Privacy policy

Privacy Policy

We are committed to protecting the privacy of our website visitors and customers. The protection and security of personal data are of the highest priority for us. Castolin Eutectic GmbH, Gutenbergstrasse 10, 65830 Kriftel, Germany (Tel: (+49) 6192 403-0, Email: castolin@castolin.com, hereinafter "we" or "us") strictly adheres to the rules of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). As the data controller within the meaning of Art. 4 No. 7 GDPR, we inform you with this privacy policy about how we handle your personal data, i.e., what type of data we collect and for what purpose it is processed.

(1) What are personal data?

The term "personal data" is defined in the GDPR. It refers to all information relating to an identified or identifiable natural person. This includes, for example, your full name, telephone number, or date of birth.

(2) Data Logging

In general, it is not necessary for you to provide personal data to use our website. However, when you visit this website, the web server automatically records so-called log files. The data stored in these log files include, for example, the browser type and version, the operating system used, the referrer URL (the previously visited page), the IP address of the requesting computer including its geographical location, the access date and time of the server request, the duration of your visit, and the client’s file request (file name and URL). These data are collected only for statistical purposes. They are not shared with third parties for commercial or non-commercial purposes. We do not combine these data with other data from other sources. The collection and processing of these data are carried out to enable the use of the website, based on Art. 6 para. 1 sentence 1 lit. f) GDPR. Our legitimate interest is the provision and management of our website with all its functionalities.

These data stored in server log files are only stored for a limited period and are automatically deleted after 60 days.

We reserve the right to review these data retrospectively if we become aware of specific indications of illegal use. This review is carried out solely to detect and prevent illegal use of our website based on Art. 6 para. 1 sentence 1 lit. f) GDPR. Our legitimate interest is to ensure the security of our offering and to prevent misuse.

(3) Further Collection, Processing, and Use of Personal Data

We collect or process personal data only if you voluntarily provide this information, e.g., as part of an inquiry. In this case, your information from the inquiry, including the contact details you provide, will be stored and used by us to fulfill the purpose associated with the transmission, e.g., to process your inquiry and for any follow-up questions. The basis for this storage and use of these personal data is Art. 6 para. 1 sentence 1 lit. b) GDPR, provided you enter these personal data for the purpose of initiating a contractual relationship with us. Only in this case is the entry of personal data required within the meaning of Art. 13 para. 2 e) GDPR. Otherwise, this storage and use are based on Art. 6 para. 1 sentence 1 lit. f) GDPR, with our legitimate interest being the careful processing of your concern.

If you commission us to provide a service or send goods, we generally collect, store, and use your personal data only to the extent necessary to provide the service or execute the contract. The legal basis for the associated data processing is Art. 6 para. 1 sentence 1 lit. b) GDPR. This may also require us to pass on your personal data to companies we use to provide the service or execute the contract. These include, for example, transport companies or other service providers. This transfer to the service providers we use is also based on Art. 6 para. 1 sentence 1 lit. b) GDPR.

In all cases where the data processing as described above serves the fulfillment of the contract, the provision of your personal data is necessary for the conclusion of the contract (cf. Art. 13 para. 2 lit. e) GDPR). Without your personal data, we cannot execute the contract.

According to the GDPR, you are the owner of your personal data. If you have previously submitted a contact request for our website and provided us with your email address/company name/phone number/address, you have the right to be "forgotten." Please send us an email at castolin@castolin.com if you would like us to delete all data we have collected about you.

(4) Subscription to Website Services, Newsletter

If you want to subscribe to our website services or order our newsletter, we need a valid email address from you. To verify that you are the owner of the specified email address and agree to receive the subscribed email notifications or the newsletter, we will first send an email to the specified email address containing a confirmation link for the subscription to the respective service, i.e., website service or newsletter. Your subscription is only effective after you confirm your subscription by clicking on the link sent (so-called double opt-in procedure). No further data are collected. These data are collected and used solely for the purpose of sending you the subscribed service or newsletter and documenting our authorization to do so. The data are not shared with third parties. You can revoke your consent to the storage of the email address and its use for sending email notifications or the newsletter at any time with effect for the future, for example, via the "Unsubscribe" link in the newsletter. The legal basis for data processing in connection with the newsletter and other subscribed email notifications is your consent (Art. 6 para. 1 sentence 1 lit. a) GDPR).

(5) Contact Form, Registration Process, and Shopping Cart

If you use our contact form, registration process, and shopping cart, we need your first and last name, address, and a valid email address. These data are collected and used solely for the purpose of providing you with the corresponding service. The data are not shared with third parties. You can revoke your consent to the storage and use of your personal data at any time with effect for the future via kunden-info@castolin.com. The legal basis for data processing is your consent (Art. 6 para. 1 sentence 1 lit. a) GDPR).

(6) Cookies

This website uses cookies. We use cookies and services from partners such as Matomo to analyze visits to our website for insights to improve content and to display certain easy-to-use interactive content if you give your consent by clicking the "Agree" button. To the extent necessary for these purposes, our partner (Matomo) receives information about you, such as your IP address, and processes it according to its privacy policy. You can revoke your consent at any time for the future. Further details on data processing and our partners can be found in our privacy policy.

Cookies are small text files used by websites to make the user experience more efficient.

According to the law, we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies, we need your permission.

This site uses different types of cookies. Some cookies are placed by third parties that appear on our pages.

You can change or withdraw your consent at any time from the cookie declaration on our website.

Learn more about who we are, how you can contact us, and how we process personal data in our privacy policy.

Please provide your consent ID and the date when contacting us regarding your consent.

Your consent applies to the following domains: https://shop.castolin.com

(7) Web Analysis with Matomo

• Date and time of the request
• Title of the accessed page (Page Title)
• URL of the accessed page (Page URL)
• URL of the page that was accessed before the current page (Referrer URL)
• Screen resolution used
• Time in the user's local time zone
• Files clicked and downloaded
• Links to an external domain that were clicked
• Page generation time (the time the web server needs to generate the pages and then download them by the user)
• Location of the user: country, region, city, approximate geographic latitude and longitude
• Main language of the browser used
• User agent of the browser used

(8) Data Transfers to Third Parties

Your personal data will not be shared with third parties without your express consent unless it is necessary for the provision of the service or the execution of the contract. Accordingly, your data will only be transferred to third parties based on your consent according to Art. 6 para. 1 sentence 1 lit. a) GDPR or for the purpose of fulfilling the contract according to Art. 6 para. 1 sentence 1 lit. b) GDPR. The transfer of your data to authorized state institutions and authorities will only take place within the framework of legal disclosure obligations or if we are obliged to provide information by a court decision. In this case, the transfer of your data is necessary according to Art. 6 para. 1 sentence 1 lit. c) GDPR to fulfill a legal obligation to which we are subject.

If external service providers come into contact with your personal data, we have ensured through legal, technical, and organizational measures and regular checks that they comply with the provisions of data protection laws.

RecipientPurpose of Data ProcessingLegal Basis of Data ProcessingPrivacy PolicyMatomo.org | To collect and analyze information about how you interact with our websites (web analysis) and to detect and prevent any misuse. | Legitimate interest according to Art. 6 (1) f GDPR | Privacy Policy - Analytics Platform - Matomo
Stripe Payments Europe Ltd., Ireland | To process the payment transaction. | Legitimate interest according to Art. 6 (1) f GDPR | Privacy Policy - Stripe

(9) General Storage Duration and Deletion

We store your personal data as long as it is necessary to fulfill the intended purpose (e.g., contract fulfillment, answering your inquiry) or legitimate reasons within the meaning of Art. 17 para. 3 GDPR, such as legal retention periods, require storage. As long as legal retention obligations, such as tax and commercial law regulations, prevent the deletion of your personal data, we restrict the processing of your data; subsequently, your data will be deleted according to legal regulations.

Applicant data will be deleted within a maximum of six months after the end of the application process unless you have given us consent for further storage or legitimate reasons on our part, such as the defense of legal claims, prevent deletion.

(10) Security of Your Personal Data

We take technical and organizational precautions to prevent the loss, misuse, or unauthorized alteration of your personal data. We store all personal data you provide to us on our secure (password and firewall-protected) servers. All electronic transactions you make with us or receive from us are encrypted. Please note that data transmission over the Internet is not completely secure, and we cannot guarantee the security of data transmitted over the Internet. You are responsible for keeping your password and user identification confidential. We will not ask you for your password with which you log in to our website services.

(11) Your Rights as a Data Subject

You have the right to obtain information about the personal data stored about you at any time without giving reasons. You also have the right to correct incorrect data (Art. 16 GDPR), as well as, if applicable, to delete your personal data (Art. 17 GDPR) or to restrict data processing (Art. 18 GDPR). If the basis for data processing is Art. 6 para. 1 sentence 1 lit. f) GDPR (legitimate interests), you have the right to object to the processing of your personal data at any time, provided there are reasons arising from your particular situation, or if the objection is directed against data processing for direct marketing purposes. In the latter case, you have a general right to object, which we will implement without specifying reasons arising from your particular situation (Art. 21 para. 2 GDPR). If you object for reasons arising from your particular situation, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims (Art. 21 para. 1 GDPR).

You can also revoke any consent given to us for data collection and use at any time without giving reasons with effect for the future.

If you provide data concerning you and we process these data based on your consent or for contract fulfillment, you can request that you receive these data in a structured, commonly used, and machine-readable format from us or that we transfer these data to another controller, provided this is technically feasible (so-called right to data portability). You also have the right to lodge a complaint with a supervisory authority if you believe that data processing by us violates legal regulations.

To exercise your above-mentioned rights, please contact our contact address provided above or send us or our data protection officer an email.

(12) Our Data Protection Officer

In our company, we have appointed internal data protection coordinators and an external data protection officer. They implement organizational and technical measures to ensure that your personal data are well protected. Please contact the data protection officer of Castolin GmbH with any questions about data protection at dataprotection@castolin.com.

For postal submissions, please use our postal address provided in the introduction above.

(13) Links to Websites of Other Providers

Our website may contain links to other providers' websites, to which this privacy policy does not apply. It does not cover such content and third-party websites to which our website merely links. This applies, for example, to social networks such as LinkedIn, YouTube, etc. The processing of your personal data via these social networks is carried out by the respective operator of the network, without us having any influence on this processing. This also applies to your personal data that you provide to us via such a platform, for example, by writing to our profile on the respective social network. If the use of other providers' websites involves the collection, processing, or use of personal data, please observe the data protection notices of the respective providers. Information on how your personal data are handled and protected on these platforms can be found in the privacy policy of the respective platform provider. However, if we store your personal data that you have provided to us via a social network or that we receive from a social network on our own servers and use them to process your inquiry or concern or for other purposes, our explanations in this privacy policy naturally apply.

(14) Changes to This Privacy Policy

We reserve the right to change this privacy policy within the framework of existing legal regulations and to publish an updated version on our website if this is indicated, for example, due to new technical developments or changes in case law or our business operations. Therefore, you should check this page from time to time to ensure that you are familiar with our current privacy policy.