Privacy Policy

Data protection information relating to our website and other online presentations

I. General

1. Controller

We - Xella International GmbH - take the protection of your personal data and the legal obligations that serve to protect them very seriously. The legal provisions require full transparency in the processing of personal data. Only when you as the data subject feel that the data processing is transparent and plausible for you, you can be deemed sufficiently informed about the intention, purpose and scope of the processing. This Privacy Policy therefore explains to you in detail which personal data we process when you use our website www.xella.com or other subpages referring thereto or our other online presentations in social networks.

The body responsible for the data processing, i.e. the “controller” in terms of the General Data Protection Regulation (GDPR), the Bundesdatenschutzgesetz (German Federal Data Protection Act – “BDSG”) and other applicable data protection regulations is

Xella International GmbH
Düsseldorfer Landstraße 395
47259 Duisburg, Germany
+49 203 60880-0

datenschutz@xella.com 

- Referred to hereinafter as “controller” or “we” -

You can contact the responsible data protection officer at

Xella International GmbH
Düsseldorfer Landstraße 395
47259 Duisburg, Germany

+49 203 60880-0

datenschutz@xella.com

Please be aware that the links on our website may refer you to other Internet pages which are not operated by us but by third parties. Such links are clearly marked or become apparent by a change of the address line in your browser. We are neither responsible nor liable for the compliance with the applicable data protection regulations and the secure handling of your personal data by the third-party website operators.

2. Definitions

2.1. According to the GDPR

We use the terms of the legal wording of the GDPR for the purposes of this Privacy Policy. The definitions (Art. 4 GDPR) can be found for instance at https://eur-lex.europa.eu/legal-content/DE/TXT/?uri=CELEX:32016R0679 .

2.2. Cookies

Cookies are text files which are stored on your terminal when you visit a website and which are read out there. They contain combinations of letters and figures to enable, for instance, recognition of the user and the applicable settings when the user comes back to the website that set the cookies; they also enable the user to stay logged-in to a customer account and they serve to statistically analyse certain user behaviours.

2.3. Data categories

Where we make reference in this Privacy Policy to the data categories we process, these are deemed to include but are not limited to the following data: Master data (e.g. name, address, date of birth), contact data (e.g. email address, telephone numbers, messenger services), content data (e.g. text entries, photographs, videos, contents of documents/files), contract data (e.g. subject matter, terms, customer categories), payment data (e.g. bank details, payment history, use of other payment service providers), usage data (e.g. details about the course of your visit to our website, use of certain contents, times of access) as well as connection data (e.g. device data, IP addresses, URL referrer).

3. Information on data processing

We only process personal data if and to the extent this is permitted by law. We only transfer personal data to third parties in the cases described below. The personal data are protected by appropriate technical and organisational measures (e.g. pseudonymisation, encryption).

Except where we are obliged by law to store or transfer personal data to third parties (especially to prosecuting authorities), our decision which personal data we store and for how long and to which extent we may from time to time disclose them to others depends on the features of the website you use from time to time.

4. Storage duration

The personal data will be deleted as soon as the purpose of the processing has been fulfilled or has expired otherwise or as soon as any required storage period has expired unless it is necessary to continue the data storage for the purpose of entering into or performing a contract. In case we use cookies which are not essential for making the service you desire available to you, we inform you about the duration of these cookies at the end of this Privacy Policy.

5. Automated individual decision-making including profiling

Automated individual decision-making including profiling according to Art. 22 subs. 1, 4 GDPR for bringing about such a decision does not take place.

6. Rights of the data subject

You as the data subject have the right of access/ right to information according to Art. 15 GDPR, the right to rectification according to Art. 16 GDPR, the right to erasure according to Art. 17 GDPR, the right to restriction of processing according to Art. 18 GDPR and the right to data portability according to Art. 20 GDPR. The right of access/ right to information and the right to erasure are subject to the restrictions under §§ 34, 35 BDSG (German Federal Data Protection Act). You have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR in combination with § 19 BDSG). The authority responsible for supervising us is:

Die Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen

(officer for data protection and freedom of information of the Land North Rhine-Westphalia), Kavalleriestr. 2-4, 40213 Düsseldorf, Germany.[SU3] 

You may however also lodge your complaint with any other supervisory authority in charge of data protection.

7. Controller’s notification obligations

We communicate any rectification or erasure of your personal data or restriction of processing carried out in accordance with Art. 16, Art. 17 subs. 1 and Art. 18 GDPR to each recipient to whom your personal data have been disclosed, unless this proves impossible or involves disproportionate effort. We will inform you about those recipients if you request us to do so.

8. Obligation to provide personal data

Unless otherwise stipulated in sections II and III below which also specify the applicable legal bases, you are not obliged to provide us with personal data. However, in the cases described in Art. 6 subs. 1 b) GDPR, the personal data are necessary for performing or entering into a contract. If you do not provide us with the required personal data, we are unable to perform or enter into the contract. If you do not provide the data in the cases described in Art 6 subs. 1 a) and f) GDPR, you cannot use the relevant parts of our website. 

9. Right to object and withdrawal of consent

You have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data which is based on Art. 6 subs. 1 f) GDPR. Where personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes.

Pursuant to Art. 7 subs. 3 sentence 1 GDPR, you have the right to withdraw any consent you have given to us at any time. The withdrawal of consent does not affect the lawfulness of the processing based on your consent before its withdrawal. This means that the withdrawal only has effect for any processing intended for the time after the withdrawal. You may withdraw your consent by informal notice sent by mail or email. If you object to the processing, we will no longer process your personal data unless we are otherwise permitted (by law) to do so. If you withdraw your consent and there is no other legal ground justifying the processing of your personal data, we are obliged under Art. 17 subs. 1 b) GDPR to delete your personal data at your request without undue delay (“unverzüglich”).

You may object to the processing and/or withdraw your consent by informal notice which should be sent to:

Xella International GmbH
Düsseldorfer Landstraße 395
47259 Duisburg, Germany

+49 203 60880-0

datenschutz@xella.com

II. Data processing when you use our website

The use of our website and its features and functions generally requires the processing of certain personal data. 

Use of the website for information purposes
Purpose of the processing: If you visit our website and use it for mere information purposes, which means without using any additional features or functions such as the contact form or social media plug-ins, we automatically collect personal data for ensuring the functionality and optimization of the website as well as the security of our information technology systems. 
Legal basis: Art. 6 subs. 1 f) GDPR
Data categories: connection data
Data recipient: IT service provider
Intended transfer to third countries: We do not intend to transfer the data to third countries.
Do we store information on your terminal based on your consent or do we read such information out? No

 

When you contact us (by email, telephone, contact form)
Purpose of the processing: Answering your request which you have sent to us by contact form from our website, by email or answering your request for call-back.
Legal basis:  Art. 6 subs. 1 f) GDPR; Art. 6 subs. 1 b) GDPR (if your request pertains to the conclusion of a new contract or to an existing contract); Art. 88 subs. 1 GDPR in combination with § 26 subs. 1 BDSG (German Federal Data Protection Act) (if you send us your application papers)
Data categories: Master data, contact data, content data, connection data and, where applicable, contract data
Data recipient:  The data may from time to time be transferred to affiliated companies within the Xella group.
Intended transfer to third countries: We do not intend to transfer the data to third countries.
Do we store information on your terminal based on your consent or do we read such information out? No

Request for advertising material or quotations
Purpose of the processing: Sending you the requested advertising material and preparing and sending you the requested quotations.
Legal basis:  Art. 6 subs. 1 f) GDPR; Art. 6 subs. 1 b) GDPR (if your request pertains to the conclusion of a new contract or to an existing contract)
Data categories: Master data, contact data, connection data and, where applicable, contract data
Data recipient:  The data may from time to time be transferred to affiliated companies within the Xella group; postal service providers. 
Intended transfer to third countries: We do not intend to transfer the data to third countries.
Do we store information on your terminal based on your consent or do we read such information out? No
 

 

 

III. Hinweise zu externen Seiten der Xella

Facebook
Purpose of processing: We have set up a page about our company ("Facebook page") on the "Facebook" platform at the address https://www.facebook.com/XellaGruppe. When you access this page, Facebook processes personal data from you. We receive statistics on the use of this page derived from this data. 
Legal basis: Art. 6 para. 1 letter f GDPR. 
Data categories: Master data, if applicable, contact data, content data, usage data, connection data, location data, if applicable.
Recipients of the data: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook") (as joint controller, Art. 26 GDPR - the essence of the agreement can be found at https://www.facebook.com/legal/terms/page_controller_addendum).
Intended third country transfers: On a case-by-case basis, USA and other third countries (based on the EU Commission's standard data protection clauses, Art. 46(2)(c) GDPR and based on adequacy decisions (Art. 45 GDPR)).
Do we store or read out personal data on your end device based on your consent? No
Data subject rights: Facebook is responsible for implementing your data subject rights. Facebook will inform you about your data subject rights at https://www.facebook.com/legal/terms/information_about_page_insights_data. You can also assert your rights against us, we will then forward your request to Facebook immediately. 

LinkedIn (profile)
Purpose of processing: We have set up a page about our company on the "LinkedIn" platform at the address https://www.linkedin.com/company/xella/. When you access this page, LinkedIn processes personal data from you. We receive statistics on the use of this page derived from this data.
Legal basis: Art. 6 para. 1 letter f GDPR.
Data categories: Master data, if applicable, contact data, content data, usage data, connection data, location data, if applicable.
Recipients of the data: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (as joint controller pursuant to Art. 26 GDPR- the essence of the agreement can be found at https://legal.linkedin.com/pages-joint-controller-addendum).
Intended third country transfer: On a case-by-case basis, USA and other third countries (based on the EU Commission's standard data protection clauses, Art. 46(2)(c) GDPR and based on adequacy decisions (Art. 45 GDPR)). 
Do we store or read out personal data on your end device based on your consent? No 
Data subject rights: LinkedIn is responsible for implementing your data subject rights. LinkedIn will inform you about your data subject rights at https://www.linkedin.com/legal/privacy-policy. You can also assert your rights against us, we will then forward your request to LinkedIn immediately.

XING (profile)
Purpose of processing: We have set up a page about our company on the "XING" platform of New Work SE, Dammtorstraße 30, 20354 Hamburg ("New Work") under the address https://www.xing.com/pages/xellagruppe. When you access this page, New Work processes personal data from you. 
Legal basis: Art. 6 para. 1 letter f GDPR.
Data categories: Master data, if applicable, contact data, content data, usage data, connection data, location data, if applicable.
Recipient of the data:  New Work SE, Dammtorstraße 30, 20354 Hamburg ("XING"). 
Intended third country transfer: In individual cases, USA and other third countries (based on the standard data protection clauses of the EU Commission, Art. 46 (2) (c) GDPR and based on adequacy decisions (Art. 45 GDPR)).
Do we store or read out personal data on your end device based on your consent? No

YouTube Channel
Purpose of processing: We have set up a video channel on the "YouTube" platform of Google Ireland Ltd, Gordon House, Barrow Street Dublin 4 Ireland ("Google") at the address https://www.youtube.com/user/XellaBaustoffe. When you access this page, Google processes personal data from you. We receive statistics about the use of this page derived from this data.
Legal basis: Art. 6 para. 1 letter f GDPR.
Data categories: Master data, if applicable, contact data, content data, usage data, connection data, location data, if applicable.
Recipients of the data: Google Ireland Ltd, Gordon House, Barrow Street Dublin 4, Ireland. 
Intended third country transfer: In individual cases, USA 
Do we store or read out personal data on your end device based on your consent? No

IV. Information on the cookies we use

The names and duration of the cookies which are used by the above-mentioned plug-ins and services - provided you have consented to the use of cookies – can be found in the Privacy Settings of the website under Services > Stored Information
[Name of the service]: [Name of the cookie] [Cookie description] [Duration].
Access to a cookie is generally only possible from the Internet address from which the cookie was set. This means that we cannot access the cookies of the providers we involve (see above). These providers cannot access our cookies either. Third parties can neither access our cookies nor those of the providers we involve. Third parties may only access cookies by technical attacks which we cannot control and for which we are neither responsible nor liable.