Privacy Statement

If you consent to the processing of your personal data, the legal basis will be point (a) of Art. 6 (1) GDPR.

If the processing of personal data is necessary for the performance of a contract to which you are party, the legal basis will be point (b) of Art. (1) GDPR. The same applies to any pre-contractual measures.

If the processing of personal data is necessary for us to perform our legal obligations, the legal basis will be point (c) of Art. 6 (1) GDPR.

If data processing is necessary to protect your vital interests or those of another natural person, the legal basis will be point (d) of Art. 6 (1) GDPR.

If your personal data is processed to pursue a legitimate interest of our company or a third party – and this interest is not outweighed by your own interests and fundamental rights and freedoms – the legal basis will be point (f) of Art. 6 (1) GDPR.

Your personal data will be processed according to the so-called “legitimacy principle” if you use our website, if processing is necessary to perform a contract or another legal relationship, if you consent to data processing, and if you contact us or vice versa. Your personal data will be shared within the KESSEL Group and with commissioned service providers, partners and other authorised recipients. This particularly applies in the following situations:

a) Enquiries from you

If you contact us by email, fax, phone or post, if you use our contact form, chat function or any other means of communication (incl. from external partners), or if you contact us in person (e.g. at trade fairs, events or through our sales force), we will process the personal data you provide (salutation, title, name, company, contact details) for the purpose of processing, documenting and following up on your request on the basis of point (b) of Art. 6 (1) GDPR or point (f) of Art. 6 (1) GDPR.

b) Order processing

We will process the personal data you provide (salutation, title, name, company, address, contact details, transaction data) to process orders (e.g. to perform a contract of sale or to provide services) on the basis of point (b) of Art. 6 (1) GDPR. We will send the necessary information to the companies commissioned to deliver or execute the order, and to banks, insurance companies and service providers commissioned to execute the transaction, adjust claims, run credit checks and check sanctions lists. This also applies to the execution of any pre-contractual measures and post-contractual services and complaints.

c) Orders in the webshop
When using our webshop (https://shop.kessel.de/kesselstorefront/), the following provisions apply in addition to those included in this privacy statement in order to ensure that your data is protected.
In order to register in our webshop, you have to provide a valid e-mail address (business e-mail address) and assign a password. Further data is collected by us in the context of the order pursuant to point (b) of Art. (1) GDPR. Please note that we classify the data entered as business data (e.g. company address, business e-mail address, business telephone number). Your contact and address data will be passed on to the transport company commissioned with the delivery, insofar as this is necessary for the delivery of the products. We pass on your payment data to the commissioned credit institution within the scope of payment processing, insofar as this is necessary for payment processing. The data collected by us will be forwarded to the respective dealer/service partner in the context of forwarding enquiries. The data protection regulations of the respective dealer/service partner apply to the processing of your personal data by the respective dealer/service partner. The legal basis for the forwarding of data is point (b) of Art. (1) GDPR.

d) Newsletters, Job Alert and Press Alert

You will only receive our newsletter, seminar newsletter and Job Alert if you subscribe via the double opt-in method, and you will only receive our Press Alert if you subscribe via the single opt-in method. We will process the personal data you provide (salutation, title, name, company, industry, address, email address, interests) to send you personalised emails and prevent misuse on the basis of point (a) of Art. 6 (1) GDPR. You may withdraw your consent with future effect by clicking on the “unsubscribe” link in each relevant email.

Our service and trade partners will regularly receive emails containing up-to-date information on the business relationship (e.g. product adjustments or organisational changes) on the basis of point (b) of Art. 6 (1) GDPR.

e) Training courses

You may register for a face-to-face seminar, webinar or other (digital) training course by sending us an email or fax, by filling out the registration form on our website, or in text form using other means of communication. We will process the personal data you provide (salutation, title, name, company, address, contact details, transaction data) for the purpose of holding, documenting and following up on the respective training course on the basis of point (b) of Art. 6 (1) GDPR or point (f) of Art. 6 (1) GDPR. We will send the necessary information to our partners involved in the training course (e.g. speakers, hotels or service providers), and to banks and service providers commissioned to execute the transaction and run credit checks.

If you register for a seminar or webinar using the booking form on our website, the data you enter will be sent to the seminar management software provided by cituro GmbH (Peter-Dörfler-Straße 30, D-86199 Augsburg, privacy information: www.cituro.com/datenschutz). We will use this software to manage our participants, to send out important information about the event and to run the event. The legal basis is point (b) and (f) of Art. 6 (1) GDPR. The following data will be collected via the booking form: surname, first name, business email address, business telephone number and company address. Please remember to only enter your business data in the form. Your data will be stored in data centres in Germany. We have concluded a data processing agreement with cituro GmbH to ensure the security of your data.

f) Events and factory visits

You may register for a (digital) event or factory visit by sending us an email or fax, by calling us, by filling out the registration form on our website, by contacting us in person, or by using other means of communication. We will process the personal data provided by you or our event partner / coordinator (salutation, title, name, company, address, contact details, transaction data) for the purpose of holding, documenting and following up on the event on the basis of point (b) of Art. 6 (1) GDPR or point (f) of Art. 6 (1) GDPR. We will send the necessary information to our partners involved in the training course (e.g. speakers, hotels or service providers), and to banks and service providers commissioned to execute the transaction and run credit checks.

g) Trade fairs, exhibitions, roadshows and informative events

You can learn more about our products and services at trade fairs, exhibitions, roadshows, (online) presentations and similar informative events. We will process the personal data you provide (salutation, title, name, company, address, contact details) for the purpose of documenting and processing your enquiries – and following up on each event – on the basis of point (b) of Art. 6 (1) GDPR or point (f) of Art. 6 (1) GDPR.

h) Delivery of event schedule and seminar programmes

We will process the personal data you provide and publicly accessible information (salutation, title, name, company, industry, address) to send you our annual event schedule and annual seminar programme on the basis of point (a) of Art. 6 (1) GDPR, point (b) of Art. 6 (1) GDPR or point (f) of Art. 6 (1) GDPR. Each letter will contain information on how to unsubscribe.

i) Enquiries from us

When carrying out customary property tracking, making appointments, informing you about new contacts via our communication channels and for similar purposes, you may be contacted by us or our commissioned service providers by phone, email, other communication channels or personally. We will process the personal data you provide or have already provided, as well as any publicly accessible information and any data provided by third parties (salutation, title, name, company, address, contact details, position) on the basis of point (b) of Art. 6 (1) GDPR or point (f) of Art. 6 (1) GDPR. This also applies to our surveys that we regularly carry out to ensure high quality standards and increase the satisfaction of our customers and partners. We will send the necessary information to our commissioned partners and service providers.

Use of communication media

If it makes sense to use a video function (e.g. Microsoft Teams) or other communication media in such cases (e.g. to prepare for the deployment of a service technician), you will explicitly agree to the use of the respective means of communication by using the system and, if applicable, by sharing data via the system. In such cases, the legal basis for the processing of your personal data will be point (a) of Art. 6 (1) GDPR.

If you contact us via the online form on our website, our chat function or any other digital means of communication, we will process your personal data on the basis of point (b) of Art. 6 (1) GDPR or point (f) of Art. 6 (1) GDPR.

Disclosure of personal data

Your personal data will be shared within the KESSEL Group and with commissioned service providers, partners and other authorised recipients. We will only ever disclose your personal data to third parties to pursue our relevant legitimate interests, to observe mandatory legal provisions or to comply with a court order. Your personal data will not be sold to third parties for commercial gain.

Retention period

If you have a contractual relationship with KESSEL AG, your personal data will be deleted in accordance with the mandatory deletion requirements, such as those stipulated in the German Commercial Code (HGB) and the German Fiscal Code (AO).

If we process your personal data to respond to your enquiry, contact you or otherwise communicate with you, your data will be deleted at the end of the enquiry, unless we have a legitimate interest in processing or storing the data for longer or you have consented to such.

Validity of the privacy statement

If changes to this privacy statement become necessary due to new legal requirements, changes in our range of products and services, technical developments, changing general conditions or other reasons, we reserve the right to make such changes at any time. The valid version of the privacy statement is the updated one published on our website.

The processing of personal data is sometimes absolutely essential to provide and operate our website and online features. This particularly applies to the following applications:

a) Log files

In order to deliver the website, ensure the functionality of certain features, optimise applications and ensure the security of the website, we will process the following personal data on the basis of point (f) of Art. 6 (1) GDPR:

• Your IP address;
• The date and time of access;
• The pages / files accessed;
• Access log and status;
• The volume of data transmitted;
• The referrer URL; and
• Information on the client / browser used

The log files and their content will be stored for 30 days and then deleted or, if necessary, anonymised, unless such information is required to document or shed light on any misuse or unlawful use of our website that might have become apparent during the retention period. The log files will be analysed for data security purposes.

b) Registering for services and online features

You will need to register and log in to use some of our services and online features (e.g. to place an order in our online store). We will process the personal data you provide (e.g. salutation, title, name, company, industry, address, interests) and any data that is automatically collected by our website (e.g. IP address, user information) on the basis of point (a) of Art. 6 (1) GDPR or point (b) of Art. 6 (1) GDPR. We will send the necessary information to our partners (e.g. software service providers) and to banks and service providers commissioned to execute the transaction and run credit checks.

c) Online store

If you place an order on our online store, we will process your personal data on the basis of point (b) of Art. 6 (1) GDPR. We will send the necessary information to the companies commissioned to deliver or execute the order, and to banks, insurance companies and service providers commissioned to execute the transaction, adjust claims, run credit checks and check sanctions lists. Your requests will be forwarded to the responsible dealers or service partners.

d) External links

Our webpages contain links to websites operated by other providers who are not affiliated with us. If you click on such links, you will be redirected to the websites operated by the other providers. This will be reflected by certain aspects, such as a change in URL. As we have no control over the processing of your personal data from the moment you are redirected, we cannot assume any responsibility in this regard. When clicking on such links, please refer to the privacy statement on the external website for more information.

e) Social plug-ins

Our website features social plug-ins. They are marked with the relevant logo and contain a link to the respective website. If you access a page containing a plug-in on our website, your browser will establish a direct connection to the relevant server. As a result, the social media provider will be informed that you have accessed the page on our website and will be able to match that information to your account if you are logged in. If you do not want the social media provider to collect information about you via our website, you must sign out from your social media account before visiting our website.

f) Facebook

Our website features social plug-ins (“plug-ins”) from Facebook, a social network operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). An overview of Facebook plug-ins and their appearance can be found here https://developers.facebook.com/docs/plugins.

If you access a page containing such a plug-in on our website, your browser will establish a direct connection to the Facebook servers. The content of the plug-in will be sent straight from Facebook to your browser and embedded within the website. This integrated element will inform Facebook that your browser has accessed the relevant page on our website, even if you do not have a Facebook profile or are not logged in to Facebook at the moment. This information (incl. your IP address) will be transmitted straight from your browser to a Facebook server in the USA and stored there.

If you are logged in to Facebook, the social media provider will be able to match your visit to our website straight to your Facebook profile. If you interact with the plug-ins, such as by pressing the “Like” button or leaving a comment, this information will also be transferred straight to a Facebook server and stored there. The information will also be posted on your Facebook profile and shown to your Facebook friends. Please refer to Facebook’s privacy policy for more information as to why and to what extent it collects, processes and uses data, as well as more details on your rights and settings to safeguard your privacy: http://www.facebook.com/policy.php

If you do not want Facebook to match the information collected via our website to your Facebook profile, you must sign out from Facebook before visiting our website. You can also completely prevent Facebook plug-ins from being loaded by installing the following add-ons for your browser.

g) Facebook Pixel

If you give your explicit consent via the cookie banner in accordance with point (a) of Art. 6 (1) GDPR, we will use Facebook custom audiences on some of our webpages. A pixel from Facebook Ireland Limited will be integrated on those pages. The pixel will enable Facebook Ireland Limited to collect information about the use of our website (your truncated IP address, cookie ID, pixel ID, usage data, information about your browsing session, the URL of the webpages you visit and the websites you visit after visiting the KESSEL website). This information might be matched to you personally with the help of other information that Facebook Ireland Limited might have stored on you (e.g. if you have a Facebook account). The information collected via the pixel can then be used to display targeted advertising on your Facebook account for our products and services that interest you (retargeting). In addition, the information collected via the pixel may be aggregated by Facebook Ireland Limited, and the aggregated information may then be used by Facebook Ireland Limited for its own advertising purposes or for third-party advertising purposes. For example, Facebook Ireland Limited may be able to analyse information about your surfing habits on our website to ascertain your interests and advertise third-party products. Facebook Ireland Limited may also link the information collected via the pixel to other information that Facebook Ireland Limited has collected on you via other websites and/or in connection with your use of its social network; as a result, Facebook Ireland Limited may create and store a profile about you. This profile may be used for advertising purposes. More information can be found here: https://www.facebook.com/about/privacy/ and https://en-gb.facebook.com/business/a/online-sales/custom-audiences-website

Your Facebook website custom audiences data will be processed by Facebook for no more than 180 days.

h) LinkedIn pixel (convenience and marketing)

Our website uses LinkedIn conversion tracking, a web analysis service provided by the LinkedIn Corporation, on the basis of point (f) of Art. 6 (1) GDPR. LinkedIn conversion tracking uses “cookies”, i.e. text files that are saved on your computer by the LinkedIn Insight Tag, enabling us to analyse how you use our website.

The information collected by the LinkedIn Insight Tag on your use of our website will be encrypted. The cookie will be stored in the LinkedIn member’s browser until it is deleted or expires (the expiry date will be six months after the Insight Tag was last loaded by the member’s browser).

LinkedIn members may opt out of conversion tracking, and they can block and delete cookies and disable demographic characteristics at https://www.linkedin.com/psettings/advertising/. In the LinkedIn settings, you cannot separately opt out of third-party impressions or click tracking for campaigns running on LinkedIn, as all underlying campaigns respect the settings of LinkedIn members.

You can find more information from the third-party provider (LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA) here:

http://www.linkedin.com/legal/privacy-policy; https://www.linkedin.com/help/lms/answer/85787; https://www.linkedin.com/help/linkedin/answer/87150/linkedin-marketinglosungen-und-die-datenschutz-grundverordnung-dsgvo-?lang=de

i) Google Tag Manager

Our website uses Google Tag Manager, a service provided by Google LLC. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). If your habitual place of residence is in the European Economic Area or Switzerland, the controller responsible for your data is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). This application enables the management of the JavaScript tags and HTML tags used to implement tracking and analytical tools. This form of data processing allows us to optimise our website and make sure it meets the needs of our users. Google Tag Manager itself does not save cookies and is not used to process personal data. However, it enables the activation of other tags that may collect and process personal data. You can find more information on the terms of use and data protection at https://www.google.com/intl/de/tagmanager/use-policy.html.

Other Google features

Our website uses the remarketing or “similar audiences” function provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google“). If your habitual place of residence is in the European Economic Area or Switzerland, the controller responsible for your data is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). The purpose of the application is to analyse user behaviour and visitor interests. In order to analyse the use of the website, which forms the basis for the creation of targeted advertising, Google uses cookies. The cookies record website visits and anonymised data about the use of the website. They do not save the personal data of website visitors. If you subsequently visit another website in the Google Display network, you will be shown advertising that is highly likely to consider the product and information sections you have previously accessed. Your data may be transferred to the USA on the basis of a valid transfer instrument or on the basis of your consent obtained by Google online. The data processing, particularly the placement of cookies, will be performed with your consent on the basis of point (a) of Art. 6 (1) GDPR. You may withdraw your consent at any time; this will have no bearing on the lawfulness of any data processing carried out before the withdrawal of your consent. You can find more information about Google remarketing and the relevant privacy policy here: https://www.google.com/privacy/ads/

j) Google Maps

Our website uses Google Maps, an external maps service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). This service enables us to ensure the appealing presentation of our website by loading map contents from an external server. The necessary data is typically requested from a Google server in the USA. Whenever you submit such a request, information such as your IP address and the pages you visit on our website will usually be sent to a Google server in the USA and stored there for several months. More information on the handling of user data can be found in Google’s privacy policy: https://www.google.de/intl/de/policies/privacy/

We use Google Maps in the interest of ensuring the appealing presentation of our website. This constitutes our “legitimate interest”, as defined in point (f) of Art. 6 (1) GDPR. You can prevent the use of Google Maps by simply blocking it via the cookie banner. If you do so, your data will not be sent to Google. If you block “convenience and marketing” cookies in the cookie banner but still load a map, you will automatically consent to the placement of cookies by Google Maps.

k) Google Analytics

We use Google Analytics, a web analysis service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) (“Google”). Google Analytics will use cookies to generate information on your use of our website, and this information will be transferred to a Google server in Europe or the USA and stored there. As IP anonymisation is activated on all our webpages, however, Google will truncate your IP address before transferring data within member states of the European Union or the European Economic Area. Your full IP address will only be transmitted to a Google server in the USA and truncated there in exceptional cases.

In addition, we use “Google Analytics 4”, which enables tracking without cookies. This version works with a complex machine learning algorithm, which will provide more and more accurate results over time and also enables users to be tracked across more than one device. This is intended to improve your customer journey.

Google will use this information on behalf of the website operator to evaluate your use of the website, compile reports on website activities and provide the website operator with other services related to the use of this website and the Internet. The IP address transmitted by your browser via Google Analytics will not be merged with other Google data. More information on the handling of user data can be found in Google’s privacy policy: https://www.google.de/intl/de/policies/privacy/.

We will only use Google Analytics if you give us your consent via the cookie banner (“Statistics” category) in accordance with point (a) of Art. 6 (1) GDPR. You can adjust your browser settings to generally prevent cookies from being saved in your browser. You can also stop the data generated by cookies on your use of this website (incl. your IP address) from being transferred to Google for processing by downloading and installing the following browser plug-in: http://tools.google.com/dlpage/gaoptout?hl=de.

l) Google reCAPTCHA

We sometimes use reCAPTCHA, a service provided by Google Inc., to ensure an adequate level of data security when submitting online forms. This mainly helps us distinguish whether data has been entered by a natural person or improperly by automated processors. As part of the service, we will send your IP address to Google, as well as any other data required by Google to provide the reCAPTCHA service. The data protection provisions of Google Inc. will apply in such cases. More information on the privacy policy of Google Inc. can be found at www.google.de/intl/de/privacy or www.google.com/intl/de/policies/privacy/

m) YouTube

Our website features components from YouTube, a website belonging to Google. The website is operated by YouTube, LLC (901 Cherry Ave., San Bruno, CA 94066, USA).

Whenever you visit one of our webpages featuring a YouTube plug-in, a connection will be established with the YouTube servers. As a result, YouTube will find out which of our webpages you have visited. If you are logged in to a YouTube account, you will enable YouTube to match your surfing habits directly to your personal account. You can prevent this by signing out from your YouTube account.

We use YouTube in the interest of ensuring the appealing presentation of our website. This constitutes our “legitimate interest”, as defined in point (f) of Art. 6 (1) GDPR. You can prevent the use of YouTube by simply blocking it via the cookie banner. If you do so, your data will not be sent to YouTube.

More information on the handling of user data can be found in YouTube’s privacy policy: https://www.google.de/intl/de/policies/privacy

n) OXOMI media portal

We use OXOMI, a web-based application provided by scireum GmbH (“scireum”), to make a media portal with product and marketing information available on our website, which can be accessed without registering or logging in. scireum will not disclose your personal data to third parties or market your metadata. The application is operated on European servers under German data protection law. scireum uses Crashlytics, an analytical tool developed by Fabric, for its mobile applications (e.g. OXOMI Pocket for iPad). Whenever a software problem arises, Crashlytics records the issue and the relevant error environment for further analysis and saves this data for 90 days. scireum uses this data exclusively for troubleshooting purposes. More details are contained in scireum GmbH’s privacy policy: www.scireum.de/scireum/datenschutz

o) DrawBridge

We have integrated DrawBridge on our website; this is a service provided by Gimbal, Inc. to show users targeted advertising. DrawBridge uses cookies and other browser-based technologies to analyse user behaviour and recognise users. DrawBridge collects information about user behaviour on various websites. This information is used to optimise the relevance of our advertising. DrawBridge also provides targeted marketing based on behavioural profiles and geographic location. Your IP address and other identifiers (e.g. your user agent) will be sent to the provider. In such cases, your data will be disclosed to the company that operates DrawBridge: Gimbal, Inc., 8605 Santa Monica Blvd #62545 West Hollywood, CA 90069-4109, USA.

Web tracking technologies are used to create pseudonymised user profiles. These profiles cannot be matched to you as a natural person; they enable market segmentation when displaying advertising. We will use DrawBridge to process data for the purpose of optimising our advertising campaigns and for marketing purposes on the basis of your consent pursuant to point (a) of Art. 6 (1) GDPR.

We have no control over the retention period of the processed data; it will be determined by Gimbal, Inc. You can find more information in DrawBridge’s privacy policy: gimbal.com/gdpr/

p) Cloudflare

Our website uses Cloudflare, a service provided by Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA), to make our website faster and safer. Cloudflare uses cookies and processes user data. Cloudflare, Inc. is an American company that provides a content delivery network (CDN) and various security services. A CDN is a network of servers connected via the Internet. Cloudflare has distributed such servers around the world to speed up the delivery of websites.

Cloudflare generally only forwards data controlled by website operators. In other words, the content is not specified by Cloudfare itself, but always by the website operator. Cloudflare may also collect information about the use of our website and may process data that we send or data for which Cloudfare has received specific instructions. Cloudflare usually receives data derived from browser activity, such as contact details, IP addresses, security fingerprints, DNS log data and website performance data. The log data helps Cloudflare to perform certain tasks (e.g. to detect new threats). This allows Cloudflare to ensure a high level of protection for our website. As part of its services, Cloudflare processes this data in accordance with the applicable laws. Cloudflare will mainly store your information in the USA and the European Economic Area. Cloudflare may transfer and access the information described above from around the world. Cloudflare generally stores user-level data for less than 24 hours. You can find more information about data protection at Cloudflare here: https://www.cloudflare.com/de-de/privacypolicy/

q) jQuery / Bootstrap

We use services provided by jQuery CDN and Bootstrap to ensure the fast and smooth delivery of our website on various devices. The services are distributed across the CDN of the software company StackPath (LCC 2012 McKinney Ave. Suite 1100, Dallas, TX 75201, USA). The services use JavaScript libraries to enable the fast delivery of our webpages. The necessary files are loaded by a CDN server. As soon as a connection has been established with the CDN server, your IP address will be recorded and stored. This will not be necessary if the data is already stored in your browser from a previous website visit. StackPath’s privacy policy makes explicit reference to the fact that it uses aggregated and anonymised data from various services (e.g. jQuery or Bootstrap) to increase security and for its own services. However, the data cannot be used to identify you as a person. More information about data protection at StackPath can be found here: https://www.stackpath.com/legal/privacy-statement/; more information about data protection at jQuery is available here: https://openjsf.org/wp-content/uploads/sites/84/2019/11/OpenJS-Foundation-Privacy-Policy-2019-11-15.pdf; and Bootstrap provides more information here: https://www.jsdelivr.com/terms/privacy-policy-jsdelivr-net.

r) Hotjar CDN

Our website uses Hotjar, a service provided by Hotjar Limited (Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta), to statistically evaluate user data so that we can analyse and improve the quality of our website. Hotjar is a service that uses a combination of tools to analyse the behaviour and feedback of users on our website. Hotjar sends us reports and visual presentations to show where and how users navigate our website. All personal data is automatically anonymised and never reaches the Hotjar servers. That means you will not be personally identified as a website user. The following data may be collected by a tracking cookie: your IP address (collected and stored in an anonymised form), screen size, browser information, country, preferred language settings, webpages visited (subpages), and date and time of access to our website. Hotjar does not generally disclose collected data to third parties. However, Hotjar explicitly points out that it is sometimes necessary to share data with Amazon Web Services. If this is the case, some of your information will be saved on Amazon’s servers. However, your data will be stored in an exclusively anonymised form. In addition, Amazon is bound by a confidentiality agreement and will not disclose your data. More details on data protection at Hotjar can be found here: https://www.hotjar.com/legal/policies/privacy?tid=331606641411

s) Adobe Typekit

We use Adobe Typekit for the visual design of our website. Typekit is a service from Adobe Systems Software Ireland Companies (4-6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland) that grants us access to a font library. In order to integrate the fonts, your browser must establish a connection to an Adobe server in the USA and download the font required for our website. Adobe will then be informed that our website has been accessed from your IP address. We do not receive any personal data through the integration of Adobe Typekit. More information about Adobe Typekit can be found here: www.adobe.com/de/privacy/policy.html

Our website uses cookies to offer a smooth surfing experience and optimise the use of our webpages. Cookies are small text files that are saved on a user’s device and contain specific user and usage information.

All our company’s webpages can only be used if you consent to the cookies that are absolutely essential for the operation of our website. In addition, you may consent to the use of other cookies (e.g. for analysis and marketing purposes). You will be asked to give your consent before using our website for the first time; your consent will serve as the legal basis for the processing of your personal data that is automatically collected on our website (salutation, title, name, company, IP address, user information, etc.) on the basis of point (a) of Art. 6 (1) GDPR.

The table below shows the cookies that are regularly used on our company’s website. Not all cookies are used on each webpage:

Retention period
Your consent to the use of cookies will be saved until revocation and may be changed with future effect at any time.

Restricting the use of cookies
In your browser settings, you can prevent cookies from tracking your online activities (do not track / tracking protection list) and block the storage of third-party cookies. If you delete all cookies on your devices, you will also delete any opt-out cookies that might have been saved and will then have to opt out again.

Restricting targeted online advertising
You can opt out of targeted online advertising (e.g. based on retargeting) here: https://www.youronlinechoices.com

Any data and documents that you provide as part of your application will be automatically recorded, stored and used by our HR department exclusively for that purpose. The term “personal data” is used to refer to any data that is collected, stored, transmitted and processed in connection with your name. We will only store your personal data within the KESSEL Group for as long as necessary to fulfil the purpose for which it is collected or for as long as necessary to comply with our statutory retention requirements. We will delete your data six months after the vacancy is filled, unless you consent to a longer retention period. We will not disclose the collected data to third parties; in particular, your data will not be sold or rented out.

We will secure the personal data you provide by taking the appropriate technical and organisational measures (e.g. data transfers via secure SSL connections), so that your data cannot be accessed by unauthorised third parties. When sending highly sensitive data or information, we will use the post as our preferred means of communication, as complete data security cannot be ensured when communicating simply via email.

The personal data you provide will be stored to the extent permitted for the duration of your use of our website or, if information or services are to be provided, in accordance with the GDPR and the new version of the German Data Protection Act (BDSG Neu). Your personal data will be deleted or blocked as soon as it is no longer required for the purpose for which it was originally stored. However, your personal data may be stored beyond this period if this is stipulated by EU Law or national legislation through EU regulations, laws or other provisions that are legally binding for the controller. The data will then be deleted or blocked at the end of the storage period established by such regulations, unless the further storage of the data is necessary for the conclusion or performance of a contract.

If you would like to exercise your rights as a data subject, as described below, please refer to the contact details indicated in this privacy statement. Whenever you submit a request, we will ask you to confirm your identity to ensure your protection by preventing unauthorised access to your personal data. If conflicting legal regulations or documentation obligations prevent us from executing your request, we will provide you with the relevant information.

a)    Access and data portability
You have the right to request the full disclosure of the personal data we hold on you and have the data handed over in a structured, commonly used and machine-readable format.

b)    Rectification, restriction and erasure
If your personal data has changed, if the restriction of data processing is legally required or if you no longer consent to data processing, we will rectify your personal data, restrict our processing or erase your personal data at your request, unless such actions are prevented by statutory regulations.

c)    Withdrawal of consent
You may withdraw all or part of your consent with future effect at any time. Any data processing performed on the basis of your consent before you withdraw your consent will remain lawful.

d)    Right to lodge a complaint
You have the right to lodge a complaint about the processing of your personal data with our competent data protection supervisory authority (Bavarian State Office for Data Protection Supervision: www.lda.bayern.de/de/beschwerde.html).