Data protection declaration

I. General information and contact details

Welcome to our website! We consider data protection to be an absolute necessity, rather than just a legal requirement. In accordance with the applicable statutory provisions, we are happy to provide the following notices in the interest of informing you about what happens to your personal data when you visit our website. “Personal data” refers to any data that can be linked to you as an identified or identifiable person. The controller responsible for the processing of personal data in connection with your visit to this website is:

Chemische Fabrik Dr. Weigert GmbH & Co. KG
Mühlenhagen 85
20539 Hamburg, Germany
Phone: +49 40 78960-0
E-mail: info@drweigert.de

We have appointed a company data protection officer for our company: Volker Mennemann DPRT Business Services GmbH
Heidlohstrasse 2b
22459 Hamburg, Germany
Phone: +49 40 78960-0
E-mail: datenschutz@drweigert.de

II. Processing of your data

When you use our website, various personal data will be processed.

1. Provision of the website and creation of log files

Each time our website is accessed, our system automatically records data and information from the accessing computer:

  • Information on the browser type and the version used
  • The user's operating system
  • The HTTP response code
  • The number of bytes transferred
  • The user's IP address
  • The date and time of access
  • Websites from which the user's system reaches our website
  • Websites that are accessed by the user's system via our website

Temporary storage of the IP address is necessary in order to enable delivery of the website to the user's computer. To this end, the user's IP address must be stored for the duration of the session.

Storage in log files serves to ensure that the website works properly. We also use the data to help us optimise our web presence and to ensure the security of our IT systems. No evaluation of the data for marketing purposes is performed in connection with this.

The data are erased as soon as they are no longer needed to fulfil the purpose for which they were gathered. In cases where data is recorded for the purpose of the provision of the website, this is the case when the respective user session is ended. In the event of data storage in log files, this is the case after no more than fourteen days. Storage beyond this is possible. In this case, the users' IP addresses are erased or distorted so that it is no longer possible to associate the accessing client.

The legal basis for temporary storage of the data and log files is point f) of Article 6(1) of the General Data Protection Regulation (GDPR), whereby our legitimate interest consists of the proper provision of the functions of this website, the analysis of access information with the objective of remedying and preventing technical disruptions, and the prevention and tracking of security incidents.

2. Cookies

Our website uses cookies and similar technologies. Cookies are small text files that are stored in the user's web browser and terminal device. A cookie usually contains a distinctive string of characters that enables clear identification of the browser when the website is next accessed.

We use cookies to make our website more user-friendly, to optimise our online services, and to provide you with individually tailored content. The cookies we use in this context can be divided into three categories: 1. Essential cookies, 2. External media, and 3. Statistics. Detailed information on individual cookies and your browser’s configuration options can be found in our cookie declaration. On accessing our website, users see an information banner that notifies them of the use of cookies for analysis purposes and refers to this data protection declaration. In connection with this, there is also an indication of how storage of cookies can be suppressed in the browser settings.

The purpose of the use of technically essential cookies is to enable and simplify the use of our website. Some functions of our website cannot be offered without the use of cookies. E.g.

  • storage of language settings
  • and login information

The user data gathered by means of technically essential cookies are not used to create user profiles.

We also use cookies with your consent in order to provide external media such as videos and maps and to analyse the use of our website. This type of analysis allows us to determine how our online services are being used and how we can align them with user needs more effectively and optimise them.

The legal basis for the processing of personal data with the use of technically essential cookies is point f) of Article 6(1) GDPR, whereby our legitimate interest consists of the secure, stable, and efficient provision of the functions of our website and the information that can be accessed through it. In cases where we are using the function in question to fulfil an existing contractual obligation to you, the legal basis is point b) of Article 6(1) GDPR.

The legal basis for the processing of personal data for analysis purposes, subject to the user's consent to such processing, is point a) of Article 6(1) GDPR.

3. Contact form

A contact form that can be used to make contact electronically is available on our website. If a user makes use of this option, the data entered in the input screen are sent to us and stored. These data are:

  • Forename
  • Name
  • Company
  • Position
  • Street
  • Postcode/place
  • Phone
  • E-mail
  • Your message

Your consent to data processing is obtained in the context of the sending process and this data protection declaration is referred to. No forwarding of the data to third parties is carried out in connection with this. The data are used solely for processing of the conversation.

We process the personal data from the input screen solely for the purpose of facilitating contact. The other personal data processed during the sending process serve to prevent misuse of the contact form and ensure security of our IT systems.

The data are erased as soon as they are no longer needed to fulfil the purpose for which they were gathered. For the personal data from the input screen of the contact form and the personal data sent by e-mail, this is the case when the respective conversation with the user is ended. The conversation is ended when it is apparent from the context that the matter concerned has been definitively resolved. The personal data additionally gathered during the sending process are erased after a period of seven days at the latest.

The legal basis for the processing of data, subject to the user's consent, is point a) of Article 6(1) GDPR. The legal basis for the processing of data transmitted when sending an e-mail is point f) of Article 6(1) GDPR, whereby our legitimate interest consists of the efficient and expedient handling of user concerns. If the e-mail contact is intended to conclude a contract, an additional legal basis for processing is point b) of Article 6(1) GDPR.

Users are able at any time to withdraw their consent to the processing of their personal data. If users contact us by e-mail, they can object to the storage of their personal data at any time. The conversation cannot be continued in such cases, since any personal data that has been stored in the course of the correspondence will be deleted.

4. Usage analysis with Matomo

We use the analysis tool Matomo on our website in order to analyse the use of our online services by visitors to our website. Matomo deposits a cookie on the user's computer. If individual pages of our website are accessed, the following data are stored:

  • Two bytes of the IP address of the user's accessing system
  • The accessed website
  • The website from which the user reached the accessed website (referrer)
  • The subpages accessed from the accessed website
  • The time spent on the website
  • The frequency of access to the website

Matomo only runs on the servers of our website. The personal data processed in this context is not shared with third parties.

Matomo is configured in such a way that your full IP address is not stored; instead, it is stored in abbreviated form (e.g.: 192.168.xxx.xxx). This ensures that the abbreviated IP address can no longer be associated with a specific person.

This processing of users' personal data enables us to carry out anonymised analysis of our users' browsing behaviour. Evaluating the extracted data allows us to compile information on the use of individual components of our website. This helps us to improve our website and make it more user-friendly. The data are erased as soon as they are no longer needed for our record-keeping purposes.

The legal basis for the processing of users’ personal data is their consent, and thus point a) of Article 6(1) GDPR.

By activating “Statistics” in the cookies bar, you grant us permission to analyse anonymised usage data with Matomo and the Matomo cookie.

We provide you with the option of deactivating this analysis again later.


Further information on the privacy settings of the Matomo software can be found via the following link: matomo.org/docs/privacy.

5. Newsletter

If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that will allow us to verify that you are the owner of the e-mail address specified and have given your consent to receiving the newsletter. No further data will be collected, or will be collected only on a voluntary basis. We use this data exclusively for the purpose of delivering the requested information and will not share it with third parties. The data entered in the newsletter registration form is processed exclusively on the basis of your consent, i.e. point a) of Article 6(1) GDPR.

You may revoke your consent to the storage of data, your e-mail address, and the use of your e-mail address to deliver the newsletter at any time, such as by clicking the “Unsubscribe” link in the newsletter.

This revocation has no effect on the lawfulness of data processing operations that have already been carried out. The data you provide to us for the purpose of receiving the newsletter will be stored with us or with the newsletter service provider until you unsubscribe from the newsletter, after which it will be deleted from the newsletter mailing list. This has no effect on data stored with us for other purposes. After you unsubscribe from the newsletter mailing list, your e-mail address may be stored in a blacklist maintained by us or the newsletter service provider in order to prevent future mailings. The data from the blacklist will be used solely for this purpose and will not be aggregated with other data. This serves both your interest and our interest in complying with the statutory provisions which apply to the delivery of newsletters (legitimate interest as defined under point f) of Article 6(1) GDPR). Data stored in the blacklist is stored for an unlimited period of time. You may object to storage in the event that your interests override our legitimate interest.

We engage CleverReach (CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede) as the professional supplier and service provider for the delivery of newsletters. The data you enter for the purpose of receiving the newsletter (e.g. your e-mail address) will be stored on CleverReach servers in Germany or Ireland. The newsletters we deliver with CleverReach enable us to analyse the behaviour of newsletter recipients. This may include the analysis of details such as how many recipients have opened the newsletter e-mail and how frequently individual links in the newsletter have been clicked. More information on the newsletters via CleverReach can be found at: cleverreach.com/de/funktionen/reporting-und-tracking.

6. Plugins and tools

YouTube with enhanced data protection 
This website contains embedded YouTube videos. The operator of YouTube is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. We use YouTube in enhanced data protection mode. According to YouTube, this mode has the effect of ensuring that YouTube does not store any information on visitors to this website until they watch a video. However, the enhanced data protection mode does not necessarily rule out the sharing of data with YouTube partners. For example, YouTube creates a connection to the Google DoubleClick network regardless of whether you watch a video.

When you start a YouTube video on this website, a connection to YouTube’s servers is established. When this occurs, the YouTube server is informed of which of our pages you have visited. When you are logged into your YouTube account, you enable YouTube to link your browsing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account. After a video has been started, YouTube may also store various cookies on your terminal device or employ comparable recognition technologies (e.g. device fingerprinting). This allows YouTube to obtain information on visitors to this website. This information is used for purposes including collecting video statistics, improving user experience, and preventing fraud attempts.

Further data processing operations over which we have no influence may potentially be triggered after a YouTube video is started. We use YouTube in the interest of ensuring an attractive presentation of our online offering. This constitutes a legitimate interest as defined under point f) of Article 6(1) GDPR. In cases where corresponding consent has been requested, the data processing takes place exclusively on the basis of point a) of Article 6(1) GDPR; this consent may be revoked at any time. 

Further information on data protection at YouTube can be found in its data protection declaration at: policies.google.com/privacy. 

When YouTube is used, personal data may potentially be transmitted to the United States of America. Please note that personal data may be subject to a lower level of protection in the United States than in the European Union. When YouTube is used, the protection of personal data is ensured in the event of transmission to the United States of America by means of EU standard contract clauses: ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc.


Google Maps
On this website, we employ the Google Maps map function provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4. This allows us to show you interactive maps directly on the website and enables you to use the maps function conveniently; these purposes constitute our legitimate interest as defined under the legal basis of point f) of Article 6(1) GDPR. In cases where we obtain your consent to the processing of your personal data in advance, the sole legal basis is point f) of Article 6(1) GDPR.

As a result of the visit to the website, Google is informed that you accessed the corresponding subpage of our website.

This happens regardless of whether Google provides a user account via which you are logged in or whether there is no user account. If you are logged into Google, your data is associated directly with your account. If you do not want to be associated with your profile on Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for advertising, market research and/or requirement-oriented design of its website. Evaluation of this kind is performed particularly (even for users who are not logged in) for the provision of requirement-oriented advertising and to inform other users of the social network about your activities on our website. You have a right to object to formation of these user profiles, and must contact Google in order to exercise it.

The terms of use of Google Maps can be found under “Google Maps Terms of Use”: google.com/intl/de_de/help/terms_maps.html.

Information on the collection and processing of personal data in connection with Google Maps can be found in the applicable data protection declaration: google.com/intl/de/policies/privacy.

Any potential transmission of personal data to the United States when using Google Maps takes place on the basis of the European Commission’s standard contract clauses. For details, please see: privacy.google.com/businesses/gdprcontrollerterms and privacy.google.com/businesses/gdprcontrollerterms/sccs.

7. Job application procedures

As a matter of course, in cases where we provide the option of submitting job applications via our websites, we process the personal data of applicants exclusively for the purpose of handling the job application procedure. This processing can also be carried out by electronic means. This applies particularly in cases where an applicant submits corresponding application materials to the controller responsible for processing electronically, e.g. via e-mail or a web form located on the website. If we conclude an employment contract with an applicant, the data transmitted will be stored for the purpose of handling the employment relationship in observance of the applicable statutory provisions. If an employment contract is not concluded with the applicant, the application materials and other personal data we collect in the context of the job application procedure will be deleted or returned 6 months after the notice of rejection is issued unless you have given your consent to storage for a longer period. Any such consent is voluntary and has no impact on your opportunities in job application procedures, i.e. you may refrain from granting your consent or revoke it at any time.

The processing of application materials and the personal data collected for the job application procedure is necessary for the job application procedure and potentially for the conclusion of an employment contract, when relevant.

The legal basis for the processing of personal data in the context of job application procedures is point a) of Article 6(1) GDPR in cases where you have given your consent; otherwise, it is point b) of Article 6(1) GDPR in conjunction with Section 26 of the German Federal Data Protection Act (BDSG), as well as point c) of Article 6(1) GDPR in cases where the processing serves the purpose of fulfilling statutory obligations.

8. Registration

On our website, we give users the opportunity to register, submitting personal data. The data are entered in an input screen, sent to us and stored. The following data are gathered in the registration process:

Registration for participation in events:

  • Form of address
  • Title
  • Forename
  • Name
  • Company
  • Department
  • Street
  • Postcode/place
  • Phone
  • E-mail

Registration for participation in events serves to facilitate the preparation and performance of in-house or external events we offer. We also store your data in the interest of potentially inviting you to events that may be particularly interesting to you in consideration of the events you have attended previously and in order to save you the trouble of re-entering your details for future bookings. We may also use information on events you have attended in order to be able to provide you with better support and advice optimally tailored to your needs in the context of customer support. The data are erased as soon as they are no longer needed to fulfil the purpose for which they were gathered. The data will be shared only if necessary for the performance of the event, e.g. if we share your data with other parties organising the event or performing it jointly with us or independently.


Registration for e-learning offers and online training
In addition, we provide offers for online training courses and similar informational and educational offers on our websites and potentially on additional platforms. The e-learning module on our website allows specialist knowledge to be assessed and corresponding confirmations to be provided. Registration is also necessary for use of the e-learning module, whereby we collect the following data from the user:

  • Name
  • Institution
  • E-mail

Registration for the e-learning module is carried out for the purpose of providing the functions of this module, documenting the assessment units completed by the respective user, and providing personalised assessment certificates upon successful conclusion of the respective learning units.

In the event that we provide further training opportunities on our website or other platforms, registration may potentially be necessary for the purpose of enabling participation, user identification, and potentially – if offered – the issuance of certificates of participation. The scope of the necessary information in each respective case depends on the respective registration form provided.

We share your data with our technical service providers in the context of participation in e-learning services and online training when necessary for the organisation and performance of the training. The technical implementation of training offers provided on the “edudip” platform (edudip.com) is carried out by a contracted processor which we have carefully selected and which acts on our behalf:

edudip GmbH
Jülicher Strasse 306
52070 Aachen 


Legal bases
The legal basis for the processing of data collected through the respective registration, subject to the user's consent, is point a) of Article 6(1) GDPR. If the purpose of registration is to fulfil a contract to which the user is party or take steps prior to entering into a contract, an additional legal basis for processing of the data is point b) of Article 6(1) GDPR. The legal basis for the use of our personal data from registration for any further purposes is point f) of Article 6(1) GDPR, whereby our legitimate interest consists of the simplification and optimisation of the administration of our events, the improvement of customer service, and the enablement and improvement of offers and support options customised for individual customers. This enables us, for instance, to determine which events are particularly interesting to which target groups, to invite you to events and seminars likely to interest you in consideration of events you have attended with us in the past, and to provide you with better advice in regard to our products and more interesting product information on the basis of your interests and past event attendance.

Since we use your e-mail address to inform you about similar training offers, the legal basis is Section 7(3) of the German Fair Trade Practices Act (UWG). In this context, you can opt out of the use of your e-mail address to advertise similar offers during registration, by sending an e-mail to info@drweigert.de or by clicking the unsubscribe link in each individual e-mail. Exercising your right to object will not incur any costs other than the costs of transmission according to the fee schedule for your means of communication (e.g. your mobile data rates).

You have the option to amend your registration details or have them deleted at any time, provided they are no longer necessary for the performance of a contract. To do so, please feel free to contact: info@drweigert.de

9. Storage period

Unless otherwise stated in the respective individual information, we process personal data in accordance with the applicable statutory provisions exclusively for the purposes presented here, and only as long as personal identification of the data subject is required for the respective purpose. Once this is no longer the case, the data will be deleted or neutralised/anonymised in a data protection-compliant manner.

10. SSL and TLS encryption

In cases of unencrypted online data transfers (e.g. unencrypted communication via e-mail), the confidentiality of the data transmitted cannot be fully guaranteed. For security reasons and to protect the transferring of confidential content such as enquiries that you send to us as the site operator, this site uses SSL and TLS encryption.

An encrypted connection can be identified by a change in the address line of your browser from “http://” to “https://” and the padlock symbol in your browser line.

If SSL or TLS encryption is activated, the data you send to us cannot be read by third parties.

III. Your rights

At all times, you have the right to

  • revoke the consent you have granted to us for the processing of your personal data or object to the processing of your data.
  • receive information on your data that is stored with us.
  • the correction of incorrect data about you in our possession.
  • the erasure of data about you in our possession which is no longer necessary.
  • the restriction of processing of your data under certain conditions, e.g. in cases where erasure is impossible but the data is no longer permitted to be processed.
  • the portability of your data; this right applies particularly in cases where you have consented to the processing of your data or where processing of the data is necessary in order to fulfil a contract. The right to data portability does not apply in cases where the processing of your data is not automated.

To exercise your rights, please contact us via the contact details provided in the introduction to this data protection declaration.

If you believe that processing of your data is being carried out in contravention of the applicable statutory provisions, you may also file a complaint with the relevant supervisory authorities with jurisdiction over us.

Please note that in certain cases, we may request additional information from you in order to verify your identity. This is the only way for us to ensure that information is not provided to unauthorised persons, e.g. when fulfilling a request for information on the personal data of yours that we process.