We welcome you to our website and appreciate your interest in our company. We take the protection of your personal data very seriously. We process your data in accordance with the applicable legal provisions for the protection of personal data, in particular the EU General Data Protection Regulation (EU GDPR) and the country-specific implementation laws applicable to us. With the help of this privacy policy we inform you comprehensively about the processing of your personal data by cetotec GmbH and your rights.

Personal data is the information that makes it possible to identify a natural person. This includes in particular name, date of birth, address, telephone number, e-mail address but also your IP address. Anonymous data exists if no personal reference can be established to the user.

Information on data protection

The following information concerns the processing of personal data of users of the website www.cetotec.com. Internet pages and other electronic information and communication services are referred to in detail as "telemedium" by the German Telemedia Act (TMG).

Name and contact details of the person responsible

for the processing of personal data in connection with your use of this telemedia service are:

cetotec GmbH
Zilzkreuz 23
53604 Bad Honnef, Germany
Tel.: +49 2224 900 000
E-Mail: info@cetotec.com

Contact details of the (Group) Data Protection Officer

of the responsible person are:

cetotec GmbH
- Data protection officer -
Zilzkreuz 23
53604 Bad Honnef, Germany
email: d.keilbach@wilsberg-metalltechnik.de

Processing of personal data

The processing of personal data in connection with the provision of this website is carried out for the following purposes and takes place on the basis of the following legal grounds as well as - insofar as factually relevant - in pursuit of the following legitimate interests of the controller or a third party:

• 1st purpose: provision of the telemedia service. Legal basis: Art. 6 para. 1 p. 1 lit. b) Regulation (EU) 2016/679
• 2nd purpose: provision of additional offers of the telemedia service, Legal basis: Art. 6 para. 1 p. 1 lit. f) Regulation (EU) 2016/679. In doing so, the controller pursues the following legitimate interests: Improvement of user-friendliness, reduction of required bandwidths, increase in the efficiency of its operating resources. In this context, please note that you have the right to object, see below, in the list of your rights.
• 3rd purpose: processing requests from users of the telemedia service, legal basis: Art. 6 para. 1 p. 1 lit. b) Regulation (EU) 2016/679.
• 4th purpose: ensuring the confidentiality, integrity, availability and resilience of the telemedia service and the systems used for its provision, including measures to detect, limit, prevent and remedy faults or errors in the telemedia service legal basis: Art. 6 para. 1 p. 1 lit. c) Regulation (EU) 2016/679. Corresponding legal obligations of the responsible party result, among others, from: Art. 32 para. 1 Regulation (EU) 2016/679
• 5th Purpose: Economic optimisation and needs-based design of the telemedia service, legal basis: Art. 6 para. 1 sentence 1 lit. f) Regulation (EU) 2016/679

In doing so, the responsible person pursues the following legitimate interests: Increasing the efficiency of its resources, increasing revenue, reducing costs, testing and improving user-friendliness. In this context, we would like to draw your attention to your right to object, see below, in the list of your rights.

Recipient categories

The personal data processed in connection with the provision of this website are disclosed to the following categories of recipients:

1. processors, i.e. companies that, on the basis of contractual obligations, handle your data exclusively in accordance with the instructions of the controller:

• Providers of technical services and services such as Data centre services, in particular Vercel Inc, 340 S Lemon Ave #4133, Walnut, CA 91789, USA.

2. third parties, i.e. companies that handle your data under their own responsibility:

• Providers of additional services / content suppliers

Third Country

The Controller intends to disclose personal data to recipients in a third country on the basis of the following legal grounds:

• Country: USA
• Legal basis: Commission Implementing Decision (EU) 2021/914 on standard contractual clauses.
• Availability: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de Vercel Inc - https://vercel.com/legal/dpa

Duration of storage

With regard to the indication of the duration of storage, it should generally be noted that personal data are only stored by the controller for as long as is necessary to pursue the purpose of their processing. This results in detail:

For purposes No. 1, No. 2 and No. 4 above, the data will be stored for as long as your use of the telemedia service continues.

For the above-mentioned purpose No. 3, the data will be stored until the communication with the user has ended; if the content of the communication triggers retention obligations, the data will be stored beyond the time of the end of the communication, until the expiry of the retention obligation, otherwise at least as long as the possibility of the responsible party's own legal defence makes the storage necessary within the framework of statutory limitation or preclusion periods.

For the above-mentioned purpose no. 5, the personal data are stored during your use of the telemedia service and thereafter until they are anonymised within a few minutes after the end of your use.

Rights

In principle, i.e. subject to legal restrictions, you have the rights listed below. In order to facilitate the exercise of these rights, you are informed that a corresponding application by you does not require a specific form and can therefore also be made electronically (in particular by e-mail).

• You may request information from the controller about the personal data concerning you.
• You may request that the controller rectify inaccurate personal data concerning you.
• You may request the controller to erase the personal data concerning you.
• You may request the controller to restrict further processing of your personal data.
• You have the right to object to the controller's further processing of your personal data for the purposes mentioned in points 2 and 5 above, on grounds relating to your particular situation.
• Finally, you have the right to obtain from the controller, in a structured, commonly used and machine-readable format, the personal data concerning you which you have provided to the controller for purposes 1 and 3 above and to transmit this data to another person without hindrance from the controller to whom the personal data has been provided.
• You also have the right to lodge a complaint with a supervisory authority responsible for data protection about the controller's handling of your data. To facilitate the exercise of this right, please be informed that the supervisory authority responsible for the registered office of the data controller can be reached at the following address:

• State Commissioner for Data Protection and Freedom of Information Nordrhein-Westfalen, Kavalleriestr. 2-4, 40213 Düsseldorf

Provision of data

Your provision of the personal data concerning you is necessary for the provision of the telemedia service. There is no legal obligation to provide the data. However, failure to provide the data would have the consequence that the telemedia service cannot be provided to you.

Automated decision making

Automated decision-making processes that could have legal effects on you or could significantly affect you in a similar way do not take place in connection with your use of the telemedia service.