Privacy Statement of PCC BakkiSilicon hf.

The protection of personal data is important to us. BakkiSilicon hf. therefore processes personal data in accordance with the applicable legal provisions covering the privacy and protection of personal data. So that you can be sure of your rights, we have compiled all the relevant information for you here.

This data protection declaration (“Privacy Policy”) will be further adapted as we continue to develop our website and/or our portfolio. In order to keep up to date with the current status of these data usage regulations, we therefore urge you to consult this page on a regular basis.

Status as of July 2018

The data controller pursuant to the GDPR, other national data protection laws of the EU member states and the various data protection regulations otherwise in existence is:

PCC BakkiSilicon hf.
Vallholtsvegur 3
640 Húsavík
Iceland
Phone: +354 464 00 60
send E-Mail
Website: www.pcc.is

The data protection officer for the data controller is:

PCC BakkiSilicon hf.
Data Protection Officer
Vallholtsvegur 3
640 Húsavík
Iceland
Phone: +354 464 00 60
send E-Mail
Website: www.pcc.is

1. Description and scope of data processing

Every time you visit our website, our system automatically collects data and information from the operating system of the accessing device.

The data collected by this means are as follows:

– Information on the browser type and version
– The user’s operating system
– The user’s internet service provider
– The user’s IP address
– Date and time of access
– Websites from which the user’s system reaches our website
– Websites accessed by the user’s system through our website

2. Legal basis for data processing

The legal basis for the temporary storage of said data and the associated log files is provided by point f of Art. 6 (1) GDPR and derives from our legitimate interest in improving the stability and functionality of our website.

3. Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s device. For this, the IP address of the user must remain stored for the duration of the session.

These requirements likewise derive from our legitimate interest in data processing pursuant to point f of Art. 6 (1) GDPR.

4. Storage period

The data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected. Where the data is collected for the purpose of enabling access to the website, this is the case when the respective session has ended.

5. Facilities for objection and removal

The collection of data for the provision of the website and the storage of data in log files are essential for the operation of the website. Consequently, there is no facility for the user to object to this.

6. Recipients

The only recipients of the data are the data controller and, where required, technical service providers who act as contract processors for the operation and maintenance of our website.

1. Description and scope of data processing

Our website makes use of cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user’s device. If a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic character string that enables discrete identification of the browser when the website is called up again.

Depending on the provider of your browser, you will find the necessary information under the following links:

• Mozilla Firefox: https://support.mozilla.org/en-US/kb/delete-cookies-remove-info-websites-stored
• Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
• Google Chrome: https://support.google.com/accounts/answer/61416?hl=en
• Opera: http://www.opera.com/de/help
• Safari: https://support.apple.com/kb/PH21411?viewlocale=en_US&locale=en_US

2. Legal basis for data processing

The legal basis for the processing of personal data through the use of cookies is provided by point f of Art. 6 (1) GDPR.

3. Purpose of data processing

The purpose of using technically essential cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. It is essential, for example, that the browser continues to be recognized after a page change.

Cookies are used to improve the quality of our website and its content. Through the use of analysis cookies, we learn how the website is used, enabling us to further optimize functionality and content.

These requirements likewise derive from our legitimate interest in the processing of personal data pursuant to point f of Art. 6 (1) GDPR.

4. Data storage period and facilities for objection and removal

Cookies are stored on the user’s device and transmitted to our website. This means that you as a user have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your internet browser. Cookies that have already been stored can be erased at any time. This process can also be made to take place automatically. If cookies are deactivated for our website, it may no longer be possible to make full use of all functions of the website.

1. Contact form and email contact

a. Description and scope of data processing
There is a contact form on our website which can be used for initiating electronic correspondence. If a user utilizes this facility, the data entered in the electronic form will be transmitted to us and stored. The specific data collected in the case of a contact form is apparent from the respective contact form. This contact process does not result in any data being passed on to third parties. The data are used exclusively for the purpose of initiating and facilitating correspondence.

b. Legal basis for data processing
The legal basis for data processing is provided by point f of Art. 6 (1) GDPR. If the purpose of your contact is to conclude a contract, the additional legal basis for the processing of such data is provided by point b of Art. 6 (1) GDPR.

c. Purpose of data processing
The processing of the personal data from the contact form is solely for the purpose of establishing contact. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

d. Storage period
The data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of the personal data collected via the input mask of the contact form, this is the case when correspondence with the user is concluded. This occurs when it can be inferred from the circumstances that the matter in question has been finally settled.

e. Facilities for objection and removal
The user may revoke consent to the processing of personal data at any time. All personal data stored in the course of the user contacting us will then be erased.

2. Making contact by email

If you contact us by email, the data you provide will be used to process your inquiry. Providing the data is necessary for processing and answering your inquiry – if such data is not provided, we would be unable to properly respond to your approach. The legal basis for such processing is provided by point b of Art. 6 (1) GDPR.

Your data will be erased if your inquiry has been finally answered and there is no legal obligation to retain your data, such as would be the case e.g. where a contract had to be subsequently concluded.

3. Data processing at trade fairs and exhibitions

If you provide us with your contact details at a trade fair or exhibition, e.g. by giving us your business card, we record this data in our CRM system. We use your data to contact you as requested, to establish a business relationship and to send you information material.

4. Data processing after telephone contact

If you contact us by telephone, we will record your name, your company, your inquiry and, if necessary, your contact details for a callback. Providing the data is necessary for processing and answering your inquiry – if such data is not provided, we would be unable to properly respond to your approach. The legal basis for such processing is provided by point b of Art. 6 (1) GDPR.

5. Recipients

In special cases it may be necessary for us to process your data Group-wide. However, data will only be processed within the PCC-group if we have legal permission to do so. This is e.g. the case if other companies of the PCC-group act for us in the context of order processing or if a legitimate interest exists pursuant to point f of Art. 6 (1) GDPR.

1. Description and scope of data processing

The categories of personal data processed include in particular your primary details (e.g. first name, surname, additional names, nationality and date of birth), contact data (such as private address, [mobile] telephone number, email address) as well as the data relating to the full application procedure (cover letter, certificates, interviews, qualifications and previous activities). If you have also voluntarily provided special categories of personal data (such as health data, religious affiliation, degree of disability) in the letter of application or during the application procedure, processing will only take place if you have consented to this or there is a legal justification for such action.

2. Purpose of data processing

The processing of the applicant data collected by us or transmitted to us facilitates the application procedure and an assessment as to what extent each candidate is suitable for the position in question.

3. Legal basis

The processing of your applicant data is necessary in order to be able to decide on the establishment of an employment relationship. The primary legal basis for this is provided by point b of Art. 6 (1) GDPR in conjunction with Article 26, Section 1 BDSG (German Federal Data Protection Act).

4. Recipients

We will only pass on your personal data to those persons and departments within our company (e.g. personnel/HR department and the specialist unit/department concerned) and to selected contract data processors (e.g. personnel/recruitment service providers) who need them for the above-mentioned purposes and/or to fulfill our pre-contractual/contractual and statutory obligations.

5. Storage period

We erase your personal data three months following the issue of a rejection or a rejection or withdrawal by you. This does not apply if legal provisions oppose such erasure, if further retention is necessary for the purpose of providing evidence or if you have consented to longer storage. If you are hired, we will store and process your data as part of the subsequent employment relationship.

If your personal data is processed, you are a data subject within the meaning of the GDPR and you therefore have the following rights over the data controller:

1. Right of access

You may demand confirmation from the data controller whether personal data relating to you is or will be processed by us.

2. Right of rectification

You have a right of rectification and/or completion over the data controller if the personal data processed concerning you are incorrect or incomplete.

3. Right of restriction of processing

You have the right to restrict data processing in cases where we are not yet allowed to erase your data due to legal retention obligations.

4. Right of erasure

You can demand that the data controller erases the personal data concerning you without delay, whereupon the data controller is obliged to act immediately provided that conditions pursuant to Art. 17 (1) GDPR are met:

a) The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
b) You revoke your consent on which the processing was based pursuant to point a of Art. 6 (1) or point a of Art. 9 (2) GDPR, and there is no other legal basis for processing said data.
c) You file an objection against the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate reasons for such processing, or you file an objection against such processing pursuant to Art. 21 (2) GDPR.
d) The personal data concerning you have been processed unlawfully.
e) The erasure of personal data concerning you is necessary to fulfill a legal obligation under Union law or the law of the Member States to which the data controller is subject.
f) The personal data concerning you have been collected in relation to information society services offered pursuant to Art. 8 (1) GDPR.

5. Right to data portability

You have the right to receive the personal data concerning you and provided by you to the data controller, in a structured, commonly used and machine-readable format. In addition, you have the right to transmit this data to another data controller without obstruction by the data controller to whom the personal data was initially provided, subject to the condition that the processing is based on consent pursuant to point a of Art. 6 (1) GDPR or point a of Art. 9 (2) GDPR or is based on a contract pursuant to point b of Art. 6 (1) GDPR.

6. Right of objection

You have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data effected pursuant to points e or f of Art. 6 (1) GDPR.

Furthermore, you have the right to revoke your declaration of consent under data protection law at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before said withdrawal.

7. Right to lodge a complaint with a supervisory authority

You have the right, to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.

The data protection supervisory authority responsible for us is:

Landesbeauftragter für Datenschutz und Informationsfreiheit Nordrhein-Westfalen [State Officer for Data Protection and Freedom of Information, North Rhine-Westphalia] Postfach 20 04 44
40102 Düsseldorf
Phone: 0049 (0)211/38424-0
Fax: 0049 (0)211/38424-10
Email address: poststelle@ldi.nrw.de

Our website includes plug-ins of the video portal Vimeo operated by Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA. When you access a page of our website that contains such a plug-in, your browser establishes a direct connection to Vimeo’s servers. The content of the plug-in is transmitted by Vimeo directly to your browser and integrated into the page you are viewing. Even if you do not have a Vimeo account or are not currently logged into Vimeo, through this integration Vimeo receives the information that your browser has accessed the corresponding page of our website. This information (including your IP address) is transmitted directly from your browser to a Vimeo server in the USA and stored there.

If you are logged into Vimeo, Vimeo can directly associate (link) your visit to our website with your Vimeo account. If you interact with the plug-ins (such as pressing the start button of a video), this information is also transmitted directly to a Vimeo server and stored there.

The described data processing operations are performed pursuant to point f of Art. 6 (1) GDPR on the basis of Vimeo’s justified interest in market research and in ensuring the needs-based user-friendliness of the service.

If you do not want Vimeo to link the information collected through our website directly to your Vimeo account, you must log out of Vimeo before visiting our website.

Please refer to Vimeo’s privacy policy for the purpose and scope of data collection, the further processing and use of the data by Vimeo and your rights and setting options for protecting your privacy: http://vimeo.com/privacy

The tracking tool Google Analytics is automatically integrated in Vimeo videos incorporated in our site. This is Vimeo’s own tracking system, to which we have no access and which cannot be influenced by our site. Google Analytics uses cookies (text files installed on your device), to help the website analyze user behavior when visiting the website. The information generated by the cookie regarding your use of this website is usually transferred to a Google server in the USA and stored there.

This processing is performed pursuant to point f of Art. 6 (1) GDPR on the basis of Vimeo’s legitimate interest in statistical analysis of user behavior for optimization and marketing purposes.

1. Method and purpose of data processing

This website uses Google Analytics, a web analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses cookies (i.e. text files installed on your device) to help analyze how you use the website. The information generated by the cookie regarding your use of this website is usually transferred to a Google server in the USA and stored there. However, through the IP address anonymization function implemented on these website pages, Google truncates your IP address prior to any processing in member states of the European Union and in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Acting behalf of the website operator, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website and internet use. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.

The purposes of data processing are to evaluate the use of the website and to compile reports on activities on the website. Other related services will then be provided based on the use of the website and the internet.

2. Legal basis

The data is processed on the basis of the user’s consent (point a of Art. 6 (1) GDPR).

3. Recipients

The recipients of the data are the data controller and Google as the contract data processor. We have concluded the corresponding order processing contract with Google for this purpose.

4. Storage period

The data are erased as soon as they are no longer required for our recording purposes.

5. Transfer to third countries

Google processes your data in the USA and is a signatory to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework. In addition, we have put in place standard data protection clauses with Google for the use of Google Analytics.

6. Provision obligatory or necessary

The provision of your personal data is voluntary and is effected solely on the basis of your consent. If you prevent access to said data, this may result in functional restrictions on the website.

7. Right to withdraw consent

You may reject the use of cookies by selecting the appropriate settings on your browser; however, please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie relating to your use of the website (including your IP address), and from processing this data, by downloading and installing the browser plug-in available under the following link: Browser add-on for deactivation of Google Analytics.

In addition or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our pages by clicking on this link. This automatically installs an opt-out cookie on your device. As long as the cookie remains installed in your browser, it will prevent Google Analytics from collecting data for this website and for that browser.

8. Profiling

The Google Analytics tracking tool enables the behavior of visitors to the website to be evaluated and their interests analyzed. For this purpose we create a pseudonymous user profile.

1. Method and purpose of data processing

This website uses the services of Google Maps. Google Maps services are provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). This allows us to display interactive maps directly on the website and enables you to conveniently use the map function.

You can find more information about Google’s data processing in the Google Privacy Policy. This also features a Privacy Center in which you can change your personal privacy settings.

Detailed instructions for managing your own data in connection with Google products can be found there.

2. Legal basis

Your consent provides the legal basis for the integration of Google Maps and the associated data transfer to Google (point a of Art. 6 (1) GDPR).

3. Recipients

When you visit the website, Google receives information indicating the page you have accessed. This occurs regardless of whether Google provides a user account that you are logged in with, or whether no user account exists. If you are logged into Google, this information will be directly associated (linked) with your account.

If you do not wish this to be associated with your profile on Google, you must log out from Google before activating the button. Google stores your data as usage profiles and utilizes them for the purposes of advertising, market research and/or demand-aligned design of its website. Such evaluation takes place in particular (even for unlogged-in users) to provide demand-aligned advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles. You must contact Google to exercise this right.

4. Storage period

We do not collect any personal data through the integration of Google Maps.

5. Transfer to third countries

Google processes your data in the USA and is a signatory to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

6. Right to withdraw consent

If you do not want Google to collect, process or use data about you via our website, you can deactivate JavaScript in your browser settings. However, this may severely restrict you usage of our website.

7. Provision obligatory or necessary

The provision of your personal data is voluntary and is effected solely on the basis of your consent. If you prevent access to said data, this may result in functional restrictions on the website.