Privacy Policy
Alumax-Dnipro TPK LLC (trademark ALUfas)
Last updated: July 6, 2026
Last updated: July 6, 2026
A. Scope of the Privacy Policy
Alumax-Dnipro TPK LLC — a manufacturer of aluminum composite panels (ACP) under the ALUfas trademark (the “Company,” “we,” or “our”) — places the highest priority on respecting the privacy of your data. This Privacy Policy (the “Policy”) describes how we collect and process information by which you can be directly or indirectly identified (“Personal Data”) when you interact with us through our digital resources (including our website), social media channels, or other products and services. It also describes how your Personal Data is used, transferred, and protected, what choices you have regarding your Personal Data, and how you can contact us.
For some of our products or services, the way in which we may use or collect your Personal Data may differ from what is set out in this Policy; for such cases we will provide specific policies.
We may amend this Policy from time to time. If we make any material changes to this Policy (for example, changes that affect the Personal Data we collect, or how and why we use it), we will notify you of the latest update.
Alumax-Dnipro TPK LLC — a manufacturer of aluminum composite panels (ACP) under the ALUfas trademark (the “Company,” “we,” or “our”) — places the highest priority on respecting the privacy of your data. This Privacy Policy (the “Policy”) describes how we collect and process information by which you can be directly or indirectly identified (“Personal Data”) when you interact with us through our digital resources (including our website), social media channels, or other products and services. It also describes how your Personal Data is used, transferred, and protected, what choices you have regarding your Personal Data, and how you can contact us.
For some of our products or services, the way in which we may use or collect your Personal Data may differ from what is set out in this Policy; for such cases we will provide specific policies.
We may amend this Policy from time to time. If we make any material changes to this Policy (for example, changes that affect the Personal Data we collect, or how and why we use it), we will notify you of the latest update.
B. Who is responsible for processing your personal data?
The company responsible for determining the purposes and means of processing your Personal Data (the “Data Controller”) will depend on how you interact with us, and is set out in this Policy and in the “Imprint / Contact” section.
For certain products or services, two or more companies may jointly determine how your Personal Data is used (“Joint Controllers”). Whenever we act as a Joint Controller, we do so on the basis of a specific arrangement that defines the allocation of each party's respective roles and responsibilities for complying with their obligations. Such joint-controllership arrangements govern, among other things:
• how, and which Joint Controller must provide information to data subjects about the underlying data processing;
• which Joint Controller acts as your primary point of contact regarding your rights (including the rights of access, rectification, erasure, restriction, objection, and portability);
• which Joint Controller is to be the designated contact point for data subjects and supervisory authorities;
• which Joint Controller is responsible for notifying supervisory authorities and data subjects of a personal data breach.
You may exercise your rights against each Controller, both individually and jointly. More detailed information about Joint Controllers is provided in the specific section for the relevant personal data processing activity.
The company responsible for determining the purposes and means of processing your Personal Data (the “Data Controller”) will depend on how you interact with us, and is set out in this Policy and in the “Imprint / Contact” section.
For certain products or services, two or more companies may jointly determine how your Personal Data is used (“Joint Controllers”). Whenever we act as a Joint Controller, we do so on the basis of a specific arrangement that defines the allocation of each party's respective roles and responsibilities for complying with their obligations. Such joint-controllership arrangements govern, among other things:
• how, and which Joint Controller must provide information to data subjects about the underlying data processing;
• which Joint Controller acts as your primary point of contact regarding your rights (including the rights of access, rectification, erasure, restriction, objection, and portability);
• which Joint Controller is to be the designated contact point for data subjects and supervisory authorities;
• which Joint Controller is responsible for notifying supervisory authorities and data subjects of a personal data breach.
You may exercise your rights against each Controller, both individually and jointly. More detailed information about Joint Controllers is provided in the specific section for the relevant personal data processing activity.
C. How do we collect your personal data?
There are several ways in which we may collect your personal data, depending on how you interact with us. Below are a few examples. However, for more detailed information about each category of personal data we collect, please see the section “How and why do we use your personal data?”.
• Personal data you provide to us directly: you may provide us with your personal data directly, for example, when you use our website, subscribe to our newsletters, submit an inquiry or order our products, or communicate with us through one of our social media platforms.
• Personal data we collect automatically: when you use our website, we may automatically collect certain types of information, such as information about your visit or interaction with the page.Personal data we obtain from other sources: we may also receive information about you from other sources. We work closely with third parties (including, for example, subcontractors in the field of technical and delivery services), business and partner organizations, and may receive information about you from them (including information that is publicly available).
There are several ways in which we may collect your personal data, depending on how you interact with us. Below are a few examples. However, for more detailed information about each category of personal data we collect, please see the section “How and why do we use your personal data?”.
• Personal data you provide to us directly: you may provide us with your personal data directly, for example, when you use our website, subscribe to our newsletters, submit an inquiry or order our products, or communicate with us through one of our social media platforms.
• Personal data we collect automatically: when you use our website, we may automatically collect certain types of information, such as information about your visit or interaction with the page.Personal data we obtain from other sources: we may also receive information about you from other sources. We work closely with third parties (including, for example, subcontractors in the field of technical and delivery services), business and partner organizations, and may receive information about you from them (including information that is publicly available).
D. How and why do we use your personal data?
Here you will find detailed information about the various ways in which we process Personal Data when you use our products or services, including which categories of Personal Data we collect and with which third parties (if any) we share Personal Data.
1. OUR WEBSITE
1.1. Providing the website (creation of log files)
Each time you visit our website, your browser automatically transmits certain information to us. Such information is stored by us in what are known as server log files.
Purpose of data processing
• to provide and deliver our website and ensure its functionality;
• to optimize our website (for example, to improve loading times);
• to ensure the security and stability of our IT systems.
Legal basis for data processing
The storage and processing of this Personal Data is based on our legitimate interests in ensuring the functionality and stability of our website.
Categories of personal data
The following categories of Personal Data may be collected: server log files.
Recipient(s)
Your personal data may be transferred to:
• IT service providers (e.g., hosting providers, cloud service providers);
• backup and disaster-recovery specialists.
Data Controller
The Data Controller for this processing is the company indicated in the imprint of the relevant website.
Storage duration
Since Personal Data is stored in log files, these files will be kept only for as long as necessary for this purpose. However, if storage is required for legitimate reasons beyond the original purpose, the data must be stored in a form that does not allow identification of the data subject.
1.2. Cookies and similar technologies
When you visit our website, we process Personal Data using cookies and similar technologies (e.g., tags, web beacons, local/session storage, and JavaScript) (together, “Cookies”). Cookies are small text files that are stored on your end device (e.g., PC, laptop, tablet, smartphone). These text files are downloaded by your browser the first time you visit our website. When you visit the website again from the same device or browser, the cookie and the information stored in it are either sent back to the website that created it (first-party cookie) or sent to another website to which it belongs (third-party cookie). As a result, the site “recognizes” that this is the same user and adjusts the content displayed on the site accordingly.
Our cookie settings automatically appear the first time you visit our website. You can set your personal preferences in the cookie settings. Except where the use of cookies is strictly necessary, for example for technical reasons, you may accept or decline the use of such cookies. You can change your cookie settings at any time using the cookie settings in the footer of the relevant website. Cookies that have already been stored can be deleted at any time. If cookies are deactivated for our website, you may not be able to fully use all the website's features.
We use cookies for the following purposes:
• to provide the essential functions of the website and to deliver any services you request, for example, to save cookie settings or to provide secure areas for registered users (more in the “Strictly necessary cookies” section);
• to analyze the use of the website (“web statistics”), so that we can continuously improve our digital resources and better tailor them to the needs and interests of our users (see the “Performance cookies” section);
• to display our offers, for example, to show personalized advertising on the end device used (see the “Marketing cookies” section);
• to professionally present the content of our website, for example, by integrating map materials or video services (see the “Embedding of third-party services” section).
1.2.1. Strictly necessary cookies
Purpose of data processing
• administering our website for internal operations, including troubleshooting and understanding any errors you may encounter on our website;
• providing essential functions for our website. Without these cookies we cannot provide core services such as, for example, inquiry forms or language selection;
• ensuring the security and protection of our website, and assisting in managing and administering our IT systems;
• improving the usability and content of our website to ensure that content is presented to you and your devices in the most effective way.
Legal basis for data processing
The processing of Personal Data is based on our legitimate interests in: providing you with our products or services, including a fully functional website; ensuring that our website and IT systems are secure and used properly.
Categories of personal data and storage duration
Cookie information is processed. You can find additional information about which strictly necessary cookies we use, as well as how long we retain them, in the cookie settings on the relevant website.
Data recipient(s)
Your personal data will be transferred to IT service providers (e.g., hosting providers, cloud service providers, consent-management service providers, login service providers).
Data Controller
The Data Controller for this personal data processing is the company indicated in the imprint of the relevant website.
1.2.2. Performance cookies
Purpose of data processing
Subject to your consent, we will process your information to measure and improve the performance of our website (for example, by counting visits and traffic sources to help us understand which pages are most and least popular, and to see how visitors move through the website).If you do not consent to such processing, this will not have a direct effect on the functioning of the website, but without the information obtained through performance cookies, it will be more difficult for us to continue developing our website.
Legal basis for data processing
The collection and processing of this personal data is based on your consent, where applicable, in conjunction with the provisions of e-privacy legislation. You may withdraw your consent at any time and without giving reasons. However, withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.
Categories of personal data
Cookie information and customer-interaction information is processed, and geolocation information may also be processed.
Data recipient(s)
Your personal data will be transferred to service providers (e.g., providers of tools and hosting).
Data Controller
The Data Controller for this processing is the company indicated in the imprint of the relevant website.
Storage duration
Cookie storage ends thirty (30) minutes after the last request is processed, but no later than 3 hours after the initial setup. Your browser's “sessionStorage” is stored temporarily and disappears when you close the browser tab; “localStorage” is persistent and has no expiration date. You can delete them by deleting your browser history or local storage.
1.2.3. Marketing cookies
Purpose of data processing
Subject to your consent, these cookies may be set through our site by our advertising partners. They may be used to show you relevant advertising, possibly also on other sites.
Legal basis for data processing
The collection and processing of this personal data is based on your consent, where applicable, in conjunction with the provisions of e-privacy legislation. You may withdraw your consent at any time and without giving reasons. However, withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.
Categories of personal data and storage duration
Cookie information and customer-interaction information is processed. You can find additional information about which marketing cookies we use, as well as how long we retain them, in the cookie settings on the relevant website.
Data recipient(s)
Your personal data will be transferred to service providers (e.g., providers of tools and hosting).
Data Controller
The Data Controller for this processing is the company indicated in the imprint of the relevant website.
1.2.4. Embedding of third-party services
On our website, we integrate interactive third-party content, applications, or plugins (together, “Content”) to provide you with an engaging user experience. This section provides you with information obtained as a result of using such embedded third-party content.
a. General information on the embedding of third-party services
Purpose of data processing
On some pages of our website, we integrate Content to provide an engaging user experience. Examples of such content include interactive maps, video players, social media plugins, or interactive features. Subject to your consent, third parties that provide the Content may collect Personal Data about your use of such Content and process information from you in accordance with their own privacy policies. We therefore recommend that you also review the privacy notices of the relevant third-party content provider.
We process Personal Data in connection with the use of embedded third-party elements for the following purposes, including to:
• improve the usability and content of our website to ensure that content is presented in the most effective way for you and your devices;
• ensure a consistent experience across different devices and platforms.
Third-party providers of this Content may collect the aforementioned Personal Data for advertising, market research, and/or the design of their website based on needs. You have the right to object to the creation of these user profiles, although you should contact the relevant third-party Content provider to exercise this right.
Legal basis for data processing
The processing of this Personal Data is based on your consent. You may withdraw your consent at any time and without giving reasons. However, withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.
Categories of personal data
Personal data collected in connection with the use of third-party embedded elements may include: third-party embedding service information; cookie information; customer-interaction information; geolocation information.
Data recipient(s)
If you consent to the use of our third-party embedded services, your Personal Data may be transferred to the third party providing the embedding. For an overview of the third-party embeds used, please review the cookie settings of the relevant website.
Data Controller
Depending on the specific third-party embedding, the company indicated in the imprint acts as a Joint Controller together with the relevant third-party content provider, or as an independent Data Controller. For further processing activities carried out by the third-party content provider, that company acts as an independent Data Controller; for more information, please refer to the privacy policy of the relevant company.
Storage duration
Regarding the storage duration of any third-party cookies, please refer to the website's cookie banner and to the privacy policy of the relevant third-party content provider.
b. Embedding of specific third-party services
Instagram
On our website, we integrate interactive Instagram features, such as content, including photos and videos, as well as plugins, to provide an engaging user experience.
Legal basis for data processing
Processing is carried out on the basis of your consent. You may withdraw your consent at any time and without giving reasons.
Categories of personal data
Depending on whether you have an Instagram account or are logged in, the following may be collected: third-party embedding service information; Instagram account data; cookie information.
Data recipient(s)
Instagram is provided within the European Economic Area by Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, D04 X2K5, Ireland; data may be transferred to Meta Platforms Inc., 1601 Willow Rd, Menlo Park, CA 94025, USA. International data transfers are based on adequacy decisions or on alternative transfer mechanisms.
Data Controller
If your Personal Data is collected and transmitted through our embedded Instagram components, the company indicated in the imprint and Meta Platforms Ireland Ltd. are Joint Controllers. For more information, please refer to the Instagram Privacy Policy.
Storage duration
The Company does not store any personal data collected through Instagram's embedded systems. For the storage duration applied by Instagram, please refer to Instagram's Privacy Policy.
Google reCAPTCHAPurpose of data processing
On our website, we integrate Google reCAPTCHA to ensure security and protection and to avoid unwanted bots or spam programs. By using reCAPTCHA, certain data is transmitted to Google to determine whether you are indeed human, thereby ensuring the security of our website.
Legal basis for data processing
The processing of this Personal Data is based on your consent. If consent has not been given, the Google reCAPTCHA content is not loaded. You may withdraw your consent at any time.
Categories of personal data
Depending on whether you are logged in to your Google account, the following may be collected: third-party embedding service information; cookie information.
Data recipient(s)
If you consent to the use of Google reCAPTCHA, your personal data may be transferred to Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, as well as Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. International data transfers are based on adequacy decisions or on alternative transfer mechanisms.
Data Controller
The Data Controller is the company indicated in the imprint. If your Personal Data is transmitted via the embedded Google reCAPTCHA API, Google Ireland Ltd. acts as an independent controller for the processing carried out by Google.
Storage duration
For the storage duration applied by third parties, please refer to Google's Privacy Policy.
YouTube
On our website, we integrate YouTube videos to provide an engaging user experience. When you visit a page of our website containing an embedded YouTube video, your browser automatically connects to YouTube/Google servers, thereby transmitting certain data (depending on your settings).
Legal basis for data processing
The processing of this Personal Data is carried out on the basis of your consent. You may withdraw your consent at any time.
Categories of personal data
Depending on whether you are logged in to your YouTube account, the following may be collected: third-party embedding service information; YouTube account data.
Data recipient(s)
If you consent to the use of YouTube, your personal data may be transferred to Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, as well as Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. International data transfers are based on adequacy decisions or on alternative transfer mechanisms.
Data Controller
The Data Controller is the company indicated in the imprint. If your Personal Data is transmitted via embedded YouTube content, Google Ireland Ltd. acts as an independent Data Controller for the processing carried out by Google.
Storage duration
For the storage duration, please refer to Google's YouTube Privacy Policy.1.3. Processing of customer inquiries and requests1.3.1. Chatbots
Purpose of data processing
We may offer a chatbot as a virtual assistance tool that helps customers send us inquiries and/or feedback regarding our products and services. We will process your Personal Data to provide customer service and resolve any issues or inquiries.
Legal basis for data processing
Data processing in connection with our chatbot tool is based on our legitimate interests in: providing you with our products or services, ensuring the functionality of the chatbot, improving the functionality of our website, and better understanding how you use our products and services.
Categories of personal data
The following may be processed: identification information; contact information; communication information; customer-interaction information.
Data recipient(s)
Your Personal Data may be transferred to IT service providers (e.g., hosting providers, cloud service providers, customer relationship management service providers).
Data Controller
The Data Controller for this processing is the company indicated in the imprint of the relevant website.
Storage duration
We retain Personal Data only for as long as necessary to achieve the purposes of the data processing.
1.3.2. Contacting us
Purpose of data processing
If you wish to contact us, for example to obtain information, to exercise your privacy rights, or to raise a concern, we offer you various means of contact: through our website's contact form, email, regular mail, or telephone. Your inquiry will be forwarded to the responsible department.
We process your Personal Data to:
• ensure effective customer service and manage any issues or requests on your behalf;
• provide and improve our products and services, and for documentation purposes where necessary.
Legal basis for data processing
If you contact us in connection with entering into a contract, in a pre-contractual context, or in connection with the direct performance of a contract, Personal Data will be processed for the purpose of concluding or performing the contract. Data processing in connection with the exercise of your data-subject rights is carried out to comply with a legal obligation. Data processing in connection with a request for information or other inquiries is based on our legitimate interests.
Categories of personal data
Contacting us is always voluntary. Depending on the method of contact, the following may be processed: identification information; contact information; communication information; contract, terms, and related document information; order information; customer-interaction information.
Data recipient(s)
Your Personal Data may be transferred to: IT service providers (e.g., hosting providers, cloud service providers, customer support services); social networks; delivery service providers; business partners.
Data Controller
The Data Controller is the Company you contacted.
Storage duration
We retain your Personal Data only for as long as necessary to achieve the purposes of the data processing and in accordance with applicable tax and accounting retention obligations.
1.4. Order processing and contract performance
Purpose of data processing
When you order our products (aluminum composite panels) or services, we process your Personal Data to:
• conclude and perform the contract, process your order, and organize the production, shipment, and delivery of the products;
• provide customer service and resolve any order-related issues (e.g., warranty claims, complaints, returns);
• fulfill accounting, tax, and other legal obligations.
Legal basis for data processing
Data processing for the purpose of concluding and performing a contract (including pre-contractual measures) is carried out on the basis of contract performance. Data processing to fulfill accounting, tax, and other statutory requirements is carried out to comply with a legal obligation.
Categories of personal data
The following may be processed: identification information; contact information; contract, terms, and related document information; user account information; order information.
Data recipient(s)
In connection with your order, your Personal Data may be transferred to: IT and hosting service providers; payment service providers (banks); delivery/logistics service providers.Please note that the relevant payment service providers and logistics partners act as independent Data Controllers for any Personal Data provided and processed as part of the payment or delivery process. We therefore recommend that you review their privacy policies.
Data Controller
The Data Controller is the company indicated in the imprint with which you have entered into a contract.
Storage duration
Personal data relating to individual orders and transactions is retained in accordance with applicable tax and accounting retention obligations.
1.5. Résumés and recruitment
If you send us your résumé or apply for a vacancy, we process your Personal Data solely for the purpose of considering your application and conducting the recruitment process. We will provide you with detailed information on how we process your personal data in connection with hiring directly during the application process. For any questions regarding the processing of candidate data, you may contact us at hr@alufas.com.
2. OUR SOCIAL MEDIA PROFILES
2.1. General information
In addition to our website, we maintain profiles on various social media platforms to better introduce you to our products and services.
Purpose of data processing
To the extent that we process your Personal Data through our social media profiles, we process it to:
• communicate with you and inform you about our products and services that may be of interest to you;
• improve the usability and content of our profiles;
• manage our relationship with you and contact you regarding our products and services;
• understand the effectiveness of the advertising we provide (where required by law — subject to your consent).
Additional information about each relevant social media platform, including retention periods and whether the Company acts as a (joint) Data Controller with a third party, is described in detail below.
2.2. Our social media profiles
Purpose of data processing
We maintain social media profiles on Instagram, LinkedIn, and YouTube for the purposes listed above, in order to interact with you, inform you about our activities, and improve your experience across different devices and platforms.If you want to know exactly how our social media profile provider uses the data it collects, how long it retains that data, and whether the data is shared with third parties, please refer to the privacy policy of the relevant provider.
Legal basis for data processing
Our data processing is based on our legitimate interest in: providing you with optimized, customer-focused offers; better understanding how you use our products and services; communicating effectively and conducting social media analytics; and staying up to date with current market practice so as to offer a service that meets our customers' expectations.
Categories of personal data
The following may be processed: customer-interaction information and additional information within our profiles (page activity via page statistics). The social media provider may process Personal Data about your account, your IP address, and your end devices. Personal data you enter on our profile page (comments, videos, images, likes, public posts, etc.) is published by the social media provider and is not used by us for other purposes.
Use of Insights, Cookies, and other social media tools
We may use “Facebook, Instagram, LinkedIn Insights” and “YouTube Analytics” features, which show statistical information (e.g., gender and age distribution) about the use of our profiles. We do not control how the provider generates and presents these Insights/Analytics, but we receive the data in aggregated form and use it to improve our marketing activities. We cannot draw any conclusions about individual people from this statistical data.
The social media provider may use cookies and storage technologies. If you are logged in to your social media profiles as a user, a cookie containing your social media provider's identifier may be placed on your device. If you wish to avoid this, you should log out, delete the cookies on your device, and close and restart your browser.
Data recipient(s)
Your personal data may be processed by:
• Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, D04 X2K5, Ireland (when using Facebook and/or Instagram); data may be transferred to Meta Platforms Inc., 1601 Willow Rd, Menlo Park, CA 94025, USA;
• LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; data may be transferred to LinkedIn Corp., 1000 W Maude Ave, Sunnyvale, CA 94085, USA;
• Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (when using YouTube); data may be transferred to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.International data transfers (see the “International data transfer” section) are based on adequacy decisions or on alternative transfer mechanisms.
Data Controller
When you visit our Instagram page, Personal Data is processed by us as well as by Meta Platforms Ireland Ltd. — as Joint Controllers. When you visit our LinkedIn page, personal data is processed by us and LinkedIn — as joint controllers. When you visit our YouTube page, personal data is processed by us and YouTube independently of one another. You may contact us using the contact details provided in this Policy, and, where necessary, we will forward your request to the relevant provider.
Storage duration
For the storage duration applied by third parties, please refer to their respective privacy policies. We retain Personal Data only for as long as necessary to achieve the purposes of the data processing.
3. NEWSLETTERS AND OTHER PROMOTIONAL COMMUNICATIONS
Purpose of data processing
We offer various promotional communications containing news, offers, and other information about our products and services. You may subscribe to our newsletter free of charge at any time.For the distribution of newsletters, we apply — where required by law — a so-called double opt-in procedure. This means that we will only send you the newsletter if you have previously confirmed your consent by clicking a link in an email. This procedure also serves to verify that the email address submitted is indeed yours.
We process your Personal Data to:
• confirm registration and verify that the email address provided is yours during the double opt-in process;
• communicate with you and inform you about our products or services and provide recommendations that may be of interest to you;
• manage our relationship with you;
• track the effectiveness of our newsletters, including analyzing open rates, click-through rates, and unsubscribe rates using aggregated and pseudonymized data.
If you no longer wish to receive our newsletter, you can unsubscribe at any time by clicking the unsubscribe link contained in the newsletter, or by contacting us using the contact details described in this Policy.
Legal basis for data processing
Data processing is carried out on the basis of your consent. This consent may be withdrawn at any time without giving reasons. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Analysis of the effectiveness of our newsletter is based on our legitimate interest in maintaining an up-to-date mailing list.
Categories of personal data
If you subscribe to one of our newsletters, the following may be processed: identification information; contact information; newsletter and promotional communication information.
Data recipient(s)
Your personal data may be transferred to: IT service providers (cloud hosting providers); newsletter tool service providers.
Data Controller
The Data Controller is the company indicated in the imprint of the relevant website through which you subscribe to the newsletter.
Storage duration
We retain Personal Data only for as long as necessary to achieve the purposes of the data processing, for example, until you withdraw your consent or until your subscription is cancelled due to inactivity.
Here you will find detailed information about the various ways in which we process Personal Data when you use our products or services, including which categories of Personal Data we collect and with which third parties (if any) we share Personal Data.
1. OUR WEBSITE
1.1. Providing the website (creation of log files)
Each time you visit our website, your browser automatically transmits certain information to us. Such information is stored by us in what are known as server log files.
Purpose of data processing
• to provide and deliver our website and ensure its functionality;
• to optimize our website (for example, to improve loading times);
• to ensure the security and stability of our IT systems.
Legal basis for data processing
The storage and processing of this Personal Data is based on our legitimate interests in ensuring the functionality and stability of our website.
Categories of personal data
The following categories of Personal Data may be collected: server log files.
Recipient(s)
Your personal data may be transferred to:
• IT service providers (e.g., hosting providers, cloud service providers);
• backup and disaster-recovery specialists.
Data Controller
The Data Controller for this processing is the company indicated in the imprint of the relevant website.
Storage duration
Since Personal Data is stored in log files, these files will be kept only for as long as necessary for this purpose. However, if storage is required for legitimate reasons beyond the original purpose, the data must be stored in a form that does not allow identification of the data subject.
1.2. Cookies and similar technologies
When you visit our website, we process Personal Data using cookies and similar technologies (e.g., tags, web beacons, local/session storage, and JavaScript) (together, “Cookies”). Cookies are small text files that are stored on your end device (e.g., PC, laptop, tablet, smartphone). These text files are downloaded by your browser the first time you visit our website. When you visit the website again from the same device or browser, the cookie and the information stored in it are either sent back to the website that created it (first-party cookie) or sent to another website to which it belongs (third-party cookie). As a result, the site “recognizes” that this is the same user and adjusts the content displayed on the site accordingly.
Our cookie settings automatically appear the first time you visit our website. You can set your personal preferences in the cookie settings. Except where the use of cookies is strictly necessary, for example for technical reasons, you may accept or decline the use of such cookies. You can change your cookie settings at any time using the cookie settings in the footer of the relevant website. Cookies that have already been stored can be deleted at any time. If cookies are deactivated for our website, you may not be able to fully use all the website's features.
We use cookies for the following purposes:
• to provide the essential functions of the website and to deliver any services you request, for example, to save cookie settings or to provide secure areas for registered users (more in the “Strictly necessary cookies” section);
• to analyze the use of the website (“web statistics”), so that we can continuously improve our digital resources and better tailor them to the needs and interests of our users (see the “Performance cookies” section);
• to display our offers, for example, to show personalized advertising on the end device used (see the “Marketing cookies” section);
• to professionally present the content of our website, for example, by integrating map materials or video services (see the “Embedding of third-party services” section).
1.2.1. Strictly necessary cookies
Purpose of data processing
• administering our website for internal operations, including troubleshooting and understanding any errors you may encounter on our website;
• providing essential functions for our website. Without these cookies we cannot provide core services such as, for example, inquiry forms or language selection;
• ensuring the security and protection of our website, and assisting in managing and administering our IT systems;
• improving the usability and content of our website to ensure that content is presented to you and your devices in the most effective way.
Legal basis for data processing
The processing of Personal Data is based on our legitimate interests in: providing you with our products or services, including a fully functional website; ensuring that our website and IT systems are secure and used properly.
Categories of personal data and storage duration
Cookie information is processed. You can find additional information about which strictly necessary cookies we use, as well as how long we retain them, in the cookie settings on the relevant website.
Data recipient(s)
Your personal data will be transferred to IT service providers (e.g., hosting providers, cloud service providers, consent-management service providers, login service providers).
Data Controller
The Data Controller for this personal data processing is the company indicated in the imprint of the relevant website.
1.2.2. Performance cookies
Purpose of data processing
Subject to your consent, we will process your information to measure and improve the performance of our website (for example, by counting visits and traffic sources to help us understand which pages are most and least popular, and to see how visitors move through the website).If you do not consent to such processing, this will not have a direct effect on the functioning of the website, but without the information obtained through performance cookies, it will be more difficult for us to continue developing our website.
Legal basis for data processing
The collection and processing of this personal data is based on your consent, where applicable, in conjunction with the provisions of e-privacy legislation. You may withdraw your consent at any time and without giving reasons. However, withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.
Categories of personal data
Cookie information and customer-interaction information is processed, and geolocation information may also be processed.
Data recipient(s)
Your personal data will be transferred to service providers (e.g., providers of tools and hosting).
Data Controller
The Data Controller for this processing is the company indicated in the imprint of the relevant website.
Storage duration
Cookie storage ends thirty (30) minutes after the last request is processed, but no later than 3 hours after the initial setup. Your browser's “sessionStorage” is stored temporarily and disappears when you close the browser tab; “localStorage” is persistent and has no expiration date. You can delete them by deleting your browser history or local storage.
1.2.3. Marketing cookies
Purpose of data processing
Subject to your consent, these cookies may be set through our site by our advertising partners. They may be used to show you relevant advertising, possibly also on other sites.
Legal basis for data processing
The collection and processing of this personal data is based on your consent, where applicable, in conjunction with the provisions of e-privacy legislation. You may withdraw your consent at any time and without giving reasons. However, withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.
Categories of personal data and storage duration
Cookie information and customer-interaction information is processed. You can find additional information about which marketing cookies we use, as well as how long we retain them, in the cookie settings on the relevant website.
Data recipient(s)
Your personal data will be transferred to service providers (e.g., providers of tools and hosting).
Data Controller
The Data Controller for this processing is the company indicated in the imprint of the relevant website.
1.2.4. Embedding of third-party services
On our website, we integrate interactive third-party content, applications, or plugins (together, “Content”) to provide you with an engaging user experience. This section provides you with information obtained as a result of using such embedded third-party content.
a. General information on the embedding of third-party services
Purpose of data processing
On some pages of our website, we integrate Content to provide an engaging user experience. Examples of such content include interactive maps, video players, social media plugins, or interactive features. Subject to your consent, third parties that provide the Content may collect Personal Data about your use of such Content and process information from you in accordance with their own privacy policies. We therefore recommend that you also review the privacy notices of the relevant third-party content provider.
We process Personal Data in connection with the use of embedded third-party elements for the following purposes, including to:
• improve the usability and content of our website to ensure that content is presented in the most effective way for you and your devices;
• ensure a consistent experience across different devices and platforms.
Third-party providers of this Content may collect the aforementioned Personal Data for advertising, market research, and/or the design of their website based on needs. You have the right to object to the creation of these user profiles, although you should contact the relevant third-party Content provider to exercise this right.
Legal basis for data processing
The processing of this Personal Data is based on your consent. You may withdraw your consent at any time and without giving reasons. However, withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.
Categories of personal data
Personal data collected in connection with the use of third-party embedded elements may include: third-party embedding service information; cookie information; customer-interaction information; geolocation information.
Data recipient(s)
If you consent to the use of our third-party embedded services, your Personal Data may be transferred to the third party providing the embedding. For an overview of the third-party embeds used, please review the cookie settings of the relevant website.
Data Controller
Depending on the specific third-party embedding, the company indicated in the imprint acts as a Joint Controller together with the relevant third-party content provider, or as an independent Data Controller. For further processing activities carried out by the third-party content provider, that company acts as an independent Data Controller; for more information, please refer to the privacy policy of the relevant company.
Storage duration
Regarding the storage duration of any third-party cookies, please refer to the website's cookie banner and to the privacy policy of the relevant third-party content provider.
b. Embedding of specific third-party services
On our website, we integrate interactive Instagram features, such as content, including photos and videos, as well as plugins, to provide an engaging user experience.
Legal basis for data processing
Processing is carried out on the basis of your consent. You may withdraw your consent at any time and without giving reasons.
Categories of personal data
Depending on whether you have an Instagram account or are logged in, the following may be collected: third-party embedding service information; Instagram account data; cookie information.
Data recipient(s)
Instagram is provided within the European Economic Area by Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, D04 X2K5, Ireland; data may be transferred to Meta Platforms Inc., 1601 Willow Rd, Menlo Park, CA 94025, USA. International data transfers are based on adequacy decisions or on alternative transfer mechanisms.
Data Controller
If your Personal Data is collected and transmitted through our embedded Instagram components, the company indicated in the imprint and Meta Platforms Ireland Ltd. are Joint Controllers. For more information, please refer to the Instagram Privacy Policy.
Storage duration
The Company does not store any personal data collected through Instagram's embedded systems. For the storage duration applied by Instagram, please refer to Instagram's Privacy Policy.
Google reCAPTCHAPurpose of data processing
On our website, we integrate Google reCAPTCHA to ensure security and protection and to avoid unwanted bots or spam programs. By using reCAPTCHA, certain data is transmitted to Google to determine whether you are indeed human, thereby ensuring the security of our website.
Legal basis for data processing
The processing of this Personal Data is based on your consent. If consent has not been given, the Google reCAPTCHA content is not loaded. You may withdraw your consent at any time.
Categories of personal data
Depending on whether you are logged in to your Google account, the following may be collected: third-party embedding service information; cookie information.
Data recipient(s)
If you consent to the use of Google reCAPTCHA, your personal data may be transferred to Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, as well as Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. International data transfers are based on adequacy decisions or on alternative transfer mechanisms.
Data Controller
The Data Controller is the company indicated in the imprint. If your Personal Data is transmitted via the embedded Google reCAPTCHA API, Google Ireland Ltd. acts as an independent controller for the processing carried out by Google.
Storage duration
For the storage duration applied by third parties, please refer to Google's Privacy Policy.
YouTube
On our website, we integrate YouTube videos to provide an engaging user experience. When you visit a page of our website containing an embedded YouTube video, your browser automatically connects to YouTube/Google servers, thereby transmitting certain data (depending on your settings).
Legal basis for data processing
The processing of this Personal Data is carried out on the basis of your consent. You may withdraw your consent at any time.
Categories of personal data
Depending on whether you are logged in to your YouTube account, the following may be collected: third-party embedding service information; YouTube account data.
Data recipient(s)
If you consent to the use of YouTube, your personal data may be transferred to Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, as well as Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. International data transfers are based on adequacy decisions or on alternative transfer mechanisms.
Data Controller
The Data Controller is the company indicated in the imprint. If your Personal Data is transmitted via embedded YouTube content, Google Ireland Ltd. acts as an independent Data Controller for the processing carried out by Google.
Storage duration
For the storage duration, please refer to Google's YouTube Privacy Policy.1.3. Processing of customer inquiries and requests1.3.1. Chatbots
Purpose of data processing
We may offer a chatbot as a virtual assistance tool that helps customers send us inquiries and/or feedback regarding our products and services. We will process your Personal Data to provide customer service and resolve any issues or inquiries.
Legal basis for data processing
Data processing in connection with our chatbot tool is based on our legitimate interests in: providing you with our products or services, ensuring the functionality of the chatbot, improving the functionality of our website, and better understanding how you use our products and services.
Categories of personal data
The following may be processed: identification information; contact information; communication information; customer-interaction information.
Data recipient(s)
Your Personal Data may be transferred to IT service providers (e.g., hosting providers, cloud service providers, customer relationship management service providers).
Data Controller
The Data Controller for this processing is the company indicated in the imprint of the relevant website.
Storage duration
We retain Personal Data only for as long as necessary to achieve the purposes of the data processing.
1.3.2. Contacting us
Purpose of data processing
If you wish to contact us, for example to obtain information, to exercise your privacy rights, or to raise a concern, we offer you various means of contact: through our website's contact form, email, regular mail, or telephone. Your inquiry will be forwarded to the responsible department.
We process your Personal Data to:
• ensure effective customer service and manage any issues or requests on your behalf;
• provide and improve our products and services, and for documentation purposes where necessary.
Legal basis for data processing
If you contact us in connection with entering into a contract, in a pre-contractual context, or in connection with the direct performance of a contract, Personal Data will be processed for the purpose of concluding or performing the contract. Data processing in connection with the exercise of your data-subject rights is carried out to comply with a legal obligation. Data processing in connection with a request for information or other inquiries is based on our legitimate interests.
Categories of personal data
Contacting us is always voluntary. Depending on the method of contact, the following may be processed: identification information; contact information; communication information; contract, terms, and related document information; order information; customer-interaction information.
Data recipient(s)
Your Personal Data may be transferred to: IT service providers (e.g., hosting providers, cloud service providers, customer support services); social networks; delivery service providers; business partners.
Data Controller
The Data Controller is the Company you contacted.
Storage duration
We retain your Personal Data only for as long as necessary to achieve the purposes of the data processing and in accordance with applicable tax and accounting retention obligations.
1.4. Order processing and contract performance
Purpose of data processing
When you order our products (aluminum composite panels) or services, we process your Personal Data to:
• conclude and perform the contract, process your order, and organize the production, shipment, and delivery of the products;
• provide customer service and resolve any order-related issues (e.g., warranty claims, complaints, returns);
• fulfill accounting, tax, and other legal obligations.
Legal basis for data processing
Data processing for the purpose of concluding and performing a contract (including pre-contractual measures) is carried out on the basis of contract performance. Data processing to fulfill accounting, tax, and other statutory requirements is carried out to comply with a legal obligation.
Categories of personal data
The following may be processed: identification information; contact information; contract, terms, and related document information; user account information; order information.
Data recipient(s)
In connection with your order, your Personal Data may be transferred to: IT and hosting service providers; payment service providers (banks); delivery/logistics service providers.Please note that the relevant payment service providers and logistics partners act as independent Data Controllers for any Personal Data provided and processed as part of the payment or delivery process. We therefore recommend that you review their privacy policies.
Data Controller
The Data Controller is the company indicated in the imprint with which you have entered into a contract.
Storage duration
Personal data relating to individual orders and transactions is retained in accordance with applicable tax and accounting retention obligations.
1.5. Résumés and recruitment
If you send us your résumé or apply for a vacancy, we process your Personal Data solely for the purpose of considering your application and conducting the recruitment process. We will provide you with detailed information on how we process your personal data in connection with hiring directly during the application process. For any questions regarding the processing of candidate data, you may contact us at hr@alufas.com.
2. OUR SOCIAL MEDIA PROFILES
2.1. General information
In addition to our website, we maintain profiles on various social media platforms to better introduce you to our products and services.
Purpose of data processing
To the extent that we process your Personal Data through our social media profiles, we process it to:
• communicate with you and inform you about our products and services that may be of interest to you;
• improve the usability and content of our profiles;
• manage our relationship with you and contact you regarding our products and services;
• understand the effectiveness of the advertising we provide (where required by law — subject to your consent).
Additional information about each relevant social media platform, including retention periods and whether the Company acts as a (joint) Data Controller with a third party, is described in detail below.
2.2. Our social media profiles
Purpose of data processing
We maintain social media profiles on Instagram, LinkedIn, and YouTube for the purposes listed above, in order to interact with you, inform you about our activities, and improve your experience across different devices and platforms.If you want to know exactly how our social media profile provider uses the data it collects, how long it retains that data, and whether the data is shared with third parties, please refer to the privacy policy of the relevant provider.
Legal basis for data processing
Our data processing is based on our legitimate interest in: providing you with optimized, customer-focused offers; better understanding how you use our products and services; communicating effectively and conducting social media analytics; and staying up to date with current market practice so as to offer a service that meets our customers' expectations.
Categories of personal data
The following may be processed: customer-interaction information and additional information within our profiles (page activity via page statistics). The social media provider may process Personal Data about your account, your IP address, and your end devices. Personal data you enter on our profile page (comments, videos, images, likes, public posts, etc.) is published by the social media provider and is not used by us for other purposes.
Use of Insights, Cookies, and other social media tools
We may use “Facebook, Instagram, LinkedIn Insights” and “YouTube Analytics” features, which show statistical information (e.g., gender and age distribution) about the use of our profiles. We do not control how the provider generates and presents these Insights/Analytics, but we receive the data in aggregated form and use it to improve our marketing activities. We cannot draw any conclusions about individual people from this statistical data.
The social media provider may use cookies and storage technologies. If you are logged in to your social media profiles as a user, a cookie containing your social media provider's identifier may be placed on your device. If you wish to avoid this, you should log out, delete the cookies on your device, and close and restart your browser.
Data recipient(s)
Your personal data may be processed by:
• Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, D04 X2K5, Ireland (when using Facebook and/or Instagram); data may be transferred to Meta Platforms Inc., 1601 Willow Rd, Menlo Park, CA 94025, USA;
• LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; data may be transferred to LinkedIn Corp., 1000 W Maude Ave, Sunnyvale, CA 94085, USA;
• Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (when using YouTube); data may be transferred to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.International data transfers (see the “International data transfer” section) are based on adequacy decisions or on alternative transfer mechanisms.
Data Controller
When you visit our Instagram page, Personal Data is processed by us as well as by Meta Platforms Ireland Ltd. — as Joint Controllers. When you visit our LinkedIn page, personal data is processed by us and LinkedIn — as joint controllers. When you visit our YouTube page, personal data is processed by us and YouTube independently of one another. You may contact us using the contact details provided in this Policy, and, where necessary, we will forward your request to the relevant provider.
Storage duration
For the storage duration applied by third parties, please refer to their respective privacy policies. We retain Personal Data only for as long as necessary to achieve the purposes of the data processing.
3. NEWSLETTERS AND OTHER PROMOTIONAL COMMUNICATIONS
Purpose of data processing
We offer various promotional communications containing news, offers, and other information about our products and services. You may subscribe to our newsletter free of charge at any time.For the distribution of newsletters, we apply — where required by law — a so-called double opt-in procedure. This means that we will only send you the newsletter if you have previously confirmed your consent by clicking a link in an email. This procedure also serves to verify that the email address submitted is indeed yours.
We process your Personal Data to:
• confirm registration and verify that the email address provided is yours during the double opt-in process;
• communicate with you and inform you about our products or services and provide recommendations that may be of interest to you;
• manage our relationship with you;
• track the effectiveness of our newsletters, including analyzing open rates, click-through rates, and unsubscribe rates using aggregated and pseudonymized data.
If you no longer wish to receive our newsletter, you can unsubscribe at any time by clicking the unsubscribe link contained in the newsletter, or by contacting us using the contact details described in this Policy.
Legal basis for data processing
Data processing is carried out on the basis of your consent. This consent may be withdrawn at any time without giving reasons. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Analysis of the effectiveness of our newsletter is based on our legitimate interest in maintaining an up-to-date mailing list.
Categories of personal data
If you subscribe to one of our newsletters, the following may be processed: identification information; contact information; newsletter and promotional communication information.
Data recipient(s)
Your personal data may be transferred to: IT service providers (cloud hosting providers); newsletter tool service providers.
Data Controller
The Data Controller is the company indicated in the imprint of the relevant website through which you subscribe to the newsletter.
Storage duration
We retain Personal Data only for as long as necessary to achieve the purposes of the data processing, for example, until you withdraw your consent or until your subscription is cancelled due to inactivity.
E. Who do we share your personal data with?
You can find detailed information about who we may share your Personal Data with under the relevant processing activity indicated above. Whenever we transfer your Personal Data to processors (e.g., a vendor or service provider), they must comply with our information-handling and security standards. The information we provide to them will only be given in connection with the performance of their functions. They will not be permitted to use your Personal Data for any purposes other than those set out in this Policy.
In addition to any listed data recipients, we may also need to share your Personal Data with the categories of recipients listed below.
1. Within the Group of Companies
We may transfer and disclose your Personal Data within the Company for the purposes set out above in this Policy, or as necessary (for example, to fulfill any contractual or legal obligations). Where we transfer your Personal Data, we will ensure compliance with any applicable data-privacy legislation and, where necessary, enter into appropriate agreements governing such intra-group data transfers.
2. Courts and public authorities
Where we are required to do so under law or by a legally binding decision of a government body or court, we may also disclose your information to public authorities (e.g., tax authorities, law-enforcement authorities, regulatory authorities) or courts to the extent necessary.
You can find detailed information about who we may share your Personal Data with under the relevant processing activity indicated above. Whenever we transfer your Personal Data to processors (e.g., a vendor or service provider), they must comply with our information-handling and security standards. The information we provide to them will only be given in connection with the performance of their functions. They will not be permitted to use your Personal Data for any purposes other than those set out in this Policy.
In addition to any listed data recipients, we may also need to share your Personal Data with the categories of recipients listed below.
1. Within the Group of Companies
We may transfer and disclose your Personal Data within the Company for the purposes set out above in this Policy, or as necessary (for example, to fulfill any contractual or legal obligations). Where we transfer your Personal Data, we will ensure compliance with any applicable data-privacy legislation and, where necessary, enter into appropriate agreements governing such intra-group data transfers.
2. Courts and public authorities
Where we are required to do so under law or by a legally binding decision of a government body or court, we may also disclose your information to public authorities (e.g., tax authorities, law-enforcement authorities, regulatory authorities) or courts to the extent necessary.
F. How long do we retain your personal data?
We retain your Personal Data only for as long as necessary for our business purposes or to comply with legal or regulatory requirements. How long we need your Personal Data depends on what we use it for, as set out in this Policy.
For example, we will retain your information for a certain period for accounting purposes, such as if you placed an order.
If we no longer need your personal data, we will delete it or anonymize it by removing all data that identifies you. If we have asked for your permission to process your Personal Data, and we have no other legal basis for continuing such processing, and you withdraw your permission, we will delete your Personal Data.
If you object to or opt out of receiving direct marketing communications from us, we will delete your contact details and marketing permissions to ensure that you do not receive any marketing communications from us in the future.
In any case, we will continue to protect your Personal Data in accordance with this Policy and will regularly update our records to ensure their accuracy.
We retain your Personal Data only for as long as necessary for our business purposes or to comply with legal or regulatory requirements. How long we need your Personal Data depends on what we use it for, as set out in this Policy.
For example, we will retain your information for a certain period for accounting purposes, such as if you placed an order.
If we no longer need your personal data, we will delete it or anonymize it by removing all data that identifies you. If we have asked for your permission to process your Personal Data, and we have no other legal basis for continuing such processing, and you withdraw your permission, we will delete your Personal Data.
If you object to or opt out of receiving direct marketing communications from us, we will delete your contact details and marketing permissions to ensure that you do not receive any marketing communications from us in the future.
In any case, we will continue to protect your Personal Data in accordance with this Policy and will regularly update our records to ensure their accuracy.
G. International data transfer
Given that the Internet is a global environment, using it to collect and process personal data often involves transferring data on an international basis. Although we generally aim to store the Personal Data we collect about you through our website within your region, your Personal Data may be transferred to recipients outside your region (where data protection laws may differ, for example in the USA), including within the Company.
Where such international data transfers occur, we have implemented security measures and data-protection solutions (such as standard contractual clauses, as well as supplementary measures) to ensure that your information is adequately protected in third countries that do not have a level of data protection recognized as adequate under law.
Given that the Internet is a global environment, using it to collect and process personal data often involves transferring data on an international basis. Although we generally aim to store the Personal Data we collect about you through our website within your region, your Personal Data may be transferred to recipients outside your region (where data protection laws may differ, for example in the USA), including within the Company.
Where such international data transfers occur, we have implemented security measures and data-protection solutions (such as standard contractual clauses, as well as supplementary measures) to ensure that your information is adequately protected in third countries that do not have a level of data protection recognized as adequate under law.
H. Automated decision-making
We do not use automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you. If we introduce any such processing in the future, we will inform you in advance and ensure that your rights are respected in accordance with applicable law.
We do not use automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you. If we introduce any such processing in the future, we will inform you in advance and ensure that your rights are respected in accordance with applicable law.
I. Data subject rights
As a data subject, you have certain rights. Please note that you are not necessarily entitled to these rights without limitation, but only in accordance with applicable legal provisions. For example, your rights may be limited where they affect the rights and freedoms of others. You may assert your rights in your relations with the responsible Data Controller by contacting us at the addresses indicated at the bottom of this Policy.
1. Right to withdraw consent
If we process your Personal Data on the basis of your consent, you have the right to withdraw your consent at any time. From the moment we receive your withdrawal, we will no longer process your Personal Data on that basis. However, please note that withdrawing your consent does not affect the lawfulness of processing that took place before the withdrawal.
2. Right of access to information
You may request information about whether we process your Personal Data. If you do so, you will be able to obtain information about that Personal Data, including the purposes of processing, the relevant categories of Personal Data, the recipients, the retention period and origin of the data, the rights you have with respect to it, and, in the case of a transfer to a third country, the relevant safeguards we have put in place. Upon request, we will also provide you with a copy of the Personal Data we process about you.
3. Right to rectification
If we process Personal Data about you that is inaccurate or incomplete, you may request that it be corrected or completed.
4. Right to erasure
You may ask us to delete your Personal Data. We will delete it if:
• it is no longer necessary for the purposes for which it was collected or otherwise processed;
• the processing is based on your consent, you withdraw your consent, and there is no other legal basis for the processing;
• you object to the processing and there are no overriding legitimate grounds for the processing, or if you object to the processing for direct marketing purposes;
• your data has been processed unlawfully;
• erasure of your Personal Data is necessary for compliance with a legal obligation to which we are subject.
However, your right to erasure does not apply if, for example, we need to process the Personal Data to comply with legal obligations or to establish, exercise, or defend legal claims.
5. Right to restriction of processing
In certain cases, you may ask us to restrict the processing of your Personal Data without deleting it. This means that we will continue to store the personal data, but will only process it with your consent, to establish, exercise, or defend legal claims, to protect the rights of another natural or legal person, or for reasons of important public interest. You have the right to request restriction of processing where:
• you contest the accuracy of your Personal Data, until we can verify it;
• you object to the processing of your Personal Data pending a determination of whether our legitimate grounds override yours;
• the processing is unlawful, but you oppose the erasure of your Personal Data;
• we no longer need the Personal Data for the purposes of processing, but you need it to establish, exercise, or defend legal claims.
6. Right to object
Even if your Personal Data is accurate and complete and is processed by us on a lawful basis, you may object at any time, on grounds relating to your particular situation, to the processing of your Personal Data. You have this right only where we process such Personal Data on the basis of legitimate interests. In that case, we will no longer process your Personal Data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or where the processing serves the establishment, exercise, or defense of legal claims.
In addition, you may also object if you receive direct marketing from us and no longer wish to receive it in the future, in which case we will no longer process your Personal Data for that purpose.
7. Right to data portability
If we process your Personal Data on the basis of your consent or a contract concluded with you, and the processing is carried out by automated means, you may ask us to send you the Personal Data you provided to us in a structured, commonly used, and machine-readable format. In addition, you may request that we transmit that Personal Data directly to another Data Controller, where this is technically feasible.
8. Right to lodge a complaint
Although we make every effort to protect the confidentiality and integrity of your Personal Data, disagreements about how we process your Personal Data cannot be entirely ruled out. If you believe that the processing of your Personal Data violates applicable data protection law, you may, in addition to contacting us, lodge a complaint with the competent data protection authority. In Ukraine, this authority is the Ukrainian Parliament Commissioner for Human Rights (Ombudsperson).
9. Right to be notified in the event of a breach
You have the right to be notified in the event of any breach or leak of your personal data that is likely to result in a high risk to your rights and freedoms.
J. Use of this website by minors
You must not use our website if you are under eighteen (18) years of age. If you are not yet 18 years old, you must ask permission from a parent or guardian before using our website. If we learn that you are under 18 and have not obtained permission from your parent or guardian, we will discontinue the use of your personal data. Entering into contracts requires legal capacity as defined by applicable law, or valid representation by legal representatives.
K. Questions, concerns, and support — who and how can you contact?
If you have general questions about this Policy or how we process your Personal Data, or if you would like to exercise any of the rights described in this Policy, you can contact us directly by sending an email to alumax@alufas.com, or by writing to our postal address indicated in the “Imprint / Contact” section.
As a data subject, you have certain rights. Please note that you are not necessarily entitled to these rights without limitation, but only in accordance with applicable legal provisions. For example, your rights may be limited where they affect the rights and freedoms of others. You may assert your rights in your relations with the responsible Data Controller by contacting us at the addresses indicated at the bottom of this Policy.
1. Right to withdraw consent
If we process your Personal Data on the basis of your consent, you have the right to withdraw your consent at any time. From the moment we receive your withdrawal, we will no longer process your Personal Data on that basis. However, please note that withdrawing your consent does not affect the lawfulness of processing that took place before the withdrawal.
2. Right of access to information
You may request information about whether we process your Personal Data. If you do so, you will be able to obtain information about that Personal Data, including the purposes of processing, the relevant categories of Personal Data, the recipients, the retention period and origin of the data, the rights you have with respect to it, and, in the case of a transfer to a third country, the relevant safeguards we have put in place. Upon request, we will also provide you with a copy of the Personal Data we process about you.
3. Right to rectification
If we process Personal Data about you that is inaccurate or incomplete, you may request that it be corrected or completed.
4. Right to erasure
You may ask us to delete your Personal Data. We will delete it if:
• it is no longer necessary for the purposes for which it was collected or otherwise processed;
• the processing is based on your consent, you withdraw your consent, and there is no other legal basis for the processing;
• you object to the processing and there are no overriding legitimate grounds for the processing, or if you object to the processing for direct marketing purposes;
• your data has been processed unlawfully;
• erasure of your Personal Data is necessary for compliance with a legal obligation to which we are subject.
However, your right to erasure does not apply if, for example, we need to process the Personal Data to comply with legal obligations or to establish, exercise, or defend legal claims.
5. Right to restriction of processing
In certain cases, you may ask us to restrict the processing of your Personal Data without deleting it. This means that we will continue to store the personal data, but will only process it with your consent, to establish, exercise, or defend legal claims, to protect the rights of another natural or legal person, or for reasons of important public interest. You have the right to request restriction of processing where:
• you contest the accuracy of your Personal Data, until we can verify it;
• you object to the processing of your Personal Data pending a determination of whether our legitimate grounds override yours;
• the processing is unlawful, but you oppose the erasure of your Personal Data;
• we no longer need the Personal Data for the purposes of processing, but you need it to establish, exercise, or defend legal claims.
6. Right to object
Even if your Personal Data is accurate and complete and is processed by us on a lawful basis, you may object at any time, on grounds relating to your particular situation, to the processing of your Personal Data. You have this right only where we process such Personal Data on the basis of legitimate interests. In that case, we will no longer process your Personal Data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or where the processing serves the establishment, exercise, or defense of legal claims.
In addition, you may also object if you receive direct marketing from us and no longer wish to receive it in the future, in which case we will no longer process your Personal Data for that purpose.
7. Right to data portability
If we process your Personal Data on the basis of your consent or a contract concluded with you, and the processing is carried out by automated means, you may ask us to send you the Personal Data you provided to us in a structured, commonly used, and machine-readable format. In addition, you may request that we transmit that Personal Data directly to another Data Controller, where this is technically feasible.
8. Right to lodge a complaint
Although we make every effort to protect the confidentiality and integrity of your Personal Data, disagreements about how we process your Personal Data cannot be entirely ruled out. If you believe that the processing of your Personal Data violates applicable data protection law, you may, in addition to contacting us, lodge a complaint with the competent data protection authority. In Ukraine, this authority is the Ukrainian Parliament Commissioner for Human Rights (Ombudsperson).
9. Right to be notified in the event of a breach
You have the right to be notified in the event of any breach or leak of your personal data that is likely to result in a high risk to your rights and freedoms.
J. Use of this website by minors
You must not use our website if you are under eighteen (18) years of age. If you are not yet 18 years old, you must ask permission from a parent or guardian before using our website. If we learn that you are under 18 and have not obtained permission from your parent or guardian, we will discontinue the use of your personal data. Entering into contracts requires legal capacity as defined by applicable law, or valid representation by legal representatives.
K. Questions, concerns, and support — who and how can you contact?
If you have general questions about this Policy or how we process your Personal Data, or if you would like to exercise any of the rights described in this Policy, you can contact us directly by sending an email to alumax@alufas.com, or by writing to our postal address indicated in the “Imprint / Contact” section.
Imprint / Contact
Data Controller:
Alumax-Dnipro TPK LLC (trademark ALUfas)
Address: 77 Mykoly Rudenka St., Dnipro, Ukraine
Email: alumax@alufas.com
Website: www.alufas.com
Data Controller:
Alumax-Dnipro TPK LLC (trademark ALUfas)
Address: 77 Mykoly Rudenka St., Dnipro, Ukraine
Email: alumax@alufas.com
Website: www.alufas.com
