Privacy policy
As a service to our English-speaking stakeholders, the following is a translation of our German privacy policy. In the event of any inconsistency between the German and the English version the German version shall prevail.

1. Privacy policy

Oryx Stainless AG, as the responsible organization, is pleased to welcome you to our website. In the following sections we would like to inform you transparently about the type, scope and purpose of data collection and use. If you need further information, comments or complaints, you will find the contact details of our data protection officer at the end of this privacy policy.

The responsible organization within the meaning of Art. 4 para. 7 EU GDPR is:

ORYX STAINLESS AG
Rheinstraße 97
45478 Mülheim an der Ruhr
Germany
Members of the Management Board: Tobias Kämmer, Kai Kunde, Roland Mauss

1.1 Explanation of data protection
In principle, data protection applies to all information that relates to an identified or identifiable person and can be directly or indirectly assigned to this person (so-called personal data). This includes information such as name, address, date of birth, etc. or combinations thereof.
Likewise, information that can in principle be assigned to a natural person via an identification (e.g. number, IP address, etc.) also falls under the requirements of data protection.

However, if the information is changed to such a level that neither direct nor indirect allocation to a natural person is possible, then the information is anonymous. Such data (e.g. aggregated data records or shortened IP addresses) is no longer subject to data protection regulations.

With the following explanations we would like to inform you about the processing of personal data concerning this website. The term processing covers the complete process from the collection, storage, processing and/or transfer to the deletion of the data.

1.2 Information on data collection

Use of our website

When you simply use the website for information purposes, i.e. when you do not register or otherwise provide information, we only collect the following data to be able to transfer the website to your computer. These are the IP address, the date and time of the request; the time zone difference to Greenwich Mean Time; the content of the request (specific page); the access status/HTTP status code; the amount of data transmitted; the website from which the request comes, the browser; the operating system and its interface and language as well as the version of the browser software. This data is not stored. Furthermore, there is no evaluation of visitor behaviour.

1.2.2 Contact form

When you contact us by e-mail or via a contact form, the data you provide (surname, first name, company, e-mail address, postal address, telephone number, fax number, etc.) will be stored by us to answer your questions. All information provided by you is voluntary. You only need to provide an e-mail address if you would like to receive an answer. Your data will be stored with your consent. The legal basis is Art. 6 para. 1 sentence 1 lit. a EU GDPR. We delete the data arising in this context after the storage is no longer necessary, or limit the processing if statutory retention obligations exist.

1.2.3 Storage of cookies

We use cookies to make our website more ergonomic and user-friendly. From a technical point of view, these are small text files that are transferred to your browser when you access our site and stored locally. We use cookies in which information about your visit (so-called “session cookies”) or certain technical options of your browser are stored. Cookies may be necessary for the use of individual functions. We use the following cookies:

Name: _utma
Scope of application: oryx.com
Storage duration: 2 years
Explanation: Collects data on how often a user has visited a website, as well as data for the first and last visit. Used by Google Analytics.

Name: _utmb
Scope of application: oryx.com
Storage duration: Session
Explanation: Registers a timestamp with the exact time at which the user accesses the website. Used by Google Analytics to calculate the duration of a website visit.

Name: _utmc
Scope of application: oryx.com
Storage duration: Session
Explanation: Registers a timestamp with the exact time at which the user leaves the website. Used by Google Analytics to calculate the duration of a website visit.

Name: _utmt
Scope of application: oryx.com
Storage duration: Session
Explanation: Used to slow down the speed of requests to the server.

Name: _utmz
Scope of application: oryx.com
Storage duration: 6 month
Explanation: Collects data about where the user came from, which search engine was used, which link was clicked and which search terms were used. Used by Google Analytics.

Name: symfony
Scope of application: oryx.com
Storage duration: 6 month
Explanation: Saves the language version of the website selected by the user.

For the providing of our website in appropriate quality, the setting of the mentioned cookies is technically necessary and thus a necessary part of the use of our website (Art. 6 Par. 1b EU GDPR).
1.3 Tracking
Google Analytics
(1) This website uses Google Analytics, a web analysis service of Google Inc. “(“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, Google will reduce your IP address within Member States of the European Union or in other states party to the Agreement on the European Economic Area beforehand. Only in exceptional cases the full IP address will be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with further services associated with website and internet use.
(2) The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.

(3) You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en

(4) This website uses Google Analytics with the extension “_anonymizeIp()”. As a result, IP addresses are further processed in abbreviated form, so that a personal relationship can be ruled out. As far as the data collected about you is personal, it will be excluded immediately and the personal data will be deleted immediately.

(5) We use Google Analytics to analyse and regularly improve the use of our website. We can improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 Par. 1 S. 1 lit. f EU GDPR.

(6) Third party information: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. user conditions: http://www.google.com/analytics/terms/en.html, privacy policy: http://www.google.com/intl/en/analytics/learn/privacy.html, and privacy policy: http://www.google.de/intl/en/policies/privacy.

(7) This website also uses Google Analytics for a device-independent analysis of visitor flows that is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under “My data”, “Personal data”.
https://tools.google.com/dlpage/gaoptout?hl=en

1.4 Integration of service providers

For the operation of this website we use the services of a service provider specialized in web hosting. On request, we can provide you with a detailed overview of the service providers we have integrated. A passing on of data to other service providers does not take place.

2. Data protection rights and contact data

For the functions of our website explained in the section “Information on data collection” or the purposes of data processing described there, you basically have the following rights:

Right of access by the data subject (Art. 15 EU GDPR)
If you ask us to do, we will provide you with information about whether we process your personal data. In such processing, we have to explain the purposes for which the processing takes place, which categories of personal data are processed, to whom data may be transferred and for how long the data is stored.

Right to rectification (Art. 16 EU GDPR), Right to object (Art. 21 EU GDPR), Right to restriction of processing (Art. 18 EU GDPR)
If you notice that we process personal data that is incorrect or incomplete, you may of course request a correction. You may also demand that, if justified, the processing will be restricted.

Right to erasure (Art. 17 EU GDPR) and Right to data portability (Art. 20 EU GDPR)
In the case that personal data is processed by us without justification or after the purpose has ceased to exist, you can request its deletion. Furthermore, you have the right to receive all information you have provided us in a structured, common and machine-readable format.

For a better understanding and easier readability of personal rights, we have summarized these in parts here. Please inform yourself as required (original text: link to http://eur-lex.europa.eu/legal-content/en/TXT/?uri=CELEX%3A32016R0679 or contact our data protection officer directly).

You can make use of your rights to data protection at any time and without incurring any costs. Our data protection officer will examine and answer each request individually. Please use our contact form for a data protection request; https://www.oryx.com/en/contact/index or use one of the following contact options.

2.1.1 Data Protection Officer

Please contact our data protection officer if you have any questions concerning data protection:

Prof. Dr. Thomas Jäschke
DATATREE AG
Märkische Strasse 212-218
44141 Dortmund
Germany

With this privacy policy, we would like to create the necessary transparency for data processing when visiting our website and in this way also fulfil our duty to inform. If we have not succeeded, please do not hesitate to contact us or our data protection officer.

2.1.2 Competent supervisory authority

Of course, you can also contact the data protection supervisory authority responsible for us, this is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen;  Postfach 20 04 44; 40102 Düsseldorf; poststelle@ldi.nrw.dehttps://www.ldi.nrw.de

2.1.3 Up-to-dateness

We continuously optimize our website and make technical changes as required. For this reason, we explicitly point out that our privacy policy is only valid in the version valid at the time of your visit.

Last update: 24.05.2018