Data Privacy Statement

1. General information on data processing

This Data Privacy Statement explains type, scope and purposes of processing of personal data by us as the controller ALTANA AG (hereinafter referred to as “ALTANA” or “we”) via this website.

Our contact details:

ALTANA AG
Abelstrasse 43
46483 Wesel
Germany
Tel +49 281/670-8
E-Mail: info@remove-this.altana.remove-this-also.com

The contact details of our data protection officer are as follows:

Mr. Detlef Stürcken
- Data Protection Officer -     
Abelstrasse 43
46483 Wesel
Germany
Tel +49 281/670-8
E-Mail: Datenschutz.Altana@remove-this.altana.remove-this-also.com

1.1 Scope of processing of personal data

We process your personal data in principle only if you contact us via this website, if this is necessary for the provision of an operational website or for the presentation and use of our contents, offers and services. Without this processing, we could not provide our offering and usage would be impossible.

1.1.1. Provision of the website

If you visit our website, we log the IP address (i.e. the Internet address) of the computer accessing the site and other general usage data, such as date and time (“user-related data”), in order to evaluate which parts of our website are of particular interest. Your user-related data are rendered anonymous.

The processing of these data serves the internal evaluation of our website’s frequency of use. We pursue our legitimate interest to verify the efficiency of our offer. Legal basis for the processing of data is Art. 6 para. 1 lit. f GDPR.

1.1.2 Contact form

Our website features a contact form, which may be used for making contact electronically. If you take this opportunity, the data entered on the input screen will transferred to and processed by us. The processing of personal data from the input screen serves the sole purpose of handling the contacting and your concern.

Here, the legal basis for the processing of data is Art. 6 para. 1 lit. f GDPR. Handling of contacting constitutes our legitimate interest for the processing of data. Additional legal basis for data processing is, in case of consent given by you, Art. 6 para. 1 lit. a GDPR.

You may revoke your consent informally at any time. In case the aim of the contacting is the conclusion of a contract, Art. 6 para. 1 lit. b GDPR is an additional legal basis for processing.

1.2 Legal basis for the processing of personal data

As far as you have given your consent to process personal data, Art. 6 para. 1 lit. a of the European Union's General Data Protection Regulation (GDPR) serves as the legal basis for the processing.

For the processing of personal data which serves the execution of a contract to which you are a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis for processing. This also applies to processing operations, which are necessary to implement pre-contractual measures.

As far as processing is necessary for compliance with a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis for processing.

In case processing is necessary in order to protect the vital interests of the data subject or of another natural person, Art. 6 para. 1 lit. d GDPR serves as the legal basis for processing.

If processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, and such interests are not overridden by the interests or fundamental rights and freedoms of the data subject, Art. 6 para. 1 lit. f GDPR serves as the legal basis for processing.

1.3 Transfer of personal data to third parties

All personal data collected in connection with the provision of this website will only be transferred by us to our affiliates as well as to technical service providers which are employed as processors according to the GDPR.

In individual cases, a transfer to a third country outside the EU and the EFTA may occur. However, we transfer personal data only to third countries where the EU Commission has determined an adequate level of data protection by decision according to Art. 45 GDPR or if we and the recipient of the data have agreed upon standard data protection clauses adopted by the Commission according to Art. 46 para. 2 lit. c GDPR.

1.4 Data erasure and storage duration

As far as you did not give consent to a specific storage duration, we will store your personal data only as long as this is necessary to pursue the respective processing purpose and if there are no conflicting legal retention or storage periods.

2. Use of cookies

Our website uses cookies. Cookies are text files that are stored on a web browser or by the web browser on the user’s computer system. A cookie normally contains the name of the domain from which the cookie data has been sent, information about the age of the cookie, and an alphanumerical ID. Among other things, we use cookies for marketing purposes. They help us improve our website and offer you a better service that is more personalized to you. They enable us to recognize your computer whenever you return to our website.

We use the consent management tool (CMT) from the company FAKTOR.io to manage our cookies. You can use this CMT to consent to our cookies being placed or block them. If you block our cookies, you might only be able to make limited use of our website and offering.

Essential technical cookies are used for the purpose of ensuring our website and its contents run properly. These purposes also substantiate our legitimate interest in processing personal data. Article 6, para. 1 f of the GDPR constitutes the legal grounds for this data processing.

You can, of course configure your browser so that it does not store our cookies on your end device. The Help function in the menu found on most web browsers explains how you can prevent your browser from accepting new cookies, how you can have your browser notify you when you receive a new cookie, or even how you can delete all cookies that have already been received and completely block any more cookies.

2.1 Facebook retargeting (website custom audience)

A pixel owned by Facebook Ireland Limited (website custom audiences pixel) is integrated into our website. This pixel enables Facebook Ireland Limited to collect information about how this website is used (e.g. information about what articles users look at). With the aid of other data that Facebook Ireland Limited has stored about you, e.g. because you have an account on Facebook’s social network, such information can be assigned to you personally. The information collected via this pixel can be used to show you relevant advertisements in your Facebook account that pertain to our offerings (retargeting). The information collected via the pixel can also be aggregated by Facebook Ireland Limited, and this aggregated information can be used by Facebook Ireland Limited for its own advertising purposes and for the advertising purposes of third parties. For example, when you access pages on this website, Facebook Ireland Limited can conclude that you have certain interests and utilize this information to advertise third-party offerings. Furthermore, Facebook Ireland Limited can link information collected via the pixel with other information that Facebook Ireland Limited has collected about you via other websites and/or in connection with your usage of the social network Facebook and thus store a profile about you at Facebook Ireland Limited. This profile can be used for advertising purposes. You can find more information about data protection at Facebook Ireland Limited at: https://www.facebook.com/policy.php

Article 6, para. 1 f of the GDPR constitutes the legal grounds for this data processing.

2.2 Google services

We use various services from Google LLC on our website.
You can find more information about Google’s services at https://www.google.com/privacy/ads/.

2.2.1 Google remarketing function

Google’s remarketing function enables us to show our users advertisements that are based on their interests when they are on other websites within the Google Ads network (either as Google Ads or as advertisements on other websites). An analysis is conducted with regard to how users interact with our website so that after these users have visited our website, targeted advertisements can still be displayed to them on other sites. For this purpose, Google stores a number in the browsers of users who visit certain Google services or websites in the Google Display Network. This number, which is classified as a cookie, records the visits of such users. The number serves to clearly identify a web browser on a specific computer and not to identify a person; no personal data is stored. Article 6, para. 1 f of the GDPR constitutes the legal grounds for this data processing.

You can stop Google using cookies in this way by installing the plugin provided under the following link: www.google.com/settings/ads/plugin. You can also stop Google advertisements being customized to your interests on Google in your browser by activating the “off” button at https://adssettings.google.de/authenticated or by opting out of ads personalization at http://www.aboutads.info/choices/.

2.2.2 Google reCAPTCHA

To ensure a sufficient level of data security when forms are transmitted, we sometimes use the reCAPTCHA service from Google Inc. This primarily serves to determine whether data has been entered by a real person or fraudulently via machine or automated processing. As part of this service, the IP address is sent to Google, along with any other data Google requires so it can provide its reCAPTCHA service. The data privacy provisions enforced by Google Inc., which may differ from those set out here, shall apply in this regard. You can find more information about Google Inc. privacy guidelines
at https://policies.google.com/privacy or https://www.google.com/intl/en/policies/privacy/. Article 6, para. 1 f of the GDPR constitutes the legal grounds for this data processing.

2.3 YouTube

We use the YouTube.com platform to post our own videos and make them publicly accessible. YouTube is an offering from YouTube LLC, which is headquartered in 901 Cherry Avenue, San Bruno, CA 94066, USA. When you access a (sub)page of our internet offering on which YouTube videos have been integrated in this form, a connection is established to YouTube’s servers and the content is displayed on the website by means of a notification sent to your browser. YouTube content is only ever integrated in the “privacy-enhanced mode”. This mode is provided by YouTube itself to ensure that YouTube does not initially store any cookies on your device. Nonetheless, when you access the relevant pages, your IP address and the other data listed under No. 4 are transferred and, in particular, the information about which of our webpages you have visited is disclosed. This information, however, cannot be traced back to you unless you log into YouTube or another Google service (e.g. Google+) before accessing such pages or unless you are permanently logged in. The privacy-enhanced mode means that as soon as you click to start playing an integrated video, YouTube only stores cookies on your device that do not contain any personally identifiable data, unless you are currently logged into a Google service.

You can find information about how YouTube and Google process data and their privacy policies here: https://policies.google.com/privacy and https://support.google.com/youtube/answer/171780?hl=en

2.4 eTracker

The provider of this website uses the services of etracker GmbH, Hamburg, Germany (www.etracker.com) to analyse usage data. Here, cookies are used which enable the statistical analysis of the use of this website by its visitors as well as the display of usage-relevant content or advertising. Cookies are small text files that are stored by the Internet browser on the user's device. etracker cookies do not contain any information that could identify a user.

The data generated with etracker is processed and stored by etracker solely in Germany by commission of the provider of this website and is thus subject to strict German and European data protection laws and standards. In this regard, etracker was checked, certified and awarded with the ePrivacyseal data protection seal of approval.

The data is processed on the legal basis of Art. 6 Section 1 lit f (legitimate interest) of the EU General Data Protection Regulation (GDPR). Our legitimate interest is the optimization of our online offer and our website. As the privacy of our visitors is very important to us, etracker anonymizes the IP address as early as possible and converts login or device IDs into a unique key with which, however, no connection to any specific person can be made with. etracker does not use it for any other purpose, combine it with other data or pass it on to third parties.

You can object to the outlined data processing at any time provided it is related to your person. Your objection has no detrimental consequences for you.

Further information on data protection with etracker can be found here.

For statistical evaluation purposes, information about your use of our website will be collected by means of so-called tracking pixels. Tracking pixels are small graphics implanted into websites enabling log-file recording and files analysis. While visiting our website, the tracking pixels add information in the cookie file of your web-browser. The data will be collected by a tracking server of eComCon GmbH, that may collect information such as the IP address, domain name of the website you are arriving from, pages of our website, domain names, date and time of a call, name of your internet service provider and browser version of your computer. In doing so no personal data will be reported, all collected data will be immediately anonymized after processing. The IP address will be deleted directly upon its use. The collected data will be used for creating anonymized user profiles being the basis for web statistics as well as for constantly improving our offers and services and hence making them more interesting for you. The data obtained by means of the tracking pixels are entirely anonymized, including storage and processing. Therefore, we and the aforementioned third-party companies do not require any separate approval for this process. You may, of course, object to tracking pixels used by third party companies acting on our behalf. For this, each featured banner shows a blue arrow. By clicking it, you are automatically directed to a site where the process is explained and an “opt-out” solution is being offered. By clicking “opt-out”, an “opt-out” cookie is set preventing the future displaying of our advertising banners. However, you should be aware that by deleting cookies the opt-out-cookie will be removed as well. It is thus advisable to reset the cookies before activating the opt-out-cookie function. 

Cookies are used for purposes of improving the quality of our website and its contents. These purposes also constitute our legitimate interest in the processing of these personal data. Legal basis for the processing of data is Art. 6 para. 1 lit. f GDPR.

Furthermore, the application of cookies serves to guarantee confidentiality, integrity, availability and resilience of our web offer and the systems used for its supply. Here, the legal basis for the processing of data is Art. 6 para. 1 lit. c GDPR.

3. Social media buttons

You will find on our websites the “Share” button of Facebook, the “+1” button of Google, and a link to Twitter. If you activate a platform of this type, your browser will establish a short connection with the server of the relevant network, which serves primarily to display the content of the plugin. The cooperating party will learn your IP address, however, through this plugin. This will not identify you by name automatically. But if you are logged in to Facebook at the same time your visit to our website may be matched to your Facebook account. 

Usually, social media buttons transfer user data with any page view to such sites as Facebook etc. To prevent the unwanted communication of your IP address, we have installed a data protection solution on our websites, which prevents immediate forwarding of your data. This means that user data – intended, say, for Facebook – is not sent when you connect to the site, but when you have clicked on the button for e.g. Facebook. Only an active click on the button in question will establish a connection to the server of the respective platform. If you do not click on the relevant button, there will be no exchange of data between you and the providers of the social media platforms. For further information regarding our Shariff solution, go to:
http://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html

4. Career portal / applicant information

It is possible to use our website to apply for an advertised position or to send an unsolicited application. During the online application process, you communicate personal data to us, which we will process for purposes of the application process. All personal data conveyed by you within the context of the application process will only be collected for purposes of the application process.

4.1 Which information will be gathered by us?

During the application process, we gather all information provided by you in the context of your application, as well as, if applicable, further data which we may learn during an interview or online assessment, notably evaluations.

Of course, such evaluation does not contain any defamatory or deprecatory statements. We only record information which is directly associated with the evaluation and the recruitment process or your job profile.

4.2 Treatment of your application data

All personal data conveyed by you within the context of the application process will only be collected for purposes of the implementation of the application process. It is irrelevant, if you apply for an advertised position or if you send an unsolicited application

Your application for a specific position or your unsolicited application for a certain location will go directly to the relevant personnel department of our respective subsidiary.

In case of an unsolicited application for a certain region or several locations, you provide us with your personal data for verification of your suitability for different, and, if applicable, interdisciplinary positions throughout the group. Therefore it is possible that, in addition to the handling by our HR department, your documents will be forwarded to several of our specialist departments or to HR and specialist departments of our subsidiaries.

In both cases it is possible that your application will be forwarded to the competent specialist departments or to works council.

Furthermore, our department HR Corporate Systems & Recruitment has access to the group-wide applicant management system because of because of system requirements.

4.3 Transfer of data to third countries

Especially in the context of an application process regarding a position in a third country outside the EU and the EFTA, your personal data will be transferred to our subsidiaries in the country in question. However, we transfer personal data only to third countries where the EU Commission has determined an adequate level of data protection by decision according to Art. 45 GDPR or if we and the recipient of the data have agreed upon standard data protection clauses adopted by the Commission according to Art. 46 para. 2 lit. c GDPR.

4.4 Storage of your data, applicants’ pool

After completion of the application process, you data will be deleted, according to the applicable data protection regulations, particularly with regard to retention periods.

If we do not find a suitable position for you after completion of the application process, you have the possibility to give consent to inclusion into our applicants’ pool. In case of consent your application data and documents will still be stored in our system and examined for suitability in case of open positions. If you do not give or if you revoke your consent, we will delete your personal data according to the legal provisions, as far as we are not legally obliged to retain your data. You may at any given time informally revoke your consent. 

4.5 Purpose of data processing, legal basis, storage duration

In the context of an application process, we collect and process your personal data for the purpose of initiating a possible employment.

The legal basis for the processing of data is Art. 6 para. 1 lit. b GDPR, as well as Art. 6 para. 1 lit. a GDPR to the extent you have given us consent for a certain processing of your data.

Your application data will generally be deleted or the processing will be restricted, as soon as the purpose for storage, i. e. the execution of an application or an employment, is no longer pursued. However, a deletion does not take place as far as the European or national legislative body stipulates a retention obligation for a certain period of time after termination of the application process, or if you have voluntarily given consent to a longer storage of your data. In these cases, the data will be deleted after expiration of the retention period or your consent or the revocation of your consent. A revocation of the consent is possible at any time.

5. Internet Purchasing Network Tool for Supplier

If, as a supplier, you have an interest in our company and communicate this to us through the use of our Internet Purchasing Network Tool, you will be asked to enter contact details for the decision-makers and information providers of your company. We point out that these entries are voluntary. Please only provide details about staff within your company if the latter have consented to the disclosure of this information.

The collection of these data serves the preparation of supplier contracts. Legal basis for processing is Art. 6 para. 1 lit. b GDPR, as well as Art. 6 para. 1 lit. a, as far as you have given consent to a certain processing of your data. You may revoke your consent at any given time. The personal data will only be stored as long as this is necessary for the preparation and execution of a contract.

6. Your rights

In general, i.e. subject to any legal restrictions, you have the rights listed below. In order to facilitate the exercise of these rights, we inform you that any corresponding request does not require a certain form, you may send such request electronically (notably per email).

You may request information about your personal data from the controller,

You may request the rectification of your personal data by the controller if the data is inaccurate,

You may request the erasure of your personal data by the controller,

You may request the restriction of further processing of your personal data by the controller,

You have the right to object against further processing of your personal data by the controller, provided that you set out the respective grounds relating to your particular situation. If you have exercised your right to object, we will stop processing your personal data unless we are able to demonstrate compelling legitimate grounds for this processing that override your interests, rights and freedoms, or unless the processing is for the purpose of enforcing, exercising or defending legal claims,

You may request to receive your personal data in a structured, commonly used and machine-readable format, and to transmit those data to another person without hindrance from the controller to which the personal data have been provided,

Furthermore you have the right to file a complaint about the handling of your personal data by a controller with a supervisory authority competent for data protection. In order to facilitate the exercise of this right, we inform you that the supervisory authority competent for our place of business may be contacted under the following address:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen,
Kavalleriestrasse 2-4, 40213 Düsseldorf, Germany

7. Automated individual decision-making, including profiling

Automated decision-making in individual cases, including profiling in accordance with Art. 22 GDPR, do not take place in connection with the use of our website and our offer.

8. Data security

We apply the technical and organizational measures necessary to protect your data from manipulation, loss, destruction or unauthorized access, and to safeguard their integrity and availability. Our safety precautions are improved constantly corresponding to technical developments.

9. Amendment of this data privacy statement

This data privacy statement has the status of September 1, 2019. We reserve the right to carry out appropriate amendments at any given time.