Skip to main content

Privacy Policy

We are committed to safeguarding the privacy of our website visitors and customers. The protection and security of personal data has the highest priority for us. Castolin Eutectic Group, Gutenbergstrasse 10, 65830 Kriftel, Germany ( E-Mail: [email protected] hereinafter referred to as "we" or "us") therefore strictly complies with the rules of the General Data Protection Regulation (GDPR) and with those of the German Federal Data Protection Act (BDSG). As controllers, in accordance with Art. 4 No. 7 GDPR, with this privacy statement we inform you below as to how we handle your personal data, i.e. which type of data are collected by us and for what purpose they are processed.

(1) What are personal data?

The GDPR sets forth the definition of personal data. As such, it involves any information relating to an identified or identifiable natural person. This includes, amongst others, your real name, telephone number or your date of birth.

(2) Data logging

In general, it is not necessary to provide personal data to use our website. When visiting our website the web server does, however, automatically register so-called log files. The data saved in these files contain, for example, the browser type and version, the operating system used, URL referrer (the site visited previously), IP address of the inquiring computer including the geographical location, access date and time of the server query, duration of your visit  and the client’s file request (file name and URL). These data are only collected for statistical purposes. There is no transfer to third parties, for commercial or non-commercial purposes. We undertake no combination of these data with other data from other sources. The collection and processing of these data take place to enable the actual use of the website on the basis of Art. 6 Para. 1 P.1 lit. f) GDPR. Our legitimate interest is the provision and administration of our website with all functionalities.

The data saved in server log files are only stored for a limited period and are automatically deleted at regular intervals after 60 days.

We reserve the right to verify these data at a later date if specific indications regarding an unlawful use have become known to us. This verification only takes place for the disclosure and prevention of an unlawful use of our website on the basis of Art. 6 Para. 1 P. 1 lit. f) GDPR. Our legitimate interest is to guarantee the security of our offer and to prevent any abusive use.

(3) Further collection, processing and use of personal data

We only collect or process personal data if you voluntarily provide such data, e.g. within the context of a request. In this case, all your data from the request are saved and used by us. This includes the contact details provided by you in order to meet the purpose associated with the data disclosure, e.g. to process your request and for the case of follow-up queries.  The basis of storing and using these personal data is Art. 6 Para. 1 P. 1 lit. b) GDPR, provided you enter these personal data with us for the purpose of the initiation of a contractual relationship. It is only in this case that the input of personal data is required pursuant to Art. 13 Para. 2 e) GDPR. Otherwise, the saving and use of data takes place pursuant to Art. 6 Para. 1 P. 1 lit. f) GDPR, whereby our legitimate interest is the diligent processing of your concerns.

If you commission us with the provision of a service or the shipment of goods, we collect, store and use your personal data fundamentally only to the extent required for the provision of the service or for the execution of the contract. The legal basis for the related data processing is in each case Art. 6 Para. 1 P. 1 lit. b) GDPR. To this end, it may be necessary to disclose your personal data to companies that we use for the provision of the service or for the contract processing. These include, for example, transport companies or other service providers. This disclosure to service providers used by us also takes place pursuant to Art. 6 Para. 1 P. 1 lit. b) GDPR.

In all cases in which data processing, as described above, is used for contract fulfilment, the provision of your personal data for the contract conclusion is required (see Art. 13 Para. 2 lit. e) GDPR). An execution of the contract is not possible for us without your personal data.

Under GDPR, you are the owner of your personal data. If you have previously submitted a website contact form request and shared your email/ company name /phone nr/address with us, you have the right to 'be forgotten'. Please send us an email to: [email protected] if you would like us to delete all data we have collected about you.

(4) Subscription to website services, newsletter

We need a valid email address from you if you subscribe to our website services, or wish to order our newsletter.  In order to verify that you are the owner of the email address provided and that you agree to the receipt of the subscribed email news, or the newsletter respectively, after your registration we immediately send you an email to the address given which features a confirmation link for the registration to the respective service, i.e. website service or newsletter. Your registration will not become effective until you have confirmed it by clicking on the link provided (so-called double opt-in process). Other data will not be collected. These data will only be collected and used to send you the subscribed service or newsletter and to record our authorisation in this respect. No disclosure of data to third parties will be made. The approval given for the storage of the email address, as well as its use for shipment and email news or the newsletter respectively, can, at any time, be revoked by you for the future by clicking on the “Unsubscribe” link in the newsletter. The legal basis in relation to the newsletter and other subscribed email news is your consent (Art. 6 Para. 1 P. 1 a) GDPR).

(5) Data processing during the application procedure

Your personal data provided by you as part of an application (as a rule, contact details, cover letter and application documents, summarised as "application data"), will only be electronically saved and used for the purpose of processing the application. A disclosure to third parties outside Castolin Eutectic Group does not take place. The following group of people has access to your data: Employees in the human resources areas, the responsible supervisors and the workers’ council (if any). Should there be a second personal interview, future colleagues are given your CV in order to prepare for the interview. All the aforementioned individuals are obliged to data secrecy and will treat your application in absolute confidence.

The collection and processing of data as part of the application for a job vacancy at Castolin Eutectic Group takes place according to Art. 88 GDPR in conjunction with § 26 Para. 1 P. 1 German Federal Data Protection Act . Insofar as we store your personal data after conclusion of the application procedure for the duration of one year in our applicant management system, this occurs in accordance with Art. 6 Para. 1 P. 1 lit. a) GDPR on the basis of your voluntary consent which we obtain separately if required during the application procedure. Otherwise, your data (application data and interview results) will be completely deleted from our applicant management system at the latest after six months have elapsed as from the end of the application procedure.

(6) Cookies
(7) Web analysis with Matomo Analytics

This website uses Matomo Analytics, a software released under the GNU General Public License v3.0. Matomo offers an advanced General Data Protection Regulation Manager to ensure the website is fully compliant with the new regulation. Matomo is compliant with a range of privacy laws around the world such as GDPR, HIPAA, CCPA, LGPD, and PECR.

Europa Analytics is based on Matomo which is the leading open-source analytics platform that provides relevant and reliable insights into user behaviour. The data and information collected by Matomo is 100% owned and controlled by the European Commission. This guarantees compliance with strict privacy regulations and laws. Matomo is used worldwide by large corporations, SMEs, governments & non-profit organisations.

Matomo uses a select number of trusted external service providers for certain technical data processing and/or service offerings. These service providers are carefully selected and meet high data protection and security standards. Matomo uses the following subprocessors to process the data collected: AlwaysData placed in Europe, France, it secures infrastructure for servers and databases and logs hosted in Paris, France. 

How Matomo Analytics ensures GDPR compliance:

  • Data anonymization
  • GDPR Manager
  • Users can opt-out of all tracking
  • First-party cookies by default
  • People can view the data collected
  • Capabilities to delete visitor data when requested
  • The data is not used for any other purposes (compared to Google Analytics)
  • IP anonymization
  • Visitor log and profiles can be disabled
  • Data is stored in the EU (Matomo Cloud) or in any country of your choice (Matomo On-Premise).

Matomo will by default track the following information:

  • User IP address (see also: IP anonymisation)
  • Date and time of the request
  • Title of the page being viewed (Page Title)
  • URL of the page being viewed (Page URL)
  • URL of the page that was viewed prior to the current page (Referrer URL)
  • Screen resolution being used
  • Time in local user’s timezone
  • Files that were clicked and downloaded
  • Links to an outside domain that were clicked
  • Pages generation time
  • Location of the user: country, region, city, approximate latitude and longitude
  • Main Language of the browser being used
  • User Agent of the browser being used.
(8) Data transmissions to third parties

We do not disclose your personal data to third parties without your express consent, provided this is not required for the provision of the service or for the execution of the contract. Accordingly, your data are only transmitted to third parties on the basis of your consent according to Art. 6 Para. 1 P. 1 lit. a) GDPR or for the purposes of contract fulfilment according to Art. 6 Para. 1 P. 1 lit. b) GDPR. Any disclosure to government agencies and authorities with the right to information only takes place within the framework of legal information obligations or if obligated to do so by a legal decision for information. In such a case, the disclosure of your data is required by Art. 6 Para. 1 P. 1 lit. c) GDPR for the fulfilment of a legal obligation to which we are subject.

Insofar as service providers come into contact with your personal data, we have ensured by virtue of legal, technical and organisational measures, as well as regular controls, that the regulations of data protection legislation are complied with.

(9) General duration of storage and removal

We store your personal data as long as required for the fulfilment of the intended purpose (e.g. contract fulfilment, answer to your request)  or justified reasons in accordance with Art. 17 Para. 3 GDPR such as legal retention periods with a storage requirement. Insofar as legal retention obligations such as legal tax and trade regulations impede the removal of your personal data, we restrict the processing of your data; you data will then be deleted according to legal regulations.

Applicant data will be deleted within a maximum of six months after completion of the application procedure insofar as you have not given us your consent for storage above and beyond this, or justified reasons on our part, such as the defence of legal claims which prevent data removal.

(10) Security of your personal data

We adopt technical and organisational prevention measures to prevent a loss, misuse or an unauthorised change to your personal data. We save all personal data provided to us on our secure (password and firewall protected) servers. All electronic transactions which you perform with us or which you receive from us are encrypted. Please take into account that data transmission via the internet is not, in itself, completely secure and we are unable to guarantee the security of the data transmitted via the internet. You are responsible for the secrecy of your password and user identification. We will not ask you for the password you used to register with our website services.

(11) Your rights as the data subject

You are given information on the data saved on you by us free of charge at any time without having to justify your reasons. Moreover, you have the right to rectify incorrect data (Art. 16 GDPR), as well as to erase your personal data (Art. 17 GDPR) or to restrict data processing (Art. 18 GDPR). Insofar as the basis for data processing is Art. 6 Para. 1 P. 1 lit. f) GDPR (compliance with legitimate interests), you have the right, according to Art. 21 GDPR, to oppose the processing of your personal data  at any time provided that reasons exist which arise from your special situation or if the opposition to data processing is intended for the purposes of direct advertising. In the last case referred to above, you are granted a general right of objection which, without providing reasons, as a result of your special situation, will be implemented by us (Art. 21 Para. 2 GDPR). If you lodge an objection for reasons arising from your special situation, we will cease to process your personal data unless we can provide obligatory reasons worthy of protection for the processing, which prevail over your interests, rights and freedoms, or the processing is used to enforce, exercise or defend legal claims  (Art. 21 Para. 1 GDPR).

You can also freely revoke your consent given to us for data collection and use without providing reasons with effect in  the future.

Insofar as your provide data, related to you, and we process these data as the result of your consent or for contract performance, you can demand that these data are obtained by you from us in a structured, conventional and machine-readable format or that we transfer these data to another controller provided this is technically possible (so-called right to data portability). Moreover, you have the right to complain to a supervisory authority if you believe that data processing by us violates legal regulations.

For the enforcement of the above listed rights, please refer to our contact address given above or send an email to us, or to our data protection officer.

(12) Our data protection officer

In our company we have appointed internal data protection coordinators and an external data protection officer.  They perform organisational and technical measures and ensure that your personal data are properly protected. Please contact the data protection officer at Castolin Eutectic Group for queries on data protection at [email protected].

For postal contact details please use the postal address featured at the top in the introduction.

(13) Links to websites of other providers

Our website may contain links to other providers who are not covered by the privacy statement. It does not encompass such contents and the websites of third parties to which our website merely provides a link. This is applicable in particular to social networking sites such as Linkedin, YouTube, etc. The processing of your personal data via these social networking sites takes place by the respective operators of the network and we are not able to affect said processing. This is also applicable with regard to your personal data which you provide us with via such a platform, e.g. by writing to our profile in the respective social networking site. Insofar as the use of the internet sites of other providers means the collection, processing or use of personal data, please take into account the data protection terms of the respective provider. Information on handling your personal data and their protection on these platforms can be found in the privacy statement of the respective platform provider. Provided that we do, however, store and use your personal data provided to us via a social networking site or which we receive from a social networking site, on our own servers for the purposes of processing your request or concerns or for other purposes, then the statements made above in this privacy statement are, of course, applicable.

(14) Changes to this privacy statement

We reserve the right to change the existing privacy statement within the framework of the current legal regulations and to publish an updated version on our website provided this is indicated, e.g. due to new technical developments or changes to the jurisdiction or to our business operation. Therefore, you should check this site from time to time to ensure that you are familiar with our current privacy statement.