Privacy Policy (as at July 2026)

In the following, we provide information on how we process your personal data. Personal data refers to any data that identifies you or makes you identifiable as a natural person, e.g. your name, address, email addresses and user behaviour (see Article 4(1) of the GDPR).

We regularly process personal data either when you use our website or when you access one of our social media channels. This privacy policy applies generally to all processing of personal data carried out by us and sets out the specific details applicable to each online platform used in the respective sub-sections.

General data protection information for all data processing operations can be found under I.

Specific information on data processing on

our own website can be found under II.,
on our LinkedIn channel under III.,
on our YouTube channel under IV.,
and on our Instagram channel under V.

I. General data protection information for all data processing operations

The following information applies to all data processing operations, regardless of their form or the platform used.

1. Name and contact details of the data controller

This privacy policy applies to data processing carried out by us as the data controller; our contact details are as follows:

Fachverband Galvanisierte Kunststoffe e.V.
Registered office/delivery address: Giesenheide 15, 40724 Hilden
Correspondence address: PO Box 10 10 63, 40710 Hilden
Telephone: +49 2103 25 56 10

Website: fgk.zvo.org
Email: mail(at)zvo.org
Register of Associations: VR 30928 AG Düsseldorf

Registered board members:

Stefan Tilke, Chair

Dr Markus Dahlhaus, Deputy Chair

Managing Director: Christoph Matheis

2. Data subjects’ rights

Whenever your personal data is processed, you have the right:

• pursuant to Article 7(3) of the GDPR, to withdraw your consent at any time once it has been given. As a result, data processing based on this consent may no longer be carried out in future;
   
• pursuant to Article 15 of the GDPR, to request information as to whether your personal data is being processed. If this is the case, you may further request, in particular, information regarding the purposes of processing, the categories of personal data, the categories of recipients to whom your data have been or will be disclosed, the intended period of storage, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data, as well as information on the existence of automated decision-making, including profiling, and, where applicable, meaningful information regarding its details;
   
• to request, in accordance with Article 16 of the GDPR, the rectification of inaccurate personal data or the completion of your stored personal data without delay;
   
• in accordance with Article 17 of the GDPR, to request the erasure of your personal data, unless processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;
   
• in accordance with Article 18 of the GDPR, to request the restriction of the processing of your personal data, provided that you contest the accuracy of the data, the processing is unlawful but you oppose its erasure, and the data is no longer required, but you require it for the establishment, exercise or defence of legal claims, or where you have objected to the processing in accordance with Article 21 of the GDPR;
   
• in accordance with Article 20 of the GDPR, to receive your personal data in a structured, commonly used and machine-readable format or to request that it be transferred to another controller; and
   
• to lodge a complaint with a supervisory authority in accordance with Article 77 of the GDPR. As a rule, you may contact the supervisory authority for your usual place of residence or work, or for our registered office.

Right to object 

Where your personal data is processed on the basis of legitimate interests pursuant to Article 6(1), first sentence, point (f) of the GDPR, you have the right, in accordance with Article 21 of the GDPR, to object to the processing of your personal data, provided there are grounds for doing so arising from your particular situation.

If you wish to exercise your right to object, simply send an email to mail@zvo.org or write to FGK e.V., Giesenheide 15, 40724 Hilden (PO Box 10 10 63, 40710 Hilden).

3. Validity and updates to this privacy policy

This Privacy Policy is currently valid and is dated 16 June 2026. As our online presence continues to develop, or due to changes in legal or regulatory requirements, it may become necessary to amend this Privacy Policy in the future. You can access the latest version of our privacy policy here: fgk.zvo.org/fgk-datenschutzerklaerung

II. Specific information on data processing when using our website

1. Categories of data processed / Legal bases / Retention period

When you visit our website fgk.zvo.org, the browser used on your device automatically sends information to our website’s server. This information is temporarily stored in a so-called log file. The following information is collected automatically without any action on your part and stored until it is automatically deleted:

• IP address of the requesting computer,
• Date and time of access,
• Time zone difference from Greenwich Mean Time (GMT)
• Name and URL of the file accessed (the specific page accessed),
• the website from which the access originated (referrer URL),
• Access status/HTTP status code
• Browser used (including language and version of the browser software) and, where applicable, your computer’s operating system and its user interface, as well as the name of your internet service provider
• Amount of data transferred in each instance

We process the aforementioned data for the following purposes:

• To ensure the website connects smoothly,
• To ensure a user-friendly experience on our website,
• to assess system security and stability, and
• for other administrative purposes.

The legal basis for the above data processing is our legitimate interest within the meaning of Article 6(1), first sentence, point (f) of the GDPR. Our legitimate interest arises from the purposes of data collection listed above, namely to ensure the operation of our website and its correct display on your device.

In addition, we use cookies when you visit our website. Where these are not technically necessary for the operation of the website, we will only use them with your express consent; please see, in particular, section 6 below.

2. Subscription to our newsletter

To receive the newsletter, you must provide an email address. We use your email address to send you our newsletter on a regular basis. We base this data processing on your consent within the meaning of Article 6(1)(a) of the GDPR, which you provide by subscribing to the newsletter.

You can unsubscribe at any time, for example via a link at the end of each newsletter. Alternatively, you are welcome to send your request to unsubscribe by email to mail@zvo.org at any time. Your data will be processed for the purpose of sending the newsletter until you request to unsubscribe, as we assume that you wish to continue receiving our newsletter until we receive notification to the contrary.

3. Use of our contact form

If you have any questions, we offer you the option of contacting us via a form provided on the website. You must provide a valid email address so that we know who the enquiry is from and can reply to it. Further details may be provided on a voluntary basis.

Data processing for the purpose of contacting us is carried out in accordance with Article 6(1)(a) of the GDPR on the basis of your voluntary consent. The personal data we collect when you use the contact form will be deleted once we have replied to your enquiry, provided this does not conflict with any statutory retention obligations or where the enquiry relates to the use of services and/or registration for an event. In such cases, data processing takes place as described below.

4. When requesting services, registering for events or applying for membership

If you are interested in or register for membership of our association or for any of the events or services offered by us or by our service provider, ZVO Service GmbH, we collect and process the following information, which you provide to us yourself:

• Title, form of address, first name, surname
• Valid email address
• Address (home address or address of the company you have specified)
• Telephone number (landline and/or mobile)
• Fax number
• Information necessary to process your enquiry and to fulfil the relevant contract to be concluded

This data is collected

• to identify you as a (potential) customer or (potential) member
• to correspond with you
• to assess your enquiry and process the enquiry or contract
• for invoicing purposes
• to enforce any claims against you or to defend ourselves against any claims made against us
• to provide further customer care and to market our own similar products or events to you

The data processing described above is carried out at your request and is necessary, in accordance with Article 6(1)(b) of the GDPR, for the purposes stated, namely to process your enquiry and/or to fulfil mutual obligations arising from the pre-contractual or contractual relationship.

Furthermore, we would like to maintain contact with you even after the contract has been fulfilled or the event has ended, and to draw your attention to similar products, services and events by electronic means – e.g. via the email address you have provided. We base the processing of data for the purposes of customer retention and marketing communications on a legitimate interest within the meaning of Article 6(1)(f) of the GDPR, and, when balancing these interests against your fundamental rights and freedoms, we also recognise the benefits that such communications offer you, for example by providing timely information about events.

You may object to this data processing for the purposes of long-term customer retention and marketing communications at any time.

The personal data collected to respond to your enquiry or to fulfil the contract will be stored until the contract has been fully processed and will then be deleted, unless we are obliged by law – for example, under Article 6(1), first sentence, point (c) of the GDPR, due to retention and documentation obligations under tax and commercial law (such as those under the German Commercial Code (HGB), the German Criminal Code (StGB) or the German Fiscal Code (AO)), or you have consented to further storage in accordance with Article 6(1), first sentence, point (a) of the GDPR. 

Data processed for customer retention purposes pursuant to Article 6(1)(f) of the GDPR will be processed until the legitimate interest ceases to apply and will then be deleted, at the latest upon your objection to the data processing. Statutory retention obligations are also complied with in respect of this data.

5. Disclosure of data

Your personal data will not be disclosed to third parties for purposes other than those listed below. We will only disclose your personal data to third parties if:

• you have given your explicit consent in accordance with Article 6(1), first sentence, point (a) of the GDPR
• this is permitted by law and necessary for the performance of contractual relationships with you in accordance with Article 6(1), first sentence, point (b) of the GDPR
• there is a legal obligation to do so under Article 6(1), first sentence, point (c) of the GDPR
• the disclosure is necessary pursuant to Article 6(1), first sentence, point (f) of the GDPR for the establishment, exercise or defence of legal claims, and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data.

Where we use external service providers to process your data and these providers are granted access to your personal data (such as our IT service provider, or, where applicable, copy and/or mail-handling services), we have carefully selected and commissioned them; they are bound by our instructions, obliged to comply with data protection regulations, are regularly monitored and, just like us, must implement their own technical and organisational measures to ensure that your data is processed in accordance with your fundamental rights and freedoms.

As the web administrator and data processor for the operation of our website, we use the services of Kienast Datenverarbeitung, Bügelstraße 20, 42657 Solingen, which can be contacted via the email address info@kienastdv.de and the website

6. Cookies

We use cookies on our website to enhance user-friendliness and to analyse user behaviour. These are small files that your browser creates automatically and which are stored on your device (laptop, tablet, smartphone, etc.) when you visit our site.

Cookies that are not technically necessary for the operation of the website are only used with your consent. The relevant consents are requested via a cookie banner and can be adjusted at any time via the cookie settings on our website.

Cookies do not cause any damage to your device and do not contain any viruses, Trojans or other malware. Information is stored in the cookie that relates specifically to the device in use. However, this does not mean that we thereby gain direct knowledge of your identity.

a) Types of cookies

We use the following types of cookies:

Session cookies

The use of cookies serves, on the one hand, to make your experience of our website more convenient. For example, we use transient cookies – which include, in particular, session cookies – to recognise whether you have already visited individual pages on our website. Specifically, these cookies store a so-called session ID, which allows various requests from your browser to be assigned to the same session. This enables your computer to be recognised when you return to our site. These cookies are automatically deleted when you leave our site.

Temporary cookies

In addition, we also use temporary cookies to optimise user-friendliness; these are stored on your device for a limited period. If you visit our site again to use our services, the web browser you are using will automatically recognise that you have previously visited us and recall the entries and settings you have made, so that you do not have to re-enter them. If you have deleted cookies from your web browser, this automatic recognition will not take place. 

Analytics cookies

We also use cookies to collect statistical data on the use of our website and to analyse this data with a view to optimising our offering for you. If you visit our site again to use our services, the web browser you are using will automatically recognise that you have previously visited our site and recall the entries and settings you have made, so that you do not have to re-enter them. 

b) Legal basis / Options for configuration, deactivation and objection

The data processed by cookies is processed for the stated purposes on the basis of your consent in accordance with Article 6(1)(a) of the GDPR, insofar as these are not cookies that are technically necessary for the operation of the website. With regard to cookies that are technically necessary for the operation of the website, data processing is based on our legitimate interest pursuant to Article 6(1), first sentence, point (f) of the GDPR. 

c) Analytics tools / tracking

The tracking measures listed below and used by us are carried out on the basis of your consent to the use of the relevant cookies in accordance with Article 6(1), first sentence, point (a) of the GDPR. We use these tracking measures to ensure that our website is designed to meet your needs and is continuously optimised. Furthermore, we use these tracking measures to statistically record the use of our website and to evaluate this data for the purpose of optimising our offering for you. 

Specifically, for the purpose of tailoring our pages to your needs and continuously optimising them, we use Matomo, a free web analytics programme distributed under the GNU General Public Licence. In this context, pseudonymised usage profiles are created using the relevant cookies.

The cookie collects information about your use of our website, in particular

• browser type and version,
• operating system used,
• referrer URL (the previously visited page),
• hostname of the accessing computer (IP address),
• time of the server request,

This information is used to analyse the use of the website, to compile reports on website activity and to provide further services related to website and internet usage for the purposes of market research and to tailor the design of this website to users’ needs. This information may also be transferred to third parties where required by law. IP addresses are anonymised so that they cannot be traced back to an individual (IP masking).

7. Social media plugins

We use so-called social media plugins on our website. These are clickable links to the respective social media sites. These social media plugins collect data regardless of whether they are clicked, as the respective plugin automatically establishes a connection to the databases of the relevant social media site. In particular, this may also involve the collection of personal data such as your IP address, browser information and, where applicable, user IDs for any existing social media accounts. We have no influence over this data processing and are not aware of exactly which data is being processed.

To safeguard your rights in this regard, we use a consent mechanism via our cookie banner for the plugins. The plugins are initially deactivated, meaning that no data processing takes place at this stage. Only once you have given your consent via the cookie banner to load the plugins, or once you have voluntarily clicked on the plugins yourself, will they be activated, and only then will the relevant data processing take place. Data processing by the plugins therefore depends on whether you activate them yourself.

a) Social media plugins used and the companies responsible for them

We use the following social media plugins from the following companies:

• LinkedIn: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
• YouTube: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
• Instagram: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland

These companies each have parent companies in the USA; it cannot therefore be ruled out that the plugins may also result in data being transferred to the USA. Such data transfers would be justified for each of these companies on the basis of standard contractual clauses in accordance with Article 46(2)(c) of the GDPR, as well as on the basis of the EU-US Data Privacy Framework. 

Details of the respective data processing activities for each company can be found as follows:

LinkedIn: www.linkedin.com/legal/privacy-policy

Google: policies.google.com/privacy

Meta: privacycenter.instagram.com/policy

b) Legal basis

We have a legitimate interest in using social media plugins on our website to increase our reach and draw attention to our social media presence. 

However, as explained, data processing only takes place once you have activated the relevant plugins via the cookie banner or by clicking on them beforehand. The resulting data processing is therefore based on your prior consent, Article 6(1)(a) of the GDPR, which you provide either via the cookie banner or by actively clicking.

You may withdraw your consent at any time via the cookie settings.

8. Minors

Our website is aimed at a professional business audience, and in any case at adults rather than minors. As a matter of principle, we do not collect any personal data from persons under the age of 16 and assume that no visitor to our site is a minor.

9. Data security

We use the widely adopted SSL (Secure Socket Layer) protocol to operate our website, in conjunction with the highest level of encryption supported by your browser. This is usually 256-bit encryption. If your browser does not support 256-bit encryption, we will use 128-bit v3 technology instead. You can tell whether a particular page on our website is being transmitted securely by the closed key or padlock symbol displayed in the status bar at the bottom of your browser.

We also employ appropriate technical and organisational security measures to protect your data against accidental or deliberate manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

III. Specific information on data processing when using our LinkedIn profile

We operate a social media channel on LinkedIn at de.linkedin.com/company/zentralverband-oberfl%C3%A4chentechnik. Below, we provide specific information regarding data processing when you access and use our channel there.

1. Platform operator and, in some cases, joint controllership

The operator of LinkedIn within the European Economic Area is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. Its parent company is LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA.

When operating the platform, LinkedIn generally processes personal data under its own responsibility, over which we have no influence. LinkedIn’s privacy policy can be found at: www.linkedin.com/legal/privacy-policy.

One of the data processing operations carried out by LinkedIn relates in particular to so-called Insights data (page analytics data). This consists of statistical data generated by LinkedIn regarding visitors to LinkedIn pages. With regard to the processing of Insights data relating to our own LinkedIn company page, there is a joint responsibility between us and LinkedIn Ireland Unlimited Company in accordance with Article 26 of the GDPR. LinkedIn has assumed primary responsibility for the processing of this data and also grants the relevant data subject rights; it therefore generally acts as your primary point of contact for enquiries and complaints regarding data processing on LinkedIn. You are nevertheless free to address such enquiries and complaints to us.

For data processed in the context of our LinkedIn channel, please contact LinkedIn directly in the first instance: www.linkedin.com/help/linkedin/ask/TSO-DPO

Details of the joint controller agreement with LinkedIn, which applies to all account holders, can be viewed at the following address: legal.linkedin.com/pages-joint-controller-addendum

2. Types of data processing on LinkedIn

a) Data processed by LinkedIn

When you visit our LinkedIn company page, LinkedIn processes the following data:

•  IP address and device information (operating system, browser, device identifiers)
•  Information about your LinkedIn account (profile, connections, membership status), provided you are logged in
• Usage data (pages viewed, content clicked on, time spent on the site, interactions such as likes, comments and shares)
• Location data (if enabled by you)
• Data from cookies and similar tracking technologies (including for advertising, analytics and personalised content)

b) Data processed by us

As the operator of the LinkedIn company page, we process:

•  Public profile information (name, job title, profile picture) when you comment on, like or share our posts
•  Content of comments, mentions and other public interactions on our page
•  Messages you send to us via LinkedIn Messenger
•  Aggregated, anonymised Insights data (e.g. visitor numbers, follower growth, post reach, demographic characteristics of the target audience)
•  Application data, if you apply via LinkedIn for a vacancy advertised by us 

3. Specific purposes and legal bases for data processing on LinkedIn

The specific purposes and objectives of operating our LinkedIn profile, the associated data processing activities and their legal bases are as follows, in particular:

• Maintenance and operation of our LinkedIn company page and the publication of posts: Article 6(1)(f) of the GDPR (legitimate interest in corporate communications, employer branding and brand building)
•  Responding to comments and direct messages: Article 6(1)(b) of the GDPR (pre-contractual measures) or Article 6(1)(f) of the GDPR
• Analysis of page performance via LinkedIn Page Analytics: Article 6(1)(f) of the GDPR (legitimate interest in optimising our communication)
• Promotional communications, presentation of products and services, employer branding: Article 6(1)(f) of the GDPR (legitimate interest in marketing and recruitment)
• Placing LinkedIn advertisements: Article 6(1)(a) of the GDPR (consent of users, obtained by LinkedIn) or Article 6(1)(f) of the GDPR
• Processing of application data: Article 6(1)(b) of the GDPR (implementation of pre-contractual measures) in conjunction with Section 26 of the BDSG

4. Data disclosure and transfers to third countries

We only disclose personal data in the course of using LinkedIn to the extent permitted by law (in particular Article 6(1)(a), (b), (c) or (f) of the GDPR).

LinkedIn Corporation, as the parent company, is based in the USA. We generally have no control over, nor knowledge of, whether and what data transfers take place in this regard via LinkedIn. In particular, we cannot rule out the possibility of data transfers to the USA. Any such data processing would, in any event, be justified on the basis of standard contractual clauses in accordance with Article 46(2)(c) of the GDPR, as well as on the basis of the EU-US Data Privacy Framework. Further details can be found, in particular, at www.linkedin.com/legal/privacy-policy

5. Retention period

Comments, messages and other content that we manage ourselves will be deleted as soon as they are no longer required for the purpose of communication. As our LinkedIn page is generally publicly accessible and is intended to serve as a public forum, we assume that public comments should not be deleted unless you request us to do so.

Application data is generally deleted once the application process has been completed, provided there are no statutory retention obligations.

The retention period for data processed by LinkedIn is governed by the LinkedIn Privacy Policy; please see: www.linkedin.com/legal/privacy-policy

6. Cookies and tracking by LinkedIn

LinkedIn uses cookies and similar technologies when you visit our company page, including for analytics, personalisation and advertising purposes. We have no control over this use. You can adjust your settings in your LinkedIn account settings under ‘Privacy and Settings’.

7. Minors

Our LinkedIn channel and the posts we publish there are generally aimed at an adult, professional audience. Individual posts, particularly those relating to apprenticeships, work placements, career guidance and related entry-level opportunities, may also be aimed at young people aged 15 and over. Visitors to our page who have not yet reached the age of 16 should, together with their legal guardians, submit an application or make contact regarding apprenticeships or work placements not via LinkedIn, but via the designated communication channels at https://glanzvolle-karriere.de/ , as the consent of a parent or guardian may be required for certain data processing activities.