privacy policy
Name and contact details of the controller
KUGEL Edelstahlverarbeitung GmbH
Prof.-Hermann-Staudinger-Straße 6
94234 Viechtach
Germany
Tel.: +49 (0)9942 950 0
E-mail: info@kugel-edelstahl.de
Name and contact details of the Data Protection Team and Data Protection Officer
If you have any questions regarding data protection, please contact our Data Protection Team by e-mail at datenschutz@kugel-edelstahl.de or by post at:
KUGEL Edelstahlverarbeitung GmbH
– Data Protection Team –
Prof.-Hermann-Staudinger-Straße 6
94234 Viechtach
Germany
You can contact our Data Protection Officer at the e-mail address datenschutzbeauftragter@blanc-fischer.com or by post at:
Blanc und Fischer Corporate Services GmbH & Co. KG
– Data Protection Officer –
Blanc-und-Fischer-Platz 1–3
75038 Oberderdingen
Germany
Purpose and legal basis of data processing
1. Data collection via the website
For security reasons and to protect the transmission of confidential content, we use SSL or TLS encryption on our website. This enables enquiries via the contact form or orders via the website to be transmitted securely. You can recognise an SSL or TLS encryption by the prefix “https://” in the address line of the browser and the closed padlock icon displayed next to it.
If SSL or TLS encryption is activated, data can be transmitted to us via the website without being read by third parties.
When using our website purely for informational purposes, i.e., if you do not register or otherwise transmit information to us, we only collect the data that your browser transmits to our server (“server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or used for any other purpose. However, we reserve the right to check the server log files subsequently if there are concrete indications of unlawful use.
2. Cookies
To make visiting our website attractive and to enable the use of certain functions, we use cookies on various pages. These are small text files stored on your device. Some of the cookies we use are deleted after the end of the browser session (so-called session cookies). Other cookies remain on your device and enable us to recognise your browser on your next visit (so-called persistent cookies). When cookies are set, they collect and process certain user information such as browser and location data as well as IP address values. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.
On this website, we use various categories of cookies: essential cookies, without which the functionality of our website would be restricted, and optional functional and marketing cookies, which generally originate from third-party providers.
2.1 Essential cookies
These cookies are essential to enable you to navigate our websites and use their functions. For example, they store which products you have placed in your shopping cart, the progress of your order process, or whether you have agreed to the use of cookies and your selection in the cookie settings. These cookies are usually session-specific and expire after your visit to the website, unless the respective functionality requires storage beyond that (e.g., saving the cookie setting). Deactivating this category of cookies would restrict the functions of the website as a whole or parts thereof.
Legal basis: Art. 6(1)(f) GDPR – legitimate interest in displaying and making the functions of our website available to you.
2.2 Functional cookies
We use functional cookies to improve and simplify usage and performance on our website.
Legal basis: Art. 6(1)(a) GDPR – your prior consent. You can withdraw your consent at any time in the “Cookie Settings” available via the link at the bottom of the website.
2.3 Marketing cookies
Marketing cookies are used to target advertising to you and your interests and to analyse it. They also serve to limit the frequency with which you see the same advertisement, measure the effectiveness of an advertising campaign, and understand the behaviour of people after viewing an ad. These cookies are usually placed by advertising networks with the website operator’s permission (in this case, us). They recognise that a user has visited a website and pass this information on to others, e.g., advertisers, or adjust advertising accordingly.
Legal basis: Art. 6(1)(a) GDPR – your prior consent. You can withdraw your consent at any time in the “Cookie Settings” available via the link at the bottom of the website.
2.4 List of analytical, functional and marketing cookies
You can access the list of cookies we use and the providers who receive personal data from you via cookies in the cookie platform, which you can access via the “Cookie Settings” link at the bottom of the website. Further information on the individual providers and cookies is available there.
2.5 How can I give or withdraw my consent to cookies?
When you visit our website for the first time, a privacy notice with the consent text for optional cookies will be displayed on your landing page. By clicking on the individual categories (Essential, Functional and Marketing Cookies) and then confirming by clicking on “Accept all”, you agree to the setting of these cookies. In addition, you have the option to save individual selections or continue without consent. You can change these settings at any time in the “Cookie Settings” via the link at the bottom of the website.
3. Contact
When contacting us (e.g., via contact form, email, telephone, audio or video conference), personal data will be collected and processed. The data collected in the case of a contact form is evident from the respective contact form. When using email or telephone as well as audio and video conferences, the necessary information such as name, contact information and, if necessary, image and video will be processed if required as part of the communication channel or if you provide such data. This data is stored and used exclusively for the purpose of responding to your enquiry and for the associated technical administration.
Legal basis:
Your data will be processed only as long as necessary to fulfil the purpose and will be deleted after final processing of your request. This is the case when it can be inferred from the circumstances that the relevant matter has been conclusively clarified and provided that there are no statutory retention obligations.
3.1 ReCAPTCHA
We use the Google ReCAPTCHA function provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, to prevent misuse of our content. This system helps us determine whether the user is a natural person or an internet bot, preventing automated use of our contact forms and the sending of spam messages to our stored email accounts.
When using Google ReCAPTCHA, cookies are set that may store various data such as IP address, referrer URL, operating system information, mouse movements, keystrokes, duration of stay, location, user inputs, browser language or device settings. This information is stored and transmitted to Google. It cannot be ruled out that the data will be transferred to a Google server in the USA and stored there. We have no influence over the data transmission. Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA, is certified under the Data Privacy Framework.
Legal basis: Art. 6(1)(a) GDPR – your freely given consent.
Your consent is voluntary and can be withdrawn at any time with future effect. To do this, change your settings in the “Cookie Settings” at the bottom of the website.
We process your personal data for as long as necessary to achieve the purpose. If you withdraw your consent, we will delete your data unless statutory retention obligations prevent this.
Further information on Google’s handling of data when using Google ReCAPTCHA can be found in Google’s privacy policy at:
https://www.google.com/intl/en/policies/privacy/ and https://www.google.com/recaptcha/about/
4. Social Media (Facebook, Instagram, YouTube Channel)
To increase our online presence, we use social media platforms to report on products and the company and to engage with customers, suppliers, employees, interested parties, or applicants. In doing so, we also process personal data. As a rule, data processing is governed by the rules of the respective social media platform. Data processing is carried out by the operators of the platforms. For more details, please refer to the privacy policies of the respective operators:
We process personal data for the following purposes:
As a rule, data processing takes place only within the social media platform. Data is used outside the platform only if necessary to achieve the purpose or to fulfil a request from you.
If data is processed on the basis of legitimate interest, it is done in pursuit of our interest in implementing business management measures, developing services and products, carrying out advertising measures for our own or group-wide services and products, and handling your enquiries, complaints, or other concerns.
Data will be deleted according to the rules of the social media platforms or when a group, campaign, or post is deleted. Data from survey or competition participants will be deleted at the end of the process unless otherwise agreed in a consent form or if statutory retention obligations apply.
Additional statement on Facebook & Instagram
Facebook and Instagram are part of Meta Platforms. We are joint controllers with Meta Platforms Ireland Limited (“Meta Ireland”) for the processing of Insights data on Facebook and Instagram. Information on data processing by Meta is available in Meta’s privacy policy at:
The details of the joint controllership can be viewed at:
Meta Ireland has agreed to assume primary responsibility under the GDPR for processing Insights data and to fulfil all obligations under the GDPR regarding the processing of Insights data (including Articles 12 and 13 GDPR, Articles 15 to 22 GDPR and Articles 32 to 34 GDPR). Meta Ireland will also make the essence of this Page Insights Addendum available to data subjects.
If you have questions about this or wish to exercise your rights as a data subject with Facebook or Instagram, please contact Facebook or Instagram directly, for example via:
https://www.facebook.com/help/contact/3235427276485498
5. Integration of Third-Party Content (YouTube Video and Google Maps)
We integrate content or service offerings from third-party providers on our website to include their content and services, such as videos or map excerpts (hereinafter uniformly referred to as “content”).
This always requires that the third-party providers of this content perceive the IP address of the users, as they could not send the content to their browser without the IP address. The IP address is therefore necessary for displaying this content. We endeavour to use only content whose respective providers use the IP address solely for delivering the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. The “pixel tags” can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user’s device and may contain, among other things, technical information about the browser and operating system, referring websites, visit time as well as other details about the use of our online offering, and may also be combined with such information from other sources.
We integrate third-party content and services to optimise our web offering and operate services in a more user-friendly manner. The legal basis for this is generally your consent in accordance with Art. 6(1)(a) GDPR.
You can withdraw your consent at any time in the “Cookie Preferences” in the footer of the website.
5.1 YouTube
We integrate videos from the “YouTube” platform provided by Google Ireland Limited. When you visit our website to watch YouTube videos, personal data (e.g., your IP address) will be transmitted to YouTube and stored by YouTube. This data processing is carried out in accordance with YouTube’s privacy policy. Google’s privacy policy can be found here: https://www.google.com/policies/privacy/.
To protect your privacy, we have embedded YouTube videos on our website in enhanced privacy mode. This means that YouTube does not set cookies for personalised advertising or tracking on your device as long as you do not play the videos. Please note that a connection to YouTube’s servers will be established as soon as you start a video embedded on our site. Further information on data processing and your rights can be found in YouTube’s privacy policy: https://www.google.com/policies/privacy/.
5.2 Google Maps
We integrate maps from the “Google Maps” platform provided by Google LLC to offer you an interactive map function. This involves transferring data such as your IP address and location information to Google. Google’s privacy policy can be found here: https://www.google.com/policies/privacy/.
6. Data Processing in Applications
You have the option to apply to us via our website. Please use the relevant application form for this purpose. When you fill out the application form, we use this data exclusively to review your application and to contact you within the framework of the application process.
Legal basis for this data processing: Art. 6(1)(b) GDPR in conjunction with § 26 BDSG.
The data collected is required for carrying out the application process. Without providing it, we cannot conduct the application process.
If we are unable to offer you a suitable position at the moment, there is the option of including you in our applicant pool. This requires your explicit consent.
We, KUGEL Edelstahlverarbeitung GmbH, are part of the Blanc und Fischer family holding. Your application data may be shared within the corporate group if this is necessary to fulfil the purposes of your application. Data will only be transferred in other cases if we have your consent or if there is a legal basis (e.g., disclosure requests by authorities or based on court orders).
Unless otherwise stated, we process your personal data relating to your application only as long as it is necessary to carry out the application process.
If you are not considered for the advertised position, we will delete your application data after a maximum of six months. In the event of hiring, the necessary data will be included in your personnel file.
If you are included in our applicant pool, we will store your application documents for 2 years. If we do not find a suitable position for you within these 2 years, your data will be deleted.
7. Purpose Changes
Processing of your personal data for purposes other than those described above will only take place if a legal provision permits this or if you have consented to the changed purpose of data processing. In the event of further processing for purposes other than those for which the data was originally collected, we will inform you about these other purposes before further processing and provide you with all other relevant information.
IV. Recipients or Categories of Recipients of Personal Data
We share your personal data within our company exclusively with the departments and individuals who need it to carry out their tasks. Furthermore, we may rely on other companies in the BLANC & FISCHER Group to provide the above-described services/purposes if this is necessary to achieve these purposes. These may also include companies in third countries outside the EU.
For the operation and maintenance of our website, we use various service providers, such as devowl.io GmbH, Medienproduktion Holzer, Google Ireland Limited, Meta Platforms Ireland Ltd., Microsoft Ireland Operations Ltd.
In addition, we use Blanc und Fischer IT Services GmbH, among other things, for IT infrastructure and the provision of additional resources for performing services relating to our website.
Appropriate contracts, data processing agreements, or agreements on joint controllership have been concluded with these service providers.
V. Transfer to Third Countries
As a rule, data processing takes place within the EU. However, it may occur that subcontractors of our service providers are used for service and maintenance purposes or to fulfil other purposes and are located in third countries that may not have an adequate level of data protection. For this reason, we have concluded appropriate data processing agreements or agreements on joint controllership to ensure that suitable safeguards are in place to establish an adequate level of data protection when using subcontractors in third countries. Such safeguards for data transfers are based on adequacy decisions for the respective country, binding corporate rules, or EU standard contractual clauses that have been concluded.
VI. Retention Period in Accordance with Statutory Retention Obligations
Where necessary, we process and store your personal data relating to our website only for as long as is required to achieve the purposes. Afterwards, the personal data will be deleted or anonymised. This generally occurs when your contact request has been fulfilled, you unsubscribe from the newsletter, or the purposes for providing the service have otherwise been fulfilled or no longer apply.
Statutory retention obligations remain unaffected. In such cases, the data will be restricted and retained only for the purpose of statutory retention.
VII. Right of Access, Rectification, Erasure, Restriction, Data Portability and Objection
As a data subject, you have the right at any time to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure of your data (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and the right to object (Art. 21 GDPR). Please contact the controller using the contact details provided above to exercise these rights.
VIII. Right to Lodge a Complaint
You also have the right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR if you believe that the processing of your personal data is not lawful.
The supervisory authority responsible for us is:
Bavarian State Office for Data Protection Supervision
Promenade 18, 91522 Ansbach, Germany
Telephone: +49 (0)981 1800930
Email: poststelle@lda.bayern.de
Website: https://www.lda.bayern.de
Contact addresses for other German and European supervisory authorities can be found at:
https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html or
https://www.bfdi.bund.de/DE/Service/Anschriften/Europa/Europa-node.html
IX. Necessity of Providing Personal Data
In principle, only the data necessary to achieve the above-mentioned purposes will be processed. Otherwise, the above-mentioned services cannot be provided, and the corresponding purposes cannot be fulfilled.
For processing activities that are not necessarily linked to the provision of the website (e.g., newsletter, use of the contact form, application, etc.), data processing will only take place if you choose to make use of these options. Otherwise, your personal data will not be processed for these purposes.
X. Amendment of this Privacy Notice
We keep this privacy notice up to date. Therefore, we reserve the right to amend it from time to time and to update it to reflect changes in the collection, processing, or use of your data. The current version of the privacy notice is always available on the website of KUGEL Edelstahlverarbeitung GmbH at the following link:
https://www.kugel-edelstahl.com/datenschutz
Status: April 2025