Privacy Statements
LANXESS is aware that the protection of your privacy when using our websites is important to you. We take the protection of your personal data very seriously. That's why we want you to know when we store which data and how we use it. We would therefore like to inform you about our data protection measures with this data protection declaration.
1. Responsible body
The responsible body within the meaning of the GDPR is LANXESS Deutschland GmbH, Kennedyplatz 1, 50679 Cologne, Germany.
2. Collection of data
In principle, you can use our online presentation without disclosing your personal data. When you visit our website, the following data is stored on our servers for backup and optimization purposes:
- IP address
- Date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (concrete page)
- Access Status/HTTP Status Code
- amount of data transferred in each case
- Website from which the request comes
- Browser
- Operating system and its interface
- Language and version of the browser software.
This data would possibly allow identification, but no personal use takes place in this regard. They can be evaluated for statistical purposes, but the individual user remains anonymous. Insofar as data is passed on to external service providers, we have ensured that the regulations of data protection are observed by means of appropriate contracts with these external service providers, as well as technical and organizational measures.
3. Collection and processing of personal data
In addition to the data mentioned under 1., (further) personal data will only be collected if you provide it to us voluntarily, e.g. in the context of registration, by filling out forms or sending e-mails, in the context of ordering products or services, enquiries or requests for material.
We will only use the personal data collected from you to provide you with the products or services you have requested, or for other purposes for which you have given your consent, unless otherwise required by law. Here, too, if data is passed on to external service providers, we have ensured that the regulations of data protection are observed by means of contractual principles, as well as technical and organizational measures.
a. Use of contact forms and information portals
LANXESS offers you the option of contacting us directly via the contact forms provided or, for example, retrieving product information. The following information may be provided by you for this purpose:
- Salutation
- First and last name
- Company
- Department
- Website
- Phone
- Street and house number
- Country, State, Zip Code and City
- Message
- Reason for the request
- Username
The processing of this data is carried out on the basis of your consent (Art. 6 para. 1 lit. a GDPR) or on the basis of a pre-contractual request (Art. 6 para. 1 lit. b GDPR).
The data you send to us via contact requests will remain with us until you ask us to delete it, revoke your consent to its storage or the purpose for which it was stored no longer applies (e.g. after your request has been processed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.
b) Use of newsletters
LANXESS offers you the opportunity to subscribe to a wide variety of newsletters. On the basis of the consent you have previously given (Art. 6 (1) a General Data Protection Regulation), we collect and use the e-mail address you provided when registering.
For further personalization, you also have the option of sending us the following additional information:
- Salutation
- First and last name
- Medium
- Resort
- Country
- Language
- Preferences
To subscribe to our newsletter, we use the so-called double opt-in procedure. This means that after you have registered, we will send you an e-mail to the e-mail address provided, in which we ask you to confirm that you wish to receive the newsletter. In addition, we store your IP addresses and times of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data.
You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare your revocation by clicking on the link provided in each newsletter e-mail or by sending a message to the contact details provided in the imprint.
c) Enquiry by e-mail, telephone or fax
If you contact us by e-mail, telephone or fax, your enquiry, including all personal data resulting from it (name, enquiry), will be stored and processed by us for the purpose of processing your request. We do not pass on this data without your consent.
The processing of this data is carried out on the basis of Art. 6 (1) (b) GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interests (Art. 6 para. 1 lit. f GDPR), as we have a legitimate interest in the effective processing of the inquiries addressed to us.
The data you send to us will remain with us until you ask us to delete it, revoke your consent to its storage or the purpose for which it was stored no longer applies (e.g. after your request has been processed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.
d) Creation of a user account
You have the option of creating a personal user account on our website. The creation of an account is voluntary and serves to take full advantage of certain features and services on our website.
As part of the registration process, we process the following personal data:
- E-mail address
- Password (stored in encrypted form)
- If applicable, other voluntary information (e.g. first and last name, telephone number, address)
The data processing is carried out for the purpose of setting up and managing your user account and providing the associated functions, in particular for authentication when logging in and for communication in connection with your account.
Your data is processed on the basis of Art. 6 (1) (b) GDPR (performance of a contract or pre-contractual measures).
The data will be stored for the duration of the use of your account. After deletion of the account or at your request, your data will be deleted, provided that there are no statutory retention obligations to the contrary.
e) Data processing during server operation
In order to provide and secure our online offer, we process technical connection and protocol data as part of server operation, in particular IP address, date and time of access, resources accessed and information on the browser and operating system used.
The processing is carried out for the provision of our services, to ensure IT security, on the basis of Art. 6 para. 1 lit. b and lit. f GDPR.
Server log data is only stored for as long as is necessary for the aforementioned purposes and is then deleted or anonymized, provided that there are no legal retention obligations.
4. Use of external services
LANXESS uses the following services and content from external service providers. Further information on this can be found in the respective integrated data protection notices of the respective providers.
a) CleverReach
This website uses CleverReach to send newsletters. The provider is CleverReach GmbH & Co. KG, Mühlenstrasse 43, 26180 Rastede. CleverReach is a service that can be used to organize and analyze the sending of newsletters. The data you enter for the purpose of subscribing to the newsletter (e.g. e-mail address) will be stored on CleverReach's servers in Germany or Ireland.
Our newsletters sent with CleverReach enable us to analyse the behaviour of newsletter recipients. Among other things, it can be analyzed how many recipients have opened the newsletter message and how often which link in the newsletter has been clicked. With the help of so-called conversion tracking, it can also be analyzed whether a predefined action (e.g. purchase of a product on this website) has taken place after clicking on the link in the newsletter. For more information on data analysis through CleverReach newsletters, please visit: https://www.cleverreach.com/de/funktionen/reporting-und-tracking/.
Data processing is based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The lawfulness of the data processing operations that have already taken place remains unaffected by the revocation.
The data you provide to us for the purpose of subscribing to the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you have unsubscribed from the newsletter. Data that has been stored by us for other purposes remains unaffected by this.
For more information, please refer to CleverReach's privacy policy at: https://www.cleverreach.com/de/datenschutz/.
b) Microsoft Dynamics
We use the marketing system "Microsoft Dynamics 365 Marketing" of the provider Microsoft Corporation (Microsoft Deutschland GmbH, Walter-Gropius-Straße 5, 80807 Munich) – hereinafter referred to as "Microsoft" – to carry out marketing campaigns, for analysis purposes and to address customers and potential customers.
We use the system in particular for sending e-mail communication (e.g. newsletters).
The use of the provider Microsoft and the system, the implementation of statistical surveys and analyses as well as the logging of the registration procedure for communication by e-mail are based on your consent to e-mail communication via Microsoft Dynamics. We are interested in the use of a user-friendly and secure system that serves our business interests as well as meets the expectations of our users.
Statistical surveys include (among other things) the determination of whether the newsletters are opened, when they are opened and which links are clicked. Although this information can technically be assigned to the individual newsletter recipients, an analysis of personal data is switched off and information about newsletter recipients is only evaluated pseudonymously and cannot be decrypted and assigned to individual persons.
Registration for our newsletter takes place in a so-called double opt-in procedure. This means that the user will receive an e-mail after registration asking him to confirm the registration. The registrations for the newsletter are logged in order to be able to prove the registration process in accordance with the legal requirements. This includes the storage of the login and confirmation time, as well as the IP address. Changes to user data stored by the shipping service provider are also logged.
The recipient of our newsletter can cancel at any time, i.e. revoke his consent. The user will find a link to unsubscribe from the newsletter at the end of each newsletter. The corresponding data will be deleted from the newsletter distribution list after unsubscribing from the newsletter. Data that has been stored by us for other purposes remains unaffected by this.
Users can find more information about data protection in Microsoft's privacy statement at: https://privacy.microsoft.com/de-de/privacystatement.
c) Vimeo and Vimeo without tracking (Do-Not-Track)
This website uses plugins from the video portal Vimeo. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.
When you visit one of our pages equipped with a Vimeo plugin, a connection to Vimeo's servers is established. The Vimeo server is informed which of our pages you have visited. Vimeo also obtains your IP address. This also applies if you are not logged in to Vimeo or do not have a Vimeo account. The information collected by Vimeo is transmitted to Vimeo's server in the United States. However, we have set Vimeo in such a way that Vimeo will not track your user activities and will not set cookies.
If you are logged in to your Vimeo account, you enable Vimeo to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your Vimeo account.
If you have consented to your data being processed and stored by integrated Vimeo elements, this consent is considered the legal basis for data processing (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time.
For more information on the handling of user data, please refer to Vimeo's privacy policy at: https://vimeo.com/privacy.
d) Google Maps
LANXESS uses Google Maps. This allows us to show you interactive maps directly on the website and enable you to use the map function conveniently. In order to use the functions of Google Maps, it is necessary to store your IP address and transmit it to a Google server, usually in the USA. You can find more information on the handling of user data in Google's privacy policy: https://www.google.de/intl/de/policies/privacy/.
e) etracker
LANXESS uses the services of etracker GmbH from Hamburg, Germany (www.etracker.com) to analyze usage data. We do not use cookies for web analysis by default. If we use analysis and optimisation cookies, we will obtain your explicit consent separately in advance. If this is the case and you agree, cookies will be used to enable a statistical reach analysis of this website, a measurement of the success of our online marketing measures as well as test procedures, e.g. to test and optimise different versions of our online offer or its components. Cookies are small text files that are stored by the Internet browser on the user's end device. etracker cookies do not contain any information that would allow a user to be identified.
The data generated with etracker is processed and stored by etracker exclusively in Germany on behalf of LANXESS and is therefore subject to strict German and European data protection laws and standards. In this respect, etracker has been independently audited, certified and awarded the ePrivacyseal data protection seal of approval.
Data processing is carried out on the basis of the legal provisions of Art. 6 (1) (f) (legitimate interest) of the General Data Protection Regulation (GDPR). Our concern within the meaning of the GDPR (legitimate interest) is the optimisation of our online offer and our website. Since the privacy of our visitors is important to us, the data that may allow a reference to a single person, such as the IP address, login or device identifiers, will be anonymized or pseudonymized as soon as possible. It will not be used, merged with other data or passed on to third parties.
You can object to the data processing described above at any time. The objection has no adverse consequences.
Further information on data protection at etracker can be found here: https://www.etracker.com/datenschutz/
f) Domain forwarding and analysis (redirect.pizza)
For the forwarding of our domain(s) as well as for the statistical evaluation of visitor flows, we use the service "redirect.pizza" of Enflow B.V., Keizersgracht 520 H, 1017 EK Amsterdam, Netherlands.
When you access our domain, your IP address is transmitted to the provider's servers. In addition to the pure technical forwarding, this data is evaluated in anonymized form in order to create click statistics (e.g. number of redirects, browsers used, rough geographical origin). According to the provider, IP addresses are anonymized directly, so that no conclusions can be drawn about your person. No cookies are set.
- Legal basis: The technical forwarding and the anonymous statistical evaluation are carried out on the basis of our legitimate interest in the optimisation and economic operation of our online offer (Art. 6 para. 1 lit. f GDPR).
- Order processing: We have concluded a contract for order processing (DPA) with the provider in accordance with Art. 28 GDPR. The provider processes the data exclusively on our behalf on servers within the European Union.
- Right to object: You can object to the data processing described above at any time. The objection has no adverse consequences.
5. Use of cookies
Our website uses so-called "cookies" to make the use more efficient, user-friendly and secure. These are small text files that are stored on your device and managed by your browser.
Most of the cookies we use are so-called "session cookies". These are automatically deleted as soon as you leave our website. Other cookies will remain on your device until you manually remove them. They allow us to recognize your browser on a subsequent visit.
You have the option of configuring your browser settings so that you are informed about the setting of cookies. In addition, you can only allow cookies in individual cases, refuse to accept cookies in certain cases or in general, and activate the automatic deletion of cookies when you close the browser. Please note that disabling cookies may limit the functionality of the website.
Cookies that are necessary for the technical operation of the website or for desired functions (e.g. shopping cart) are stored in accordance with Art. 6 (1) (f) GDPR. Our legitimate interest lies in the technically error-free and optimized provision of our services. Other cookies, in particular those for analysing user behaviour, are treated separately in this privacy policy.
To obtain and document your cookie consent, we use the tool "consentmanager" of consentmanager GmbH (https://www.consentmanager.de, hereinafter referred to as "Consent Manager Provider"). When you visit our website, a connection is established to the servers of the consent manager provider in order to record your consent or rejection of the use of cookies.
The system stores a cookie in your browser to help us understand your choices. The collected data will remain stored until you ask us to delete it, remove the cookie in question or the purpose of the data storage no longer applies. Statutory retention obligations remain unaffected by this. The use of Consent Manager Provider is carried out in order to comply with the legal requirements for cookie consent. The legal basis for this is Art. 6 para. 1 sentence 1 lit. c GDPR.
6. Social Media Hyperlinks
We have integrated hyperlinks to the following social media services on our website: LinkedIn, Facebook, X, Vimeo, YouTube, Slideshare, flickr and Instagram.
These are designed in the form of the corresponding logos and are stored on our own server. As a result, no data about you as a user is transmitted to the respective provider services when you first load our website. Only when you click on the logos will you be directed to the respective website. Further data from you may be processed on these.
We have no influence on this data processing on the respective linked websites.
7. Your rights
You have the following rights vis-à-vis us in relation to personal data concerning you:
- Right to information,
- Right to rectification or erasure,
- Right to restriction of processing,
- Right to object to processing,
- Right to data portability.
You can object to the processing of your personal data if it is processed on the basis of legitimate interests.
If you have given us your consent to process, you have the right to withdraw your consent at any time. Such a withdrawal does not affect the lawfulness of the processing carried out on the basis of consent before its withdrawal.
If you wish to exercise your rights, please contact our data protection officer. All you need to do is send an e-mail to the e-mail address given in the imprint or to the data protection officer (datenschutz@lanxess.com).
You have the option of making a complaint to a supervisory authority, in particular in the Member State of your residence, your place of work or the place of the alleged infringement. The supervisory authority responsible for LANXESS is:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia P.O. Box 20 04 44 40102 Düsseldorf
poststelle@ldi.nrw.de
8. Retention of data
We only store your personal data for as long as it is necessary to perform a service that you have requested or to which you have given your consent, unless otherwise required by law.
9. Security
LANXESS uses technical and organizational security measures to prevent the data you provide from accidental or intentional manipulation, Protect against loss, destruction or access by unauthorized persons. In the case of the collection and processing of personal data, the information is transmitted in encrypted form in order to prevent misuse of the data by third parties. Our security measures are constantly being revised in line with technological developments.
10. Children
Protecting children's privacy is an important issue. For this reason, we do not collect, process or use information on our website from persons who we know to be under the age of 16 without first obtaining the verifiable consent of a legal representative. Upon request, legal representatives can view the information provided by their child or request that it be deleted.