for data subjects according to Art 13 and 14 DSGVOPerson responsible according to Art. 24 DSGVO:


Polyfinstraße 1, 74909 Meckesheim
Tel. +43 / (0)7223 82323 0
Fax. +43 / (0)7223 82323 42


represented by:
DI Karl Landl


Data Protection Officer according to Art. 37 ff DSGVO:

POLYFIN AG is an AG and therefore a private company and not a public authority or public body within the meaning of Art 37 (1) lit a DSGVO. Within the scope of our core activities, neither extensive processing of special categories of data or of personal data relating to criminal convictions and criminal offenses, nor extensive regular and systematic monitoring of data subjects is carried out pursuant to Art 37 (1) lit b and c DSGVO. For this reason, there is no obligation for POLYFIN AG to appoint a data protection officer.

Handling of personal data:

POLYFIN AG takes the protection of personal data very seriously.

Personal data is information that can be individually assigned to you. Examples include your address, name, postal address, e-mail address or telephone number. Information such as the number of users visiting a website is not personal data because it cannot be assigned to a person.

Polyfin AG treats personal data in accordance with the statutory data protection regulations (in particular the EU General Data Protection Regulation, Data Protection Amendment Act DSG 2018) and this privacy policy.

You have the option regarding the unlawful processing of your data by us to complain to a supervisory authority in accordance with Art. 77 DSGVO. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this purpose. 

Graurheindorfer Str. 153, 53117 Bonn
Telefon: +49 (0)228 997799-0


Rights of data subjects:

You have the right:

  • in accordance with Art. 15 DSGVO to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it was not collected by us, as well as the existence of automated decision-making, including profiling and, if applicable, meaningful information about its details;
  • in accordance with Art. 16 DSGVO to immediately demand the correction of incorrect or completion of your personal data stored by us;
  • pursuant to Art. 17 DSGVO to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;
  • to request the restriction of the processing of your personal data in accordance with Art. 18 DSGVO, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing in accordance with Art. 21 DSGVO;
  • pursuant to Art. 20 DSGVO to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller;
  • to revoke your consent at any time in accordance with Art. 7 (3) DSGVO. This has the consequence that we may no longer continue the data processing based on this consent for the future.


Assertion of data subject rights:

You yourself decide on the use of your personal data. Therefore, should you wish to exercise any of your aforementioned rights against us, please feel free to contact us by e-mail at Please submit a copy of an official photo ID together with your request for clear identification and assist us in specifying your request by answering questions from our responsible employees regarding the processing of your personal data. Please also indicate in your request in which role (employee, applicant, supplier, customer, etc.) and in which period of time you have had a relationship with us. This will enable us to process your request in a timely manner.



If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) p. 1 lit. f DSGVO, you have the right to object to the processing of your personal data pursuant to Art. 21 DSGVO, provided that there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which is implemented by us without specifying a particular situation.

If you wish to exercise your right of revocation or objection, it is sufficient to send an e-mail to .


Storage period (deletion periods):

In accordance with applicable data protection requirements, we are obligated to delete personal data immediately as soon as the purpose for processing has been fulfilled pursuant to Art. 5 (1) lit. e DSGVO. In this context, we would like to point out that statutory retention obligations and periods constitute a legitimate purpose for the processing of personal data.

In any case, data will be stored and retained by us in personal form until the termination of the business relationship or until the expiry of applicable guarantee, warranty or limitation periods; furthermore, until the termination of any legal disputes in which the data are required as evidence; or in any case until the expiry of the third year after the last contact with a business partner.

In addition, we adhere to the following time limits:

Accounting and tax law:

  • Obligation to keep records for tax purposes according to §§ 207 para. 2, 209 BAO: 10 year


  • Purchase price claim for movable property pursuant to § 1062 in conjunction with § 1486 ABGB: 3 years
  • Purchase price claim for immovable property (from contract § 1486 ABGB): 30 years
  • Claims arising from a contract for work and services pursuant to § 1486 ABGB (if the service was rendered within the scope of a commercial or other business operation): 3 years
  • General damages according to § 1489 ABGB (compensation claims): 3 years (if damage and damaging party known) / otherwise 30 years

Employment relationships:

  • Entitlement to a certificate of employment pursuant to § 1163 in conjunction with § 1478 ABGB: 30 years
  • Employment relationship according to ABGB (subsidiary to the Salaried Employees Act): Claims of the employee and claims of the employer for remuneration, advance payment and all other claims arising from the employment relationship in accordance with Section 1153 ff in conjunction with Section 1486 ABGB: 3 years
  • Accounting-relevant employee data: like accounting.
  • Period for asserting claims pursuant to Sections 15 (1) and 29 GlBG due to discrimination in promotions or applications: 6 months from rejection of the promotion or application or, in accordance with the applicant's declaration of consent, 3 years for application documents.


Forwarding of data:

Your personal data will not be transferred to third parties for purposes other than those listed below.

We only pass on your personal data to third parties if:

  • you have given your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
  • the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary to safeguard operational interests, as well as for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
  • in the event that there is a legal obligation for disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, and
  • this is legally permissible and necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR.


Use of our website

a) When you visit our website, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without any action on your part and stored until it is automatically deleted:

  • IP-Adresse des anfragenden Rechners,
  • IP address of the requesting computer,
  • Name and URL of the retrieved file,
  • Website from which access is made (referrer URL),
  • the browser used and, if applicable, the operating system of your computer and the name of your access provider.

We process the aforementioned data for the following purposes

  • Ensuring a smooth connection to the website,
  • To ensure a comfortable use of our website,
  • Evaluation of system security and stability and
  • for other administrative purposes.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the purposes for data collection listed above.
Under no circumstances do we use the data collected for the purpose of drawing conclusions about your person.

We also use cookies and analysis services when you visit our website. You can find more detailed explanations on this under "Cookies" in this
privacy policy.

b) When using our contact form.

For questions of any kind, we offer you the opportunity to contact us via a form provided on the website. It is necessary to provide a valid e-mail address
is required so that we know who sent the request and can answer it. Further information can be provided voluntarily.
The data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR on the basis of your voluntary consent. The personal data collected by us for the use of the contact form will be
personal data collected by us for the use of the contact form will be automatically deleted after your request has been dealt with.


Our website uses so-called cookies. These are small text files that are stored on your end device with the help of the browser. They do not cause any damage.

We use cookies to make our website more user-friendly. Some cookies remain stored on your device until you delete them. They enable us to recognize your browser on your next visit.

If you do not wish this, you can set up your browser so that it informs you about the setting of cookies and you only allow this in individual cases. If cookies are deactivated, the functionality of our website may be restricted.

If you do not want this, you can set up your browser so that it informs you about the setting of cookies and you only allow this in individual cases.  If you deactivate cookies, the functionality of our website may be restricted.

Server-Log-FilesThe provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are

  • Browser type/ browser version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request

This data cannot be assigned to specific persons. This data is not merged with other data sources. We reserve the right to check this data retrospectively if we become aware of specific indications of unlawful use.

Web analysis

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc. 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google Analytics uses so-called "cookies". These are text files that are stored on your computer and enable your use of the website to be analyzed. The information generated by cookies about your use of this website is usually transmitted to a Google server in the USA and stored there.

We only use Google Analytics with activated IP anonymization. This means that on this website your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link:

Further information on the use of data for advertising purposes by Google, setting and objection options can be found on Google's websites: („Use of data by Google when you use our websites or apps partner“), („Use of data for advertising purposes“), („Manage information that Google uses to show you advertising“) and („Determine which advertising Google shows you“).


Our website may contain links to third-party websites ("external links"). These external links are subject to the liability of the respective operators. B&H has no influence whatsoever on the current and future design or content of the linked pages. The inclusion of external links does not imply that the content is the content of B&H. It is not possible or reasonable for B&H to constantly monitor external links without concrete evidence of legal violations. However, such external links will be deleted immediately if we become aware of any legal violations.



If you send us inquiries by e-mail, your details, including the contact details you provide there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. B&H expressly points out that data transmission over the Internet (e.g. when communicating by e-mail) is subject to security vulnerabilities and cannot be completely protected against access by third parties.


If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter.
We use the so-called double opt-in procedure to ensure that the newsletter is sent with your consent. This involves the potential recipient being added to a mailing list. The user then receives a confirmation e-mail to confirm the registration in a legally secure manner. The address will only be actively added to the mailing list if confirmation is received. We use this data exclusively for sending the requested information and offers.

The newsletter is sent using “MailChimp”, a newsletter delivery platform from the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA.

The email addresses of our newsletter recipients, as well as their other data described in this information, are stored on MailChimp's servers in the USA. MailChimp uses this information to send and evaluate the newsletters on our behalf. Furthermore, MailChimp can, according to its own information, use this data to optimize or improve its own services, e.g. to technically optimize the dispatch and presentation of the newsletter or for economic purposes to determine which countries the recipients come from. However, MailChimp does not use the data of our newsletter recipients to write to them ourselves or to pass them on to third parties.

We trust MailChimp's reliability and IT and data security. MailChimp is certified under the US-EU data protection agreement “Privacy Shield” and is therefore committed to complying with EU data protection regulations. We have also concluded a “data processing agreement” with MailChimp. This is a contract in which MailChimp undertakes to protect our users' data, to process it on our behalf in accordance with its data protection regulations and, in particular, not to pass it on to third parties. MailChimp's privacy policy can be found here.


Our website uses plugins from the YouTube site operated by Google. The website is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit one of our pages equipped with a YouTube plugin, a connection to YouTube's servers is established. The YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.


Commercial advertising
The use of the contact details from our imprint or our website for commercial advertising is expressly not desired unless we give written consent for this. B&H and all persons named on this website hereby object to any commercial use and distribution of this data.


Data security
When visiting our website, we use the common SSL procedure (Secure Socket Layer) in conjunction with the highest level of encryption supported by your browser. This is usually 256 bit encryption. If your browser does not support 256-bit encryption, we will use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the bottom status bar of your browser. We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.


Currentness and changes to this data protection declaration
Durch die Weiterentwicklung unserer Website und Angebote darüber oder aufgrund geänderter gesetzlicher beziehungsweise behördlicher Vorgaben kann es notwendig werden, diese Datenschutzerklärung zu ändern. Die jeweils aktuelle Datenschutzerklärung kann jederzeit auf der Website unter von Ihnen abgerufen und ausgedruckt werden.

Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to change this data protection declaration. You can access and print out the current data protection declaration at any time on the website at


Meckesheim am 1.3.2023