Data protection declaration

I. Responsible person

a) Responsible for data processing

KVG Kunststoff-Vertriebs KG
Feincheswiese 5
56424 Staudt, Germany

Phone: +49 (0)2602 / 68 05 0
Fax: +49 (0)2602 / 68 05 40
Email: info@kvg-staudt.de
Website: https://www.kvg-staudt.de/legal-notice/

b) Data protection officer

Dr. Julia Zirfas
ZUKUNFT:Datenschutz
56459 Kaden

Email: info@zukunft-datenschutz.de

II. What are personal details?

Personal details are all data which directly or indirectly refer to you as a person. This includes,
for example, data such as your date of birth, your address and IP address but also texts or images
which allow to identify you as a person. The following data protection declaration explains which data
we collect and what we use it for. It also explains how and for which purpose this occurs.

Data processing generally takes place in Germany or in other European countries. If, in exceptional
cases, a transfer to a third country takes place, then only to those countries with an adequate level
of data protection or in which we can ensure this through standard contractual clauses or certifications.

III. Which data is processed?

a) When visiting our website

When you visit our website www.kvg-staudt.de, each access and each retrieval of a file stored on this
website is logged to allow the use of the internet content. The following information is logged:

• name of the visited page
• date and time of the visit
• data volume transferred
• duration of the visit
• notification on the successful visit
• requesting domain
• IP address
• browser used
• operating system used
• name of your access provider

The data is also stored in the log files of our system. A storage of these data together with other
personal details of the user does not take place.

1. Legal basis

The legal basis for the temporary storage of data and log files is a legitimate interest in accordance
with art. 6(1) point (f) of the GDPR.

2. For what reason is this data processed?

The temporary storage of the IP address by the system is necessary to allow a delivery of the website
to the user’s PC. For this purpose, the user’s IP address must remain stored for the duration of the
session. Data is stored in log files to guarantee the functionality of the website. The data also
helps us improve the website and guarantee the safety of our IT systems. In this context, an
evaluation of the data does not take place for marketing purposes.

3. How long is the data stored?

The data is deleted as soon as it is no longer required to obtain the purpose of its collection. In
case of a recording of data for the provision of the website, this is the case if the respective
session has ended. The data stored in the log files is deleted after 30 days at the latest.

b) When using cookies

Our website uses cookies. Cookies are text files which are stored in the internet browser or by the
internet browser on the user’s computer system. When a user visits a website, a cookie can be stored
on the user’s operating system. This cookie contains a characteristic character string which allows a
clear identification of the browser when the website is visited again. Session cookies store
information which are used during your current visit to the website. These cookies are automatically
deleted when you leave our website.

Furthermore, we use temporary cookies which are stored on your end device for a defined period of time
for the improvement of our user-friendliness. If you visit our site again to make use of our services,
it is automatically recognised that you have visited us already, and which entries and settings you
made, so you don’t have to enter these again.

1. Legal basis

The data processed by cookies is required for the mentioned purposes to safeguard our legitimate
interests in accordance with art. 6(1) p. 1 point (f) of the GDPR.

2. For what reason is this data processed?

The reason cookies are used is to simplify the use of the website for users. Some functions of our
website cannot be provided without the use of cookies. For this purpose, it is necessary that the
browser is detected again also after a page change.

We don’t use the collected user data to create user profiles or supply visitors of our site with
advertising. The information generated by the cookies on your use of this website is not passed on to
third parties.

3. How long are cookies stored and how can I delete them?

Cookies are stored on your PC and transferred from this to another page. As a user, you therefore also
have full control over the use of cookies. You have the chance of preventing the use of cookies. To do
this, you must change the respective settings on your internet browser (e.g. Internet Explorer, Mozilla
Firefox, Opera or Safari). Already stored cookies can be deleted at any time. This can also be done
automatically. If cookies are deactivated for our website, you may no longer be able to use all the
functions of the website in full.

4. Further information – Cookie banner

We use a cookie banner provided by the company Borlabs GmbH (Hamburger Str. 11, 22083 Hamburg) for the
targeted control of the cookies used on our website.

This ensures that cookies are only used for either necessary purposes or for the purposes you have
consented to. This consent management is a basic prerequisite for being able to save your desired
settings for the use of our website.

For this purpose, when you enter our website, a Borlabs cookie is stored in your browser, in which the
consents you have given or the revocation of these consents are stored. This data will not be passed on
to the provider Borlabs.

The basic request for consent is legally mandatory. The use of the Borlab cookie banner is therefore
carried out in accordance with § 25 para. 2 no. 2 TTDSG and Art. 6 (1) point (c) GDPR. We need the
banner to provide you with this online service. The legal basis for related and equally necessary data
processing is Art. 6 (1) point (f) GDPR.

The data collected will be stored until you ask us to delete it or delete the Borlabs cookie yourself
or the purpose for which the data is stored no longer applies (the cookie has a duration of 182 days).
Mandatory statutory retention periods remain unaffected. Details on the data processing of Borlabs
Cookie can be found under: https://borlabs.io/kb/what-information-does-borlabs-cookie-store/

(Section End User Data).

Your cookie settings

c) Hosting

This website is hosted and made available in cooperation with an external service provider. The
following personal data is processed as part of the hosting:

• IP addresses
• Website traffic and other data generated through a website
• Content of contact requests as well as associated meta and communication data, as well as names,
  contract data and contact details in this context, if necessary

1. Legal basis

Hosting serves to make the website available and thus to fulfil the contract with our potential and
existing customers (Art. 6 (1) (b) GDPR) and in the interest of a secure, fast and efficient provision
of our website by a professional provider (Art. 6 (1) (f) GDPR).

2. For what purpose is this data processed?

Our host will only process your data to the extent necessary to fulfil its performance obligations and
follow our instructions with regard to this data.

In the context of order processing in accordance with Art. 28 GDPR, we use the hosting provider
ALL-INKL.COM (Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf). The location of the server is
Karlsruhe. For this purpose, a corresponding contract for order processing has been concluded with the
provider. Details about the provider can be found on the website and privacy policy of All-Inkl: https://all-inkl.com/en/privacy-policy/.

3. How long will the data be stored?

Your data will be stored by the contractor and the hosting company until the purpose for the data
processing no longer applies.

d) When filling out the contact form

You can contact us on our website via a contact form. For this, we need your name, email address and of
course your message to us.

When the message is sent, the following data is also stored:

• IP address of the user
• Date and time

Alternatively, you can contact us by email address (above under “I. Responsible person” or in Legal
Notice). In this case, only the personal details of the user transmitted in the email are stored.

1. Legal basis

The legal basis for the processing of data which is transferred by using our contact form or by
submitting an email is in accordance with art. 6(1) point (f) of the GDPR. If the aim is to conclude an
agreement, art. 6(1) point (b) of the GDPR is an additional legal basis for the processing.

2. For what reason is this data processed?

The data is only required to reply and make contact. The transfer of data from the contact form takes
place in an encrypted manner.

3. How long is the data stored?

The personal details collected by us to use the contact form are automatically deleted after the
completion of your request. This can also lead to consequent inquiries, so the data remains stored
until the final reply. The communication is then concluded if it can be derived from the circumstances
that the issue concerned is definitively resolved.

The personal details additionally collected during the sending process are deleted after 30 days at the
latest.

e) When sending contract-relevant information

We send information to you via email as part of our customer relationship. These are important for you
as our customers. Here we use the contact details you have provided to us. This is not the sending of a
regular newsletter.

1. Legal basis

The legal basis for the processing of the data used to send this information is Art. 6 (1) (b) GDPR, as
the contact is necessary for the performance of our contractual relationship.

2. For what purpose is this data processed?

The data will only be used for information on contract-related topics by email or post.

3. How long will the data be stored?

The data will be blocked for further contact after the termination of our contractual relationship.

f) By using Google WebFonts

This webpage uses so-called “web fonts” for the uniform representation of texts. These fonts are
provided by Google
(https://policies.google.com/privacy?hl=de)
and Font Awesome
(https://fontawesome.com/privacy).

1. Legal basis

Web fonts are used in the interest of a uniform and appealing presentation of our online offers. This
represents a legitimate interest within the meaning of Art. 6 (1) (f) GDPR.

2. For what reason is this data processed?

The use of WebFonts affects the appearance of our website. In order to guarantee you, the user, a
uniform and appealing presentation, we incorporate these fonts.

3. Will the data be transferred?

Both fonts are installed locally. There is no connection to Google or Font Awesome servers.

g) Social media

We maintain a company website on LinkedIn. With this page we want to inform you, as a customer and
interested party, about our services and of course also communicate with you.

1. Legal basis

The processing of your personal data is carried out on the one hand on the basis of our legitimate
interests in effective information and communication with our users and customers, the control and
improvement of our business processes (in particular also corresponding advertising measures) as well
as the business analysis and further development of services and products (Art. 6 para. 1 lit. f
GDPR).

In addition, we also answer specific inquiries there. This is usually done within the framework of our
contractual relationship with you or, in the case of interested parties, as a pre-contractual measure
(Art. 6 para. 1 lit. b GDPR).

2. For what purpose is the data processed?

• Direct contact with customers and interested parties
• Statistical evaluations for business analysis and further development of services and products
• Providing you with information about our company and products

3. Further information

Provider of the LinkedIn platform is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2,
Ireland.

If you are a member there, LinkedIn can assign the access to the content and functions on our profile
to your user profile there. For more information, please refer to LinkedIn Ireland’s privacy policy at:
https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy.

Since LinkedIn is a US company, some data is also transferred to the USA. This transfer takes place on
the basis of the terms of use and data protection agreed between you and LinkedIn when joining this
professional network.

h) Google Analytics and Google Tag Manager

Our website uses Google Analytics, a web analytics service provided by Google (Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics uses cookies that enable an analysis of your website usage (for cookies, see above under b).

With the help of Google Analytics tracking, we are able to recognize whether the user has performed certain actions. For example, we can analyze how often which buttons on our website have been clicked and which products are checked or purchased particularly frequently. The purpose of this information is to compile conversion statistics. We learn how many people clicked on our ads and what actions they took. We do not receive any information that would allow us to personally identify users. As such, Google uses cookies or similar recognition technologies for identification purposes.

The information generated by cookies about your use of this website, such as

• Browser type/version,
• operating system used,
• Referrer URL (the previously visited page),
• Host name of the accessing computer (IP address),
• Time of the server request, are transmitted to a Google server in the USA and stored there.

Google Tag Manager is a tool that allows us to integrate tracking or statistics tools and other technologies on our website. The Google Tag Manager itself does not create usage profiles, does not store cookies and does not carry out independent analyses. It only manages and operates the tools integrated through it. However, Google Tag Manager does collect your IP address, which may also be transmitted to Google’s parent company in the United States.

1. Legal basis

The legal basis for the setting of the cookie is § 25 para. 1 TDDDG. Personal data processed exclusively with your consent (Art. 6 para. 1 lit. a GDPR). You can give your consent directly in our cookie banner.

2. For what purpose is this data processed?

Google evaluates the use of our online offer for us in order to compile reports on our activities and to provide us with other services related to the use of this online offer and the use of the Internet. For example, Google Marketing Services allow us to display advertisements in order to present users only with ads that potentially correspond to their interests. User data is processed within the framework of Google marketing services only within pseudonymous user profiles.

3. Further Information

For more information on Google Conversion Tracking, please refer to Google’s privacy policy at: https://policies.google.com/privacy?hl=en

We only use Google Analytics with IP anonymization activated. This means that the IP address of users is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there.

Users’ personal data will be deleted or anonymized after 14 months.

IV. What are your rights as an affected person?

If your personal details are processed, you are an affected person pursuant to the GDPR and you have
the following rights against the person responsible:

• Right of access by the data subject according to art. 15 of the GDPR (possible restrictions according to sec. 34 of the BDSG [German Federal Data Protection Act])
• Right to rectification according to art. 16 of the GDPR
• Right to erasure according to art. 17 of the GDPR (possible restrictions according to sec. 35 of the BDSG)
• Right to restriction of processing according to art. 18 of the GDPR
• Right to object according to art. 21 of the GDPR
• Withdraw your consent according to art. 7 (3) GDPR
• Right to data portability according to art. 20 of the GDPR
• Right to lodge a complaint with a supervisory authority according to art. 77 of the GDPR in conjunction with sec. 19 of the BDSG

V. How is data transmitted?

For security reasons and to protect the transfer of confidential content which you send us as a website
operator, we use an SSL or TLS encryption. You can tell that it is an encrypted connection from the
fact that the address line of the browser changes from “http://” to “https://”, and from the padlock
icon in your browser line. When the SSL or TLS encryption is activated, the data you submit to us
cannot be read by third parties.

VI. How can I object or withdraw consent?

If you have given us your consent for the processing of personal data, you have the right to revoke
your declaration at any time with effect for the future.

Additionally, you can object to data processing that is based on the legal basis of “legitimate
interest” (Art. 6 (1) (f) GDPR). You also have the right to object to the processing of personal data
for direct marketing purposes (Art. 21 (2) GDPR). Once you have objected, your data will no longer be
processed for direct marketing purposes (Art. 21 (3) GDPR).

For executing these rights, please send your withdrawal/objection by email or post to the
above-mentioned contact details of KVG Kunststoff-Vertriebs KG.

VII. Status of the declaration

This data protection declaration is currently valid and is the version of November 2025.

Through the development of our website and its contents or due to changed legal or official
requirements, it may be necessary to change this data protection declaration.