graphic on the website. The graphics contain a link to the website of the relevant plug-in provider. You are only forwarded on to the provider’s service if you click on one of the graphics. This solution ensures that personal data is not automatically relayed to the providers of the relevant social plug-in when you visit our website. If you click on one of the social plug-in graphics, data may be relayed to, and stored by, the providers in question. If you do not click on one of the graphics there will be no data transmitted between you and the provider of the relevant social plug-in. You can find out further information on the Shariff solution on this website: https://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html
Once you have clicked on a social plug-in, the provider in question will receive the information that you have visited the relevant page on our website. Please be aware that you do not have to have a user account for the service in question nor do you already need to be logged in for this to happen. But should you have a user account with the service provider in question and already be logged in when visiting our website, the data collected by the social plug-in will be directly linked to your account. If you do not want to have the data linked to your profile with the service provider you must log out of your user account before clicking on a social plug-in.
Please be aware that FUCHS PETROLUB SE has no influence on whether, and to what extent, the service providers in question collect personal data. We do not know the scope, purpose or storage duration of the data collected. We would, however, point out that it must be assumed that, at the very least, the IP address and device-related information will be collected and used by the social plug-ins. It is also possible that the service providers in question deploy cookies.
Please read the data protection notifications directly on the websites of the services in question to establish the scope and purpose of each service’s data collection activities as well as how your data is further processed and used. You will also find information on your relevant data protection rights and on settings options to protect your privacy there.
Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA
LinkedIn Inc., LinkedIn Headquarters 2029 Stierlin Ct. Ste. 200 Mountain View, CA 94043
A button for the “XING” network is used on our website. When you click on this button a connection is quickly established through your browser to the servers of XING AG (hereinafter: XING), which provide the “XING button” functions. XING does not store any of your personal data as a result of you accessing this website. In particular, XING does not store any IP addresses. There is also no analysis made of your user behaviour through the deployment of cookies in conjunction with the “XING share button”. You can view the current data protection information concerning the “XING share button” as well as supplementary information on this web page:
§ 9 Hyperlinks
On our website there are so-called hyperlinks to the websites of other providers. If you activate these hyperlinks you will be taken from our website directly to the website of the other providers. This can be seen from the change in URL, amongst other factors. FUCHS PETROLUB SE has no influence on the content or design of these other providers’ web pages. Understandably, therefore, the assurances made in this data protection declaration do not apply to the providers’ web pages. Please inform yourself of the treatment of your personal data by these organisations by visiting their websites direct.
§ 10 Rights of data subjects
The GDPR has provided for you, as a data subject, to have the following rights in respect of the processing of personal data:
• Art. 15 GDPR provides for you to demand information on the personal data we process in relation to you. In particular, you can demand information on the purposes for which we process data relating to you; the categories of personal data; the categories of recipients to whom your data has been or will be presented; the scheduled duration of data storage; the existence of a right to rectification, erasure, restriction of the processing or to object to processing; the existence of a right to complain; the source of the data on you if it has not been collected by us; whether the data is to be transferred to a third country or international organisations; and whether data is selected on the basis of an automated decision-making process or profiling, with meaningful information on the details of this process, where applicable.
• Art. 16 GDPR provides for you to demand the immediate rectification or supplementing of your personal data held by us.
• Art. 17 GDPR provides for you to demand the erasure of your personal data held by us, provided the processing thereof is not required to exercise the right to freedom of expression and information, to meet a legal obligation, for public interest reasons or to assert, exercise or defend legal claims.
• Art. 18 GDPR provides for you to demand the restriction of processing of your personal data where you dispute the accuracy of the data; the processing is unlawful; or we no longer require the data but you oppose its erasure because you need it to assert, exercise or defend legal claims. You are also entitled to the right provided for in Art. 18 GDPR if you object to the processing in accordance with Art. 21 GDPR.
• Art. 20 GDPR provides for you to demand to receive, in a structured, current and machine-readable format, the personal data you have provided to us; or you can demand that it is relayed to another controller.
• Art. 7 (3) GDPR provides for you to withdraw the consent you gave us at any time. The consequence of this is that we may in future no longer continue with the data processing dependent on this consent.
• Art. 77 GDPR gives you the right to complain to a supervisory authority. The contact information for the supervisory authority responsible for our company is:
Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg [Data protection and freedom of information office for Baden-Württemberg]
Postfach 10 29 32, 70025 Stuttgart
Königstraße 10a, 70173 Stuttgart
Tel.: 0711/61 55 41 – 0
Fax: 0711/61 55 41 – 15
§ 11 The right to object
Where your personal data is processed on the basis of legitimate interests, Art. 6 (1) sent. 1 lit. f GDPR provides for you, in accordance with Art. 21 GDPR, to object to the processing of your personal data, where there are grounds for so doing based on your own particular situation, or your objection is to direct marketing. In the case of direct marketing you have a general right to object, which we must implement without the need for stating the existence of a particular situation.
§ 12 Data security and backup measures
We undertake to protect your privacy and to treat your personal data with the utmost confidentiality. In order to avoid the manipulation, loss or misuse of the personal data we have stored that relates to you, we have adopted extensive technical and organisational security measures which are routinely checked and updated in line with improvements in technology. These include the use of recognised encryption methods (SSL or TLS). We must, however, point out that, due to the structure of the internet, it is possible that the data protection rules and abovementioned security measures may not be observed by other persons or institutions who/which do not come under our scope of responsibility. In particular, unencrypted data - e.g. if sent in an email - could be read by third parties. We have no technical influence on this. It is the user’s responsibility to protect the data provided to him/her against misuse, through encryption or some other method.
If you have any queries please do not hesitate to contact us at one of the addresses listed in section 1.
FUCHS PETROLUB SE