Privacy Policy

PUR HOLDING GMBH and its affiliates ('POLYTEC INDUSTRIAL' or 'POLYTEC') complies in the context of its social responsibility, with international data protection regulations, in particular the European General Data Protection Regulation, EU 2016/679 (GDPR) and the corresponding national adaptation laws. The protection of privacy and security of personal data is given special emphasis, as this is the basis for trusting business relationships. The following Privacy Policy provides a complete overview of what type of data POLYTEC processes for what purposes, which principles are respected and which rights a data subject has.

I Scope

This Privacy Policy applies to the processing of personal data by the respective responsible companies in the group of POLYTEC, in particular for the processing of data of employees, customers, investors, contractors, suppliers, consultants and users of the online offer of POLYTEC (data subjects). This Privacy Policy applies in the area of the online offer for all websites operated by POLYTEC currently including their online portals. The data subject acknowledges that POLYTEC makes each website available only on the conditions set out in this Privacy Policy and accepts this Privacy Policy by accessing or using a website and when logging in/registering to an online portal.


The terms used in this Privacy Policy are understood according to Article 4 GDPR. The term "data subject" is to be understood gender-neutral.

II Data Controller

Data Controller for the website


Street no.: Am Vorort 27

Post code, location, country: 44894 Bochum

Telephone: +4923489368-0

Data protection coordinator: Peter Stinshoff

Email address: ind-data(at)


Data Controller for contact and (pre- and post-) contractual relations with POLYTEC

For reasons of consistency, this Privacy Policy constitutes the entire Privacy Policy for all companies within the POLYTEC. For the sake of completeness, it is pointed out that in data processing in the context of contractual relationships, the party to the contract is the data controller for the respective data processing. Data Controller may be all group companies as listed under following link POLYTEC INDUSTRIAL contact & locations (, all of which agree to comply with this Privacy Policy.

IV Principles of Processing Personal Data

The processing of personal data at POLYTEC is based on strict principles, which, with regard to the protection and security of the data and the rights of those concerned, are held to the highest standard while respecting the data protection principles laid down in Art. 5 et seq. GDPR, in particular.


1) Legality and Transparency

The data processing is carried out legally and in good faith. The data subject will be informed of the collection of the data, the planned processing and handling of the data. Thus, the parties concerned are informed at least about the following points:

  • Person responsible
  • Purpose of the data processing
  • Legal basis of the processing

POLYTEC processes data only if at least one condition of lawfulness within the meaning of Article 6 GDPR is fulfilled, in particular if the data processing 

  • is necessary to carry out (pre- or post-)contractual measures, which are carried out at the request of the data subject or necessary for the fulfillment of a contract (Article 6 para 1 lit b GDPR),
  • is required to fulfill one of POLYTEC’s legal obligation (Article 6 para 1 lit c GDPR),
  • is required to protect the overriding legitimate interests of POLYTEC or a third party (Article 6 para 1 lit f GDPR), or
  • is based on the data subject’s explicit consent for one or more specific purposes (Article 6 para 1 lit a GDPR).


POLYTEC processes special categories of personal data within the meaning of Article 9 para 1 GDPR (sensitive data) only on basis of Article 9 para 2 GDPR, in particular if the data is voluntarily provided by the data subject (eg in CVs of job applicants) (Article 9 para 2 (a) and (e) GDPR).


If necessary – e.g. If no other condition stated in Article 6 para 1 lit b-f GDPR or, in the case of sensitive data, a case of Article 9 para 2 GDPR is met, POLYTEC will obtain the explicit consent of the data subject. The data subject has the right to revoke any given consent in whole or in part at any time. The revocation must be addressed to POLYTEC (contact details see point I.). Although the revocation of the consent is not bound to any particular form, the declaration of revocation in written form (for example letter, e-mail or fax) is recommended for the purposes of proof.


The revocation of the consent leaves the processing of data on the basis of other conditions within the meaning of Article 6 GDPR or - in the case of sensitive data - another case of Article 9 para 2 GDPR and the legality of the basis of the consent until revocation, unaffected.


1) Purpose

Data is collected and processed for specified, explicit and legitimate purposes. The processing of the data does not take place in a manner incompatible with these modalities.  


2) Data Minimization

Data is collected and processed only if absolutely necessary for the stated purposes. When it is possible to achieve the purpose, and the effort is reasonable, only anonymous data will be processed.


3) Storage Limitation and Deletion

Data is deleted as soon as the purpose for which it was originally collected expires and statutory retention periods do not prevent deletion.

If, in individual cases, there are legitimate interests (Article 6 para 1 lit f GDPR), it will continue to be stored until the interest worthy of protection has legally expired. 


4) Data Security

POLYTEC takes, with regard to the criteria set out in Article 32 GDPR, adequate and appropriate technical and organisational measures for data security and data processing and endeavours to protect the data from unauthorised access, loss, corruption or alteration and ensures that the data is protected against unauthorized or unlawful processing and loss, damage and alteration. In order to protect the security of personal data during transmission, POLYTEC uses state-of-the-art encryption techniques (e.g. SSL) over HTTPS.


V Data processing when using the online offer of POLYTEC

1) Data of users of the online offer of POLYTEC

Users can visit the websites of POLYTEC without giving any personal information. Therefore, during the operation of its websites POLYTEC only processes data of a technical nature about every access to the server on which this service is located (server log files) which is automatically processed using cookies (see point 5) and which are considered as personal data or can be used to identify the person or personal data of the data subject (access data). These include, for example, the IP address, unique device identification, type and version of the operating system and the browser, name of the retrieved web page, file, date and time of retrieval, referrer URL (previously visited page) and the requesting provider.


POLYTEC does not process this access data for the purpose of identifying the person or personal data of the data subject, but solely for the purpose of providing, customizing, adapting, improving, maintaining, optimizing and further developing the websites (including functions, services, modules and features thereof), for error detection and correction, to maintain the security system and for the purpose of internal statistical evaluation, without any conclusions being drawn on the person or data of the data subject. There is also no profiling within the meaning of Article 4 sub-section 4 GDPR.

2) Contact via the online contact form or by e-mail

When contacting POLYTEC (per contact form or email) the information provided by the user (company, address, telephone number, contact person, e-mail) is used to process the contact enquiry in accordance with Article 6 para 1 lit b and f GDPR. Legitimate interest exists on basis of processing individual enquiries and provide reliable answers .

POLYTEC deletes the requests as soon as they are no longer required.

3) Cookies

POLYTEC uses so called “Cookies” according to Article 6 para 1 lit a GDPR. Cookies are files that are stored locally in the buffer of the internet browser of the data subject and serve in particular to make the website (in particular by recognising the accessing browser) more user-friendly, effective and secure as well as enabling an analysis of the use of the website by the data subject. POLYTEC automatically processes certain data such as IP address, browser used, operating system on the data subject's computer and its connection to the Internet.

Cookies cannot be used to launch programs or to transfer viruses to a computer. Based on the information contained in cookies, POLYTEC makes it easier for those affected to navigate and facilitate the correct display of the websites.

Under no circumstances POLYTEC will pass on any the data collected to third parties or will establish a link with personal data without the consent of the data subject.

Users can also view POLYTEC websites without using of cookies. The data subject has the option of deactivating and/or deleting cookies in the settings of the Internet browser at any time, as well as set the duration of their storage and when they are deleted. The procedure depends on the Internet browser used by the data subjects. However, disabling cookies may result in certain features and/or contents of the website not functioning or functioning as expected.

6) Integration of Services and Content of Third Parties

a) YouTube

On the websites, POLYTEC embedded YouTube videos for legitimate interest according to Article 6 para 1 lit f GDPR to ensure function and user friendliness of the websites. The corresponding plug-ins are operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When a data subject visits a page with the YouTube plug-in, it will connect to YouTube's servers. YouTube will be informed of which pages a data subject visits. If a data subject is logged into a YouTube account, YouTube can assign the surfing behaviour to the data subject personally. This can be prevented by logging out of the YouTube account beforehand. 

If a YouTube video is started, the provider uses cookies that collect information about user behaviour. 

Anyone who has disabled the storage of cookies for the Google Ad program will not have to expect such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If a data subject wants to prevent this, the data subject must block the storage of cookies in the browser. 

For more information on data protection at "YouTube", please see the Privacy Policy of the provider at

b) Google Analytics

POLYTEC’s websites use Google Analytics, a web analytics service provided by Google Inc. Google Analytics uses so-called "cookies", i.e. text files that are stored on a computer and that allow an analysis of the use of the website by a data subject (see point 5.). The information generated by the cookie about the use of a website is usually transmitted to a Google server in the USA and stored there. However, POLYTEC only uses Google Analytics only with active IP-anonymisation on its websites, which means an IP address will be shortened beforehand by Google within member states of the European Union or in other signatory states of the Agreement in the European Economic Area. Only in exceptional cases the full IP address will be sent to a Google server in the USA and shortened there. On behalf of POLYTEC, Google will use this information to evaluate the use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address provided by a browser in the framework of Google Analytics will not be merged with other Google data. 

Google is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European privacy legislation ( 

Data subjects have the possiblilty to anytime deactivate the cookie-settings in the internet browser and/or to delete and enhance settings as to how long cookies may be stored and when they need to be deleted. The procedure depends on the internet browser used. However, disabling cookies may cause some features and content of the websites to fail or not work as expected. Moreover, data subjects can prevent the collection of the data generated by the cookie and related to the use of the website (including IP address) as well as the processing of this data by Google by downloading the browser plug-in available under the following link and installing:

In addition, or as an alternative to the browser add-on, data subjects can prevent tracking by Google Analytics on POLYTEC’s websites. An opt-out cookie will be installed on the device. This will prevent the collection by Google Analytics for this website and for this browser in future, as long as the cookie remains installed in the browser. 


c) Google Maps

POLYTEC’s websites use Google Maps API to visually display geographic information. When using Google Maps, Google also collects, processes and uses data on the use of map features by visitors. For more information about Google's data processing, please refer to the There data subjects can also change personal privacy settings in the data protection centre. 

For detailed instructions on how to manage your own data related to Google products see following link


d) Google AdWords

POLYTEC’s websites use Google Conversion Tracking. If data subjects have reached the website via an advertisement sent by Google, Google AdWords has set a cookie on a data subject’s computer. The conversion tracking cookie is set when a data subject clicks on an ad delivered by Google. These cookies lose their validity after 30 days and are not used for personal identification. If the data subject visits certain pages on the website and the cookie has not expired, POLYTEC and Google may recognise that the data subject clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Thus, cookies cannot be tracked through AdWords advertisers' websites. The information gathered using the conversion cookie is used to generate conversion statistics for AdWords advertisers who have opted for conversion tracking. POLYTEC is told the total number of data subjects who clicked on their ad and were redirected to a conversion tracking tag page. However, they do not receive any information that personally identifies data subjects. 

If data subjects do not want to participate in the tracking, they can refuse the required setting of a cookie - for example by a browser setting that generally disables the automatic setting of cookies or sets the browser to block cookies from the domain "". 


e) Google Remarketing

POLYTEC’s websites use the remarketing function of Google Inc. This function is designed to present interest-based ads to website visitors within the Google network. A so-called "cookie" is stored in the browser of the website visitor, which makes it possible to recognise the visitor when he or she visits websites that belong to the advertising network of Google. On these pages, visitors may be presented with ads related to content that the visitor previously viewed on web pages using Google's remarketing feature. 

According to own information of Google, it does not collect any personal data in this process. However, if a data subject still does not want Google's remarketing function it can always be disabled using the appropriate settings at Alternatively, a data subject can disable the use of cookies for interest-based advertising through the advertising network initiative by following the instructions at


f) Copyright

The images used on this website are from the following sources:

  • Picture City
  • Fotolia: jack1e (modified), Cloud7 (modified), triaxyz (modified), Trueffelpix (modified)
  • Timo Lutz advertising photography

VI Processing Data for (pre- and post) contractual relationships

POLYTEC processes master data (e.g. names and addresses as well as contact details of suppliers, customers, consultants and other data subjects), contract data (e.g. services used, names of contact persons, payment information) for the purpose of fulfilling its contractual obligations and services in accordance with Article 6 para. 1 lit b. GDPR and for compliance with legal or regulatory requirements acc. to Article 6 para 1 lit c. GDPR.

VII Processing of visitor’s data

POLYTEC (respective visited POLYTEC entity as data controller) processes name, company, time of visit and license plate number from plant and location visitors according to Article 6 para 1 lit f GDPR on basis of legitimate interest and for the purpose of safeguarding of assets and compliance with the parking regulations.

VIII Data Processing, Data Transfer to Third Countries

In the context of processing, POLYTEC discloses, transmits or otherwise grants access to other persons and companies only only on basis of Article 6 GDPR. 

When data processing is carried out on behalf of POLYTEC, it only works with service providers within the meaning of Article 4 sub-section 8 GDPR and provides sufficient guarantees that suitable technical and organisational measures are carried out in such a way that the processing complies with existing standard legislation and the rights of data subjects are protected. For this purpose, POLYTEC enters into appropriate contracts with its data processors which meet the requirements of Article 28 GDPR and respects Articles 44 GDPR for data processors based in non-EU member states (third countries). This means, data processing is done on basis of special guarantees, such as the officially recognized statement of an EU-compliant level of data protectin (e.g. for the U.S. by ‘Privacy Shield’) or officially recognized, special contractual obligations (so called ‘standard contractual clauses’). 


A disclosure, transfer or communication of data to natural or legal persons who are neither data processors of POLYTEC, nor authorised to process data under the direct responsibility of POLYTEC or any authorized by data processors (third party), takes place only in accordance Article 6 GDPR or an express request of the data subject to transmit the data processed by POLYTEC directly to another responsible person, insofar as this is technically feasible and insofar as this does not affect the rights and freedoms of other persons. 


The processing of data by third parties is not the subject of this Privacy Policy and POLYTEC assumes no liability whatsoever in respect of any liability, responsibility or liability. 

IX Data Processing, Retention and Storage Periods

POLYTEC does not process and store data on a permanent basis, but only as is required to comply with the deadlines stipulated under the current applicable legislation. However, for at least as long as is necessary for the purpose of carrying out (pre- and post) contractual measures and the fulfilment of the contractual relationship of POLYTEC (including the expiry of any warranty claims and guarantee periods as well as the legal termination of any official or judicial proceedings). Subject to the above circumstances, stored data will be deleted immediately as a result of a legitimate objection, a revocation of consent or termination of the contractual relationship.  


Some access data which is not required for the entire duration of the contract, is not stored permanently by POLYTEC, but only temporarily for the duration of the access or the use by the data subject. If and as far as data is processed for the purpose of the anonymous internal statistical evaluation, it is only stored until completion of the evaluation or analysis and then deleted. Session cookies are only stored temporarily for the duration of access or use by the data subject; persistent cookies until the data subject removes them from the browser.

X Rights of data subjects

Any person whose personal data is processed by POLYTEC is a data subject within the meaning of the European General Data Protection Regulation. According to applicable legislation, data subjects have the following rights with regard to the data processed:  


  1. Information: data subjects can at any time request information about which personal data is processed about them and the purposes of such processing. 
  2. Rectification: data subjects have the right to demand the immediate rectification of inaccurate personal data concerning them.  
  3. Restriction: data subjects have the right to restrict processing if the accuracy of the data concerning them is disputed, the processing is unlawful, the data is no longer needed for processing or the data subject has objected to the processing. 
  4. Revocation: data subjects have the right to revoke at any time the processing of personal data concerning them. 
  5. Transferability: data subjects have the right to receive the personal data they have provided to POLYTEC in a structured, common and machine-readable format. They also have the right to request the transfer of this data to another person responsible, if technically feasible. The transferability applies only to personal data that is processed using automated procedures. 
  6. Deletion – Right to be Forgotten: the data subject has the right to demand the immediate deletion of personal data concerned if the legal basis for the processing of the data is absent or is cancelled, the data processing is revoked or is unlawful and there are no statutory retention periods that make a deletion impossible. 
  7. Identification: data security also has a high priority with regard to the rights of the data subject, which is why the assertion of the rights of the data subject is only possible after the unambiguous identification of the data subject. 

An automated decision-making process (profiling within the meaning of Article 4 sub-section 4 GDPR) does not take place.


In addition, the right of appeal exists to the relevant supervisory authority.

To claim these rights, please send an email to 

XI Exclusion of Liability

Despite all precautions and measures taken by POLYTEC it cannot be ruled out that data losses, corruptions and alterations will occur and the data subject will suffer damage. The provision of online offers by POLYTEC is at the risk and responsibility of the data subject. POLYTEC assumes no responsibility or liability for any damage or consequential loss arising out of or in connection with data loss, damage or alteration, unauthorised and / or manipulative access to or interference with data processing and data communication, or violations of data protection regulations, which was not unlawfully and culpably cause by POLYTEC or its employees.



XII Cooperation with Supervisory Authorities

POLYTEC is committed to working with the relevant regulatory authorities to handle any complaint regarding the processing of the data which it cannot itself clarify with the data subject. 

XIII Amendments to the Privacy Policy, Severability Clause

POLYTEC regularly reviews compliance with and the validity of this Privacy Policy and reserves the right to amend or supplement it at any time without giving reason, in particular, but not limited to legislation valid at the time and the interests of the data subject. 


Should individual provisions of this Privacy Policy be or become ineffective, this will not affect the validity of the remaining provisions.