Data Protection Information

Data Protection Information
Data Protection Information for Customers, Suppliers, Applicants and other concerned Parties
Dear Customers and Business Partners,
Dear Applicants,
We would like to give you an overview with the following information of our processing of the personal data provided by you or your employees and your rights under the Data Protection Act.
Who is responsible for data processing and who can I turn to?
The company
Ergo.fol Norflex GmbH
Manchinger Straße 125
85053 Ingolstadt
Telefon: +49 (0) 841 659 159
is responsible.
You can contact the data protection officer
Ergo.fol Norflex GmbH
Data Protection Officer
Manchinger Straße 125
85053 Ingolstadt
Telefon: +49 (0) 841 659 159
Which sources and what data do we use?
Which personal data are processed in individual cases, are used and stored is governed in the first instance by the relationship which you maintain with our company. Data you transfer to us voluntarily through using our contact form is used by us to refine and to perform our business relationships. These could include your name, your telephone / fax numbers, e-mail address and address. What is more, you normally send us the name of the company you work for (not for applicants). We are not only concerned with personal data here however. These pieces of information serve to allocating your enquiry and to reply to it following this. Submitting further data is optional. The details you provide are stored for the purpose of handling your request as well as for possible follow-up questions. After dealing with your enquiry personal data are automatically deleted.
What is more, your IP address represents a piece of personal information. This is processed when visiting our website.
And by so doing, we process personal information, which we receive from our customers in the context of our business relationship or from other concerned parties e.g. suppliers or applicants. In addition, we process personal data – in so far as these are required for the business relationship – we obtain from sources which are freely accessible to the public (e.g. debtor lists, Land Registers, Commercial and Association Registers, from the press, and the internet) in a permitted manner.
Contact form
If you make contact with us regarding questions of any kind by e-mail or using the contact form, you are granting us your voluntary approval to process your data for the purpose of making contact. Inputting a valid e-mail address, your name and – for customers or suppliers – inputting an address are required for this. These pieces of information serve to allocate the enquiry and the subsequent response made to it. Giving any additional details is optional. The details you give us are stored for the purpose of processing the request as well as for any possible follow-up questions. After dealing with the enquiry you raise, personal details are automatically deleted.
SSL encoding
In order to safeguard your data during transmission, we use state-of-the-art encoding processes (e.g. SSL) via HTTPS when using our contact form.
Like most other websites, we also use so-called „cookies“. Cookies are small text files which are transferred onto your hard drive by a web-server. In this way we automatically obtain certain data such as e.g. your IP address, browsers used, operating system used, the domain name of your Internet Service Provider, your internet connection and similar information.
Cookies cannot be used to start programmes or to transfer viruses onto a computer. We can make navigation easier for you using the pieces of information contained in cookies, and can also display our websites to you correctly. The pieces of information recorded are therefore of a general nature. We are dealing here exclusively with pieces of information which do not permit any conclusions to be drawn regarding your person.
These pieces of information are required on technical grounds in order to deliver the correct contents from websites you requested to you, and these necessarily arise when using the internet. They are processed, in particular, for the following purposes:
  • Securing smooth set-up and connection of the website,
  • Securing trouble-free use of our website,
  • Evaluating system security and system stability as well as
  • For additional administrative purposes.
Processing your personal data is based on our justified interest from the aforementioned purposes for recording data. We do not use your data to draw any conclusion regarding your person. Only the persons responsible receive your data, and should the need arise, contract data processors.
Anonymous pieces of information of this type are statistically evaluated by us where necessary in order to optimise our internet presence and the technology behind it.
A connection to your personal data is not set up in any cases at all without your consent or approval.
Naturally you can, in principle, also view our website without cookies. Internet browsers are regularly set in such a way that they accept cookies. In general, you can deactivate the use of cookies at any time via your browser setting. Please use the help functions of your internet browser in order to learn how you can change these settings. Please note that individual functions of our website will not function if you have deactivated the use of cookies.
Google Maps
This website does not use the product Google Maps form Google Inc. as an embedded function, whereby data are recorded, processed and stored. However, a link for redirection to the Google Maps page is provided. With the use of this link on our website you declare that you agree to being redirected to a Google page (the Google Maps page), where your data will be recorded by Google Inc. or their representatives, will be processed as well as used.
Google Maps‘ terms of use are available at in English.
Google AdWords
Use of Google Adwords Conversion Tracking
We use the online advertising programme “Google AdWords“ on our website and in this context conversion tracking. Google Conversion Tracking is an analytical service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; ”Google“). Whenever you click on an advertisement set up by Google, a cookie is deposited onto your computer for conversion tracking. These cookies have a restricted validity, do not contain any personal data and in this way cannot serve to identify individuals. Whenever you visit certain pages on our website and the cookie has not yet expired, both Google and we can detect that you have clicked on the advertisement and were redirected to this page. Each Google AdWords customer receives a different cookie. In this way there is no possibility for cookies to be monitored via the AdWords customer websites.
The pieces of information which are acquired with the help of the conversion cookie serve for drawing up conversion statistics. Whilst doing so, we learn the overall number of users who have clicked on one of our advertisements and who were redirected to a page identified with a Conversion Tracking Tag. However, we do not receive any additional pieces of information with which users can be identified in person. Processing is carried out on the basis of Article 6(1) letter (f) GDPR from the justified interest in targeted advertisements and the analysis of the effect and the efficiency of this advertisement.
You are entitled to object to this processing of personal data which concern you at any time on the basis of Article 6(1) (f) GDPR on grounds, arising from your particular situation.
In addition, you can prevent cookies being stored through selecting the appropriate technical settings for your browser software. However, please note that in this case you will not be able to use all the functions of the website to their full extent. As a result, you will also not be included in the conversion tracking statistics.
What is more, in your setting for Google advertisements you can deactivate advertisements personalised for you. You can find instructions for this at What is more, you can deactivate the use of cookies by third party providers by calling up the deactivation page of the Network Advertising Initiative at and can implement the redirecting information given there to opt-out.
Further information as well as Google‘s Data Protection Declaration are available at:
For what purpose do we process your data (Purpose of Processing) and on what legal basis?
We process personal data in harmony with the regulations of the EU General Data Protection Regulation (GDPR) and the new German Federal Data Protection Act (BDSG new)
  1. for fulfilling contractual obligations (Article 6 (1) (b) GDPR).
Processing data is carried out for performing a business relationship in the field of the manufacture and trade in casings. Data from (possible) customers is recorded, processed and stored in order to initiate the business relationship and for the purpose of pre-contractual measures, to perform and end business relationships. Furthermore, details of tradespeople and suppliers with whom we are in a business relationship or with whom we should like to enter into such are processed.
The purposes of data processing are directed above all else towards the successful performance of contractual obligations and in this way towards maintaining business relationships.
Along with this, fulfilling statutory obligations arising from the business relationship may lead to the processing, storage and, where possible, also to the transmission of personal data. Applicants’ details sent to us using the contact form may also be processed to initiate the employment relationship
  1. on the basis of your consent (Article 6 (1) (a) GDPR)
In so far as you have granted us your consent to process personal data for certain purposes (e.g. advertising measures), then the lawfulness of this processing has been established on the basis of your consent.
Consent which has been granted can be revoked at any time. This also applies for revoking declarations of consent granted to us before GDPR became valid, that is prior to 25 May 2018. Revoking consent only applies to the future and does not affect the lawfulness of the data processed up until the revoking.
  1. in the context of the considerations (Article 6 (1) (f) GDPR)
In so far as is necessary, we process your data above and beyond the actual performance of the contract to safeguard justifiable interest of ourselves or of third parties, and no grounds exist for assuming that you would have an overriding interest worthy of protection in these details not being passed on further. Examples:
– Advertising,
– Raising legal claims and for defence in legal disputes,
– Guaranteeing IT security and IT operation
  1. on the grounds of statutory provisions (Article 6 (1) (c) GDPR)
In as far as legal obligations exist for this, invoices, contracts and other accounting documents will be stored in accordance with our retention obligations and for example will be passed on during company audits.
Who receives my data?
Personal data such as names of the employees of our customers, suppliers, etc. and their contact details are stored within the company in accordance with the statutory regulations for our employees to fulfil commercial contractual company obligations and are processed and stored by them.
Users of our internet page: in the context of using the Google service Google Maps, users of our website are redirected to Google Maps following approval.
Applicants’ details are passed on solely to the human resources department, senior business management and the respective heads of department responsible for personnel, and are processed there.
In as far as data are passed on to contract order processors and are processed by these contracted workers, then they are obliged to follow the data protection regulations, and corresponding contracts have been concluded with them (e.g. destruction of files in conformance with data protection presents such a contract data processing relationship).
Further recipients of data may be those offices for which you granted us your consent to transfer data or such to which we may or we must transfer personal information on grounds of a weighting of interests or a statutory obligation.
Are data transferred to third countries?
Transferring data to third countries may only take place on the basis of a business relationship with a company located in that country (e. g. a customer of ours located in Canada). This then only takes place in the context of preforming the business relationship between the company in the third country, yourself as customer or supplier and ourselves.
In the context of using Google Adwords, data is transferred to offices in countries outside the European Union (third countries).
How long are my details stored for?
We keep to the principles of data reduction and data economy. We process and store our business partners’ personal details as long as this is necessary to fulfil our contractual and statutory obligations. Consideration should be given here that business relationships can last for many years.
If these details are no longer required to fulfil contractual or statutory obligations, these are deleted at regular details, unless it is necessary to process them – for a fixed period of time – for the following purposes:
– To fulfil retention obligations under commercial and tax law, which may arise for example from: the German Commercial Code (HGB), German Fiscal Law (AO). The retention periods and deadlines for documentation specified therein are usually between two years and ten years.
– Keeping documentary evidence in the context of the statutory regulations for the statute of limitations. According to §§ 195 ff of the German Civil Code (BGB) these deadlines for the limitation of time may last up to 30 years, wherein the regular period of limitation is 3 years.
In so far as you gave your consent for longer-term storage of your details (e.g. for applicants), then these may also be stored for a longer period of time until you object to the storage or request they be deleted.
What rights do I have for data protection?
Every data subject is entitled to information according to Article 15 GDPR, the right to correct details stored incorrectly according to Article 16 GDPR, the right to deletion of their own data according to Article 17 GDPR, the right to restrict processing of their data according to Article18 GDPR, the right to object to processing their data from Article 21 GDPR as well as the right to transferability of their stored data from Article 20 GDPR. The restrictions according to §§ 34 and 35 GDPR new are valid for the right to information and deletion. Moreover, there is a right to lodge a complaint with a responsible supervisory authority (Article 77 GDPR in connection with § 19 Federal Data Protection Act, new). You can revoke a consent which has been granted to us for processing personal data by contacting us at any time. This is also true for revoking declarations of consent granted to us prior to validity of the GDPR; that is prior to 25 May 2018. Please note that revoking permissions granted is only valid for the future. Processing carried out prior to the consent being revoked is not affected by this.
Am I obliged to provide data?
You must provide those personal details in the context of our business relationship which are necessary for commencing, performing and ending a business relationship and for fulfilling contractual obligations connected with this in accordance with Article 6 (1) letter (b) GDPR, or which we are obliged to record by law. Without these details, we will normally not be in a position to conclude a contract with you and to perform such contract.
Information on your right to object according to Article 21 GDPR
Right to object relating to his or her particular situation
You have the right to submit an objection on grounds which result from your particular situation at any time against personal details concerning you being processed on grounds of Article 6 (1) letter f GDPR (Data Processing on the basis of a weighing of interests).
If you raise an objection, we shall no longer process your personal data, unless compelling justified grounds exist on our part for processing them, which outweigh your interests, rights and liberties, or the processing serves for the application, exercising or defence of legal claims.
Right to object to the processing of data for direct advertising purposes
We process your personal data in individual cases in order to carry out direct advertising. You are entitled to submit an objection against processing data concerning you at any time for purposes of such kinds of advertising. If you object to the processing of your personal details for direct advertising purposes, then we will no longer process your personal details for these purposes.
Changes to our Data Protection Regulations
We reserve the right, to adjust these data protection declarations in order that they correspond to the current statutory requirements at all times or to realise changes in our services in the data protection declaration, e.g. if new services are introduced. On your next visit, the new data protection declaration will then apply.
The recipient for objections
The objection may have a free style, but must include the subject line “Objection“ as well as your name, your address and your contact details and should be sent to:
Ergo.fol Norflex GmbH
Manchinger Straße 125
85053 Ingolstadt
Tel: +49 (0) 841 659 159
or by e-mail to: