Privacy Policy

1. Privacy at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. Detailed information on data protection can be found in our Privacy Policy below.

Data Collection on This Website

Data processing on this website is carried out by the website operator. You can find their contact details in the “Information on the controller” section of this Privacy Policy.

Your data is collected, firstly, when you provide it to us. This may include, for example, data that you enter into a contact form. Other data is collected automatically by our IT systems, or after you have given your consent, when you visit the website. This is mainly technical data (e.g. internet browser, operating system or time of page access). This data is collected automatically as soon as you access this website.

2. Controller

The controller responsible for data processing on this website is:

KSK Industrielackierungen GmbH & Co. KG
von-Humboldt-Straße 125
D-52511 Geilenkirchen

Telephone: +49 2451 9803-0
Email: info@ksk-online.com

3. Hosting

This website is operated at Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The servers are located in Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.

When you access the website, data transmitted by your browser is automatically recorded in server log files: IP address, date and time, the address requested, the amount of data transferred, browser type and operating system. This data is technically required in order to deliver the site and keep operations secure; it is not merged with other data. The legal basis is Art. 6(1)(f) GDPR.

4. General information and mandatory disclosures

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

When you use this website, various personal data is collected. This privacy policy explains which data we collect and what we use it for. It also explains how and for what purpose this happens.

Please note that data transmission over the internet (e.g. communication by email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

5. Data collection on this website

Cookies

Our websites use so-called ‘cookies’. Cookies are small data packets and do not cause any harm to your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are automatically deleted at the end of your visit. Persistent cookies remain stored on your device until you delete them yourself or they are automatically deleted by your web browser.

Contact form

If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We will not pass on this data without your consent. This data is processed on the basis of Article 6(1)(b) GDPR.

Applications

If you apply using our application form, we process the data you provide to us in doing so (e.g. name, contact details, cover letter, CV and certificates) solely for the purpose of carrying out the application process. The legal basis is Article 6(1)(b) GDPR (taking steps prior to entering into an employment relationship) and your consent (Article 6(1)(a) GDPR).

Only those persons within our organisation who are responsible for the application process have access to your application. Your documents are not publicly accessible.

We automatically delete your application data no later than six months after receipt. They will be removed from technical backup copies no later than three months thereafter. If an employment relationship is established, we will transfer the necessary data to your personnel file.

You may withdraw your application at any time and request the deletion of your data – informally via the controller named above.

6. Cookies and consent

This website only sets technically necessary cookies on its own. Your decision from the consent dialogue is stored under the name “ksk-einwilligung” in your browser — both in local storage and as a cookie with a lifetime of 182 days. Only the categories you agreed to are stored, no personal details. Everything else — statistics, marketing, external media — is only loaded once you have explicitly agreed. No data is transferred to third parties before that.

You can change or withdraw your decision at any time via “Cookie settings” in the footer of every page. If you withdraw it, the known analytics and advertising cookies are deleted. The legal basis for services requiring consent is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG; for technically necessary storage, Section 25(2) no. 2 TDDDG applies.

7. Google Tag Manager

We use Google Tag Manager (container GTM-PT3HH8LF) provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Tag Manager is a tool through which other services are embedded. It does not process the content of your visit, but according to Google’s own information technical access data (HTTP logs) is stored for up to 14 days. It is only loaded after you have given your consent and passes your choice on to the embedded services using Google Consent Mode v2.

8. Google Analytics 4

Once you have consented to the “Statistics” category, we use Google Analytics 4 (measurement ID G-EK88WE8MPG) provided by Google Ireland Limited. The service sets cookies and collects information about your use of this website — such as the pages you visit, time spent, approximate location (at city level), device and browser. Google uses your IP address to derive an approximate location and discards it before the data is logged; it is not stored permanently.

User and event data is retained in our account for 14 months and then deleted automatically; aggregated report figures are not affected by this. We have disabled any linking with other Google services and any sharing for advertising purposes. Transfer to the USA is possible; Google relies on the EU-US Data Privacy Framework and standard contractual clauses. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via “Cookie settings”.

9. Vimeo videos

Some pages embed videos from Vimeo (Vimeo Inc., 330 West 34th Street, New York, NY 10001, USA). A video is only loaded once you have consented to the “External media” category. Without consent you will only see a still image and no connection to Vimeo is established.

Vimeo receives your IP address as soon as the player loads — not only when you start the video — and may set cookies; resources from the service provider Cloudflare are loaded in the process. Data is transferred to the USA in the process. Vimeo bases the transfer on the EU-US Data Privacy Framework and standard contractual clauses. The legal basis is your consent (Art. 6(1)(a) GDPR). Further information can be found in Vimeo’s privacy policy at vimeo.com/privacy.

10. Contact and application forms

If you write to us using a form, we process the data you provide in order to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR (initiation or performance of a contract) or Art. 6(1)(f) GDPR (responding to your enquiry). The data is stored in our content management system and also sent by e-mail to the responsible department.

Application documents are processed under Section 26(1) BDSG in order to decide on your application. They are stored securely and are accessible only to authorised persons. If no employment relationship results, we delete the application and its documents automatically six months after receipt, including the files. Longer storage takes place only with your explicit consent.

11. Fonts

The fonts used are stored on our own server and delivered from there. There is no connection to Google Fonts or any other external provider, and your IP address is not transmitted to anyone in this process.

12. Storage periods at a glance

Server log files: 14 days. Contact enquiries: until your request has been dealt with, at most six months; statutory retention obligations, for example under commercial or tax law, take precedence. Applications and documents: six months after receipt, then deleted automatically. Cookie consent: 182 days. Usage data collected by Google: 14 months.

13. Your rights

You have the right at any time to obtain free information about the origin, recipients and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you may withdraw this consent at any time with future effect. Furthermore, under certain circumstances, you have the right to request the restriction of the processing of your personal data. You also have the right to lodge a complaint with the competent supervisory authority.

You may contact us at any time regarding this or any other questions concerning data protection.

You are also entitled to data portability (Art. 20 GDPR), meaning the release of your data in a commonly used format, and to object (Art. 21 GDPR) to processing that we base on a legitimate interest. You may withdraw any consent given at any time with effect for the future; this does not affect the lawfulness of processing carried out up to that point.

14. Cloudflare Turnstile (bot protection)

To protect our forms against automated misuse, we use Cloudflare Turnstile, a service provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Turnstile checks in the background whether an entry originates from a human or an automated system.

Technical information about your device and browser, as well as your IP address, is transmitted to Cloudflare and analysed there. Turnstile operates without tracking cookies and does not create cross-device user profiles. Processing takes place solely for the purpose of detecting misuse.

The service is only loaded when you click on a form field for the first time. Anyone who merely reads our pages does not transmit any data to Cloudflare.

The legal basis is our legitimate interest in the security of and prevention of misuse of our systems pursuant to Art. 6(1)(f) GDPR. As the service is technically necessary to protect the forms, it is loaded independently of the consent banner; no cookies are set for advertising or analytics purposes.

For transfers to the USA, Cloudflare relies on the EU-U.S. Data Privacy Framework and standard contractual clauses. Further information: https://www.cloudflare.com/privacypolicy/