Privacy Policy

I. Introduction

Controller

We, Progema GmbH, Blankschmiede 6, 31855 Aerzen, Germany, Tel.: +49 5154 70560, email: info@progema.de, are the controller responsible for data processing and would like to explain below how we process your data.

The following information describes which personal data we collect during your visit to our website and how this data is used. Personal data means any information relating to an identified or identifiable natural person (hereinafter referred to as the “data subject”), such as name, address, email address, or user behaviour.

Data subjects within the meaning of this Privacy Policy are visitors to our website and users of our online services.

Data Security / Encryption

This website uses Hypertext Transfer Protocol Secure (HTTPS). The connection between your browser and our server is encrypted.

II. Rights of Data Subjects

Your Rights as a Data Subject

Right to Lodge a Complaint

If you believe that the processing of your personal data infringes the General Data Protection Regulation (GDPR), you have the right to lodge a complaint with the competent supervisory authority for data protection, namely the State Commissioner for Data Protection and Freedom of Information of Lower Saxony: https://www.ldi.niedersachsen.de/, as well as with any other data protection supervisory authority.

Right to Withdraw Consent

You may withdraw any consent you have given at any time with effect for the future in accordance with Art. 7 GDPR.

Right of Access, Rectification, Erasure, Restriction, and Objection

In accordance with Art. 15 GDPR, you have the right to obtain information about the personal data we store about you, including any recipients of such data and the planned retention period.

If inaccurate personal data concerning you is being processed, you have the right to request rectification pursuant to Art. 16 GDPR.

If the legal requirements are met, you may also request the erasure of your personal data or restriction of processing and object to the processing of your personal data (Art. 17, 18 and 21 GDPR).

If you request erasure of your data but we are legally required to retain it, access to your data will be restricted (blocked). The same applies if you object to processing. You may also exercise your right to data portability, provided that the necessary technical means are available both to us and to the recipient.

If you have any questions regarding your rights as a data subject, Mr Thomas Werning will be happy to assist you using the contact details provided above.

Obligation to Provide Data

As a rule, it is not possible to conclude a contract without the provision of correct information.

Automated Decision-Making and Profiling

No automated decision-making or profiling currently takes place.

Intention to Transfer Data to Third Countries

No processing of personal data in third countries currently takes place.

Categories of Recipients

In connection with the provision of certain services, we engage external service providers whom we have contractually obligated to maintain confidentiality and comply with data protection requirements. In this context, access to personal data cannot be excluded.

These categories of recipients include:

  • Processors engaged by us within the meaning of Art. 28 GDPR, in particular in the areas of IT services, tax services, logistics, and printing services, who process your data strictly in accordance with our instructions
  • Public bodies and institutions (e.g. tax authorities), where disclosure is required by law or by official order
  • Other recipients where you have given us your consent to transfer your data

Data will only be disclosed to public authorities where this is required by overriding legal provisions.

III. Information on Data Processing on Our Website

III.1 General Information on the Website

Purposes of Processing

The purposes of processing on this website are the presentation of the company, the sale of products, and communication via the internet.

In particular, the purpose of data processing on this website is to provide information about products, including certificates and safety data sheets, and to enable users to contact the relevant contacts within our company directly.

General Information

Where you provide us with personal data, we use such data to respond to your enquiries, provide advice, perform contracts concluded with you, and for technical administration.

Your personal data will only be disclosed or transferred to third parties where this is necessary for the performance of a contract, required for billing purposes, or where you have given your prior consent. You have the right to withdraw any consent you have given at any time with effect for the future; please see the section “Right to Withdraw Consent.”

The legal basis for the collection, processing, and transfer of data in connection with the performance of a contract is Art. 6(1)(b) GDPR.

Such data will be deleted once the applicable statutory retention periods have expired. Where no statutory retention obligations apply, the data will be deleted once the purpose for which it was collected no longer applies.

You have the right at any time to request information about the personal data stored by us and to object to its processing. Further details can be found under “Rights of Data Subjects” and “Right to Withdraw Consent.”

III.2 Server Log Data

Purpose of Processing

When you visit our website, certain information is automatically transmitted by your browser to the server of our hosting provider and stored in so-called server log files. This includes, in particular:

  • the IP address of your device
  • the date and time of access
  • the name and URL of retrieved files
  • the website from which access was made or from which you were redirected to our website (referrer URL)
  • the browser used
  • where applicable, the operating system of your device
  • the name of your access provider

We process this data in order to ensure the smooth establishment of a connection and the security and stability of our systems.

This data is not merged with other data sources. The IP address is anonymised. Connection data is automatically deleted, usually after no more than seven days. If the website is misused, log data that is required for evidentiary purposes will be retained until the incident has been fully clarified.

The legal basis for this processing is Art. 6(1)(f) GDPR and Section 25(2) TDDDG. However, this only applies to data such as browser or header information that is necessarily transmitted when accessing our website or transmitted due to the browser settings of the user’s device. This does not constitute “access to information already stored in the user’s terminal equipment.”

Our legitimate interest pursuant to Art. 6(1)(f) GDPR lies in ensuring the secure operation of our website and detecting possible attacks.

III.3 Contact Form and Enquiries by Email

Purpose of Processing

When you use our contact form, we collect and store your name and email address for the purpose of responding to your enquiry. Providing a telephone number for a callback is optional.

If you contact us by email, we collect and store your email address as well as the data contained in your email.

The legal basis for this processing is Art. 6(1)(a) GDPR, as by using the contact form or sending us an email, you consent to the processing of your data as described above.

In addition, the legal basis may also be Art. 6(1)(b) GDPR, where the storage of your data is necessary for the performance of pre-contractual measures or for a potential later contractual relationship.

Your data will be deleted once the purpose of storage no longer applies, i.e. once your email or contact form enquiry has been answered or the matter relating to your enquiry has been conclusively resolved.

You have the right to withdraw your consent at any time. Withdrawal of consent shall not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

Further information on your right to erasure and your right of access can be found under “Rights of Data Subjects.”

IV. Current Version and Amendments to This Privacy Policy

We reserve the right to amend the content of this Privacy Policy at any time. This usually takes place in the event of further developments or changes to the services used.

The current version of this Privacy Policy can always be accessed on our website.

Version date: 24 March 2026

Further information on the handling of personal data can be found at:
<URL OF THE MANDATORY INFORMATION>