We appreciate your visit on our website and your interest in our offer. We want you to feel comfortable and safe with regards to how we process your personal data. Data protection and transparency are very important to us. This Privacy Notice is meant to help you understand our privacy practices, including which Personal Data we collect, why we collect it, what we do with it, and how we protect it, as well as knowing your individual rights. This information will enable you to always be in full control of your personal data.

Controller legally responsible for data processing:

Dr. O.K. Wack Chemie GmbH

Untere Au 9

85107 Baar-Ebenhausen

Deutschland

info@dr-wack.com

It´s possible to visit our website without disclosing any personal data besides the technical data provided for the operation of the website itself. For transparency reasons, our privacy notice can be found on every page.

Personal data is data about an identified or identifiable person. This means any information about you, information that could be used to identify you or that is directly associated with you. We use personal data like your IP address or technical data of your device (e. g. service provider and operating system), only to run and improve our website. We never save this data beyond the fulfilling of its purpose or legal retention periods.

We use your personal data like your IP address and technical data of your device (e. g. service provider and operating system, etc.) as well as data concerning the use of our website, only to run and improve our website.

We never save this data beyond the fulfilling of its purpose or legal retention periods.

We need this data to run the website. If you object to processing, you won’t be able to use our online offer. We evaluate this kind of information in order to make using our website even more comfortable. We don’t connect this information to any other data we have collected previously. It’s only meant to improve the performance and attractiveness of our website and its content. Data collected when using our website will be deleted at the latest after 14 months. In some cases, we might be allowed to safe data in order to enforce or defend any legal claims.

Art. 6. 1 f GDPR is legal basis for processing data in order to take care of information and network security. According to this article processing of personal data is legal if necessary for the purpose of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights of the data subjects.

According to Art. 13. 2 e GDPR you are not obliged to provide us with your personal data when using our website. Nevertheless, it’s just not possible to run a website without this kind of data.

Please refer to the respective paragraphs in this privacy policy for more information about the data collected in each service.

Your data will not be disclosed to any other third parties, except if there is a legal obligation to transfer the data. Art. 6 (1) c GDPR in connection with the respective instructions or the legal obligation we are subject to in the individual case, is the legal basis for processing data. Categories of recipients of the data are public authorities in case of a legal obligation and processors that process the data collected online on our behalf. Processors involved are:

Ingolstadt Online (Hoster)

Usercentrics (Cookie-Banner)

Google Inc. (Webanalyse)

When you contact us by email or telephone, we collect your personal data. This includes the information you provide to us during your contact, such as your name, email address, and telephone number, as well as additional data we receive during our communication with you. We use this data only to respond to your specific request or requirement and to provide information.

We will retain your personal data for the period necessary to fulfill the purposes described in these notes. Legal retention periods remain unaffected.

The legal basis for processing general inquiries is your consent according to Art. 6 para. 1 sentence 1 lit a DSGVO.

For inquiries about contracts or in the context of contract initiation, the legal basis is Art. 6 para. 1 sentence 1 lit. b DSGVO.

The legal basis for data protection inquiries is Art. 6 para. 1 sentence 1 lit. c DSGVO.

Your contact constitutes your consent to the processing of the data.

When you place an order with us, we may collect the following personal data for the purpose of order processing: salutation, name, delivery and billing address, email address, telephone number.

For the purpose of delivering the goods, we pass on your personal data to the parcel delivery service DHL.

The legal basis for the data processing is the fulfillment of a contract that comes into effect with your order between you and the Dr. O. K. Wack Chemie GmbH (Art. 6 1 b) GDPR).

We will retain your data within the statutory retention periods and then delete it.

You also have the option to create a customer account with us. When registering, you provide us with personal data. This can include: first name, last name, email address.

We store the personal data you provide, such as name and contact details, until you revoke it by deleting your account. The legal basis for processing this data is your consent according to Art. 6 1 a) GDPR. Submitting the registration form constitutes your consent to data processing.

If we have received your email address as part of a business relationship, we will send you satisfaction surveys via email, in which we ask you questions about the purchased products and collect target group information regarding product development.

You can also apply to participate in a consumer test. In the event of acceptance, we will send you a corresponding questionnaire.

The legal basis for this processing is your consent according to Art. 6 1 a GDPR. You have the option to withdraw your consent at any time with effect for the future. The legality of the processing carried out until the withdrawal remains unaffected.

We use the SurveyMonkey service (SurveyMonkey Europe UC, Ella House, Suite 40.4, 40 Merrion Square East, Dublin 2, Ireland) to send the emails.

We have entered into a data processing agreement with SurveyMonkey.

We send you our newsletter if we have collected your email address in the course of a business relationship.

The processing of your email address for the purpose of sending the newsletter is based on our legitimate interest according to Art. 6 para. 1 S. 1 lit. f GDPR i. C. w. § 7 para. 3 S. 1 UWG. You can object to the processing at any time via the "unsubscribe link" in the newsletter, without incurring any costs other than the transmission costs according to the basic rates.

The data you have stored with us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and will be blocked after you have cancelled the newsletter. After the statutory retention period of three years (regular limitation period) these data will be deleted. Data that has been stored with us for other purposes remain unaffected by this.

The newsletter is sent by CleverReach. CleverReach is a service that can be used to organize and analyze newsletter distribution. The data you entered for the purpose of subscribing to the newsletter (e.g., email address) are stored on the servers of CleverReach in Germany.

Our newsletters sent with CleverReach allow us to analyze the behavior of newsletter recipients. Among other things, it can be analyzed how many recipients have opened the newsletter message and how often which link in the newsletter was clicked. With the help of so-called conversion tracking, it can also be analyzed whether a predefined action (e.g., purchase of a product on our website) has taken place after clicking on the link in the newsletter. Further information on data analysis by CleverReach can be found at:

https://www.cleverreach.com/de-de/newsletter-tool/newsletter-reporting/newsletter-oeffnungsrate-und-klickrate/

If you do not want an analysis by CleverReach you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in each newsletter message.

The data you have stored with us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers as well as from the servers of CleverReach after you have cancelled the newsletter. Data that has been stored with us for other purposes remains unaffected by this.

Please refer to the privacy policy of CleverReach: https://www.cleverreach.com/de-de/datenschutz/

We use session cookies on our website. In the following, we would like to briefly explain the purpose of these cookies. Cookies are short snippets of text that we store on your computer. Cookies do not execute commands on your computer, so they do not pose a security risk. Session cookies store certain information while you browse our website and are not stored permanently, but are deleted when you leave our website. The use of session cookies is based on Article 6 (1) (f). The operation of the website is in the legitimate interest of the controller. You can control the handling of cookies in your browser, you can even reject cookies altogether or configure your browser so that cookies are deleted regularly. You will find sufficient information on this on the Internet.

This Website uses Google Analytics, a web analysis service by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses so-called “Cookies” – small text files that are placed on your computer and which allow an analysis of the use of our website by you.

Among other things, the following data is collected from you: IP address, time spent on the website, language, location, and the browser you are using.

The analysis is carried out by means of an algorithm (machine learning) that measures and analyzes your user behavior based on the collected data and can recognize it on other devices you use. By default, your IP address is anonymized by shortening it before it is transmitted to Google.

We have disabled Google Signals.

You can find more detailed information about how Google uses those data here: https://policies.google.com/privacy/partners?hl=de

The transfer of data to the USA is based on the Data Privacy Framework.

Google Analytics will only be used if you have given your consent.

The legal basis is Art. 6 1 a) GDPR and § 25 TTDSG.

You can revoke this consent at any time by clicking on the button on the left side corner saving a new selection.

The data collected with Google Analytics is passed on internally to our marketing department.

Further recipient/user of the data is Google Search Console

We use the so-called Facebook Pixel on our website.

This service is operated by Meta Platforms Limited, 4 Grand Canal Square, Dublin 2, Ireland (Facebook).

When you access web pages of our website that are equipped with the Facebook Pixel, your browser establishes a direct connection to Meta’s servers. The content of the Facebook Pixel is transmitted directly to your browser by Meta and integrated into the page.

By integrating the Facebook Pixel, Meta receives the information that your browser has accessed the respective page of our website, even if you do not have a profile or are not currently logged in. This information is transmitted directly from your browser to Meta’s server and stored there. If you are logged into the service, Meta can directly associate your visit to our website with your profile.

Furthermore, the Facebook Pixel sends information about your actions on our website to Meta (e.g. if you make a purchase).

For the purpose and scope of data collection, as well as the further processing and use of the data by Meta, and your related rights and privacy settings, please refer to Meta’s privacy policy: http://www.facebook.com/policy.php

We have concluded the standard contractual clauses with Meta.

The legal basis is your consent according to Art. 6 1 a) GDPR.

With Facebook Ads, we advertise this website on Facebook, Instagram, and other platforms. We determine the parameters of the respective advertising campaign. Facebook is responsible for the exact implementation, particularly the decision on the placement of ads for individual users. Unless otherwise stated for the specific technologies, data processing is carried out based on an agreement between joint controllers according to Art. 26 GDPR. The joint responsibility is limited to the collection of data and its transmission to Meta Platforms Ireland. The subsequent data processing by Meta Platforms Ireland is not covered by this.

Based on the statistics created by Facebook Pixel about visitor activities on our website, we conduct group-based advertising on Facebook and Instagram through Custom Audience by determining the characteristics of the respective target group.

Based on the pseudonymous cookie ID set by Facebook Pixel and the data collected about your usage behavior on our website, we conduct personalized advertising through Facebook Pixel Remarketing.

Through Facebook Pixel Conversions, we measure your subsequent usage behavior for web analytics and event tracking when you have reached our website through a Facebook Ads advertisement. Data processing is carried out based on an agreement for data processing by Facebook.

The legal basis for this processing is your consent according to Art. 6 1 a) GDPR.

We have a profile on Facebook and Instagram. The provider is Meta Platforms Inc., 1 Hacker Way, Menlo Park, California 94025, USA.

We have entered into an agreement with Meta regarding joint responsibility for data processing (Controller Addendum). This agreement specifies which data processing operations we or Meta are responsible for when you visit our Facebook fan page. Meta Platforms Ireland assumes primary responsibility under the GDPR for the processing of Insights data. You can view this agreement at the following link:

https://www.facebook.com/legal/terms/page_controller_addendum

You can adjust your advertising settings independently in your user account. To do this, click on the following link and log in:

https://www.facebook.com/settings?tab=ads

For details, please refer to Meta’s privacy policy:

https://www.facebook.com/about/privacy/

The legal basis for the processing is Art. 6(1)(f) of the GDPR. The targeted design of our posts is our legitimate interest. We receive aggregated data from Meta that does not allow conclusions to be drawn about individuals.

According to GDPR you have the following rights with regard to your personal data. You can find more detailed information in Art. 15 to 21 GDPR as well as in §§ 32 to 37 German Federal Data Protection Act.

You have the right to access your personal data. You may also request the rectification of inaccurate data. Under certain conditions you have the right to erasure, the right to restriction and the right to data portability. Further, you have the right to object to processing of personal data which is based on point (e), (f) of Art. 6(1), including profiling based on those provisions. You may withdraw your consent at any time and without giving reasons with effect for the future.

You may assert these rights directly with the controller. Therefore, informal contact is sufficient. You may send an Email or a letter.

You also have the right to lodge a complaint with a supervisory authority if you find our processing of your personal data to be inconsistent with applicable data protection law. A list of federal Data Protection Commissioner and contact data can be found here:

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

In case of any further questions please feel free to contact our officer for data protection:

David Gabel - E-Mail: david.gabel@your-insider.com

General information concerning data protection and processing of personal data can be found at https://www.dsgvo-support.de

Welcome to our Facebook page.

We want you to feel comfortable and safe with regards to how we process your personal data. Data protection and transparency are very important to us. That’s why we want to inform you accordingly.

We entered into a Joint-Controllership-Agreement with Facebook according to Art. 26 GDPR. You can call up this agreement here: https://www.facebook.com/legal/terms/page_controller_addendum]

This agreement states that Facebook comprehensively undertakes the obligations arising from data protection laws.

Joint Controllers for operation of this Facebook page are:

a)

Meta Platforms Ireland Ltd.

4 Grand Canal Square

Dublin 2 Ireland

You can contact Facebook’s data protection officer by using this form:

www.facebook.com/help/contact/540977946302970.

and

b)

Dr. O.K. Wack Chemie GmbH

Untere Au 9

85107 Baar-Ebenhausen

Deutschland

info@dr-wack.com

Our external data protection officer can be contacted via E-Mail:

david.gabel@your-insider.com

Concerning the data processing by Facebook we refer to their data protection notice:

https://www.facebook.com/privacy/center/

In the following we explain to you the data processing operations carried out by us.

a) Statistical Data

We can retrieve statistical data of different categories via the so-called “Insights” (https://www.facebook.com/business/a/page/page-insights).

These statistics are created and provided by Facebook. We as operator cannot influence creation and display. We can neither deactivate this function nor prevent the creation and processing of the data. Facebook provides us with the following data for a definable period of time for the categories, respectively, fans, subscribers, people reached, people interacting: Total number of call ups, “Likes”, page activity, post interactions, range of the posts, comments, shared content, answers, share of men and women, origin concerning country and city, language, call ups and clicks in the shop, clicks on the route planner, clicks on phone numbers. Also, in doing so, data of the Facebook Groups connected with our Facebook page are provided.

As a result of the continuous development of Facebook, the availability and processing of data changes, wherefore we refer to the data protection notice of Facebook for more detailed information.

Legal basis for processing is Art. 6 1 f GDPR. Making our posts and activities more attractive for the users is our legitimate interest. For example, we use the distribution of age and gender for addressing our users in an adjusted way and the preferred visiting hours of the users for timely optimized planning of our posts. Information about the user’s device help us adjusting our posts in appearance.

b) Interactions with our account

Also, you can interact with our account. For example, you can do that by pressing the “Like” button, share or comment on a post or by directly writing to us.

In case of you interacting with us, we inevitably process your data as we then can see your account and therefore have access to your personal data; this includes your username, profile picture or date or time of your interaction. According to Facebook’s terms of use, that every user has agreed to when creating a Facebook profile, we can identify subscribers and fans of the page and view their profile as well as their shared content.

These data are information that are only provided through an interaction with our profile. Legal basis for processing is Art. 6 1 b GDPR.

We would like to point out that Facebook might transmit your data to third parties. We cannot influence this, though. You can find more detailed information within the data protection notice of Facebook: https://www.facebook.com/privacy/center/

We only share personal data within our organization if and when necessary for the purposes specified in this privacy notice. We don´t share personal data with any third party outside of our organization unless one of the following circumstances applies.

Art 6 (1) c GDPR

Processing is necessary for compliance with a legal obligation to which the controller is subject.

Recipients of your personal data may be public offices as well as processors, processing the data collected online in our behalf (Webhosts, designer etc.)

You can find information about data storage by Facebook in their data protection notice: https://www.facebook.com/privacy/center/

We store the personal data transmitted to us by you only for the period of time that is necessary to fulfil the purposes for which the data have been transmitted or as long as we are obligated by law to store them. After fulfilment of the purpose and/or after the legal retention period has expired, we either delete or block the data.

According to GDPR you have the following rights with regard to your personal data. You can find more detailed information in Art. 15 to 21 GDPR as well as in §§ 32 to 37 German Federal Data Protection Act.

You have the right to access your personal data. You may also request the rectification of inaccurate data. Under certain conditions you have the right to erasure, the right to restriction and the right to data portability. Further, you have the right to object to processing of personal data which is based on point (e), (f) of Art. 6(1), including profiling based on those provisions. You may withdraw your consent at any time and without giving reasons with effect for the future.

You may assert these rights directly with the controller. Therefore, informal contact is sufficient. You may send an Email or a letter.

You also have the right to lodge a complaint with a supervisory authority if you find our processing of your personal data to be inconsistent with applicable data protection law. A list of federal Data Protection Commissioner and contact data can be found here:

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

If processing by Facebook is involved, you can directly contact Facebook. In particular this is the case when it’s about processing in the scope of the “Insights”.

You might send a letter to:

Meta Platforms Ireland Ltd.

4 Grand Canal Square

Dublin 2 Ireland

As an alternative you might also contact us, and we transmit your request – according to our agreement with Facebook as per Art. 26 GDPR – to Facebook.