1. General information on data processing
This Data Privacy Statement explains the type, scope and purposes of processing of personal data by us as the controller BYK (hereinafter referred to as “BYK” or “we”) via this website.
Our contact details:
Tel +49 281/670-0
The contact details of our data protection officer are as follows:
Data Protection Officer
Tel +49 281/670-0
1.1 Scope of processing of personal data
We process your personal data in principle only if you contact us via this website, if this is necessary for the provision of an operational website or for the presentation and use of our contents, offers and services. Without this processing, we could not provide our offering and usage would be impossible.
1.1.1. Provision of the website
If you visit our website, we log the IP address (i.e. the Internet address) of the computer accessing the site and other general usage data, such as date and time (“user-related data”), in order to evaluate which parts of our website are of particular interest. Your user-related data are rendered anonymous.
The processing of these data serves the internal evaluation of our website’s frequency of use. We pursue our legitimate interest to verify the efficiency of our offer. Legal basis for the processing of data is Art. 6 para. 1 lit. f of the EU-General Data Protection Regulation (hereinafter referred to as “GDPR”).
1.1.2 Contact form
Our website features a contact form, which may be used for making contact electronically. If you take this opportunity, the data entered on the input screen will be transferred to and processed by us. The processing of personal data from the input screen serves the sole purpose of handling the contacting and your concern.
1.2 Legal basis for the processing of personal data
As far as you have given your consent to process personal data, Art. 6 para. 1 lit. a of the GDPR serves as the legal basis for the processing.
For the processing of personal data which serves the execution of a contract to which you are a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis for processing. This also applies to processing operations, which are necessary to implement pre-contractual measures.
As far as processing is necessary for compliance with a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis for processing.
If processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, and such interests are not overridden by the interests or fundamental rights and freedoms of the data subject, Art. 6 para. 1 lit. f GDPR serves as the legal basis for processing.
1.3 Transfer of personal data to third parties
All personal data collected in connection with the provision of this website will only be transferred by us to our affiliates as well as to technical service providers and financial services providers which are employed as processors according to the GDPR. These financial services providers sometimes gather this data themselves when you set up an account with them. In this case, for the registration and ordering process you will have to use your registration data to log on to the financial services provider’s site. The data protection declaration of the respective financial services provider will then apply.
In individual cases, a transfer to a third country outside the EU and the EFTA may occur. However, we transfer personal data only to third countries where the EU Commission has determined an adequate level of data protection by decision according to Art. 45 GDPR or if we and the recipient of the data have agreed upon standard data protection clauses adopted by the Commission according to Art. 46 para. 2 lit. c GDPR.
1.4 Data erasure and storage duration
As far as you did not give consent to a specific storage duration, we will store your personal data only as long as this is necessary to pursue the respective processing purpose and if there are no conflicting legal retention or storage periods. After the contract has been processed in full or when the customer account is deleted, further processing of your data will be limited, and your data will be deleted on expiry of the retention periods defined by commercial law and tax law.
We use a Content Management Tool (CMT) to manage our cookies. The CMT allows you to consent or decline to the placement of certain technically unnecessary cookies. Your consent to cookies enables us and our partners to process personal data such as surfing behavior or unique ID’s on our website. If you reject certain cookies, only limited use of our website and our services may be possible. By clicking on the "FINGERPRINT" button, you can change your cookie preferences at any time with effect for the future.
The settings for technically necessary cookies cannot be changed. Essential technical cookies are used for the purpose of ensuring our website and its contents run properly. These purposes also substantiate our legitimate interest in processing personal data. Article 6, para. 1 f of the GDPR constitutes the legal grounds for this data processing. As far as you have given your consent to the setting of cookies, we or our technical service providers will process your personal data in accordance Art. 6 para. 1 lit. a GDPR.
You can, of course, configure your browser so that it does not store our cookies on your end device. The Help function in the menu found on most web browsers explains how you can prevent your browser from accepting new cookies, how you can have your browser notify you when you receive a new cookie, or even how you can delete all cookies that have already been received and completely block any more cookies. However, the CMT only works in the browser you are using to set it and will only work properly if your browser accepts third-party browser cookies. If you delete cookies or change browser, computer, or operating system, you will need to adjust the setting again.
2.1 Google reCAPTCHA
To ensure a sufficient level of data security when forms are transmitted, we sometimes use the reCAPTCHA service from Google Inc. This primarily serves to determine whether data has been entered by a real person or fraudulently via machine or automated processing. As part of this service, the IP address is sent to Google, along with any other data Google requires so it can provide its reCAPTCHA service. The data privacy provisions enforced by Google Inc., which may differ from those set out here, shall apply in this regard. You can find more information about Google Inc. privacy guidelines
at https://policies.google.com/privacy. Article 6, para. 1 f of the GDPR constitutes the legal grounds for this data processing.
2.2 Google Analytics
The information generated by the cookie is usually transferred to a Google server in the USA and stored there. We use the extension of IP anonymization on this website, i.e. your IP address is shortened by Google beforehand.
The legal basis for the use of Google Analytics is our legitimate interest in accordance with Art. 6 para. 1 lit. f DSGVO.
Google's services also include reports on the effectiveness of our advertising efforts (including across devices), demographics and the interests of our users, and cross-device delivery of online advertising if you have a Google Account and have consented to the personalization of advertising ("Ads Personalization"). In this case, the legal basis for data processing is your consent to Google (Art. 6 para. 1 lit. a DSGVO).
You can object to the collection or evaluation of your data by Google Analytics by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout. In addition, as mentioned above, you can prevent the collection of data generated by the cookie and related to your use of the website as well as the processing of this data by rejecting the necessary setting of a cookie via the Consent Management Tool (CMT), even retroactively with effect for the future, or by deactivating the automatic setting of cookies generally via your browser settings.
2.3 Google Remarketing function
Google's remarketing function enables us to present our users with ads based on their interests on other websites within the Google Ads network (so-called "Google ads" or ads on other websites). To this end, we analyze user interaction on our website in order to be able to display targeted advertising to users on other sites even after they have visited our website. For this purpose, Google stores a number in the browsers of users who visit certain Google services or websites in the Google display network. This number, known as a "cookie", is used to record the visits of these users. This number is used to uniquely identify a web browser on a specific computer and not to identify an individual person, personal information is not stored. The legal basis for data processing is Art. 6 para. 1 lit. f DSGVO.
2.4 Google Optimize
Google Optimize is a sub-service of Google Analytics (see section on Google Analytics).
The legal basis for the processing of your data is our legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
We use the YouTube.com platform to post our own videos and make them publicly available. YouTube is the service of YouTube LLC, headquartered at 901 Cherry Avenue, San Bruno, CA 94066, USA. When you call up a (sub)page of our internet offer on which YouTube videos are integrated in this form, a connection is established to the YouTube servers and the content is displayed on the internet page by means of a message to your browser. The integration of YouTube content is only carried out in "extended data protection mode". This is provided by YouTube itself, thus ensuring that YouTube does not initially store any cookies on your device. When you view the video, however, your data - especially which of our Internet pages you have visited as well as device-specific information including the IP address - are transmitted. This information cannot be assigned to you, unless you have logged in to YouTube or another Google service or are permanently logged in before calling up the page. As soon as you start playing an embedded video by clicking on it, YouTube will only save cookies on your device, that do not contain any personally identifiable information, due to the advanced privacy mode, unless you are currently logged in to a Google service.
Information on data processing and notes on data protection by YouTube or Google can be found here https://policies.google.com/privacy and at https://support.google.com/youtube/answer/171780?hl=en.
2.6 LinkedIn Retargeting and Tracking
We use conversion tracking technology on our Website and the retargeting feature of LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland ("LinkedIn"). For this purpose, our website incorporates the LinkedIn Insight tag, which enables LinkedIn to collect statistical, pseudonymous information about your visit and use of our website and to provide us with relevant aggregated statistics on this basis. The information to enable us to display interest-specific and relevant offers and recommendations to you after you have visited the website to find out about certain services, information and offers. The relevant information is stored in a cookie. It also gives us the opportunity to compile anonymous reports on the performance of the advertisements and information on website interaction. For this purpose, the LinkedIn Insight tag is embedded in this website, which establishes a connection to the LinkedIn server if you visit this website and are logged into your LinkedIn account at the same time.
The processing of the data serves marketing and optimization purposes, in particular in order to place relevant and interesting advertisements for you and thus improve our offer and make it more interesting for you as a user. The legal basis for the processing of the data is our legitimate interest in accordance with Art. 6 para. 1 lit. f DSGVO.
If you are logged in to LinkedIn, you can deactivate the collection of data at any time by following this link: https://www.linkedin.com/psettings/enhanced-advertising.
If you have given your consent via the Consent Manager, we use services of etracker GmbH from Hamburg, Germany (www.etracker.com) to analyze usage data. Cookies are used for this purpose, which enable a statistical analysis of the use of this website by its visitors and the display of usage-related content or advertising. Cookies are small text files that are stored by the Internet browser on the user's end device. etracker cookies do not contain any information that would allow a user to be identified.
In the event of your consent, data processing is carried out on the legal basis of Art. 6 Para. 1 lit a DSGVO. Using the Consent Manager, you can refuse the setting of a cookie at any time and thus object to the data processing. Your objection has no negative consequences for you. Further information on data protection at etracker can be found here: https://www.etracker.com/en/data-privacy/.
On this website we use the services of the easyFeedback GmbH in Koblenz, Germany, to collect and store anonymous surveys. Participation is voluntary. Multiple participation is prevented by a cookie block. With cookie blocking, easyFeedback sets a cookie on the device you use for the survey and matches it with your data. If a cookie with the survey ID is detected on your device, multiple participation can be prevented. The cookie is automatically deleted after 90 days. When you participate in a survey, easyFeedback stores your answers and the type of device you use to participate in the survey and provides this to us in the form of graphs and as Excel and CSV files. easyFeedback does not in any way create user profiles of participants or store demographic or geographic data.
The legal basis for the data processing is Art. 6 para. 1 lit. a GDPR
This website uses plug-ins of the video portal Vimeo. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.
If you visit one of the pages on our website into which a Vimeo video has been integrated, a connection to Vimeo’s servers will be established. As a consequence, the Vimeo server will receive information as to which of our pages you have visited. Moreover, Vimeo will receive your IP address. This will also happen if you are not logged into Vimeo or do not have an account with Vimeo. The information recorded by Vimeo will be transmitted to Vimeo’s server in the United States.
If you are logged into your Vimeo account, you enable Vimeo to directly allocate your browsing patterns to your personal profile. You can prevent this by logging out of your Vimeo account.
2.10 MS Bookings
We have integrated the MS Booking functionality from Microsoft Corp. into our website. You can book an appointment for a special event or for a product-related consultation via MS Booking.
For this purpose, we process your name and the e-mail address you have provided. Your personal data is processed base of your voluntary consent in accordance with Art. 6 Para. 1 lit. a GDPR.
You can withdraw this consent at any time with effect for the future.
If you book an appointment with us via MS Booking, you will receive a confirmation email from us as well as an automatic entry of the booked appointment in your calendar. We will also send you an automatically generated reminder e-mail shortly before the appointment.
Your appointments with us are processed by Microsoft Ireland Operations Limited One Microsoft Place South County Business Park Leopardstown Dublin 18 D18 P521 Ireland. Your data will only be processed in the EU or the EEA.
An agreement for the order processing according to Art. 28 GDPR was concluded with Microsoft Ireland Operations Limited via our processor, ALTANA Management Services GmbH. A transfer to third countries, e.g. USA, does not take place. In individual support cases, there may be exceptional access to personal data from the USA by Microsoft Corp., whereby the facts of a transmission are given.
For those cases, the European standard contractual clauses for international transfers were concluded with Microsoft Corp.
In order to put you in touch with the right contact person within BYK, we may forward the information about your booking to other companies within BYK. The legal basis for this disclosure is our legitimate interest in accordance with Art. 6 Para. 1 lit. f GDPR in conjunction with recital 48 GDPR.
3. Social media
You will find links to Facebook, Instagram, Xing, Linkedin, YouTube, Wikipedia and Twitter on our website. If you activate a platform of this type, your browser will establish a short connection with the server of the relevant network, which serves primarily to display the content of the plugin. The cooperating party will, however, learn your IP address through this plugin. This will not identify you by name automatically, but if you are logged in to Facebook at the same time your visit to our website may be matched to your Facebook account.
4. Processing of personal data for the purpose of registration and login on our website
By creating an account at BYK Additives, you will receive additional product and company information. To do so, you will need to register and log in. For this purpose, we process your personal data as follows: salutation, surname and first name, e-mail address, position, department, company, customer number, telephone number, street, house number, city, zip code, country, region and password. The processing of your personal data takes place on this legal basis: Weighing of interests pursuant to Article 6 (1) lit. f GDPR.
5.1 Newsletter data
If you would like to receive one or more of the newsletters offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. No other data is collected for this purpose. For the processing of the newsletter, we use the provider, which are described below.
This website uses CleverReach to send newsletters. The provider is the CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany (hereinafter referred to as “CleverReach”). CleverReach is a service with which the newsletter delivery can be organized and analyzed. The data you have enter for the purpose of receiving newsletters (e.g. e-mail address) are stored on servers of CleverReach in Germany or Ireland.
Our newsletters sent with CleverReach allow us to analyze the behavior of newsletter recipients. Among other things, we can analyze how many recipients have opened the newsletter message and how often which link in the newsletter was clicked. With the help of so-called conversion tracking, it can also be analyzed whether a predefined action (e.g. ordering a product on this website) has taken place after clicking on the link in the newsletter. For more information on data analysis by CleverReach newsletters, please visit: https://www.cleverreach.com/en/features/reporting-tracking/.
The data processing is based on your consent (Art. 6 (1) lit. a GDPR). You may revoke any consent you have given at any time by unsubscribing from the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.
If you do not want any analysis by CleverReach, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in each newsletter message.
The data you provide for the purpose of receiving the newsletter will be stored by us or the provider until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe. Data that has been stored by us for other purposes remains unaffected.
After you have unsubscribed from the newsletter distribution list, your e-mail address will be stored by us or the provider in a blacklist, if necessary, to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 (1) lit. f GDPR). The storage in the blacklist is not limited in time. You may object to the storage if your interests outweigh our legitimate interest.
For more details, please refer to the data protection provisions of CleverReach at: https://www.cleverreach.com/en/privacy-policy/.
5.3 Data processing
We have concluded a data processing agreement (DPA) with the provider mentioned above. This is a contract required by data protection law, which ensures that this provider only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
6. Additive Guide App
Declaration on the use of personal data in the context of using the BYK Additive Guide APP
The Additive Guide App is programmed in such a way that it does not process any personal data.
7. Your rights
In general, i.e. subject to any legal restrictions, you have the rights listed below. In order to facilitate the exercise of these rights, we wish to inform you that any corresponding request does not require a certain form - you may send such a request electronically (in particular per email).
You may request information about your personal data from the controller.
You may request the rectification of your personal data by the controller if the data are inaccurate.
You may request the erasure of your personal data by the controller.
You may request the restriction of further processing of your personal data by the controller.
You have the right to object to further processing of your personal data by the controller, provided you set out the respective grounds relating to your particular situation.
You may ask to receive your personal data in a structured, commonly used and machine-readable format, and to transmit those data to another person without hindrance from the controller to whom the personal data have been provided.
Furthermore, you have the right to file a complaint about the handling of your personal data by a controller with a supervisory authority competent for data protection. In order to facilitate the exercise of this right, we inform you that the supervisory authority competent for our place of business may be contacted at the following address:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestrasse 2-4, 40213 Düsseldorf, Germany
8. Automated individual decision-making, including profiling
Automated decision-making in individual cases, including profiling in accordance with Art. 22 GDPR, do not take place in connection with the use of our website and our offer.
9. Data security
We apply the technical and organizational measures necessary to protect your data from manipulation, loss, destruction or unauthorized access, and to safeguard their integrity and availability. Our safety precautions are improved constantly corresponding to technical developments.
10. Amendment of this data privacy statement
This data privacy statement has the status of July 21, 2021. We reserve the right to carry out appropriate amendments at any given time.