Privacy Policy

1. Privacy AT A GLANCE

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you could be personally identified. For detailed information on the subject of data protection, please refer to our privacy policy below.

Data Collection on This Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find their contact details in the section "Notice Regarding the Responsible Party" in this privacy policy.

How do we collect your data?

Your data is collected in one part by you providing it to us. This could, for example, be data you enter in a contact form.

Other data is collected automatically or after your consent when visiting the website by our IT systems. This is primarily technical data (e.g., internet browser, operating system, or time of page access). This data is collected automatically as soon as you enter this website.

What do we use your data for?

Part of the data is collected to ensure error-free provision of the website. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?

You have the right at any time to obtain free information about the origin, recipient, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. You also have the right to request the restriction of processing of your personal data under certain circumstances. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

You can contact us at any time regarding this and other questions on the subject of data protection.

2. Hosting and Content Delivery Networks (CDN)

External Hosting

This website is hosted by an external service provider (host). The personal data collected on this website is stored on the servers of the host. This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access, and other data generated via a website.

The use of the host is for the purpose of fulfilling contracts with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of secure, fast, and efficient provision of our online offering by a professional provider (Art. 6 para. 1 lit. f GDPR).

Our host will only process your data to the extent necessary to fulfill its performance obligations and follow our instructions regarding this data.

We use the following host:

Address
IONOS SE
Elgendorfer Str. 57
56410 Montabaur
Germany

Contact
Telefon: +49 2602 96 91
E-Mail: info@ionos.de

Registration and VAT ID
Court of Registration: Montabaur District Court
Registration Number: HRB 24498
Umsatzsteuer-ID: DE815563912

Privacy
https://www.ionos.de/terms-gtc/Privacyerklaerung/

Conclusion of a Data Processing Agreement

To ensure privacy-compliant processing, we have concluded a data processing agreement with our host.

3. General Information AND MANDATORY INFORMATION

Privacy

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you use this website, various personal data is collected. Personal data is data with which you could be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We point out that data transmission on the Internet (e.g., when communicating by email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

Notice Regarding the Responsible Party

The responsible party for data processing on this website is:

Global Tech Lubricants GmbH
Rheinpromenade 4a
40789 Monheim am Rhein

Telefon: +49 (0) 2306 91 29 38 0
E-Mail: info@gtl-gmbh.eu

The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Storage Duration

Unless a more specific storage period is stated within this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or revoke consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial law retention periods); in the latter case, deletion takes place after these reasons cease to apply.

Revocation of Your Consent to Data Processing

Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to Object to Data Collection in Special Cases and to Direct Marketing (Art. 21 GDPR)

IF DATA PROCESSING IS BASED ON ART. 6 PARA. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21 PARA. 1 GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ART. 21 PARA. 2 GDPR).

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, their place of work, or the place of the alleged violation. The right to lodge a complaint exists without prejudice to other administrative or judicial remedies.

Right to Data Portability

You have the right to have data that we process automatically based on your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request direct transfer of the data to another controller, this will only be done to the extent technically feasible.

SSL/TLS Encryption

This site uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the site operator. You can recognize an encrypted connection by the address bar of the browser changing from "http://" to "https://" and by the lock symbol in your browser bar.

When SSL/TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Information, Deletion, and Correction

Within the framework of applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of data processing, and if applicable, a right to correction or deletion of this data. You can contact us at any time with regard to this and other questions on the subject of personal data.

Right to Restriction of Processing

You have the right to request the restriction of processing of your personal data. You can contact us at any time for this purpose. The right to restriction of processing exists in the following cases:

• If you dispute the accuracy of your personal data stored by us, we generally need time to verify this. For the duration of the verification, you have the right to request the restriction of processing of your personal data.
• If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of deletion.
• If we no longer need your personal data, but you need it to exercise, defend, or assert legal claims, you have the right to request the restriction of processing of your personal data instead of deletion.
• If you have filed an objection pursuant to Art. 21 para. 1 GDPR, a balance must be struck between your interests and ours. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of processing of your personal data.

If you have restricted the processing of your personal data, this data may - apart from its storage - only be processed with your consent or for the assertion, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a member state.

4. Data Collection on This Website

Contact Form and Email Inquiries

If you contact us via the contact form or by email, the data you provide (your email address, and if applicable, your name and telephone number) will be stored by us to answer your questions.

Processed Data

Depending on the type of contact, we process the following categories of personal data:

• Name (if provided)
• Email Address (required)
• Phone Number (optional)
• Company Name (optional)
• Message Content (your inquiry)
• Product Interest (if specified)
• IP Address (automatically collected)
• Timestamp of the request

Purpose of Processing

Your data is processed exclusively for the following purposes:

• Processing and responding to your inquiry
• Providing requested information
• Creating offers or cost estimates
• Following up on open questions
• Documentation of business communication

Legal Basis

The processing of data is based on:

• Art. 6 para. 1 lit. b GDPR, if your inquiry is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures
• Art. 6 para. 1 lit. f GDPR in all other cases (legitimate interest in the effective processing of inquiries directed to us)
• Art. 6 para. 1 lit. a GDPR, if you have given separate consent

Storage Duration

Data from contact inquiries is stored as follows:

• General inquiries: until you request deletion or revoke your consent
• Contract-related inquiries: until the purpose of data storage no longer applies (e.g., after completed processing)
• Business correspondence: according to commercial law retention periods (6-10 years)

Mandatory legal provisions - in particular retention periods - remain unaffected.

Automatic Responses and Confirmations

After submitting a contact inquiry, you will automatically receive a confirmation of receipt by email. This serves to:

• Confirm receipt of the message
• Provide information about the expected processing time
• Provide a reference number for follow-up questions

Inquiry by Phone

If you contact us by phone, the following data is processed:

• Your phone number (displayed in the telephone system)
• Date and time of the call
• Call content (as far as necessary for processing)
• Name and contact details (insofar as you provide them)

Note: Phone calls are not recorded. Only relevant call content is noted for follow-up.

Transfer of Data

We do not share your contact data with third parties without your express consent. Exceptions:

• Legal obligation to disclose
• Commissioned service providers for processing inquiries (under data processing agreement)
• With your consent for special services

5. COOKIES, LOCAL STORAGE (LOCALSTORAGE) AND CONSENT

Consent-Manager

We use a consent manager (cookie banner) to manage your consent to optional services. Your selection is stored in the browser so that these settings are retained on subsequent visits.

Storage type and key: localStorage under the key "elat-cookie-consent"

Stored categories: necessary (always active), analytics, marketing, functional

Legal Basis: § 25 para. 2 no. 2 TTDSG (absolutely necessary) in conjunction with Art. 6 para. 1 lit. f GDPR (legitimate interest in documenting your consent)

Storage Duration: max. 12 months (then renewed request)

You can change or revoke your settings at any time with effect for the future. Use the Cookie Settings link for this purpose.

Further Local Storage

To provide the display you prefer, we store your light/dark display preference (Dark Mode) locally in the browser.

Key/Value: localStorage "darkMode" = true/false

Purpose: Display of the website according to your selection (user-friendliness)

Legal Basis: § 25 para. 2 no. 2 TTDSG (absolutely necessary) in conjunction with Art. 6 para. 1 lit. f GDPR

Storage Duration: until deletion by you or when resetting website data in the browser

6. EXTERNAL SERVICES AND CONTENT DELIVERY NETWORKS (CDN)

⚠️ Important Notice: To display this website, content from external providers is partially loaded. For technical reasons, your IP address is automatically transmitted to the respective provider. This occurs with every page access without separate consent.

Google Fonts

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Purpose: Uniform, web-optimized fonts for better readability

Transmitted Data: IP address, requested font, browser information, timestamp, referrer

Third Country Transfer: Possible to the USA (Google LLC)

Legal Basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in uniform, performant display)

Guarantees: Google is EU-US Data Privacy Framework certified

Privacy: https://policies.google.com/privacy

Note: We are working on a complete local provision of the fonts.

Font Awesome (CDNJS/Cloudflare)

Provider: Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA

Purpose: Display of icons and symbols

Transmitted Data: IP address, user agent, referrer URL, timestamp, requested icon files

Third Country Transfer: USA, but EU servers also available

Legal Basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in modern website design)

Guarantees: EU Standard Contractual Clauses

Privacy: https://www.cloudflare.com/privacypolicy/

TailwindCSS CDN

Provider: Tailwind Labs Inc. / jsDelivr CDN

Purpose: CSS framework for responsive website design

Transmitted Data: IP address, browser information, loaded CSS configuration

Third Country Transfer: Possible, depending on CDN server location

Legal Basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in modern, responsive design)

Note: Planned replacement by locally provided CSS files in the future.

AOS (Animate On Scroll) via UNPKG

Provider: UNPKG (operated by npm, Inc.) / Cloudflare

Purpose: Scroll animations for improved user experience

Transmitted Data: IP address, user agent, referrer URL, timestamp

Categorization: Functional cookies required for animations

Third Country Transfer: USA

Legal Basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in attractive website presentation)

Your Control: Loading of the library can be controlled via Cookie Settings

Three.js (3D-Grafik-Bibliothek) via Cloudflare CDN

Provider: Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA

Purpose: Display of the 3D globe on the homepage for visual representation of our international activities

Transmitted Data: IP address, user agent, referrer URL, timestamp

Third Country Transfer: USA

Categorization: Functional cookies required

Legal Basis: Art. 6 para. 1 lit. a GDPR (Consent) - Only loaded after consent to functional cookies

Your Control: This library is ONLY loaded when you accept functional cookies. Without consent, a static placeholder is displayed.

Guarantees: EU Standard Contractual Clauses

Privacy: https://www.cloudflare.com/privacypolicy/

GitHub Raw Content

Provider: GitHub, Inc., 88 Colin P Kelly Jr St, San Francisco, CA 94107, USA (subsidiary of Microsoft)

Purpose: Loading image textures for the 3D globe on the homepage

Transmitted Data: IP address, user agent, referrer URL, timestamp, requested file

Third Country Transfer: USA

Categorization: Functional cookies required

Legal Basis: Art. 6 para. 1 lit. a GDPR (Consent) - Only loaded after consent to functional cookies

Your Control: This resource is ONLY loaded when you accept functional cookies.

Privacy: https://docs.github.com/de/site-policy/privacy-policies/github-privacy-statement

Important Information on Third Country Transfers

Risks and Protective Measures

When using the above-mentioned services, data may be transferred to recipients in third countries (especially the USA). The following risks exist:

• Possible governmental access by US authorities
• Different data protection standards than in the EU
• Limited enforceability of your data subject rights

Protective Measures Taken

We base third country transfers on the following guarantees:

• EU-US Data Privacy Framework: Google is certified
• EU Standard Contractual Clauses: With other providers
• Data Minimization: Only technically necessary transfers
• Localization Strategy: Gradual replacement with local hosting solutions

Your Choices

You have the following options:

• Browser Settings: Block external resources via browser
• Cookie Settings: Disable functional features
• Use Add-ons: Privacy tools for additional protection
• Alternative Browsers: Use privacy-focused browsers

Our Responsibility

Where technically possible and economically feasible, we provide external resources locally to avoid third country transfers. This is an ongoing process to improve data protection.

7. MAP SERVICES (GOOGLE MAPS)

Integration of Google Maps

On our contact page, we use the Google Maps map service. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to and stored on a Google server in the USA. The provider of this site has no influence on this data transfer.

Purpose of Data Processing

The use of Google Maps is in the interest of an attractive presentation of our online offerings and easy findability of the locations we indicate on the website. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If appropriate consent was requested, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG.

Data Transfer to the USA

Google is certified under the EU-US Data Privacy Framework. More information can be found at: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

Your Rights

You can prevent the storage of cookies by adjusting your browser software accordingly. However, we point out that in this case you may not be able to use all functions of this website to their full extent.

More information on how user data is handled can be found in Google's privacy policy: https://policies.google.com/privacy?hl=de

8. GOOGLE ANALYTICS (OPTIONAL)

Scope of Processing

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies and similar technologies to collect and evaluate information about users' use of the website.

Our Google Analytics Measurement ID: G-C832S1PEWH

Data Collection Only with Consent

Important: Google Analytics is only activated when you explicitly consent to the "Analytics" category in our cookie banner. Without your consent, no data is transferred to Google.

Collected Data

The following data may be collected by Google Analytics:

• Anonymized IP address (last 8 bits are removed)
• Date and time of the visit
• Pages visited and time spent
• Referrer website (from which page you came)
• Browser and operating system
• Screen resolution
• Approximate location (country/city level only)

Privacy Configuration

We have configured Google Analytics in a privacy-friendly manner:

• IP anonymization enabled: Your IP address is shortened before transmission
• No advertising features: Google Signals and remarketing are disabled
• Shortened cookie duration: 2 years instead of the standard setting
• No automatic collection: Only deliberately selected events are tracked

Purpose of Processing

The analysis is carried out for the following purposes:

• Improvement of website usability
• Optimization of information offerings
• Technical error analysis
• Understanding user needs

Legal Basis und Storage Duration

Legal Basis: Art. 6 para. 1 lit. a GDPR (Consent) in conjunction with § 25 para. 1 TTDSG

Storage Duration: The data is automatically deleted after 26 months

Data Transfer: Possible transfer to the USA; Google is EU-US Data Privacy Framework certified

Revocation and Opt-out

You can revoke your consent at any time with effect for the future by:

• Adjusting Cookie Settings via the button in the footer
• Disabling the "Analytics" category
• Installing the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout
• Direct opt-out for our website: Disable Google Analytics

9. DETAILED COOKIE OVERVIEW

Own Cookies (First-Party)

Google Analytics Cookies (only with consent)

10. SOCIAL MEDIA INTEGRATION

External Social Media Links

Our website contains links to our social media profiles on the following platforms:

• LinkedIn - Professional network
• Facebook - Company page
• YouTube - Video content

Data Processing on Click

Important: No social media content is directly embedded. Only when you actively click on one of our social media links will you be redirected to the corresponding platform. The following may be transmitted:

• Referrer information (from which of our pages you came)
• Your IP address
• Browser information
• Time of the click

Legal Basis

Legal Basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in social media presence)

Legitimate Interest: Accessibility via various channels, customer communication, brand building

Notice on Privacy Policies

As soon as you click on a social media link, the privacy policies of the respective platform apply:

• LinkedIn: https://www.linkedin.com/legal/privacy-policy
• Facebook: https://www.facebook.com/privacy/explanation
• YouTube/Google: https://policies.google.com/privacy

11. SERVER LOG FILES AND TECHNICAL DATA

Automatically Collected Information

The host of this website automatically processes server log files on every access to our website. This data collection is technically necessary for the provision of the website.

Collected Data in Detail

• IP address of the accessing computer
• Date and time of the request
• Time zone difference to Greenwich Mean Time (GMT)
• Request URL (requested page/file)
• HTTP status code (success/error status)
• Referrer URL (page from which you came)
• Browser type and version
• Operating system of the accessing system
• Internet Service Provider of the accessing system
• Transferred data volume
• Error messages in case of connection problems

Purpose of Processing

Processing is carried out for the following purposes:

• Ensuring the technical operation of the website
• Ensuring IT security
• Investigation of abuse or fraud
• Error analysis and technical optimization
• Load distribution and performance optimization

Legal Basis und Aufbewahrung

Legal Basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in stability and security of the offering)

Legitimate Interest: Maintenance of web service, protection against cyber attacks, technical optimization

Regular Storage Duration: maximum 14 days

Exceptions: In the case of security-related incidents (hacking attempts, DDoS attacks), logs may be stored longer for evidence preservation

Recipient: IONOS SE (see section "External Hosting")