Privacy policy

1. General Information and Data Controller

Thank you for visiting our website and for your interest in our company. Protecting your personal data is important to us.

This Privacy Policy explains which personal data we process when you use our website, the purposes for which we process such data, and the rights you have under applicable data protection laws.

Personal data means any information relating to an identified or identifiable natural person.

Data Controller within the meaning of the General Data Protection Regulation (GDPR):

UNNAPUR GmbH
Zechenstraße 49
59425 Unna
Germany

Phone: +49 2303 97924-00
Fax: +49 2303 97924-99
Email: info@unnapur.de

Contact for data protection inquiries:

Email: datenschutz@unnapur.de

2. Security of Data Transmission

Our website uses an encrypted HTTPS connection based on current TLS encryption standards.

This helps protect data transmitted to our website against unauthorized access by third parties.

We also implement appropriate technical and organizational measures to protect personal data against loss, manipulation, and unauthorized access.

However, complete security cannot be guaranteed when transmitting data over the internet.

3. Contact by Email and Contact Form

If you contact us by email or through our contact form, we process the personal data you provide.

This may include:

  • Name and contact details
  • Email address
  • Telephone number, if provided
  • Company name, if provided
  • Content of your message
  • Other information you voluntarily provide

Purpose of Processing

We use this data exclusively to respond to your inquiry, communicate with you, and, where applicable, prepare or maintain a business relationship.

Legal Basis

If your inquiry relates to an existing or prospective contractual relationship, processing is based on Article 6(1)(b) GDPR, insofar as you are personally a party to the contract.

For general inquiries or communication with representatives of business customers, processing is based on our legitimate interest in handling business inquiries appropriately, pursuant to Article 6(1)(f) GDPR.

Retention Period

We retain your information for as long as necessary to process your inquiry and, where applicable, manage the subsequent business relationship.

Statutory retention obligations remain unaffected.

We only disclose your data to third parties where this is necessary to process your inquiry, required by law, or permitted under another applicable legal basis.

4. Job Applications and Recruitment

If you apply for a position with us, we process the personal data you provide for the purpose of conducting the recruitment process.

This may include contact details, application documents, qualifications, and information about your professional background.

Legal Basis

Processing is based on Article 6(1)(b) GDPR in conjunction with the applicable national data protection provisions governing employment relationships, particularly Section 26 of the German Federal Data Protection Act (BDSG), where applicable.

Special categories of personal data are processed only where an appropriate legal basis exists.

Retention Period

If your application is successful, the personal data required for your employment will be transferred to our personnel administration.

If your application is unsuccessful, we generally delete your application documents no later than six months after completion of the recruitment process, unless statutory obligations or legitimate interests justify longer retention.

We retain application documents for consideration in future recruitment processes only with your consent.

5. Hosting and Server Log Files

Our website is hosted by:

OVHcloud

OVH SAS
2 rue Kellermann
59100 Roubaix
France

When you access our website, the web server automatically processes certain technical information.

This may include:

  • IP address of the accessing device
  • Date and time of access
  • Pages and files requested
  • Amount of data transferred
  • Browser and operating system used
  • Referrer URL
  • HTTP status codes

Purpose of Processing

This information is processed to provide our website, ensure system security, analyze technical errors, and detect and prevent attacks.

Legal Basis

Article 6(1)(f) GDPR.

Our legitimate interest is to ensure the secure, stable, and reliable operation of our website.

Retention Period

Server log files are retained only for as long as necessary for the purposes described above. The specific retention period depends on the settings and technical procedures of our hosting provider.

Where the hosting provider processes personal data on our behalf, this is governed by a data processing agreement pursuant to Article 28 GDPR.

6. Cookies and Similar Technologies

Our website uses cookies and similar technologies to provide essential functions and, where you have given your consent, to analyze website usage.

Cookies are small text files stored on your device.

We distinguish between technically necessary technologies and technologies that require your consent.

Technically Necessary Technologies

Technically necessary cookies and similar technologies help ensure the basic functionality and security of our website.

Where storing information on your device or accessing information stored on it is strictly necessary, this is permitted under Section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG).

Any associated processing of personal data is based, where applicable, on Article 6(1)(f) GDPR.

Technologies Requiring Consent

We obtain your consent before using non-essential cookies and similar technologies, particularly for analytics purposes.

The legal bases are Section 25(1) TDDDG and Article 6(1)(a) GDPR.

You may withdraw your consent or change your preferences at any time with effect for the future.

7. Consent Management with Complianz

We use the Complianz GDPR/CCPA Cookie Consent plugin to obtain and manage your consent to the use of cookies and similar technologies.

The software is provided by:

Complianz B.V.
Netherlands

Complianz allows you to choose which categories of technologies you wish to accept through a consent banner displayed when you visit our website.

Information about your choices is stored so that your preferences can be respected during subsequent visits.

The following information may be processed:

  • Your consent decision
  • Selected consent categories
  • Time or status of your selection, where technically recorded
  • Technical information required to store your preferences

Purpose of Processing

Managing and respecting your consent preferences and fulfilling our applicable legal obligations to demonstrate compliance.

Legal Basis

Article 6(1)(c) GDPR in conjunction with the applicable legal requirements for consent, and Article 6(1)(f) GDPR where processing is necessary for the technical operation of consent management.

The storage of technically necessary consent information on your device is permitted under Section 25(2) TDDDG.

Withdrawal and Modification of Consent

You may withdraw your consent at any time with effect for the future.

To do so, reopen the cookie settings using the relevant link on our website and change your preferences.

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

8. Google Analytics 4

We use Google Analytics 4 (GA4), a web analytics service provided by Google.

The provider for users in the European Economic Area is:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Google Analytics helps us understand how visitors use our website. This enables us to improve our content, user experience, and technical performance.

Nature and Scope of Processing

If you have given your consent, the following information may be processed:

  • Pages visited
  • Time and duration of page views
  • Interactions with our website
  • Technical information about your browser and device
  • Approximate geographical location
  • Source of your visit
  • Pseudonymous identifiers used to recognize users or sessions

Google Analytics 4 uses cookies and potentially other technologies to analyze website usage.

According to Google, IP addresses are not logged or stored by Google Analytics 4. However, they may be processed as part of the technical communication with Google.

Purpose of Processing

Processing is carried out to statistically analyze website usage and optimize our online presence.

Legal Basis

Processing takes place exclusively on the basis of your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG, where information is stored on or accessed from your device.

Google Analytics is activated only after you have provided the relevant consent.

Recipients and Data Processing

Google is a recipient of the data.

Where Google processes personal data on our behalf, this is governed by the applicable data processing agreements.

Retention Period

The retention period for data collected through Google Analytics depends on the settings of our Google Analytics property.

International Data Transfers

When using Google Analytics, personal data may be transferred to Google companies and other recipients outside the European Economic Area, particularly in the United States.

Google LLC is certified under the EU-US Data Privacy Framework.

Where a transfer is covered by the corresponding adequacy decision and its requirements are met, Article 45 GDPR provides the legal basis for the transfer.

Other transfers may be subject to appropriate safeguards, particularly the European Commission’s Standard Contractual Clauses.

Withdrawal of Consent

You may withdraw your consent at any time with effect for the future through the cookie settings on our website.

Further information about Google’s processing of personal data is available in Google’s Privacy Policy.

9. Google Tag Manager

We use Google Tag Manager, a service provided by Google Ireland Limited.

Google Tag Manager enables us to centrally manage and integrate website tags, particularly those used for Google Analytics.

Google Tag Manager acts as a technical management platform. The actual statistical analysis is performed by the respective services integrated through it.

Nature and Purpose of Processing

When Google Tag Manager is loaded, a connection is established to Google’s servers.

During this process, personal data, particularly your IP address and technical information about your device, may be transmitted to Google.

According to Google, Google Tag Manager itself does not set analytics cookies. However, tags integrated through Google Tag Manager may use cookies or similar technologies.

Legal Basis

Google Tag Manager is integrated on the basis of your consent pursuant to Article 6(1)(a) GDPR.

Where information is stored on or accessed from your device, Section 25(1) TDDDG also applies.

Consent Management

Google Tag Manager is managed through Complianz on our website and is loaded only after you have provided the relevant consent.

Without your consent, Google Tag Manager is not activated.

International Data Transfers

Personal data may be transferred to Google companies outside the European Economic Area, particularly in the United States.

The information on international data transfers provided in the Google Analytics section applies accordingly.

Withdrawal of Consent

You may withdraw your consent at any time with effect for the future through the cookie settings on our website.

10. Google Maps

We use Google Maps on our website to display interactive maps and help visitors plan their journey to our premises.

The provider is:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Nature and Purpose of Processing

Google Maps allows you to view our company location on an interactive map.

When the map is loaded, a connection to Google’s servers is established.

The following data may be processed:

  • IP address
  • Browser and device information
  • Date and time of access
  • Information about the page visited
  • Additional information processed by Google in connection with the use of its services

Consent and Activation

Google Maps is initially blocked on our website by a placeholder.

A connection to Google is established and the interactive map is loaded only after you have expressly consented to its activation.

You can activate the map using the corresponding button within the map placeholder.

Legal Basis

Article 6(1)(a) GDPR.

Where cookies or similar technologies are used, Section 25(1) TDDDG also applies.

International Data Transfers

Using Google Maps may involve transferring personal data to the United States.

Google LLC is certified under the EU-US Data Privacy Framework.

Further information is available in Google’s Privacy Policy.

Withdrawal of Consent

You may withdraw your consent at any time with effect for the future through the cookie settings on our website.

You can continue using our website without activating Google Maps.

11. Retention and Deletion of Personal Data

We process and retain personal data only for as long as necessary to fulfill the respective purposes of processing.

Additional statutory retention obligations may apply, particularly under German commercial and tax law.

Once the purpose of processing no longer applies or the relevant statutory retention period has expired, personal data will be deleted unless another legal basis justifies continued retention.

12. Automated Decision-Making

We do not use solely automated decision-making, including profiling within the meaning of Article 22 GDPR, that produces legal effects concerning you or similarly significantly affects you in connection with the operation of our website.

This does not include the statistical analysis of website usage performed through Google Analytics.

13. Your Rights as a Data Subject

Under applicable data protection law, you have the following rights in particular:

Right of Access (Article 15 GDPR)

You may request information about whether we process your personal data and, if so, which data we process.

Right to Rectification (Article 16 GDPR)

You may request the correction of inaccurate personal data or the completion of incomplete personal data.

Right to Erasure (Article 17 GDPR)

You may request the deletion of your personal data where the applicable legal requirements are met.

Right to Restriction of Processing (Article 18 GDPR)

Under certain circumstances, you may request that the processing of your personal data be restricted.

Right to Data Portability (Article 20 GDPR)

Where the legal requirements are met, you may request that your personal data be provided in a structured, commonly used, and machine-readable format or transferred to another controller.

Right to Object (Article 21 GDPR)

Where we process personal data on the basis of legitimate interests pursuant to Article 6(1)(f) GDPR, you may object to such processing on grounds relating to your particular situation.

Right to Withdraw Consent (Article 7(3) GDPR)

You may withdraw any consent you have given at any time with effect for the future.

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Right to Lodge a Complaint

If you believe that the processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with a data protection supervisory authority.

The supervisory authority responsible for us is:

State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia

(Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen)

Postfach 20 04 44
40102 Düsseldorf
Germany

Phone: +49 211 38424-0
Email: poststelle@ldi.nrw.de

You may also contact another competent data protection supervisory authority.

14. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy whenever necessary due to legal, technical, or organizational changes.

The version published on our website at the time of your visit shall apply.

15. Contact for Data Protection Inquiries

If you have any questions about the processing of your personal data or wish to exercise your data protection rights, please contact:

UNNAPUR GmbH

Zechenstraße 49
59425 Unna
Germany

Email: datenschutz@unnapur.de

Back