PYREX – Chemistry to Protect

(Valid: 23. Mai 2018)

1. Preamble

Our company takes the protection of its customer data very seriously. Protecting your privacy is of great importance to us and pursued with great diligence during all business transactions.

The following points will provide you with information about your data. The law determines which information is required.

For more information, please see Articles 12 – 22 and 34 of the General Data Protection Regulation which can be found at: https://eur-lex.europa.eu/eli/reg/2016/679/oj.

Should you have any questions, please contact our data protection officer and/or managing directors.

2. What is personal data?

Any information that refers to an identified or identifiable person. A person is identifiable if he can be identified directly or indirectly, e.g., through identifiers, such as a name, identification data, location data, online identifiers or one or more special features.

3. Who is responsible for the processing of my data?

The data processing controller is the

PYREX Industries GmbH

Immendorfer Str. 8

50321 Brühl - Germany

Tel. +49 (0) 2232 57646 - 0

E-mail info@pyrex-industries.com

4. How can I contact the company's data protection officer?

If you have any questions about the processing of your personal data, you may contact us at any time. You may also contact our data protection officer:

Our data protection officer may be contacted at our postal address with the addition "Data Protection Officer" or by email at info@pyrex-industries.com.

5. How is personal data processed?

You may visit our website without disclosing personal information. An IP address is considered data that can be used to identify you personally. We need an IP address to provide the contents of our website to you technically. We only save access data without personal information. Non-personal information includes any information collected, processed and saved anonymously and that cannot be assigned to a person, e.g., aggregated figures, such as average durations of visits to our website or the frequency of access to our website, but no data that allows personal identification. Data on individual visitors may be collected anonymously so that it is not and cannot be used for personal identification. When saving non-personal information, IP addresses and domain data of visitors especially are also saved in shortened form to prevent identification of individual visitors. We will not merge any IP addresses we collect with other datasets. This data is only processed to improve our offer and does not allow you to be personally identified.

Personal data is only collected if provided by you voluntarily (legal basis: Article 6(1) Sentence 1 Letter a of the General Data Protection Regulation, consent) as part of an order or when creating a customer account (legal basis: Article 6(1) Sentence 1 Letter b of the General Data Protection Regulation, contract initiation/performance) or subscribing to our newsletter (e.g., inventory lists updated monthly). Without your consent, we will only use the data disclosed by you to prepare offers and to process and complete your order.

Furthermore, we use your personal data to send you information about (including newly arrived) goods from our inventory (e.g., inventory lists updated monthly) and/or special campaigns (e.g., upcoming trade fairs) by email. The legal basis for this is your consent (Article 6(1) Sentence 1 Letter a of the General Data Protection Regulation) or our legitimate interest (Article 6(1) Sentence 1 Letter f of the General Data Protection Regulation). Our legitimate interest is due to the fact that, as a company, we depend on being remembered by our existing customers and attracting new customers. This can especially be achieved through marketing measures, such as advertising by email.

In addition, we save additional data with your personal data that we obtain from regular customers. This is data on your buying behavior, especially on the type of goods purchased by you. We use this data for internal marketing measures, to evaluate how our advertising measures are received and to assess customer buying behavior.

The storage and use of this data is based on our legitimate interest in data processing (Article 6(1) Sentence 1 Letter f of the General Data Protection Regulation). Knowledge of the wishes and needs of our customers is of great importance to our medium-sized company and may be obtained through assessments of the success of advertising measures and analyses of customer buying behavior. This represents a form of profiling. Internal market research results are used to adjust our assortment to and better meet the wishes of our customers. Insights obtained from these analyses are also used to improve and optimize our marketing measures and our service.

6. Transfers of personal data

Your personal data will be transferred to the shipping company commissioned by us for the delivery if required for the delivery of goods.

We will use your name and your email address for our newsletter (e.g., inventory lists updated monthly). Employees of our company involved in data processing may access the required data. No further transfers of personal data to third parties will be performed.

7. Transmissions to third countries or international organizations

Transmissions of your personal data to third countries and/or international organizations will not be performed.

8. Withdrawal of consent

You may withdraw your consent to the processing of your personal data or have yourself removed from our regular customer file at any time with future effect. In such cases, you may no longer claim benefits granted by us to regular customers.

9. Storage duration

We will use the data disclosed by you for the purposes described in Point 5 above. If the data is no longer required for the fulfillment of these purposes, your data will be blocked for further use and deleted after the storage period required under tax and commercial law expires, unless you expressly consent to further use of your data. When subscribing to our newsletter, your email address will be used for our marketing purposes until you unsubscribe. You may unsubscribe at any time.

10. Your rights

As the data subject of data processing, you have the following rights under the General Data Protection Regulation ("data subject rights"):

10.1. Right to information (Article 15 of the General Data Protection Regulation)

You have the right to obtain information about whether we process your personal data. If we process your personal data, you have the right to know

Why we process your data
What type of your data we process
What type of recipients receive or should receive your data
How long we save your data; if a storage duration cannot be provided, we must state how storage durations are determined (e.g., following the expiration of legal storage periods)
That you have the right to rectification and erasure of data concerning you, including the right to processing restriction and/or the right to object
That you may submit complaints to supervisory authorities
The source of your data if the data is not collected directly from you
Whether your data is used for automated decision-making and, if so, on what logic this is based and what implications this automated decision-making may have for you
That, if data on you is transmitted to a state outside of the European Union, you have the right to information about whether and, if so, based on what guarantees an adequate level of protection is ensured by the data recipient
That you have the right to obtain a copy of your personal data. Copies of personal data are provided in electronic form. The first copy may be received free of charge. An appropriate fee will be charged for each additional copy. A copy may only be provided if the rights of persons are not impaired thereby.

10.2. Right to rectification (Article 16 of the General Data Protection Regulation)

You have the right to obtain rectification of your data from us for data that is inaccurate and/or incomplete. This right also includes completion through supplementary declarations and notifications. Rectification and/or completion must occur without undue delay.

10.3. Right to erasure of personal data (Article 17 of the General Data Protection Regulation)

You have the right to obtain the erasure of your personal data from us if

The personal data is no longer required for the purposes for which it was collected
The data is processed due to consent granted and subsequently revoked by you. However, this does not apply if the processing is permitted by law otherwise
You object to the data processing that is legally permitted due to so-called "legitimate interests" (under Article 6(1) letters e or f of the General Data Processing Regulation). However, erasure is not required if overriding legitimate reasons for further processing exist
You object to the processing of data for direct marketing purposes
Your personal data is processed unlawfully
The data belongs to a minor and was collected for information society services (=electronic services) on the basis of consent (under Article 8(1) of the General Data Protection Regulation)

The right to erasure of personal data does not apply if

Countered by the right to free speech and information
The personal data is required for the establishment, exercise or defense of legal claims

or if the processing of personal data is necessary for the

Fulfillment of legal obligations (e.g., legal storage obligations)
Performance of tasks in the public interest under the applicable laws (including "public health")
Archiving and/or research purposes

Erasure must be performed promptly (without undue delay). If personal data is published by us (e.g., on the Internet), we must, as far as technically feasible and reasonable, ensure that other data processors are informed about your erasure request, including for links, copies and/or replicas.

10.4. Right to processing restriction (Article 18 of the General Data Protection Regulation)

You have the right to obtain the restriction of the processing of your personal data:

If you contest the accuracy of your personal data, you may demand that your data may not be used otherwise and therefore restrict its processing for the duration of the verification
In case of unlawful processing, you may demand the restriction of processing instead of erasure of the data
If you need your personal data for the establishment, exercise or defense of legal claims and if we no longer require your personal data, you may demand the restriction of its processing from us for litigation purposes
If you submitted an objection under Article 21(1) of the General Data Protection Regulation for the processing of your personal data and if whether our interests in its processing override your interests has not yet been determined, you may demand that your data may no longer be used otherwise and therefore restrict its processing for the duration of the verification

Personal data whose processing is restricted on your request may—conditional on being saved—only be processed

With your consent
For the establishment, exercise or defense of legal claims
To safeguard the rights of other natural or legal persons
For reasons in the public interest

Should processing restrictions be lifted, we will notify you of this in advance.

10.5. Right to data portability (Article 20 of the General Data Protection Regulation)

You have the right to obtain the data you provided from us in a commonly used electronic format (e.g., as a PDF or Excel file). You may also demand that we transmit this data directly to another company (specified by you) if technically feasible for us. This right requires the processing to be performed on the basis of consent or for the performance of a contract and using automated processes. The exercise of this right to data portability may not impair the rights and freedoms of other persons. If you exercise the right to data portability, you are also entitled to the right to erasure under Article 17 of the General Data Protection Regulation.

10.6. Right to object to certain data processing (Article 21 of the General Data Protection Regulation)

If your data is processed for the performance of tasks in the public interest or to safeguard legitimate interests, you may object to this processing. However, you must state the reasons for the objection due to your particular situation. This may be, e.g., special family circumstances or interest in non-disclosure. In case of an objection, we must cease any further processing, except

In case of reasons for the processing that override your interests, rights and freedoms
If the processing is required for the establishment, exercise or defense of legal claims

You may object to the use of your personal data for direct marketing purposes at any time, including for profiling if related to the direct marketing. In case of an objection, we must cease any further use of your personal data for direct marketing purposes.

11. Email Newsletter

If you subscribe to our email newsletter (e.g., inventory lists updated monthly), we will use your email address and, if applicable, your first and last name to send you our monthly newsletter. Use of your email address is necessary for the sending of the respective newsletter. We will use your first and last name to address you personally in our newsletters.

You may object to the use of your name for the sending of our newsletter at any time.

The legal basis for the use of your data for our newsletter is your consent (Article 6(1) Sentence 1 Letter a of the General Data Protection Regulation). You may withdraw your consent to the receipt of our email newsletter at any time with future effect and may unsubscribe from our newsletter. For this, you may send us an email at info@pyrex-industries.com or contact us at the contact details provided at the beginning of this Privacy Policy.

There is no obligation to disclose personal data. However, you cannot receive our newsletter without providing your email address.

We will save your personal data used for sending our newsletter until you object to its further use or unsubscribe from our newsletter. Upon receipt of the withdrawal of your consent, we will delete your respective personal data. If further storage is required for legal or contractual purposes, your data will be blocked from further use until the contractual purpose is fulfilled or until the storage period expires and will be deleted following the achievement of the contractual purpose or expiration of the storage period.

12. Contact form

If you submit inquiries to us through our contact form, we will save the information you provide with the inquiry, including your contact details, to process your inquiry and for any follow-up questions. We will not transfer this data without your consent.

The data entered into the contact form will therefore only be processed on the basis of your consent (Article 6(1) Letter a of the General Data Protection Regulation). You may withdraw this consent at any time. For this, formless notification by email will suffice. However, the legitimacy of any data processing performed prior to the withdrawal will remain unaffected.

We will retain the data you entered into the contact form until you request its deletion or withdraw your consent to its storage or until the purpose for its storage ceases to apply (e.g., following the completion of the processing of your inquiry). Applicable legal regulations—especially storage periods—will remain unaffected.

12.1. Automated decision-making

We do not use automated decision-making processes.

12. How are cookies used?

We use cookies on various pages to make visits to our website attractive and provide use of certain functions. Cookies are small text and image files saved onto your computer.

Most of the cookies used by us will be deleted from your hard disk after your browser session ends (so-called session cookies). Other cookies will remain on your computer and allow us to recognize your computer during your next visit (so-called permanent cookies).

Cookies do not have to be accepted to visit our website.

What are cookies?

Cookies are small files saved on your data carrier and that save certain settings and data for exchange with our system via your browser. A distinction is made between two types of cookies: So-called session cookies that are deleted when you close your browser and temporary/permanent cookies saved on your data carrier for a longer period. This saving helps us to design our website and our offers for you accordingly and makes it easier for you to use our website, e.g., by saving certain entries you make that then do not have to be re-entered.

What cookies are used on our website?

Most of the cookies we use will be automatically deleted from your hard disk when your browser session ends (thus, session cookies). Furthermore, we also use cookies that will remain on your hard disk. When you visit our website again, we will automatically recognize that you visited us before and which entries and settings you prefer. These temporary or permanent cookies (duration: 1 month to 10 years) will be saved on your hard disk and will be deleted automatically after a set period. These cookies especially help make our offer more user-friendly, effective and safe.

Are there third-party cookies?

No.

13. Are web bugs used?

No.

14. Is my data secured?

Your personal data will be transmitted through the Internet using SSL encryptions. We use technical and organizational measures to secure our website and other systems against loss, destruction, access, changes or distribution of your data by unauthorized persons.

15. Can I withdraw my consent?

You may withdraw your consent at any time by emailing us at info@pyrex-industries.com or contacting us at the contact details provided at the beginning of this Privacy Policy.

On your request, we will tell you free of charge what data we saved on you. You have the right to demand rectification, blocking or erasure of your data. You may object to use of your data for marketing purposes at any time.

16. Use of Google Maps

16.1. Type and purpose of processing:

This website features Google Maps. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). This allows us to display interactive maps and enables you to comfortably use the map function directly on our website.

By visiting our website, Google will be notified that you accessed the respective sub-page of our website. The data specified in Section 3 of this Privacy Policy will also be transmitted. This will done irrespective of whether Google provides user accounts to which you may be logged in. If you are logged in to Google, your data will be assigned directly to your account. If you do not want your data to be assigned to your Google profile, please log out before activating the button. Google will save your data as usage profiles which it uses for advertising, market research and/or need-based design purposes for its website. Such assessments are performed especially (even for users not logged in) to offer need-based advertisements and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these usage profiles. However, such objections must be submitted to Google.

If you do not want Google to collect, process or use data on you through our Internet presence, you may deactivate JavaScript in your browser settings. However, doing so will prevent you from using all or certain functions of our website.

For more information about data processing by Google, please see Google's Privacy Policy where you may also adjust your personal privacy settings.

For more information about the administration of your data for Google products, please click here.

16.2. Legal basis

The legal basis for use of Google Maps and related data transfers to Google is your consent (Article 6(1) Letter a of the General Data Protection Regulation).

16.3. Recipient

By visiting our website, Google will be notified that you accessed the respective sub-page of our website. Data is processed irrespective of whether Google provides user accounts to which you may be logged in. If you are logged in to Google, your data will be assigned directly to your account.

If you do not want your data to be assigned to your Google profile, please log out before activating the button. Google will save your data as usage profiles which it uses for advertising, market research and/or need-based design purposes for its website. Such assessments are performed especially (even for users not logged in) to offer need-based advertisements and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these usage profiles. However, such objections must be submitted to Google.

For more information about the purpose and scope of data collected and processed by the plugin provider, please see the Google's Privacy Policy.

This will also include additional information about your according rights and settings options for the protection of your privacy (https://policies.google.com/privacy).

16.4. Storage duration

We do not collect personal data through Google Maps.

For more information about Google Maps, please see Google's Privacy Policy (https://policies.google.com/privacy).

16.5. Third-country transfers

Google processes your data in the US and has subjected itself to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

16.6. Withdrawal of consent:

16.7. Disclosure required or necessary:

Your personal data will be disclosed voluntarily and solely on the basis of your consent. However, preventing access may result in functional limitations of our website.

17. Embedded YouTube videos

17.1. Type and purpose of processing

Some of our web pages embed YouTube videos. The operator of these plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter "YouTube"). Opening a page that features a YouTube plugin will establish a connection to YouTube's servers. YouTube will thereby be notified about which page you visited. If you are logged in to your YouTube account, YouTube may assign your surfing behavior to you personally. To prevent this, you must log out of your YouTube account before visiting our website.

When opening a YouTube video, the provider will use cookies that collect indications of user behavior.

For more information about the purpose and scope of data collected and processed by the plugin provider, please see the Google's Privacy Policy which will also include additional information about your according rights and settings options for the protection of your privacy (https://policies.google.com/privacy). Google processes your data in the US and has subjected itself to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

17.2. Legal basis

The legal basis for embedding YouTube videos and related data transfers to Google is your consent (Article 6(1) Letter a of the General Data Protection Regulation).

17.3. Recipient

Opening YouTube will automatically establish a connection to Google.

17.4. Storage duration and withdrawal of consent

Disabling cookies for the Google Ad program will also disable such cookies when watching YouTube videos. However, YouTube also saves non-personal user information in cookies. To prevent this, disable cookies on your browser.

For more information about data protection by "YouTube," please see its provider's privacy policy: https://policies.google.com/privacy

17.5. Third-country transfers

Google processes your data in the US and has subjected itself to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

17.6. Disclosure required or necessary

Your personal data will be disclosed voluntarily and solely on the basis of your consent. However, preventing access may result in functional limitations of our website.

18. SSL encryptions

To protect your data during transfers, we use encryptions (e.g., SSL) via HTTPS in accordance with the latest state of technology.

19. Changes to this Privacy Policy

We reserve the right to adjust this Privacy Policy to remain in accordance with respectively current legal requirements or to include changes to our services in our Privacy Policy, e.g., when introducing new services. The updated Privacy Policy will apply during your next visit.