In the following we inform you about the collection of personal data when using our website. Personal data are all data that can be related to you personally, e.g. name, address, email addresses or user behavior.

I. Name and address of the person responsible

Responsible according to Art. 4 No. 7 General Data Protection Regulation ("GDPR") is:

ICDLI International Committee of the Decorative Laminates Industry aisbl

Rue de la presse 4 I 1000 Brussels I Belgium

Headoffice:
Mainzer Landstraße 55 I 60329 Frankfurt am Main I Germany
Phone: +49 (0) 69/40 89 555 4-0
E-Mail: info@icdli.com

ICDLI board of directors authorized to represent:
Miguel Nogueira (President)
Lutz Reitzel (Vice President)
Rolf Wermelinger (Vice President)
Ralf Olsen (Secretary General)

II. Name and address of the data protection officer

The legal requirements for the obligation to appoint a data protection officer do not exist.

If you have any concerns about data protection, please contact info@icdli.com.

III. General information about data processing

1. Purpose and scope of processing personal data

We collect and use the personal data of our users on the basis of legal regulations insofar as this is necessary to provide and maintain the functions, content and services of the website. When using special services such as the use of a contact form, the collection and use of personal data of our users takes place with the user's consent.

2. Legal basis for the processing of personal data

The legal basis for the processing of personal data is Art. 6. Para. 1 lit. a DS-GVO, when processing personal data to fulfill a contract, Art. 6 para. 1 lit. b GDPR, when processing personal datato fulfill a legal obligation Art. 6. Para. 1 lit. c GDPR and in the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR.

If the processing is necessary to safeguard the legitimate interests of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for processing.

3. Data deletion and storage duration

Personal data of the data subject will be deleted or blocked as soon as the purpose or the legal obligation to store them no longer applies. Storage can also take place if legal provisions so require.

4. Encrypted transmission

For security reasons and to protect the transmission of personal data, such as inquiries that you send to us as the website operator, this website uses SSL encryption (Secure Socket Layer) in conjunction with the highest level of encryption provided by your browser is supported. As a rule, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead.

IV. Provision of the website and creation of log files

1. Description and scope of data processing

Every time our website is accessed for informational purposes only, i.e. if you do not register or otherwise provide us with information, our system automatically collects personal data and information that your computer system transmits to our server. If you want to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security:

(1) Information about the browser software, its language and the version used
(2) Operating system and user interface
(3) IP address of the user
(4) Date and time of access
(5) Content of the request (specific page)
(6) Access status / http status code
(7) Websites from which the user's system reaches our website

The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.

2. Legal basis for data processing

The legal basis for the temporary storage of the data is Art. 6 Para. 1 lit. f GDPR.

3. Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. To do this, the user's IP address must remain stored for the duration of the session.

The log files are saved to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. The data is not evaluated for marketing purposes in this context.

Our legitimate interest in data processing in accordance with Art. 6 Para. 1 lit. f GDPR.

4. Duration of storage

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. If the data is stored in log files, this is the case after seven days at the latest. Further storage is possible. In this case, the IP addresses of the users are deleted or alienated so that it is no longer possible to assign the calling client.

5. Opposition and removal options

An objection to the collection and processing of personal data is only possible with voluntary information given in the context of consent, but not with data in log files that are absolutely necessary for the operation of the website.

V. Use of cookies

Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's end device (PC, laptop, tablet, smartphone, etc.). If a user calls up a website, a cookie can be saved on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be clearly identified when the website is called up again. Cookies do not cause any damage to your end device and do not contain viruses, Trojans or other malware. Information is stored in the cookie, which results in connection with the specific device used. However, this does not mean that we are immediately aware of your identity.

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.

The following data is stored and transmitted in the cookies:

(1) Selected language

In addition, cookies from Matomo are used to analyze visitor behavior. Please find further information under VII. Tools / Other technologies relevant to data protection of the Privacy Policy.

Legal basis for data processing

The legal basis for the processing of personal data is Art. 6 Para. 1 lit. f GDPR.

3. Purpose of data processing

The purpose of using cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For this it is necessary that the browser is recognized even after a page change. We need cookies for the following applications:

(1) Preselection of the language of the website

The user data collected through technically necessary cookies are not used to create user profiles. In the aforementioned purposes, our legitimate interest lies in the processing of personal data in accordance with Art. 6 Para. 1 lit. f GDPR.

4. Duration of storage, objection and elimination options

Cookies are stored on the user's computer and transmitted from there to our site. As a user, you therefore have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may not be possible to use all functions of the website to their full extent.

VI. Contact form and email contact

1. Description and scope of data processing

There are several forms on our website that can be used to contact us electronically. If a user makes use of this option, the data entered in the input mask will be transmitted to us and saved. These data are:

• Name, company, address, phone, email

When the message is sent, the following data is also saved:

(1) IP address
(2) Date and time the form was sent

Your consent to the processing of the data is obtained as part of the sending process and reference is made to this data protection declaration.

Alternatively, you can contact us via the email address provided. In this case, the user's personal data transmitted with the email will be saved.

In this context, the data is not passed on to third parties. The data will only be used to process the conversation.

2. Legal basis for data processing

The legal basis for the processing of the data is Art. 6 Para. 1 lit. a DS-GVO, when processing the data that is transmitted in the course of sending an email, Art. 6 para. 1 lit. f GDPR.

If the email contact is aimed at the conclusion of a contract, then an additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

3. Purpose of data processing

The processing of personal data from the input mask serves us only to process the contact. If you contact us by email, this is also the necessary legitimate interest in the processing of the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

4. Duration of storage

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those that were sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been finally clarified. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

5. Opposition and removal options

The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued. In the event of an objection to optional personal data that is not marked as a mandatory field in the contact forms, a conversation may possibly continue.

To revoke the processing of personal data transmitted via contact form or email, simply send an informal email to info@icdli.com.

In this case, all personal data saved in the course of contacting us will be deleted.

VII. Tools / Other technologies relevant to data protection

1. Adobe Typekit

This website uses web fonts provided by Adobe Systems Incorporated: 345 Park Avenue, San Jose, California 95110-2704, USA ("Adobe") to display fonts. When you visit a page, your browser loads the required web fonts into your browser cache in order to display fonts correctly.

For this purpose, the browser you are using must connect to the Adobe servers. This gives Adobe knowledge that our website was accessed via your IP address. Adobe Typekit is used in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. The user has a right to object to the processing of his IP address and the information that he has accessed our website. This right must be exercised directly against Adobe.

Adobe Systems Incorporated, based in the USA, is certified for the US-European data protection convention “Privacy Shield”, which guarantees compliance with the data protection level applicable in the EU.

Further information on Adobe Typekit can be found at https://typekit.com/ and in Adobe's data protection declaration: https://www.adobe.com/de/privacy.html

2. Use of Matomo (formerly Piwik)

(1) Our website uses the Matomo web analytics service to analyze and regularly improve the use of our website. Using the statistics obtained, we can improve our offer and make it more interesting for you as a user. The legal basis for the use of Matomo is Art. 6 para. 1 sentence 1 lit. f GDPR.
(2) For this purpose, cookies are stored on your computer for this evaluation (more details in §3). The responsible person stores the information collected in this way only on his server in Germany. You can stop the evaluation by deleting existing cookies and preventing the storage of cookies. If you prevent the storage of cookies, we would like to point out that you may not be able to use this website to its full extent. The setting in your browser can prevent cookies from being saved.
(3) This website uses Matomo with the "AnonymizeIP" extension. As a result, IP addresses are further processed in an abbreviated form, which means that they cannot be directly linked to a person. The IP address transmitted by your browser using Matomo will not be merged with other data collected by us. The anonymized raw data and reports generated from it will be deleted after 356 days at the latest.
(4) The Matomo program is an open source project. You can obtain information from the third-party provider on data protection at https://matomo.org/privacy-policy/

(5) You can explicitly object to the collection by Matomo:

VIII. Rights of the data subject

If personal data is processed by you, you are the person concerned in the sense of GDPR and you have the following rights vis-à-vis the person responsible. If you have any questions about data protection and in particular about the rights of those affected, please contact: info@icdli.com

1. Right to information (Art. 15 GDPR)

You can request confirmation from the controller as to whether personal data concerning you will be processed by us. If such processing has taken place, you can request information from the controller about the following information about your personal data processed by us in accordance with Art. 15 GDPR.

2. Right to rectification (§ 16 GDPR)

You have a right acc. 16 GDPR to immediately request the correction of incorrect or incomplete personal data stored by us.

3. Right to restriction of processing (Art. 18 GDPR)

Under the requirements of Art. 18 GDPR, you can request that the processing of your personal data be restricted. If the restriction of processing according to the above You will be informed by the person responsible before the restriction is lifted.

4. Right to deletion (Art. 17 GDPR)

You can acc. Art. 17 GDPR request deletion of your personal data stored by us.

5. Right to be informed by third parties

If you have asserted the right to correction, deletion or restriction of processing against the person responsible, he is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this correction or deletion of the data or restriction of processing, unless this proves to be impossible or involves a disproportionate effort. You also have the right to be informed about these recipients.

6. Right to data portability

In accordance with Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request transmission to another person responsible.

7. Right to object

If your personal data is based on legitimate interests in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR are processed, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided there are reasons for this that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which we will implement without specifying a particular situation.

If you would like to exercise your right of withdrawal or objection, an email to info@icdli.com is sufficient.

8. Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your declaration of consent under data protection law at any time. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.

9. Automated decision in individual cases including profiling

You have the right not to be subjected to a decision based solely on automated processing - including profiling - that has legal effect on you or similarly significantly affects you. This does not apply when making the decision

(1) is necessary for the conclusion or performance of a contract between you and the person responsible,
(2) is permissible on the basis of legal provisions of the Union or of the Member States to which the controller is subject and these legal provisions contain appropriate measures to safeguard your rights and freedoms as well as your legitimate interests or
(3) with your express consent.
However, these decisions may not be based on special categories of personal data according to Art. 9 Para. 1 GDPR, unless Art. 9 Para. 2 lit. a or g applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.

With regard to the cases mentioned in (1) and (3), the person responsible takes appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, including at least the right to obtain the intervention of a person on the part of the person responsible, to express your own position and heard of contesting the decision.

10. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your residence, your place of work or the place of the alleged violation, if you believe that the processing of your personal data is against the GDPR violates.

The supervisory authority to which the complaint was submitted will inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy in accordance with Art. 78 GDPR

Updated 09th July 2019