The responsible party according to General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulation is:

Name and address of the responsible party:

WFP GmbH
Drescherstr. 49
71277 Rutesheim
Germany
Phone. +49(0)7152 300330
Email: info@wfp-waterproofing.de
Home: www.wfp-waterproofing.de
Managing Director: Rainer Wörner

If you have any questions about data protection, please contact:
datenschutz@klw.de

General information on data processing

Scope of personal data processing
The Company agrees to process any personal data disclosed to the Company by our users only in so far as required for providing a functioning website as well as that of our content and services. Any processing of personal data of our users regularly only takes place after their consent was obtained. An exception applies in those cases where prior consent cannot be obtained for real reasons and the processing of the data is permitted by law.

Legal basis for processing of personal data
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 (1) lit. a GDPR as the legal basis.

In the processing of personal data required for the performance of a contract of which the data subject is a contacting party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.

Insofar as the processing of personal data is required to fulfil a legal obligation to which our company is subject, Art. 6 (1) lit. c GDPR serves as the legal basis.

In case that vital interests of the concerned person or another natural person necessitate the processing of personal data, Article 6(1)(d) GDPR serves as the legal basis.

In case that processing is required for safeguarding the legitimate interest of our company or that of a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 (1) lit. f GDPR serves as the legal basis for processing.

Data deletion and storage period
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Furthermore, data may be stored if this has thus been provided for by European or national legislators in EU regulations, laws or other provisions to which the responsible party is subject.

Provision of this website and creation of log files

Description and scope of data processing

With every visit of our website our system automatically collects data and information from the computer system of the calling computer.

The following data is collected in this process

• Information on the type and version of the browser used
• The user’s operating system
• The user’s service provider
• The user’s IP address
• Date and Time of the visit
• Websites from which the user’s system accessed our website
• Websites the user access via our website

These data is also stored in the log files of our system. There is no joint storage of such data together with other personal data of the user.

Legal basis for data processing
The legal basis for the temporary storage of data and log files is Art. 6 (1) lit. f GDPR.

The purpose of data processing
The temporary storage of an IP address by the system is necessary to ensure that the website can be delivered to the user's computer. For this purpose, the user’s IP address must be stored for the duration of the session.

The storage of data in log files is meant to ensure the functionality of the website. Additionally, the data serve to optimize the website and to ensure the safety of our information technology systems. No evaluation of the data for marketing purposes is taking place in this context. Our legitimate interest in data processing pursuant to Art. 6 (1) lit. f GDPR also serves these purposes.

Duration of the storage
The data is deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of data collection for the purpose of providing the website, this happens after the termination of the session, or within 14 days at the latest.

Options for objection and deletion
The collection of data for providing the website and the storage of such data in log files is indispensable for operating the website. Consequently, there is no possibility of objection on the part of the user.

The use of cookies

We use cookies on our website. These are small files automatically generated by your browser that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do no damage to your end device, nor do not contain viruses, Trojans or any other malware. Only such information is stored in the cookie that occurs in connection with specifically used terminal device. However, this does not mean that we become directly aware of your identity.

The use of cookies is meant on the one hand to make the use of our offer more comfortable for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are deleted automatically after you leave our site. In addition, we also use temporary cookies to be stored on your end device for a specific and defined duration in order to optimise the user-friendliness.

In case you visit our site again to use our services, it will automatically recognize that you have already been with us and what entries and settings you have made so that you do not have to enter them again. Furthermore, we use cookies to gather a statistical record the use of our website and evaluate it for the purpose of optimising our offer to you.

These cookies enable us to automatically recognize upon your return to our site that you have already been with us. These cookies are automatically deleted after the respectively defined period of time. The data processed by cookies is required for the aforementioned purposes in order to protect our legitimate interests and those of third parties pursuant to Art. 6 (1) S. 1 lit. f GDPR.

Most browsers automatically accept cookies. However, you can choose a browser setup ensuring that no cookies are stored on your computer or that message always appears before a new cookie can be created. However, the complete deactivation of cookies may lead to the fact that you cannot use all functions of our website. User data collected in this way are pseudonymised by technical precautions. Therefore, it is no longer possible to assign the data to the calling user.

The data will not be stored together with other personal data of the users. Upon entering our website, a banner will inform users about the use of cookies for analytical purposes and will refer them to the privacy statement. In this context, there is also a hint on how to prevent the storage of cookies in the browser settings. The transmission of Flash cookies cannot be prevented in the browser settings, but by changing the setup of the Flash Player.

Contact form and contact by E-Mail

Description and scope of data processing

• Mr. / Mrs.

• First name

• Surname

• Company

• E-Mail

• A message box that can be individually filled in by the user

At the time the message is sent, the following data is also stored:

• The user’s IP address
• Date and time of the registration

Your consent is obtained for the processing of the data during the course of the dispatching process and reference is made to this data privacy statement.

Alternatively, it is possible to contact us via the e-mail address provided. In this case, the user's personal data transmitted by e-mail are stored.

In this context, the data will not be passed on to third parties. The data is used only for processing the conversation.

Legal basis for data processing
The legal basis for the processing of data is Art. 6 (1) lit. a GDPR if the user’s consent has been given.

The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 (1) lit. f GDPR. If the purpose of the e-mail contact is the conclusion of a contract, then the additional legal basis for the processing is Art. 6 exp. 1 lit. b GDPR. If the application form is used, the additional legal basis for processing is Art. 6 (1) lit. b GDPR.

Purpose of data processing
The sole purpose of processing of personal data from the input mask is to enable us to establish contact. In case of a contact by e-mail, this also constitutes the legitimate interest required for the processing of the data. The other personal data processed during the dispatching process serve to prevent any misuse of the contact form and to ensure the security of our information technology systems.

Duration of storage
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. That is the case for the personal data from the input mask of the contact form and those sent by e-mail, when the respective conversation with the user is finished. Any conversation is considered as terminated when it can be inferred from the circumstances that the facts in question have been conclusively clarified. The additional personal data collected during the dispatching process are deleted after a period of 14 days at the latest.

Possibilities of objection and elimination
The user has the possibility at any time to revoke his consent to the processing of personal data. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued. All personal data stored upon establishing contact with us are deleted in this case.

Data disclosure

Your personal data will not be disclosed to third parties for purposes other than those listed below.

We will only pass on your personal data to third parties if:

• you have given your express consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR,
• a legal obligation exists for the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, and
• this is legally permissible and is necessary for the processing of contractual relationships with you pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR.

Newsletter

Description and scope of data processing

Our homepage provides the facility to subscribe to a free newsletter. When registering for the newsletter, the data from the input mask is transmitted to us. This data is:

• E-Mail
• Name

Additionally, the following data is collected at the time of subscription.

• The user’s IP address
• date and time of the registration

During the registration process, your consent is obtained for the processing of the data and reference is made to this data privacy statement.

Regarding data processing for the dispatch of newsletters, no data is passed on to third parties. The data is used solely for the purpose of sending the newsletter.

Legal basis for data processing
The legal basis for the processing of the data after registration for the newsletter by the user is the existence of the user's consent under Art. 6 (1) lit. a GDPR.

Purpose of data processing
The user’s e-mail address is obtained only for the purpose of sending the newsletter.

The collection of further personal data as part of the registration process serves to prevent misuse of the services or the e-mail address used.

Duration of storage
Data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. The user's e-mail address will therefore be stored for as long as the subscription to the newsletter is active.
Other personal data collected during the registration process will generally be deleted after a period of seven days.

Options for objection and deletion
This also facilitates the revocation of the consent to the storage of personal data collected during the registration process.

Google Web Fonts

This website uses so-called web fonts to display the font as provided by Google (http://www.google.com/webfonts/). For this purpose, your browser downloads the required web fonts into its cache upon visiting our site. This is necessary for your browser to display an optically improved presentation of our texts. If your browser does not support this feature, your computer will display standard fonts.

For more information about Google Web Fonts pls. check https://developers.google.com/fonts/faq?hl=en-GB&csw=1

For general information on data protection at Google pls. check http://www.google.com/intl/de-DE/policies/privacy/

The data subject’s rights

If personal data is processed by you, you are data subject according to the GDPR and you have the following rights against the responsible party:

Right to information
You can ask the responsible party to confirm whether personal data concerning you are being processed by us.

If such processing has taken place, you can request to obtain the following information from the responsible party responsible:

(1) the purposes for which the personal data is processed;

(2) the categories of personal data being processed;

(3) the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;

(4) the intended duration of the storage of the personal data concerning you or, if specific information on this is not possible, criteria for determining the storage period;

(5) the existence of a right for correction or deletion of personal data concerning you, of a right for the limitation of processing by the responsible party or of a right to object to this processing;

(6) the existence of a right of appeal to a supervisory authority;

(7) any available information on the origin of the data if the personal data is not collected from the data subject;

(8) the existence of automated decision-making including profiling in accordance with Art. 22 para. 1 and 4 GDPR and - at least in such cases - meaningful information on the logic involved and the consequences and intended effects of such processing for the data subject.

You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organisation. In this context, you can request to be informed of the appropriate guarantees pursuant to Art. 46 GDPR in connection with the transmission.

Right to rectification
You have a right to rectification and/or completion against the responsible party if the personal data processed concerning you are incorrect or incomplete. The person responsible must make the correction without delay

Right to restriction of processing
You can request that the processing of personal data concerning you be restricted under the following conditions:

(1) if you deny the accuracy of the personal data concerning you for a period that enables the responsible party to verify its accuracy.

(2) the processing is unlawful and you reject the deletion of the personal data and instead request that its will be restricted.

(3) the responsible party no longer needs the personal data for the purposes of the processing, but you do need them instead to assert, exercise or defend legal claims, or

(4) if you have filed an objection to the processing pursuant to Art. 21 para. 1 GDPR and it has not yet been determined yet whether the legitimate reasons of the person responsible party outweigh your reasons.

If the processing of personal data concerning you has been restricted, such data may only be processed - apart from being stored with your consent or for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person or on grounds of an important public interest of the Union or a Member State.

If the processing restriction has been limited according to the above conditions, you will be informed by the responsible party before the limitations to the restriction is lifted.

Right to erasure
Right to be forgotten
You can request the responsible party to delete the personal data relating to you without any delay and the responsible party is obliged to delete this data without delay if one of the following reasons applies:

(1) The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.

(2) You revoke your consent, on which the processing was based pursuant to Art. 6 para. 1 lit. a or Art. 9 (2) lit. a GDPR, and there is no other legal basis for the processing.

(3) You file an objection against the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you file an objection against the processing pursuant to Art. 21 (2) GDPR.

(4) The personal data concerning you have been unlawfully processed.

(5) The deletion of personal data relating to you is necessary to fulfil a legal obligation under European Union law or the law of the Member States to which the responsible party is subject.

(6) The personal data concerning you were collected in relation to services offered by the information society services offered pursuant to Art. 8 (1) GDPR.

Information to third parties
In case a responsible party has made the personal data concerning you publicly available and if it is obliged to delete it pursuant to Art. 17 (1) GDPR, it shall take appropriate measures - including also technical measures - to inform those persons in IT, responsible for processing personal data, about the fact that you as the data subject have requested the deletion of all links to personal data concerning you or to copies and replications thereof.

Exceptions
The right to erasure shall not apply insofar as the processing is necessary

(1) to exercise the rights for freedom of expression and information;

(2) for the performance of a legal obligation which requires processing, according to the laws of the Union or those of the Member States, which the responsible party is subject; or for the performance of a task in the public interest or in the exercise of official authority assigned to the responsible party.

(3) for reasons of public interest in the field of public health pursuant to Art. 9 (2) lit. h and i and Art. 9 (3) GDPR;

(4) for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 (1) GDPR, insofar as the right referred to under a) is likely to make the achievement of the objectives of such processing impossible or will seriously impair it.

(5) to assert, exercise or defend legal claims

Right to information
If you have exercised your right to have the responsible party correct, delete or limit the processing, the responsible party is obliged to inform all recipients to whom personal data concerning you personally have been disclosed of this correction or deletion of the data or restriction on processing, unless this proves impossible or involves a disproportionate effort.

You have the right against the responsible party to be informed about these recipients.

Right to data portability
You have the right to receive the personal data concerning you personally, that you have provided to the responsible party in a structured, the most common and machine-readable format. In addition, you have the right to pass this data on to another responsible party without obstruction by the responsible party to whom the personal data have originally been made available, provided that

(1) processing is based on consent pursuant to Art. 6 (1) lit. a GDPR or Art. 9 lit. a GDPR or on a contract pursuant to Art. 6 (1) lit. b GDPR and

(2) processing is carried out by means of automated methods.

In exercising this right, you further have the right to request that the personal data concerning you personally be transferred directly from one responsible party to another responsible party, insofar as this is technically feasible. The rights and freedoms of other persons must not be affected by this.

The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority assigned to the responsible party.

Right to object
You have the right at any time to object to the processing of personal data concerning you personally under Article 6(1)(e) or (f) of the GDPR; for reasons rising from your particular circumstances this also applies to profiling based on these provisions.

The responsible party no longer processes the personal data concerning you personally, unless it can provide compelling legitimate grounds for the processing, which outweigh your interests, rights and freedoms, or else the processing serves to assert, exercise or defend legal claims.

In case that data concerning you personally are processed for direct marketing purposes, you have the right to object at any time to the processing of these data for the purpose of such advertising; this also applies to profiling, insofar as it is associated with such forms direct marketing.

If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

You have the possibility to exercise your right of objection -regarding the use of services of the information society - by means of automated procedures using technical specifications, irrespective of Directive 2002/58/EC.

Right to revoke the consent to the data privacy statement
You have the right to revoke your consent to data privacy statement at any time. The revocation of consent shall not affect the legality of the processing carried out based on the consent until its revocation.

Please direct your revocation to
WFP GmbH, Drescherstr. 49
71277 Rutesheim
Germany
info@wfp-waterproofing.de

Automated decision making on a case-by-case basis including profiling
You have the right not to be subject to a decision based solely on automated processing - including profiling - that has legal effect on you or that affects your significantly negatively in a similar manner. This does not apply if the decision

(1) is essential for the conclusion or performance of a contract between you and the responsible party,
(2) is permissible under the legislation of the Union or of the Member States to which the responsible party is subject and if that legislation contains appropriate measures to safeguard your rights, freedoms and legitimate interests; or
(3) is taken with your express consent.

However, these decisions may not be based on the special categories of personal data pursuant to Art. 9 (1) GDPR, unless Art. 9 (2) lit. a or g GDPR applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.

Regarding cases referred to in (1) and (3), the responsible party shall take appropriate measures to safeguard your rights, freedoms and legitimate interests, including at least the right to obtain the intervention of a representative on the part of the responsible party, the right of stating your own point of view and the right to object the decision.

Right of appeal to a supervisory authority
Irrespective of any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State of your residence, workplace or the location of the suspected infringement, if you believe that the processing your personal data is in violation of GDPR.
The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.

Data security

We use - during your website visit the most common SSL (Secure Socket Layer) method along with the highest level of encryption supported by your browser. Usually this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. Whether a single page of our website is transmitted in encrypted form is indicated by the type of lock / key pictogram displayed in the lower status bar of your browser. We also use suitable technical and organisational security measures to protect your data from any accidental or intentional manipulation, its partial or complete loss, destruction or from the unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

Up-to-dateness and potential amendments of this privacy statement:
This privacy statement is currently valid as per May 2018. It may become necessary to change this privacy statement, due to the further development of our website or that of products and services offered via this platform or due to legal and official requirements. You can access and print out the current privacy statement at any time on our website under the heading privacy.