PRIVACY POLICY

The controller responsible for the processing of personal data on this website is:

• Managing Directors: Dr. Christian Braunshier and Michael Thürmer
• Company register number: FN 457503z
• Company register court: Regional Court Eisenstadt
• VAT identification number: ATU 7126 3526
• EORI number: ATEOS1000079514

Privacy-related enquiries may be sent at any time to office@cbchemie.at.

We process personal data on the basis of the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act 2021 (TKG 2021).

• Art. 6(1)(a) GDPR – where you have given us your consent, in particular for non-essential cookies, external media or certain third-party services.
• Art. 6(1)(b) GDPR – where processing is necessary for pre-contractual measures or the performance of a contract, for example in connection with business enquiries, offers or customer communication.
• Art. 6(1)(c) GDPR – where we are legally obliged to process data, in particular due to corporate, tax or commercial law obligations.
• Art. 6(1)(f) GDPR – where processing is necessary for the purposes of legitimate interests, such as IT security, spam prevention, technical stability and website optimisation.
• Section 165(3) TKG 2021 – where information is stored on or accessed from your device, for example through cookies, comparable technologies or external services.

This website is hosted by World4You. The provider is World4You Internet Services GmbH, Wolfgang-Pauli-Straße 2, BT3, 4020 Linz, Austria.

When you access this website, the web server processes technically required access data. This may include in particular:

• IP address or shortened/anonymised IP address,
• date and time of access,
• visited page or requested file,
• referrer URL, if transmitted,
• browser type, browser version and operating system,
• amount of data transferred,
• HTTP status code,
• technical error and security information.

Processing is carried out to deliver the website, ensure operational security, analyse errors, defend against attacks and optimise the website technically. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable operation of the website.

To the extent that World4You processes personal data on our behalf, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR. Server log files are stored only for as long as necessary for operational security, error analysis and legal documentation.

This website is based on WordPress and uses technical extensions for display, administration, multilingual functionality, security, performance, search engine structure, form processing, media management and maintenance.

These include in particular WordPress, WPBakery Page Builder, Select theme components, Polylang, Loco Translate, All in One SEO, Autoptimize, Async JavaScript, ShortPixel Image Optimizer, Classic Widgets, Slider Revolution, UpdraftPlus, Simple History, Media Cleaner, WP File Manager and other administrative tools.

These components process personal data only to the extent required for the respective function. This may include technical usage data, security events, log data, form information or administrative logs.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in a secure, high-performance, multilingual and user-friendly website.

Our website uses cookies and comparable technologies. Cookies are small pieces of information that may be stored in the browser or on the device. Some cookies are technically necessary, while others are used for additional functions only after you have given your consent.

We use CookieYes | GDPR Cookie Consent for consent management. CookieYes displays the cookie notice, manages your consents by category, stores your selection and enables you to change your cookie settings later.

CookieYes sets, in particular, the cookie cookieyes-consent in order to store your consent preferences. This cookie is technically necessary for managing your consent.

Technically necessary cookies and consent management are processed on the basis of Art. 6(1)(c) GDPR, Art. 6(1)(f) GDPR and Section 165(3) TKG 2021. Non-essential cookies and external services are loaded only on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 165(3) TKG 2021.

You can withdraw or change your consent at any time using the CookieYes button or the CookieYes icon. You can also delete or block cookies in your browser settings.

We use Burst Statistics to evaluate the use of our website in a privacy-friendly manner. The analysis helps us improve content, technical stability, navigation and user-friendliness.

Burst Statistics stores statistical data locally in the WordPress database. Statistical data is not transferred to Google Analytics or comparable external analytics platforms.

Depending on the technical configuration, processed data may include page views, referrers, device and browser information, access times, visited pages and aggregated usage values. Data is not used for advertising purposes and is not sold.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in measuring reach, technically optimising and improving our website. If Burst Statistics is used in a configuration that relies on non-essential cookies or comparable device access, this takes place only with your consent pursuant to Art. 6(1)(a) GDPR and Section 165(3) TKG 2021.

Statistical data is stored only for as long as necessary for the stated purposes and is then deleted or retained only in aggregated form.

If you contact us, we process the data you provide in order to handle your enquiry, communicate with you and respond to any follow-up questions.

This applies in particular to contact by email, telephone, post, social media profiles or a form on the website. For forms, we use Contact Form 7.

Depending on the type of enquiry, the following data may be processed in particular:

• name and company, if provided,
• email address and telephone number,
• address or location details, where relevant to the enquiry,
• message content and voluntary information,
• information about products, business areas, partners, suppliers or service enquiries,
• technical data relating to form submission, where necessary for delivery and security.

The legal basis is Art. 6(1)(b) GDPR where the enquiry relates to pre-contractual measures, offers, supplier relationships, customer relationships or other business cooperation. In all other cases, the legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in handling and responding to your enquiry.

General enquiries are stored for the duration of processing and for possible follow-up questions, usually for up to six months. Business-relevant communication, offer documents, contract documents, invoice data and other tax or corporate-law-relevant documents are stored in accordance with statutory retention obligations, usually for up to seven years.

Technical protection measures may be used on this website to protect against spam, misuse and automated access. These include in particular Antispam Bee and Google reCAPTCHA v2 for Contact Form 7.

Google reCAPTCHA is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. reCAPTCHA can be used to determine whether an input is made by a natural person or by automated programs.

When reCAPTCHA is used, data such as IP address, browser and device information, operating system, referrer, date and time of access, interaction data and, where applicable, cookies or comparable technologies may be processed and transmitted to Google.

Processing is carried out for IT security, spam prevention and misuse prevention on the basis of Art. 6(1)(f) GDPR. To the extent that Google reCAPTCHA sets non-essential cookies or accesses information on your device, this is done only on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 165(3) TKG 2021.

Further information from Google is available here: Google Privacy Policy and Google Terms of Service.

Map links or embedded maps from Google Maps may be used on this website to display our location and provide convenient route planning. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

If you click a map link or load an embedded map, data may be transmitted to Google. This may include IP address, browser and device information, location data if you allow access, as well as usage and interaction data.

When you merely visit our website, a simple map link does not establish a direct connection to Google Maps. Where Google Maps is directly embedded, the map is loaded only on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 165(3) TKG 2021.

Further information is available in Google’s privacy policy: Google Privacy Policy.

Fonts, icon fonts, image files, stylesheets and scripts may be used to ensure consistent display of the website. These are generally delivered through our website or web server.

We use Autoptimize, Async JavaScript and ShortPixel Image Optimizer, among others, to optimise loading times and technical performance. Technical information may be processed in this context, for example which files are delivered, compressed, cached or optimised.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing a fast, stable and resource-efficient website.

Where external fonts, external media CDNs or external image/file services are actively integrated, such services are loaded only in accordance with the relevant cookie and consent settings.

Jetpack is integrated on this website. Jetpack is a WordPress plugin provided by Automattic Inc. and affiliated companies and may be used, depending on the activated function, for security, performance, protection, administration, statistics or technical website functions.

Technical data such as IP address, browser information, device information, page views, security events or interaction data may be processed. The specific data processed depends on the activated Jetpack functions.

The legal basis is Art. 6(1)(f) GDPR where Jetpack is required for security, stability and technical functions. Where Jetpack functions use non-essential cookies, external content or tracking functions, processing takes place only with your consent pursuant to Art. 6(1)(a) GDPR and Section 165(3) TKG 2021.

Further information is available in Automattic’s privacy information: Automattic Privacy Notice.

We link to social media profiles, in particular Facebook, Instagram and LinkedIn. Merely visiting our website does not establish a connection to these platforms through simple links.

Only when you click a social media link do you leave our website. From that point on, the privacy information and terms of use of the respective platform apply. The platforms may process, in particular, IP address, device and browser data, access time, interaction data and information about your user account if you are logged in there.

Where an Instagram feed or social media content is directly embedded on the website, personal data may be transmitted to the respective platform when such content is loaded. Such content is loaded only in accordance with your cookie and consent settings.

• Facebook: CB Chemie on Facebook
• Instagram: CB Chemie on Instagram
• LinkedIn: CB Chemie on LinkedIn

Our website contains links to external websites, for example to cooperation partners, manufacturers, social media profiles, map services, press articles, affiliated companies or external documents.

Simple links do not establish a connection to the external website when our website is merely loaded. Only when you click the respective link do you leave our website. The respective provider is responsible for the processing of personal data on the external website.

We use technical maintenance, backup and administration tools to secure and restore the website. These include in particular backups, security checks, change logs, media management and administrative file management.

Personal data may be contained in backups, logs or maintenance data if such data has been processed on the website, in forms, in system messages or in technical log data.

Processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the security, integrity, recoverability and proper administration of the website.

Backups and administrative logs are stored only for as long as necessary for security, troubleshooting, restoration or documentation purposes.

Personal data is disclosed only where necessary for the respective purpose, where there is a legal obligation, where you have given your consent or where a legitimate interest exists.

Recipients may include in particular:

• hosting and IT service providers, in particular World4You,
• website, maintenance and technical service providers,
• email and communication service providers,
• tax advisors, legal advisors, authorities or courts, where legally required,
• Google, Meta, LinkedIn, Automattic or other external services, where you load corresponding content or use links.

For individual third-party services, processing outside the European Union or the European Economic Area cannot be excluded. Where required, such transfer takes place on the basis of appropriate safeguards, in particular adequacy decisions, standard contractual clauses or your explicit consent.

We store personal data only for as long as necessary for the respective purpose. Afterwards, data is deleted, anonymised or blocked unless statutory retention obligations or legitimate interests prevent this.

• General contact enquiries: usually up to six months after final processing.
• Business communication, offers, contracts and invoice data: usually up to seven years.
• Technical server and security data: only for as long as necessary for operation, security and error analysis.
• Cookie and consent data: for as long as required to document, manage and withdraw your consent.
• Statistical data: only for as long as necessary for analysis and website optimisation; afterwards aggregated or deleted.
• Backups and administrative logs: only for as long as necessary for security, restoration and documentation purposes.

Subject to the statutory requirements, you have in particular the following rights:

• right of access pursuant to Art. 15 GDPR,
• right to rectification pursuant to Art. 16 GDPR,
• right to erasure pursuant to Art. 17 GDPR,
• right to restriction of processing pursuant to Art. 18 GDPR,
• right to data portability pursuant to Art. 20 GDPR,
• right to object pursuant to Art. 21 GDPR,
• right to withdraw consent pursuant to Art. 7(3) GDPR.

If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a supervisory authority. In Austria, this is in particular:

To exercise your rights, please contact us at office@cbchemie.at.

We do not use automated decision-making within the meaning of Art. 22 GDPR or profiling for advertising purposes on this website.

We update this privacy policy whenever the website, the services used, technical processes or legal requirements change. The version published on this website shall apply.