Data Protection

The person responsible within the meaning of the Basic Data Protection Regulation and other national data protection laws of the Member States and other provisions of data protection law is:

IBU-tec advanced materials AG

Hainweg 9-11
99425 Weimar
Deutschland

+49 3643 8649-0
mailto:mail(at)ibu-tec.de
www.ibu-tec.de.de

The Data Protection Officer is:

DataCo GmbH

Dachauer Straße 65
80335 Munich
Germany

+49 89 7400 45840
datenschutz(at)dataguard.de
www.dataguard.de

1. Scope of Personal Data Processing

As a matter of principle, we process personal data of our users only to the extent necessary to provide a functional website and our contents and services. The processing of personal data of our users is regularly only carried out with the consent of the user. An exception is made in cases where prior consent cannot be obtained for factual reasons and the processing of the data is required by legal regulations.

2. Legal Basis for Personal Data Processing

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 sentence 1 lit. a EU Data Protection Regulation (GDPR) serves as the legal basis.

When processing personal data which is necessary for the performance of a contract to which the data subject is a party, Article 6 (1) sentence 1 lit. b of the DPA serves as the legal basis.

This also applies to processing operations which are necessary for the implementation of pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 sentence 1 lit. c GDPR serves as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or of a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Article 6 paragraph 1 sentence 1 lit. f GDPR serves as the legal basis for the processing.

3. Data Erasure and Storage Duration

The personal data of the person concerned will be deleted or blocked as soon as the purpose of the storage is no longer applicable. Furthermore, data may be stored if this has been provided for by the European or national legislator in Union regulations, laws or other regulations to which the person responsible is subject. Data is also blocked or deleted when a storage period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the purpose of concluding or fulfilling a contract.

If personal data is being processed concerns you, you are a data subject within the meaning of the GDPR and you are entitled to the following rights in relation to the person responsible:

1. Right to Access Information

You may request confirmation from the controller as to whether personal data concerning you are being processed by them.

If such processing is undertaken, you may ask the controller for the following information:

1. the purposes for which the personal data are processed;
2. the categories of personal data which can be processed;
3. the recipients or categories of recipients to whom the personal data concerning you has been disclosed or will be disclosed;
4. the planned duration of storage of the personal data relating to you or, if specific details cannot be given, criteria for determining the duration of storage;
5. the existence of a right to rectify or erase personal data concerning you, a right to have the processing limited by the controller or a right to object to such processing
6. the existence of a right of appeal to a supervisory authority;
7. all available information on the origin of the data if the personal data are not collected from the data subject;
8. the existence of automated decision-making, including profiling in accordance with Art. 22 (1) and (4) DPA and, at least in these cases, - meaningful information on the logic involved and the scope and intended consequences of such processing for the data subject.

You have the right to request information as to whether personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate guarantees pursuant to Art. 46 GDPR in connection with the transfer.

2. Right to Rectification

You have the right to obtain from the data controller the rectification and/or integration of any personal data processed concerning you if it is incorrect or incomplete. The data controller shall make the correction without delay.

3. Right to Restrict Processing

You may request the restriction of the processing of personal data concerning you under the following conditions:

• if you dispute the accuracy of the personal data concerning you for a period of time that allows the person responsible to verify the accuracy of the personal data;
• the processing is unlawful and you refuse to delete the personal data and instead request restriction of the use of personal data,
• the controller no longer needs the personal data for the purposes of the processing, but you need them in order to assert, exercise or defend legal claims; or
• if you have lodged an objection to the processing in accordance with Art. 21 Para. 1 GDPR and it is not yet clear whether the legitimate reasons of the controller outweigh your reasons.

Where the processing of personal data relating to you has been restricted, such data may be processed, with the exception of storage, only with your consent or for the purpose of pursuing, exercising or defending legal claims or protecting the rights of another natural or legal person or on grounds of an important public interest of the Union or a Member State..

If the restriction on processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.

4. Right of Cancellation

a) Duty to Delete

You may request the controller to delete personal data concerning you without delay and the controller is obliged to delete such data without delay if one of the following reasons applies:

1. The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
2. You revoke your consent on which the processing was based in accordance with Art. 6 para. 1 sentence 1 lit. a Art. 9 para. 2 lit. a DPA, and there is no other legal basis for the processing.
3. You lodge an objection to the processing pursuant to Art. 21, para. 1, GDPR and there are no overriding legitimate reasons for the processing, or you lodge an objection to the processing pursuant to Art. 21, para. 2, GDPR.
4. The personal data concerning you have been processed unlawfully.
5. Erasure of personal data concerning you is necessary to comply with a legal obligation under Union or national law to which the controller is subject.
6. The personal data concerning you have been collected in relation to information society services offered, in accordance with Article 8(1) of the DPA.

b) Information to Third Parties

 If the controller has made the personal data concerning you public and is obliged to delete them in accordance with Art. 17 Para. 1 GDPR, it shall take appropriate measures, including technical measures, taking into account available technology and implementation costs, to inform data controllers who process the personal data that you, as a data subject, have requested them to delete all links to these personal data or copies or replications of these personal data.

c) Exceptions

The right to deletion does not exist insofar as the processing is necessary

1. to exercise the right to freedom of expression and information;
2. to comply with a legal obligation requiring processing under Union or national law to which the controller is subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller;
3. for reasons of public interest in the field of public health pursuant to Article 9 paragraph 2 letters h and i and Article 9 paragraph 3 GDPR;
4. or archival, scientific or historical research purposes in the public interest or for statistical purposes pursuant to Art. 89 para. 1 GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously prejudice the attainment of the objectives of such processing, or
5. to assert, exercise or defend legal claims

5. Right to Information

If you have exercised the right to rectify, erase or limit the processing, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification, erasure or limitation of processing, unless this proves impossible or involves a disproportionate effort

You have the right to be informed of these recipients by the controller.

6. Right to Data Portability

You have the right to receive the personal data concerning you that you have provided to the data controller in a structured, common and machine-readable format. You also have the right to have this data communicated to another controller without interference from the controller to whom the personal data has been made available, provided that

1.  the processing is based on a consent pursuant to Article 6 paragraph 1 sentence 1 letter a GDPR or Article 9 paragraph 2 letter a GDPR or on a contract pursuant to Article 6 paragraph 1 sentence 1 letter b GDPR and
2. the processing is carried out using automated procedures.

In exercising this right, you also have the right to obtain that the personal data concerning you be transferred directly from one controller to another controller, in so far as this is technically feasible. The freedoms and rights of other persons must not be affected by this.

The right to data transferability shall not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

7. Right of Appeal

You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6 paragraph 1 sentence 1 letter e or f of the DPA; this also applies to profiling based on these provisions.                                                                  

The controller shall no longer process the personal data concerning you, unless he can demonstrate compelling reasons for processing which are justified on grounds of protection that outweigh your interests, rights and freedoms, or if the processing is carried out for the purpose of asserting, exercising or defending legal claims.

If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing, including profiling, insofar as it is related to such direct marketing.

If you object to processing for the purposes of direct marketing, the personal data concerning you will no longer be processed for those purposes.

You have the possibility to exercise your right of objection in relation to the use of information society services, without prejudice under Directive 2002/58/EC, through the use of automated procedures involving technical specifications.

8. Right to Revoke the Declaration of Consent Under Data Protection Law

You have the right to revoke your data protection declaration of consent at any time. By revoking your consent, the lawfulness of the processing carried out on the basis of your consent up to the point of revocation is not affected.

9. Automated Decision in Individual Cases Including Profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which has legal effect on you or which significantly affects you in a similar way. This shall not apply if the decision

1. is necessary for the conclusion or performance of a contract between you and the person responsible,
2. is authorised by Union or national legislation to which the person responsible is subject and that legislation provides for appropriate measures to safeguard your rights and freedoms and your legitimate interests; or
3. with your express consent.

However, these decisions may not be based on special categories of personal data according to Art. 9 Para. 1 GDPR, unless Art. 9 Para. 2 lit. a or b GDPR applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.

With regard to the cases mentioned in 1 and 3, the person responsible takes appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, including at least the right to obtain the intervention of a person on the part of the person responsible, to state your own position and to contest heard the decision.

10. Right of Appeal to a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your residence, your place of work or the place of the alleged violation, if you believe that the processing of your personal data is against the GDPR violates.

The supervisory authority to which the complaint was lodged shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy in accordance with Art. 78 GDPR.

1. Description and Scope of Data processing

Whenever you visit our website, our system automatically collects data and information from the computer system of the calling computer.

The following data is collected:

• Information about the browser type and the version used
• The user's operating system
• The Internet service provider of the user
• The IP address of the user
• Date and time of access
• Web pages from which the user's system accesses our website
• Websites that are called up by the user's system via our website

This data is stored in the log files of our system. This data is not stored together with other personal data of the user.

2. Purpose of the Data Processingg

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.

The storage in log files is done to ensure the functionality of the website. In addition, the data is used to optimise the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

These purposes also include our legitimate interest in data processing in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

3. Legal Basis for Data Processing

The legal basis for the temporary storage of data and log files is Art. 6 para. 1 sentence 1 lit. f GDPR.

4. Duration of Storage

The data will be deleted as soon as they are no longer necessary for the purpose of their collection. In the case of the collection of data for the provision of the website, this is the case when the respective session is ended..

In the case of data stored in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case the IP addresses of the users are deleted or alienated, so that an allocation of the calling client is no longer possible.

5. Objection and Removal Options

The collection of the data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. There is consequently no possibility for the user to object..

1. Description and Scope of Data Processing

Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. If a user calls up a website, a cookie can be saved on the user's operating system. This cookie contains a characteristic string that enables the browser to be clearly identified when the website is called up again.

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.

The following data is stored and transmitted in the cookies:

1. Language settings
2. Entered search terms
3. Frequency of page views
4. Use of website functions

The user data collected in this way is pseudonymized using technical measures. It is therefore no longer possible to assign the data to the accessing user. The data is not stored together with other personal data of the users.

When you visit our website, the user is informed about the use of cookies for analysis purposes and his consent to the processing of personal data used in this context is obtained. In this context, there is also a reference to this data protection declaration.

2. Purpose of Data Processing

The purpose of using technically necessary cookies is to simplify the use of websites for the users. Some functions of our website cannot be offered without the use of cookies. For this it is necessary that the browser is recognized even after a page change.

We need cookies for the following applications:

9. Acceptance of language settings

10. Remembering search terms

The user data collected through technically necessary cookies are not used to create user profiles.

For these purposes, we also have a legitimate interest in processing personal data in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR.

3. Legal Basis for Data Processing

The legal basis for the processing of personal data using technically necessary cookies is Art. 6 Para. 1 S. 1 lit. f GDPR.

The legal basis for the processing of personal data using cookies for analysis purposes is the consent of the user in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR..

4. Duration of Storage, Opportunity for Objection and Removal Options

Cookies are stored on the user's computer and transmitted from there to our site. As a user, you therefore have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may not be possible to use all functions of the website to their full extent.

If you use a Safari browser from version 12.1, cookies are automatically deleted after seven days. This also applies to opt-out cookies that are set to prevent tracking measures.

1. Description and Scope of Data Processing

You can subscribe to a free newsletter on our website. When registering for the newsletter, the following data from the input mask on the contact form will be transmitted to us.

• Name (mandatory field)
• Email (mandatory field)
• Company
• Telephone
• Address
• Your message
• Date and time of contact

The data is used exclusively for sending the newsletter or for contacting us via the contact form.

We use the service provider Newsletter2Go from Newsletter2Go GmbH, Köpenicker Str. 126, 10179 Berlin, Germany (hereinafter referred to as Newsletter2Go) to send our newsletter. Newsletter2Go is a provider for email and SMS marketing and enables us to communicate directly with potential customers via email and SMS newsletters. If you would like to register for the newsletter, the data you enter, which you enter when registering for the newsletter, will be passed on to Newsletter2Go after your registration and saved there.

The following data are involved:

• Surname
• E-mail
• Title

Your data will not be passed on to third parties for the subscription to the newsletter and Newsletter2Go will also not have any right to pass on your data. After registration, we will send you an email to confirm your registration. Newsletter2Go also offers various analysis options on how the sent newsletters are opened and used, e.g. To how many users an email or SMS was sent, whether emails or SMS were rejected and whether users have unsubscribed from the list after receiving an email or SMS.

Further information on the processing of data by Newsletter2Go can be found here: https://www.newsletter2go.de/datenschutz/

The data protection measures are always subject to technical updates, for this reason we ask you to inform yourself about our data protection measures at regular intervals by inspecting our data protection declaration.

In order to fully meet the legal data protection requirements, we have concluded a contract for order processing with Newsletter2go

2. Purpose of Data Processing

The personal data collected as part of a registration for the newsletter will only be used to send our newsletter, possibly to invite you to events and, if you are already our customer, to our customer email. In addition, subscribers to the newsletter could be informed by email if this is necessary for the operation of the newsletter service or a registration in this regard, as could be the case in the event of changes to the newsletter offer or changes in the technical circumstances.

3. Legal Basis for the Processing of Personal Data

The legal basis for the processing of users' personal data is in principle the user's consent in accordance with Art. 6 Para. 1 S.1 lit. a GDPR.

4. Duration of Storage

Your personal information will be stored for as long as is necessary to fulfill the purposes described in this data protection declaration or as required by law. You can also contact Newsletter2Go and request that your data be deleted.

5. Revocation and Removal Options

You have the right to withdraw your declaration of consent under data protection law at any time. Withdrawing your consent will affect the legality, which will not affect processing based on your consent prior to your withdrawal.

You can revoke your consent to the storage of the data and its use for sending the newsletter by Newsletter2Go at any time. You can exercise your revocation at any time by email to Newsletter2Go or by clicking on the link provided in each newsletter.

You can find further information on the options for objection and elimination to Newsletter2Go at:

https://www.newsletter2go.com/data-protection/?_ga=2.133557964.330800679.1579690714-1780221562.1579690714

1. Description and Scope of Data Processing

On our website it is possible to contact us using the email addresses provided. In this case, the user's personal data transmitted with the email will be saved.

The data will only be used to process the conversation

2. Purpose of Data Processing

If you contact us by email, there is also the necessary interest in the processing of the data.

3. Legal Basis for Data Processing

The legal basis for the processing of the data is Art. 6 Para. 1 lit. a GDPR.

The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 Para. 1 lit. f GDPR. If the email contact aims to conclude a contract, then an additional legal basis for the processing is Art. 6 Para. 1 lit. b GDPR.

4. Duration Of Storage

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected.

For personal data sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been finally clarified.

The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

5. Objection and Removal Options

The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot continue.

The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot continue. In this case, all personal data saved in the course of contacting us will be deleted.

In this case, all personal data saved in the course of contacting us will be deleted.

1. Description and Scope of Data Processing

There is a contact form on our website that can be used to contact us electronically. If a user makes use of this option, the data entered in the input mask will be transmitted to us and saved.

The following data is stored at the time the message is sent:

 Name (mandatory field)

• Email (mandatory field)
• Company
• Telephone
• Address
• Your message
• Date and time of contact

Your consent to the processing of the data is obtained as part of the sending process and reference is made to this data protection declaration.

Alternatively, you can contact us via the email address provided. In this case, the user's personal data transmitted with the email will be saved.

The data will only be used to process the conversationt.

2. Purpose of Data Processing

The processing of personal data from the input mask serves us only to process the contact. If you contact us by email, this is also the necessary legitimate interest in the processing of the data.

The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

3. Legal Basis for Data Processing

The legal basis for the processing of the data is Art. 6 Para. 1 S. 1 lit. a GDPR.

The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 Para. 1 S. 1 lit. f GDPR. If the email contact aims to conclude a contract, then an additional legal basis for the processing is Art. 6 Para. 1 S. 1 lit. b GDPR.

4. Duration of Storage

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those that were sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been finally clarified.

The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

5. Objection and Removal Options

The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot continue.

The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot continue. In this case, all personal data saved in the course of contacting us will be deleted.

In this case, all personal data saved in the course of contacting us will be deleted.

Use of Corporate Websites in Social Networks

1. YouTube

YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, United States

We provide information on our company website and offer YouTube users the opportunity to communicate. If you carry out an action on our YouTube corporate website (e.g. comments, posts, likes etc.), it may be that you are making personal data (e.g. clear name or photo of your user profile) public.

However, since we generally or in large part have no influence on the processing of your personal data by the companies who are responsible for the IBU-tec advanced materials AG - corporate image YouTube, we cannot make any binding statements regarding the purpose and scope of the processing of your data.

Our corporate presence in social networks is used for communication and information exchange with (potential) customers, employees and partners.

The publications about the company's website can contain the following content:

1. Information about products
2. Information about services
3. Advertising
4. Information about technologies, trade fairs and congresses, information about employees

Every user is free to publish personal data through activities.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR.

The data generated by the company's website are not stored in our own systems.

YouTube has submitted to the Privacy Shield Agreement between the European Union and the USA and has been certified. As a result, YouTube is committed to complying with the standards and regulations of European data protection law. You can find more information in the following linked entry: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

You can object to the processing of your personal data, which we collect as part of your use of our YouTube corporate website, at any time and assert your rights as a data subject mentioned under IV. Of this data protection declaration. Send us an informal email to mail@ibu-tec.de; info@ibu-tec.de. You can find more information about the processing of your personal data by YouTube and the corresponding objection options here:

YouTube: https://policies.google.com/privacy?gl=DE&hl=de

2. Google My Business

Google My Business International Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland

We provide information on our company website and offer Google My Business users the opportunity to communicate. If you carry out an action on our Google My Business corporate website (e.g. comments, posts, likes etc.), it may be that you are making personal data (e.g. real name or photo of your user profile) public. However, since we generally or to a large extent have no influence on the processing of your personal data by the companies responsible for IBU-tec advanced materials AG - company appearance, we cannot make any binding statements regarding the purpose and scope of the processing of your data,

Our corporate presence in social networks is used for communication and information exchange with (potential) customers. In particular, we use the company's website to acquire customers with optimized company profiles, including the option of contacting users and a statistical evaluation.

 The publications about the company's website can contain the following content:

• Information about products
• Information about services
• Customer Contact

 Every user is free to publish personal data through activities.

 The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR.

 The data generated by the company's website are not stored in our own systems.

 Data is transmitted to Google servers in the USA. Google has submitted to the Privacy Shield Agreement between the European Union and the USA and has been certified. As a result, Google is committed to complying with the standards and regulations of European data protection law. You can find more information in the following linked entry:

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

You can object to the processing of your personal data, which we collect as part of your use of our Google My Business corporate website, at any time and assert your rights as a data subject mentioned under IV. Of this data protection declaration.

Send us an informal email to datenschutz(at)ibu-tec.de.

You can find more information about the processing of your personal data by Google and the corresponding objection options here:

https://policies.google.com/privacy

1. Scope of Data Processing

We use the possibility of corporate appearances on job-oriented networks. We maintain a corporate presence on the following professional networks:

LinkedIn:

LinkedIn, Unlimited Company Wilton Place, Dublin 2, Irleand

On our site we provide information and offer users the opportunity to communicate.

The company's website is used for applications, information / PR and active sourcing.

We have no information on the processing of your personal data by the companies responsible for the company's appearance. Further information can be found in the privacy policy of:

LinkedIn:

https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv

If you carry out an action on our company website (e.g. comments, posts, likes etc.), it may be that you are making personal data (e.g. real name or photo of your user profile) public.

2. Legal Basis for Data Processing

The legal basis for the processing of your data in connection with the use of our company presence is Article 6 Paragraph 1 Clause 1 lit.f GDPR.

3. Purpose of Data Processing

Our corporate identity helps us to inform users about our services. Every user is free to publish personal data through activities.

4. Duration of Storage

We save your activities and personal data published on our company website until you withdraw your consent. In addition, we maintain the statutory retention periods.

5. Objection and Removal Options

You can object to the processing of your personal data, which we collect in the context of your use of our company website, at any time and assert your rights as mentioned under IV. Of this data protection declaration. To do this, send us an informal email to the email address given in this privacy policy.

In addition, LinkedIn has submitted to and has certified the Privacy Shield Agreement between the European Union and the USA. As a result, LinkedIn undertakes to comply with the standards and regulations of European data protection law. You can find more information in the following linked entry:

https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active

You can find more information about objection and removal options here:

LinkedIn:

https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv

The website is hosted on servers by a service provider commissioned by us.

Our service provider is:

TRITUM GmbH
Hermann-Pistor-Strasse 33a
07745 Jena

The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when you visit the website. The information stored is:

1. Browser type and browser version
2. Operating system used
3. Referrer URL
4. Host name of the accessing computer
5. Date and time of the server request
6. IP address

This data is not merged with other data sources. This data is recorded on the basis of Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of his website - the server log files must be recorded for this.

The server of the website is geographically located in Germany.

We use plugins for various purposes. The plugins used are listed below:

Use of Google Analytics

1. Scope of Personal Data Processing

We use Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA and the representative in the Union Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter: Google) ). Google Analytics examines a. the origin of the visitors, their length of time on individual pages and the use of search engines and thus allows better monitoring of the success of advertising campaigns. Google places a cookie on your computer. This means that personal data can be saved and evaluated, especially the activity of the user (in particular which pages have been visited and which elements have been clicked on), device and browser information (in particular the IP address and the operating system), data about the advertisements displayed (in particular which advertisements were displayed and whether the user clicked on them) and also data from advertising partners (in particular pseudonymized user IDs). The information generated by the cookie about your use of this online presence is transmitted to a Google server in the USA and stored there. If IP anonymization is activated on this online presence, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address is only transferred to a Google server in the USA and abbreviated there in exceptional cases.

Google has submitted to the Privacy Shield Agreement between the European Union and the USA and has been certified. As a result, Google is committed to complying with the standards and regulations of European data protection law. You can find more information in the following linked entry: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

IP anonymization is active on this online presence. On behalf of the operator of this online presence, Google will use this information to evaluate your use of the online presence, to compile reports on the activities of the online presence and to provide other services related to the use of the online presence and internet use to the operator of the online presence. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all the functions of our online presence to their full extent.

Further information on the processing of data by Google can be found here: https://policies.google.com/privacy?gl=DE&hl=de

2. Purpose of Data Processing

The purpose of processing the personal data is to address a target group that has already expressed an initial interest by visiting the site..

3. Legal Basis for the Processing of Personal Data

The legal basis for the processing of users' personal data is in principle the user's consent in accordance with Art. 6 Para. 1 S.1 lit. a GDPR

4. Duration of Storage

Your personal information will be stored for as long as is necessary to fulfill the purposes described in this data protection declaration or as required by law. Advertising data in server logs are anonymized by Google deleting parts of the IP address and cookie information after 9 or 18 months

5. Revocation and Removal Options

SYou have the right to withdraw your declaration of consent under data protection law at any time. Withdrawing your consent will affect the legality, which will not affect processing based on your consent prior to your withdrawal.

You can prevent the collection and processing of your personal data by Google by preventing the storage of third-party cookies on your computer, using the "Do Not Track" function of a supporting browser, deactivating the execution of script code in your browser or a script blocker such as Install NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the online presence (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install:

tools.google.com/dlpage/gaoptout You can use the following link to deactivate the use of your personal data by Google: adssettings.google.de Further information on objection and elimination options vis-à-vis Google can be found at:

https://policies.google.com/privacy?gl=DE&hl=de

Use of Google Tag Manager

1. Scope of Personal Data Processing

We use the Google Tag Manager (https://www.google.com/intl/de/tagmanager/) of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA and the representative in the Union Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as Google). With the Google Tag Manager, tags of the services of Google and third-party providers can be managed and bundled embedded on an online presence. Tags are small code elements on an online presence that are used, among other things, to measure visitor numbers and behavior, to record the impact of online advertising and social channels, to use remarketing and targeting groups and to test and optimize online presences. When a user visits the online presence, the current tag configuration is sent to the user's browser. It contains instructions on which tags should be triggered. Google Tag Manager triggers other tags, which in turn may collect data. You can find information on this in the passages on the use of the corresponding services in this data protection declaration. Google Tag Manager does not access this data. Data can be transmitted to Google servers in the USA. Google has submitted to the Privacy Shield Agreement between the European Union and the USA and has been certified. As a result, Google is committed to complying with the standards and regulations of European data protection law. You can find more information in the following linked entry: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

You can find more information on Google Tag Manager at https://www.google.com/intl/de/tagmanager/faq.html  and in Google's privacy policy: https://policies.google.com/privacy?hl=de

2. Purpose of Data Processing

The purpose of processing the personal data lies in the collected and clear administration as well as an efficient integration of the services of third-party providers.

3. Legal Basis for Processing Personal Data

The legal basis for the processing of users' personal data is in principle the user's consent in accordance with Art. 6 Para. 1 S.1 lit. a GDPR.

4. Duration of Storage

Your personal information will be stored for as long as is necessary to fulfill the purposes described in this data protection declaration or as required by law. Advertising data in server logs are anonymized by Google deleting parts of the IP address and cookie information after 9 or 18 months.

5. Objection and Removal Options

You have the right to withdraw your declaration of consent under data protection law at any time. Withdrawing your consent will affect the legality, which will not affect processing based on your consent prior to your withdrawal.

You can prevent the collection and processing of your personal data by Google by preventing the storage of third-party cookies on your computer, using the "Do Not Track" function of a supporting browser, deactivating the execution of script code in your browser or a script blocker such as Install NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the online presence (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install: https://tools.google.com/dlpage/gaoptout?hl=de With the following link you can deactivate the use of your personal data by Google: https://adssettings.google.de Further information on objection and Elimination options vis-à-vis Google can be found at: https://policies.google.com/privacy?gl=DE&hl=de

Use of Google Maps

1. Scope of Personal Data Processing

We use the online map service Google Maps from Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA and the representative in the Union Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter: Google) , We use the Google Maps plugin to visually display geographic data and to be able to embed it on our online presence. By using Google Maps on our online presence, information about the use of our online presence, your IP address and the addresses entered in the route planner function are transmitted to a Google server in the USA and stored there. Google has submitted to the Privacy Shield Agreement between the European Union and the USA and has been certified. As a result, Google is committed to complying with the standards and regulations of European data protection law. You can find more information in the following linked entry: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Further information on the processing of data by Google can be found here: https://policies.google.com/privacy?gl=DE&hl=de

2. Purpose of Data Processing

The use of the Google Maps plug-in serves to improve the user-friendliness and an attractive presentation of our online presence.

3. Legal Basis for Personal Data Processing

The legal basis for processing is Article 6 Paragraph 1 Clause 1 lit. f GDPR. Our legitimate interest lies in the purposes of data processing mentioned under 2.

4. Duration of Storage

Your personal information will be stored for as long as is necessary to fulfill the purposes described in this data protection declaration or as required by law.

5. Objection and Removal Options

You can prevent the collection and processing of your personal data by Google by preventing the storage of third-party cookies on your computer, using the "Do Not Track" function of a supporting browser, deactivating the execution of script code in your browser or a script blocker such as Install NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

With the following link you can deactivate the use of your personal data by Google: https://adssettings.google.de

You can find more information about objection and elimination options against Google at: https://policies.google.com/privacy?gl=DE&hl=de

Use of Google Webfonts

1. Scope of Personal Data Processing

We use Google Webfonts from Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA and the representative in the Union Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter: Google). The web fonts are transferred to the cache of the browser when the page is called up so that they can be used to visually improve the display of various information. If the browser does not support Google Webfonts or prevents access, the text is displayed in a standard font. When the page is called up, no cookies are stored by the visitor. Data that are transmitted in connection with the page view are sent to resource-specific domains such as https://fonts.googleapis.com or https://fonts.gstatic.com. This means that personal data can be stored and evaluated, especially the activity of the user (in particular which pages have been visited and which elements have been clicked) and device and browser information (in particular the IP address and the operating system).

Data can be transferred to Google servers in the USA. Google has submitted to the Privacy Shield Agreement between the European Union and the USA and has been certified. As a result, Google is committed to complying with the standards and regulations of European data protection law. You can find more information in the following linked entry:

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

The data is not associated with data that may be collected or used in connection with the parallel use of authenticated Google services such as Gmail.

Further information on the processing of data by Google can be found here:

https://policies.google.com/privacy?gl=DE&hl=de

2. Purpose of Data Processing

The use of Google web fonts serves to present our texts in an appealing way. If your browser does not support this function, a standard font from your computer will be used for display.

3. Legal Basis for Personal Data Processing

The legal basis for data processing is Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in the purposes of data processing mentioned under 2.

4. Duration of Storage

Your personal information will be stored for as long as is necessary to fulfill the purposes described in this data protection declaration or as required by law, e.g. for tax and accounting purposes.

5. Objection and Removal Options

You can prevent the collection and processing of your personal data by Google by preventing the storage of third-party cookies on your computer, using the "Do Not Track" function of a supporting browser, deactivating the execution of script code in your browser or a script blocker such as Install NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

With the following link you can deactivate the use of your personal data by Google:

https://adssettings.google.de

You can find more information about objection and elimination options against Google at:

https://policies.google.com/privacy?gl=DE&hl=de

1. Scope of Personal Data Processing

You can send us your application by email. We collect your email address and the data you provide in the email.

• Title
• First name
• Surname
• E-mail address

2. Purpose of Data Processing

The processing of the personal data from your application email serves us only to process your application.

3. Legal Basis for Data Processing

The legal basis for the processing of your data is the contract initiation, which takes place at the request of the data subject, Art. 6 Para. b Alt. 1 GDPR and § 26 para. 1 sentence 1 BDSG

4. Duration of Storage

After completing the application process, the data will be stored for up to six months. Your data will be deleted at the latest after the six months. In the event of a legal obligation, the data will be saved in accordance with the applicable regulations.

5. Objection and Removal Options

The applicant can object to the processing of personal data at any time. In such a case, the application can no longer be considered.

Email to mail(at)ibu-tec.de; baer(at)ibu-tec.de

In this case, all personal data saved in the course of electronic applications will be deleted.

Please note: The following information relates only to personal data of shareholders and their representatives that are processed outside of our website. The privacy statement that informs you about the processing of personal data on the website can be viewed at any time on this web page.

IBU-tec AG is responsible for the data processing. The contact details of the responsible person are:

IBU-tec advanced materials AG (IBU-tec AG)
Hainweg 9-11
99425 Weimar
Tel.: +49 3643 8649 0
E-Mail: mail@ibu-tec.de

IBU-tec AG processes the following categories of your personal data in the context of the management of investor relations: contact details (e.g. name or e-mail address), information about your shares (e.g. number of shares, type of shares) and information about general meetings (e.g. the attendance list of a general meeting, which in case of your participation also contains your name).

IBU-tec AG processes only those personal data that are required to fulfill the legal obligations under the German Stock Corporation Act and other laws. This data processing is permitted according to Art. 6 para. 1 lit. c General Data Protection Regulation (GDPR).

In principle, personal data concerning you will not be disclosed to third parties. Exceptionally, third parties may also gain access to these data, provided that they have been commissioned by [Name] AG to provide investor relations management services. These are accountants, consultants and general meeting agencies. The service providers receive personal data only to the extent necessary for the provision of the service.

The above-mentioned data will be deleted if they are no longer required to fulfill the legal obligations and no legal retention period applies. The attendance list of a general meeting will be deleted only after two years have elapsed since the end of the general meeting, certain powers of attorney only after three years.

You have the right to receive information about the personal data that has been stored about you free of charge upon request. In addition, you have the right to request the correction of incorrect data, the right to request restriction of the processing of excessively processed data and the right to request deletion of any unlawfully processed personal data or data stored too long (unless there is a legal retention period or any other reason according to Art. 17 para. 3 GDPR). In addition, you have the right to transfer all data provided to us in a common file format (right to "data portability").

To exercise your rights, please send an e-mail to datenschutz@ibu-tec.de. In addition, you also have the right to complain to a data protection supervisory authority. The data protection officer of IBU-tec AG can also be reached at datenschutz@ibu-tec.de.

Right of access and rectification

You have the right to access information about all of your personal data stored with us. You also have the right to rectify any incorrect data and to block or delete your personal data. Please contact our data protection officers at any time should you have any queries about data privacy or require information about the data stored about you and its use. Where we are required to store your personal data by law, we will not be able to delete this data.

This data protection declaration was created with the support of DataGuard.