Skip to content

Private Policy

POLIFILM respects your private sphere.

Below you will find information about the types of personal data we process, to what extent and for what purposes.

Personal data is information that can be used to identify you as a data subject, such as your name, address, e-mail address or user behaviour.

Data subjects are those with whom there is a relationship in the context of the provision of our services, visitors to our website and users of our entire online offer.

Name and address of the Data Controller:

POLIFILM GmbH
Bonner Str. 484
50968 Cologne
Phone: +49 221 801446 – 0
Fax: +49 221 801446 – 2010
Email: info@polifilm.de
Web: www.polifilm.com

This website serves the joint appearance of the following companies:

POLIFILM GmbH
POLIFILM PROTECTION GmbH
POLIFILM PROTECTION MANUFACTURING GmbH & Co. KG
POLIFILM PROTECTION DEUTSCHLAND GmbH & Co. KG
POLIFILM AUTOMOTIVE GmbH
pro dis GmbH
POLI-COAT GmbH
POLIFILM EXTRUSION GmbH
POLIFILM Cast GmbH
POLIFILM Performance Films GmbH
POLIFILM OSTERBURKEN GmbH
POLIFILM Neukirchen GmbH
TSL GmbH
POLIFILM Data Protection GmbH
POLIFILM Trading GmbH
POLICYCLE GmbH
POLICYCLE Deutschland GmbH

For the privacy policies of the European companies of the POLIFILM Group, please click on the corresponding hyperlink:
POLIFILM France SAS
POLIFILM UK Limited
POLIFILM PROTECTION Ibérica, S.A.
POLIFILM ITALIA S.R.L.

Please find the respective contact details in the “Locations” tab.

The data protection officer of the controller is:

Datavise GmbH & Co. KG
Heerdter Landstraße 189-193 

40549 Düsseldorf
Phone: 0211 5800 26 96 0
E-Mail: datenschutz@datavise.de

We collect and store the following types of data:

The categories of persons affected by this:

The data is collected for the following purposes:

The processing of your personal data is carried out exclusively on the basis of the following legal bases:

Consent according to Art. 6 para. 1 lit. a GDPR
“The data subject has given his or her consent to the processing of personal data concerning him or her for one or more specific purposes”

Performance of contract and pre-contractual enquiries in accordance with Article 6 (1) (b) GDPR
“the processing is necessary for the performance of a contract to which the data subject is a party or for the performance of steps taken at the request of the data subject prior to entering into a contract”

Legal obligations under Art. 6 (1) (c) GDPR
“the processing is necessary for compliance with a legal obligation to which the controller is subject”

Legitimate interest according to Art. 6 para. 1 lit. f GDPR
“the processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, unless such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child”

Art. 88 GDPR, § 26 BDSG-neu
Data processing in the context of employment or data processing for the purposes of the employment relationship

Transfer to third parties and third countries

Your data will always remain in our company. The transfer or disclosure of your personal data to a third party will only take place

In this context, our processors are obliged to comply with the necessary technical and organizational measures by means of a data processing agreement in accordance with Art. 28 GDPR in order to be able to guarantee the protection of the rights of the data subjects.

The transfer of your personal data to third countries (outside the European Union (EU) / the European Economic Area)) will only take place to such countries,

Duration of storage

Your personal data will be routinely deleted or restricted or blocked in processing at the latest after the expiry of the respective statutory retention periods (e.g. retention periods under commercial and tax law), provided that this data is no longer necessary for the performance of the contract and/or there is no legitimate interest on our part in further storage.

Use of the website and creation of log files

When you visit our website, the following information is automatically transmitted from your browser to our provider’s server:

This data will not be merged with other data sources. The IP address is anonymized.

This data is collected to ensure the proper use of the website, to optimise the website and to ensure the security of our IT systems. These aforementioned purposes also constitute our legitimate interest in data processing in accordance with Art. 6 (1) (f) GDPR.

This data is automatically deleted on a regular basis. In the event of misuse of the website, the data in question, the further storage of which is necessary for evidentiary purposes, will be retained until the process has been clarified.

Hosting by Hetzner Online GmbH

We use the hosting service of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, for the purpose of providing the website on the basis of processing on our behalf. All data collected on our website is processed on Hetzner Online GmbH´s servers  . This can include, but is not limited to, IP addresses, contact requests, meta and communication data, contract data, contact data, names, website accesses and other data generated via a website.

Further information on Hetzner Online GmbH´s data protection can be found on the following website:https://www.hetzner.com/legal/privacy-policy

The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR).

Further processing on servers other than those of Hetzner Online GmbH´s mentioned above will only take place within the framework communicated below.

Cookies

This website uses cookies. These are small text files that are stored in the Internet browser or by the Internet browser on the user’s end device. When a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string of characters that allows the browser to be uniquely identified when you return to the website.

A distinction is made between the following types of cookies:

Session-Cookies
Session cookies are functionally necessary cookies that do not require consent, as they are automatically deleted when you leave the homepage. The legal basis for this processing is Art. 6 (1) (f) GDPR.

Permanente Cookies

Permanent cookies remain permanently on the end device. This can be used to check the login status or display preferred content, for example. In addition, the data processed here can be used for reach measurements. The legal basis for this processing is Art. 6 (1) (a) GDPR, i.e. requires the user’s consent.

We use cookies that enable an analysis of the user’s surfing behaviour.
The following data is stored and transmitted in the cookies:

When accessing our website, the user will be informed about the use of cookies for analysis purposes and will obtain their consent to the processing of the personal data used in this context. In this context, reference is also made to this privacy policy.

Via the cookie settings, the user can revoke his consent at any time and object to the processing of his personal data.
In addition, the user can also object via the corresponding settings of his browser.
The transmission of cookies can be deactivated or restricted by changing the settings in the Internet browser. Cookies that have already been stored can be deleted at any time. This deletion is also possible automatically. Each browser manages these cookie settings differently. This setting is described in the help menu of each browser, which explains how to change your cookie settings. If you disable cookies, the functionality of this website may be limited.

We may work with advertising partners who help us to make our website more interesting for you. For this purpose, cookies from partner companies are also stored on your hard drive when you visit our website (third-party cookies). This also includes providers from unsafe third countries. The data will be passed on to partner companies from the USA, for example.

Consent with Usercentrics

This website uses Usercentrics’ cookie consent technology to obtain your consent to the storage of certain cookies on your device and to document them in compliance with data protection regulations. The provider of this technology is Usercentrics GmbH, Rosental 4, 80331 Munich, Germany, website: https://usercentrics.com/de/ (hereinafter referred to as “Usercentrics”).
When you enter our website, the following personal data will be transferred to Usercentrics:

Furthermore, Usercentrics stores a cookie in your browser in order to be able to assign you the consents you have given or their revocation. The data collected in this way will be stored until you ask us to delete it, delete the Usercentrics cookie yourself or the purpose for which the data is stored no longer applies. Mandatory statutory retention obligations remain unaffected.
Usercentrics is used to obtain the legally required consents for the use of cookies. The legal basis for this is Art. 6 para. 1, sentence 1 lit. c GDPR.

Contract for order processing

We have concluded a contract for order processing with Usercentrics. This is a contract required by data protection law that ensures that Usercentrics processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Google services

Our website uses various services provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Google Analytics 4
Google Analytics uses cookies that enable an analysis of your use of our websites. The information collected by the cookies about your use of this website is usually transmitted to a Google server in the USA and stored there.

With Google Analytics 4, IP address anonymization is enabled by default. Due to IP anonymization, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other data held by Google. During your visit to the website, your user behaviour is recorded in the form of “events”. Events can be:

In addition, the following are recorded:

On behalf of the operator of this website, Google will use this information to evaluate your pseudonymous use of the website and to compile reports on website activity. The reports provided by Google Analytics are used to analyze the performance of our website.

Google Tag Manager
We also use Google Tag Manager. This service can be used to manage website tags. The Google Tag Manager only sets up “tags” – “tags” is a code that is used to measure traffic and visitor behavior.

The “tags” come from other services – in our case, Google Analytics (see above). Google Tag Manager only manages these tags, no cookies are set and no personal data is collected. If tracking has been disabled, this also applies to all tracking tags that are managed with Google Tag Manager.

The use of the aforementioned Google services is based on Art. 6 para. 1 lit. a GDPR (consent), provided that you have consented via our cookie banner. You can withdraw your consent at any time via the cookie settings on our website.

Through the integration of these Google services, personal data, such as your IP address, may be transmitted to Google. This transfer is necessary in order to be able to make full use of the respective functions.

Recipients of the data may be 

For the transfer of third countries to the USA, the European Commission adopted its adequacy decision on 10 July 2023. Google LLC is certified according to the EU-US Privacy Framework.
Since Google servers are distributed worldwide and a transfer to third countries (for example to Singapore) cannot be completely ruled out, we have also concluded the EU standard contractual clauses with the provider.

Contact

The use of our website is usually possible without providing personal data.

If you contact us by other means, such as e-mail or telephone, the data collected here will be treated accordingly confidentially and will not be passed on to third parties without consent.

The respective purpose of the data processing results from

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected.

The user has the option of objecting to the processing of personal data at any time. In such a case, the conversation cannot be continued. In this case, all personal data stored in the course of contacting us will be deleted.

Contractual and business partners

The data of our contractual and business partners is processed by us primarily for the fulfilment of our contractual obligations and for communication. In addition, processing is carried out for the proper and business management and to protect our rights. The processing is therefore carried out

The data will only be passed on to third parties if it is necessary to comply with legal obligations or if this is stated in the contract or this privacy policy. 

Applicant

By submitting your application, applicants agree to the processing of their data for the application process in accordance with our privacy policy.

The legal basis for the processing of applicant data is Art. 88 GDPR, § 26 BDSG-neu and, if applicable, Art. 6 para. 1 lit. b GDPR for the initiation or execution of contractual relationships.
To the extent that special categories of personal data within the meaning of Art. 9 (1) GDPR are voluntarily disclosed as part of the application process, their processing is also carried out in accordance with Art. 9 (2) (b) GDPR (e.g. health data, such as severely disabled status or ethnic origin).
Insofar as special categories of personal data within the meaning of Art. 9 (1) GDPR are requested from applicants as part of the application process, their processing is also carried out in accordance with Art. 9 (2) (a) GDPR (e.g. health data, if this is necessary for the exercise of the profession)

In the event of a successful application, the data provided by the applicants may be further processed by us for the purposes of the employment relationship. Otherwise, if the application for a job offer is not successful, the applicant’s data will be deleted. Candidates’ data will also be deleted when an application is withdrawn, which applicants are entitled to do at any time. The deletion will take place after a period of six months has elapsed so that we can answer any follow-up questions about the application and meet our obligations to provide evidence under the General Equal Treatment Act. Invoices for any reimbursement of travel expenses are archived in accordance with tax regulations.

Social Media Presences

For communication and information of users as well as for advertising purposes, we are present on the following social networks:

The processing of the data obtained via the social media presences is only carried out on our part for the purposes mentioned on the legal basis

The operators of social networks usually process user data for market research and advertising purposes. With the help of the user’s interests and usage behavior, usage profiles can be created in order to display advertising to the user in the future both inside and outside the network that correspond to his profile/interests.
For further information on processing, objection options and assertion of data subjects’ rights, please refer to the privacy policy of the respective provider.

Facebook und Instagram
Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland – View Privacy Policy

The data processing is carried out on the basis of an agreement on the joint processing of personal data in accordance with Art. 26 GDPR, for more details see the addendum for controllers.

YouTube
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland- Go to Privacy Policy

XING
New Work SE, Am Strandkai 1, 20457 Hamburg – To the privacy policy

LinkedIn
LinkedIn Irland Unlimited Company, Wilton Plaza Wilton Place, Dublin 2, Irland – Read the Privacy Policy

X (formerly Twitter)
Twitter International Unlimited Company, One Cumberland Place, Fenian Street Dublin 2, D02 AX07 IRLAND- Read the Privacy Policy

Your rights

As a data subject, you have the opportunity to assert your rights in connection with the General Data Protection Regulation against us. These include the following rights:

Right of access according to Article 15 GDPR
You have the option of requesting your data stored by us. In particular, you can obtain information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data, if it has not been collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information on its details. An informal application via e-mail or post is sufficient. You will receive your requested information within one month of receipt of the letter.

Right to rectification according to Article 16 GDPR
In the event that we have collected/stored incorrect data about you, you can request the correction or completion of this data by means of an informal application. Within one month of receipt of the letter, you will receive information about the change in your data.

Right to erasure according to Article 17 GDPR
You have the right to request the deletion of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims. However, this presupposes that the purposes for the processing have ceased to exist, or that you have objected to the processing in accordance with Article 21 GDPR, that you withdraw your consent in accordance with Article 7 of the GDPR or that the processing is unlawful.

Right to restriction of processing pursuant to Article 18 GDPR
You have the right to request the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful but its deletion is rejected and we no longer need the data, but you need it to assert, exercise or defend legal claims, or you have objected to the processing in accordance with Art. 21 GDPR. You can also inform us of this informally.

Right to data portability according to Article 20 GDPR
You have the option of receiving the data stored with us about you in a structured, commonly used and machine-readable format or requesting that it be transmitted to another controller.

Right of revocation in the case of consent in accordance with Art. 7 (3) GDPR
You have the right to revoke your consent to us at any time. As a result, we may no longer continue the data processing based on this consent for the future and

Right to object according to Article 21 GDPR
If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1, sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data if there are reasons for this that arise from your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right of objection, which we will implement without specifying a special situation. If you would like to make use of your right of revocation or objection, an e-mail to info(at)polifilm.de is sufficient.

Right to lodge a complaint in accordance with Article 77 of the GDPR
You have the right to lodge a complaint with a supervisory authority. For this purpose, you can contact the supervisory authority of your usual place of residence or place of work or our registered office.

A list of the German supervisory authorities (for the non-public sector) with addresses can be found at: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html

SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address bar of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Up-to-dateness and modification of this privacy policy
This privacy policy is currently valid and has the status of 28.04.2025

Created and reviewed by Datavise GmbH & Co. KG