Privacy Statement

Scope and special data protection information

This Privacy Policy applies to the collection, processing, and use (“processing”) of your personal data in the context of your use of Frigortec's internet offering at https://www.frigortec.com (“website”).

To Frigortec, the protection of your privacy and maximum transparency are the foundation for a successful and trust-based cooperation.

Name and address of the controller

The controller in the sense of the GDPR and other national data protection laws is:

FrigorTec LP
204 Terra Road
Blytheville, AR72315
Tel: +1 832 730 — 1894
E-Mail: info@frigortecamericas.com

Name and address of the data protection officer

The external data protection officer of the controller is:

Dirk Hellmich

Bechtle GmbH Bodensee

Schützenstraße 84

D - 78315 Radolfzell

dirk.hellmich@bechtle.com<mailto:dirk.hellmich@bechtle.com>, or datenschutz@frigortec.de<mailto:datenschutz@frigortec.de>

General information on data processing

Scope of processing of personal data

We initially collect only the data listed in section 3 from visitors to our website. Beyond that, we process the personal data of our users only to the extent that necessary for providing a functional website, as well as our contents and service. We collect and use our users' personal data only with the users' consent. An exception applies in cases where prior consent is impossible for material reasons or where the processing of data is permitted by laws and regulations.

Legal basis for the processing of personal data

In cases where we obtain the consent of a data subject for the processing of personal data, the legal basis for processing is point (a) of GDPR Article 6(1).

When processing personal data that is required for the performance of a contract to which the data subject is a party, the legal basis is point (b) of GDPR Article 6(1). This also applies to processing required prior to entering a contract.

Where the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, the legal basis is point (c) of GDPR Article 6(1).

If the processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, the legal basis for processing is point (f) of GDPR Article 6(1).

Data erasure and storage duration

The personal data of the data subject will be deleted or made unavailable as soon as the purpose of storage no longer applies. Storage is also permitted where this is provided for by the European or national legislature in Union legal acts, laws, or other regulations to which the controller is subject. Data will also be made unavailable or erased when a storage period required by one of the above norms, unless further data storage is required for entering into or performance of a contract.

Provision of the website and creation of log files

Description, purpose, and scope of data processing

With each access to our website, our system automatically collects data and information from the accessing computer system.

The following data is collected:

• Information about the browser type and the version used
• The user's operating system
• The user's internet service provider
• The user's IP address
• The date and time of access
• Websites from which the user's system accesses our website
• Websites accessed by the user's system from our website

Temporarily storing the IP address by the system is necessary to enable the delivery of the website to the user's computer. The user's IP address needs to remain stored for the duration of the session.

The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.

The storage in log files is done to ensure the functionality of the website. In addition, we use the data for optimising the website and to ensure the security of our IT systems. An evaluation for marketing purposes does not take place in this context.]

Legal basis for processing

The legal basis for the temporary storage of data and log files is point (f) of GDPR Article 6(1).

Duration of storage

The data will be erased as soon as they are no longer needed for the purpose of their collection. If the data was collected for providing the website, this is the case when the session is over.

If the data is stored in log files, this is the case after no more than seven days. Further storage is possible. In this case, the IP addresses of the users are deleted or obscured so that an identification of the accessing client is no longer possible.]

Objection and removal

The collection of data for providing the website and their storage in log files is required for the operation of the website. The user therefore does not have an option to object.

Use of cookies

This website does not use cookies.

All pages are generated statically and returned directly. This allows for operation of this website without the use of cookies.

Use of etracker / web analysis

The provider of this website uses the services of etracker GmbH, Hamburg, Germany (www.etracker.com) to analyse usage data. We do not use cookies for web analysis by default. If we use analysis and optimisation cookies, we will obtain your explicit consent separately in advance. If this is the case and you agree, cookies are used to enable a statistical range analysis of this website, a measurement of the success of our online marketing measures and test procedures, e.g. to test and optimise different versions of our online offer or its components. Cookies are small text files that are stored by the Internet browser on the user's device. etracker cookies do not contain any information that could identify a user.

The data generated by etracker on behalf of the provider of this website is processed and stored by etracker solely in Germany by commission of the provider of this website and is thus subject to the strict German and European data protection laws and standards. In this regard, etracker was independently checked, certified and awarded with the ePrivacyseal data protection seal of approval.

The data processing is based on Art. 6 Section 1 lit f (legitimate interest) of the General Data Protection Regulation (GDPR). Our legitimate interest is the optimisation of our online offer and our website. As the privacy of our visitors is very important to us, the data that may possibly allow a reference to an individual person, such as IP address, registration or device IDs, will be anonymised or pseudonymised as soon as possible. etracker does not use the data for any other purpose, combine it with other data or pass it on to third parties.

You can object to the outlined data processing at any time. Your objection has no disadvantageous consequences. You will find the option to object below this privacy statement.

Further information on data protection with etracker can be found here.

Inquiry form and e-mail contact

Description, purpose, and scope of data processing

Our website provides an inquiry form, which can be used for contacting us electronically. If a user uses this option, then the data entered into the input mask is transferred to us and stored. This data is:

• Title
• First name
• Last name
• Company/authority
• Function
• Street
• Area code/city
• Country
• Phone
• Fax
• E-mail
• Customer status
• Requested documents
• Request

At the time the message is sent, the following data is stored in addition:

• The user's IP address
• Date and time of registration
• HTTP header

We process personal data from the input screen solely for processing the contact. In case of a contact via e-mail, there is also a required, justified interest in processing the data.

Other personal data processed during the transfer are used to prevent abuse of the contact form and ensure the security of our IT systems.

As part of the transfer, we obtain your consent and refer to this Privacy Policy.

Alternatively, contact is possible via the provided e-mail address. In this case, the personal data transferred in the e-mail is stored.

The data collected in this context is not forwarded to third parties. The data is used exclusively for processing the conversation.

Legal basis for processing

If the user's consent is granted, then the legal basis for processing the data is point (a) of GDPR Article 6(1).

The legal basis for processing the data transmitted in an e-mail is point (f) of GDPR Article 6(1). If the e-mail contact is made with the intent of entering into a contract, then point (b) of GDPR Article 6(1) serves as an additional legal basis.

Duration of storage

The data will be erased as soon as they are no longer needed for the purpose of their collection. For personal data from the input screen of the contact form or data submitted via e-mail, then this is the case when the conversation with the user ends. The conversation ends when circumstances justify the conclusion that the relevant matter has been finally settled.

Additional data collected during the sending process is deleted no more than seven days later.

Objection and removal

The user has the right, at any time, to withdraw his or her consent to the processing personal data. If a user contacts us via e-mail, then he or she may object to the storing of their personal data at any time. In such an event, the conversation cannot be continued.

All personal data that was stored during the contact will be deleted in this case.

Social media / Linkedin

We are present in various social media in order to communicate with our customers, interested parties and users registered there and to be able to inform them about our offers there.

We would like to point out that you use these platforms and their functions as a matter of your own responsibility. This applies, in particular, to the use of interactive functions (e.g. commenting, sharing, rating).

We would also like to point out that your data may be processed outside the European Union.

In addition, your data may be processed for market research and advertising purposes. For example, usage profiles may be created from your usage behaviour and the resulting interests. This allows, for example, advertisements to be placed within and outside the platforms that presumably correspond to your interest. Cookies are usually stored on your computer for this purpose. Irrespective of this, data that is not collected directly from your end devices may also be stored in the usage profiles (especially if you are a member of the respective platforms and are logged in to them).

We, as the provider of this information service, do not collect or process any further data from your use of our service.

The processing of users' personal data is based on our legitimate interests in effectively informing users and communicating with users pursuant to Article 6 (1)(1)(f) GDPR. If you are asked by the respective providers for consent to data processing (i.e. you declare your consent e.g. by ticking a checkbox or confirming a button), the legal basis of the processing is Article 6 (1)(1)(a), Article 7 GDPR.

Possibility of objection

If you are a member of a social network and do not want the network to collect data about you via our website and link it to your stored membership data with the respective network, you must log out of the respective network before visiting our website, delete the cookies present on the device and close and restart your browser. After logging in again, however, you will once more be recognisable to the network as a specific user. For a detailed description of the respective processing and the options to object (opt-out), we refer to the information of the providers linked below.

Also in the event of requests for information and the assertion of user rights, we point out that they may be asserted most effectively with the providers. Only the providers have access to the users' data and can directly take appropriate measures and provide information. If you still need help, you can contact us.

With regard to the rights of objection as well as all data subject rights vis-à-vis data processing by LinkedIn, reference is made to their privacy policy: https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy

Rights of the data subjects

If your personal data is processed, then you are a “data subject” in the sense of the GDPR, and you have the following rights with respect to us as the controller. You may exercise your rights by contacting our data protection officer or the employees of the service centre and describing your request.

Right to access

Any data subject affected by the processing of personal data has the right, at any time, to receive information about the data stored about their person from the controller, as well as a copy of this data.

You may request confirmation from the controller about whether personal data about you is being processed by us.

Right to rectification

Any person affected by the processing of personal data has the right to demand the prompt rectification of incorrect personal data about them. Taking into account the purposes of the processing, the data subject also has the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Right to restriction of processing

Any person affected by the processing of personal data has the right to obtain from the controller restriction of processing where one of the conditions provided by the legislative in GDPR Article 18(1) is met.

Right to erasure

Any person affected by the processing of personal data has the right to obtain from the controller the erasure of personal data concerning him or her without undue delay if one of the conditions in GDPR Article 17(1) applies.

Right to data portability

Any person affected by the processing of personal data has the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format. He or she shall also have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where the processing is based on consent according to point (a) of GDPR Article 6(1), or point (a) of GDPR Article 9(2), or on a contract as per point (b) of GDPR Article 6(1), and the processing is done by means of automated procedures.

Right to objection

Any person affected by the processing of personal data has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6(1) of the GDPR. This includes profiling based on these provisions.

Upon objection, the company no longer processes the personal data unless compelling legitimate grounds are processed for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

Where personal data are processed for direct marketing purposes, the data subject has the right to object at any time to processing of personal data concerning him or her for such marketing. This also includes profiling to the extent that it is related to such direct marketing. Where the data subject objects to processing for direct marketing purposes, the personal data is longer processed for such purposes.

Right to withdraw consent

Any person affected by the processing of personal data has the right to withdraw their consent to the processing of personal data at any time.

You have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, every you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes the GDPR.

The data protection supervisory authority responsible for the FrigorTec GmbH is:

State Officer for Data Protection and Freedom of Information of the State of Baden-Württemberg

Königstrasse 10a, 70173 Stuttgart / Germany

email: poststelle@lfdi.bwl.de

Status of this information: July 2021