This privacy policy explains which personal data we process when you visit our website and when you contact us, for what purposes and on what legal basis we do so, and what rights you have.
1. Controller
GEPOC Gesellschaft für Polymerchemie mbH
Forstweg 27
52382 Niederzier
Germany
Represented by the Managing Director Derek Cornils
Phone: +49 2428 902028
Email: info@gepoc.de
We have not appointed a data protection officer, as there is no legal obligation to do so. Please send any data protection enquiries to the contact details above.
2. Legal bases
We process personal data on the basis of the General Data Protection Regulation (GDPR), in particular:
- Art. 6(1)(a) GDPR, where you have given your consent,
- Art. 6(1)(b) GDPR, where processing is necessary for the performance of a contract or for steps prior to entering into a contract,
- Art. 6(1)(c) GDPR, where we are legally obliged to process data, for example under retention obligations in commercial and tax law,
- Art. 6(1)(f) GDPR, where processing is necessary for our legitimate interests and your interests do not override them.
3. Hosting and server log files
Our website is hosted by ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. The data is processed in data centres in Germany. The provider processes the data on our behalf under a data processing agreement pursuant to Art. 28 GDPR.
Each time our website is accessed, the following data is automatically stored in server log files: IP address of the requesting device, date and time of access, name and address of the requested file, amount of data transferred, notification of successful retrieval, browser and operating system used, and the previously visited page (referrer).
This processing serves to deliver the website, to ensure its stability and security and to detect attacks. The legal basis is Art. 6(1)(f) GDPR. The log files are stored only for as long as necessary for these purposes and are then deleted automatically. They are kept longer only where this is necessary to investigate a specific security incident.
4. Encryption
For security reasons, our website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in the address bar of your browser.
5. Protection against attacks
To protect the website against attacks, malware and abusive login attempts, we use the security plugin Wordfence Security. The IP address and technical data of the request are analysed on our server in order to detect and block suspicious access. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the security and availability of our website.
6. Cookies
We do not use cookies for analysis, tracking or advertising purposes. Technically necessary cookies may be set, for example to store the selected language or to recognise logged-in administrators. The legal basis for storing and reading this information is Section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG); the legal basis for the subsequent processing is Art. 6(1)(f) GDPR. You can delete or block cookies at any time in your browser settings.
7. Fonts
The fonts used on this website are stored locally on our server. When you open our pages, no connection is established to servers of Google or other font providers.
8. Contact form and call-back service
If you send us an enquiry via the contact form or the call-back service, we process the data you provide. This is your name and email address and, depending on the form, your company, phone number, preferred call-back time, subject and message. Mandatory fields are marked.
We use this data solely to process your enquiry and to reply to you. The form data is sent to us by email. The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract or to pre-contractual measures, and otherwise Art. 6(1)(f) GDPR. Our legitimate interest lies in answering enquiries.
We delete the data once your enquiry has been fully dealt with, unless statutory retention obligations apply. We keep business correspondence for up to six years in accordance with Section 257 of the German Commercial Code (HGB) and Section 147 of the German Fiscal Code (AO).
9. Spam protection with Cloudflare Turnstile
To protect our forms against automated submissions (spam), we use the Turnstile service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When a page containing a form is opened, Turnstile checks whether the input comes from a human. In particular, your IP address and information about your browser, operating system and your interaction with the page are transmitted to Cloudflare.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in protection against misuse and spam. Cloudflare is certified under the EU-US Data Privacy Framework. On this basis and on the basis of an adequacy decision of the European Commission, data may be transferred to the USA. Further information: https://www.cloudflare.com/privacypolicy/
10. Contact by email or phone
If you contact us by email or phone, we process your details in order to deal with your request. The legal bases and storage period are the same as described in section 8.
11. Our presence on social networks
We maintain company pages on Facebook and LinkedIn in order to provide information about our company and our products and to get in touch with interested parties. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in communicating with customers and interested parties.
When you visit our pages there, the operators of the networks process your data in accordance with their own privacy policies. This also happens if you do not have an account there or are not logged in. We have only limited influence on this processing. We are jointly responsible with the respective operator for the creation of statistics on the use of our pages (Page Insights) (Art. 26 GDPR). In agreements, the operators have undertaken to assume primary responsibility for this processing and to respond to requests from data subjects. We ourselves only receive aggregated, anonymous statistics.
Facebook: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. Privacy policy: https://www.facebook.com/privacy/policy/. Joint controller addendum: https://www.facebook.com/legal/terms/page_controller_addendum
LinkedIn: LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. Privacy policy: https://www.linkedin.com/legal/privacy-policy. Joint controller addendum: https://legal.linkedin.com/pages-joint-controller-addendum
The operators may also transfer data to the USA. Meta Platforms, Inc. and LinkedIn Corporation are certified under the EU-US Data Privacy Framework. You can exercise your rights as a data subject most effectively directly with the respective operator, as only the operator has access to the user data. However, you can also contact us at any time.
Links to our pages on social networks are included on this website as simple links. Opening our website therefore does not transmit any data to the operators. This only happens when you click on such a link.
12. Storage period
Unless a more specific storage period is stated in this policy, we store personal data only for as long as necessary for the respective purpose or as required by statutory retention periods.
13. Your rights
You have the right to
- access the data stored about you (Art. 15 GDPR),
- rectification of inaccurate data (Art. 16 GDPR),
- erasure (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR),
- withdraw consent at any time with effect for the future (Art. 7(3) GDPR).
Right to object under Art. 21 GDPR: Where we process your data on the basis of Art. 6(1)(f) GDPR, you may object to the processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.
To exercise your rights, an informal message to the contact details stated in section 1 is sufficient.
Right to lodge a complaint: You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen), Kavalleriestraße 2-4, 40213 Düsseldorf, Germany, phone +49 211 38424-0, email poststelle@ldi.nrw.de.
14. No automated decision-making
No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.
15. Version
Status: September 2026. We update this privacy policy when our website, our services or the legal situation change.
This is a translation for information purposes. In case of doubt, the German version applies.