Home » Privacy Policy

Privacy statement

Thank you for visiting our website. Compliance with data protection regulations is of particular importance to us. The aim of this data protection declaration is to inform you as a user of the website about the type, scope and purpose of the processing of personal data and the rights existing for you, insofar as you are the person concerned within the meaning of Art. 4 No. 1 of the Basic Data Protection Regulation. The following data protection declaration already takes into account the innovations according to the Data Protection Basic Regulation (DSGVO) in force since 25.5.2018. At the same time, this declaration also fulfils the requirements of § 13 of the German Telemedia Act (Telemediengesetz), which had been valid until then.

Responsible body

This website and the range of services are operated by puracon GmbH.

Proprietor: Ruth Ch. Geßner

Address:       Isarstraße 1

Street: 83026 Rosenheim

Phone: +49 8031 900 587 0

Fax: +49 8031 900 587 73

E-mail: info@puracon.com

General information

The development of the website has been designed to collect as little data as possible from you. In principle, it is possible to visit our website without providing personal data. Only if you decide to make use of certain services (e.g. use of a contact form) will the processing of personal data become necessary. We always ensure that your personal data is only processed in accordance with a legal basis or your consent. We comply with the provisions of the Data Protection Basic Regulation (DSGVO) in force since 25 May 2018 and the applicable national regulations, such as the Federal Data Protection Act, the Telemedia Act or other more specific laws on data protection.

puracon GmbH will obligate its employees and cooperation partners to comply with data protection regulations.

The following declaration gives you an overview of how puracon GmbH guarantees this protection and what kind of data is collected for what purpose.

For all data protection questions and messages, please contact the data protection officer of puracon GmbH at timo.hoffmann@hub24.de or by post at the above address of puracon GmbH.


The terms used in this data protection declaration have the following meaning in accordance with the DSGVO.

“Personal data” means any information relating to an identified or identifiable natural person (hereinafter “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, online identifier or to one or more specific characteristics expressing the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

“processing” means any operation or set of operations which is carried out with or without the aid of automated means relating to personal data, such as collection, recording, organisation, sorting, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or association, qualification, erasure or destruction;

“limitation of processing” means the marking of stored personal data with a view to limiting their further processing;

“pseudonymisation” means the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the provision of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures ensuring that the personal data are not attributed to an identified or identifiable natural person;

“controller” means the natural or legal person, public authority, agency or body which alone or jointly with others decides on the purposes and means of the processing of personal data; where the purposes and means of such processing are laid down by Union law or by the law of the Member States, the controller or the specific criteria of his designation may be laid down by Union law or by the law of the Member States;

“processor” means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;

“recipient” means a natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or not that person is a third party. However, authorities which may receive personal data in the course of a specific investigation task under Union law or the law of the Member States shall not be considered as recipients; the processing of such data by those authorities shall be carried out in accordance with the applicable data protection rules and in accordance with the purposes of the processing;

“third party” means a natural or legal person, public authority, agency or any other body, other than the data subject, the controller, the processor and the persons authorised to process the personal data under the direct responsibility of the controller or the processor;

“consent” means any freely given, informed and unambiguous expression of the data subject’s intention in the particular case, in the form of a statement or any other unequivocal confirmatory act by which the data subject indicates that he or she consents to the processing of his or her personal data;


We sometimes collect certain personal data from you when you visit our website, for which we need your consent. This takes place, for example, if you send us a message using one of our forms, order the newspaper or wish to become our cooperation partner.

Purpose and legal basis for the processing of personal data

We process personal data required for the establishment, implementation or processing of our range of services on the legal basis of Art. 6 Para. 1 lit. b DSGVO. If you have given us your consent to process personal data for specific purposes, we will process it on the basis of your consent pursuant to Art. 6 Para. 1 lit. a DSGVO.

If we use external services in the context of order data processing, the processing is carried out on the legal basis of Art. 28 DSGVO.

Personal data is collected, processed and used by us exclusively for the following purposes:

Purpose of data processing

Legal basis for the data processing (“Why is the data processing necessary”)

for making contact and related correspondence

on the basis of your consent

for processing your request and for any further advice you may require

on the basis of your consent

to receive our Newspaper

on the basis of your consent

to contact us to verify your data

on the basis of your consent

to ensure that our website is presented to you in the most effective and interesting way possible (e.g. through anonymous evaluation)

on the basis of legitimate interests

for the technical realisation of our offers

on the basis of legitimate interests

Personal data collected and processed

We collect and process your personal data only if you provide them voluntarily with your knowledge, e.g. by filling out our forms or sending e-mails.

Within the framework of the available forms or messages, these are first of all the following data: Data of interested parties for services:


  • full name*
  • full address*
  • Company name
  • Email address*
  • complete phone number*
  • the consent to the data protection declaration*.
  • Message*
  • the consent*

Data from interested parties on cooperations:

  • Salutation
  • full name*
  • company*
  • Email address*
  • Complete phone number*
  • Website*
  • already acquired certificates
  • the consent*

Data for ordering the newspaper:

  • E-mail address
  • Salutation
  • first name
  • Surname
  • the consent*

The personal data provided by you and their contents remain exclusively with us. We will only store and process your data for the purposes specified in Section 5. Any use going beyond the stated purpose requires your express consent.

Data processing by our cooperation partners is subject to their data protection regulations.

The personal data will be deleted immediately in case of revocation of your consent or if the purpose of the data use has ceased.

Puracon GmbH will immediately inform its cooperation partners of any revocation of consent declared to puracon GmbH. Puracon GmbH has obligated its cooperation partners to delete the personal data immediately after knowledge of the revocation.

Puracon GmbH has also obligated its cooperation partners to notify puracon GmbH immediately of any revocation declared to the cooperation partner. Puracon GmbH will immediately after knowledge of the declaration of revocation arrange the deletion of the data with itself and if necessary further cooperation partners.

General Logfiles

The web server temporarily records the connection data of the requesting computer (IP address), the pages you visit on our website, the date and duration of the visit, the identification data of the browser and operating system type used, the website from which you visit us and the successful retrieval in log files. The technical administration of the web pages and anonymous statistical surveys make it possible to evaluate access to the puracon GmbH offer and to evaluate it with the aim of increasing data protection and data security in our company in order to ultimately ensure an optimum level of protection for the personal data processed by us.

The data in the server log files are stored separately from all personal data provided by you.

Subject to any legal storage obligations, we will delete or anonymise your IP address after you leave our website.


Use of cookies

On our website, information is collected and stored through the use of so-called browser cookies.

What are cookies?

These are small text files which are stored on your data carrier and which store certain settings and data for exchange with our system via your browser. A cookie usually contains the name of the domain from which the cookie data was sent as well as information about the age of the cookie and an alphanumeric identifier.

Why do we use cookies?

Cookies enable our systems to recognize the user’s device and make any presettings available immediately. As soon as a user accesses the platform, a cookie is sent to the hard drive of the user’s computer. Cookies help us to improve our website and offer you a better and more personalized service. They enable us to recognize your computer or (mobile) device when you return to our website and thus:

  • To store information about your preferred activities on the website and thus tailor our website to your individual interests.
  • Speed up the processing of your requests.

We work with third party services to help us make the site more interesting for you. Therefore, when you visit the website, cookies from these partner companies (third parties) are also stored on your hard drive. These are cookies that are automatically deleted after the specified time.

A list of the cookies set by us can be found in the following table:

Cookie name

First-party cookies or third-party cookie?

For third-party cookies: Who is the originator?

Description / Function

standard lapse time



Determines whether the visitor has accepted the cookie consent field. This ensures that the cookie consent field is not displayed again when you re-enter it.

29 days



Registers a unique ID that is used to generate statistical data about how the visitor uses the site.

2 years



Used by Google Analytics to limit the request rate

1 day



Registers a unique ID that is used to generate statistical data about how the visitor uses the site.

1 day



Used to send data to Google Analytics about the device and the behavior of the visitor. Captures the visitor across devices and marketing channels.




This cookie is used to determine the preferred language of the visitor and to set the language accordingly on the website, if possible.

1 year



Register a unique ID that identifies the device of a returning user. The ID is used for targeted advertising.

6 months

Can I control the use of cookies?

If you do not wish to use browser cookies, you can set your browser so that cookies are not accepted. Please note that in this case you may only be able to use our website to a limited extent or not at all. If you only want to accept our own cookies, but not the cookies of our service providers and partners, you can select the setting in your browser “Block third-party cookies”. We assume no responsibility for the use of third party cookies.

Integration of third party services and content

Our website uses content, services and performances of other providers. These are, for example, maps from Google Maps. In order for this data to be called up and displayed in the user’s browser, the transmission of the IP address is absolutely necessary. The providers (hereinafter referred to as “third party providers”) thus perceive the IP address of the respective user.

Even though we make every effort to only use third-party providers who only need the IP address in order to deliver content, we have no influence on whether the IP address may be stored. In this case, this process serves statistical purposes, among others. If we become aware that the IP address is being stored, we will inform you accordingly.

Use of Google Analytics

Our website uses functions of the web analysis service Google Analytics. Provider of the web analytics service is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses “cookies”. These are small text files that your web browser stores on your device and allow analysis of website usage. Information generated by cookies about your use of our website is transmitted to a Google server and stored there. The server location is usually the USA.

Google Analytics cookies are set on the basis of Art. 6 Para. 1 lit. f DSGVO. As the operator of this website, we have a legitimate interest in analysing user behaviour in order to optimise our website and, if necessary, advertising.

We use Google Analytics in conjunction with the IP anonymisation function. It ensures that Google shortens your IP address within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before transmission to the USA. There may be exceptions in which Google transfers the full IP address to a server in the USA and shortens it there. On our behalf, Google will use this information to evaluate your use of the website, to create reports on website activity and to provide us with other services relating to website activity and internet usage. The IP address transmitted by Google Analytics is not merged with other Google data.

The setting of cookies by your web browser can be prevented. However, some functions of our website may be restricted as a result. You can also prevent the collection of data relating to your use of the website, including your IP address and subsequent processing by Google. This is possible by downloading and installing the browser plugin accessible via the following link: https://tools.google.com/dlpage/gaoptout?hl=de .

Details on the handling of user data by Google Analytics can be found in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

We have concluded a contract with Google for order processing in order to fully comply with the statutory data protection requirements.

Our website uses the function “demographic features” of Google Analytics. It can be used to create reports that contain statements about the age, gender and interests of website visitors. This data comes from interest-related advertising by Google and visitor data from third parties. It is not possible to assign the data to a specific person. You can deactivate this function at any time. This is possible via the ad settings in your Google Account or by generally prohibiting the collection of your data by Google Analytics, as explained under “Objection to data collection”.

You can find Google’s privacy policy at: https://policies.google.com/privacy/partners?hl=de

Use of Google Maps

For the integration and display of map content, our website uses the Google Maps map service. The provider of this service is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

When you visit a page with an integrated map from Google Maps, your IP address is recorded. This information is usually transferred to a Google server in the USA and stored there. Google will know your IP address even if you are not logged into a user account. If you are logged into your user account, Google can assign your surfing behaviour directly to your personal profile. You can prevent this by logging out beforehand. The provider of this page has no influence on this data transfer.

The use of Google Maps is in the interest of an appealing presentation of our online offers and an easy retrievability of the places indicated by us on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.

Details on the handling of user data can be found in Google’s data protection declaration: https://www.google.de/intl/de/policies/privacy/.

General information on presence in social networks

To present our company in the best possible way and with you as the user,

to be able to communicate with customers or interested parties and to inform them about the services we offer, we rely on our presence in social networks.

You will find us on the following platforms and social networks

  • LinkedIn
  • XING
  • Facebook

When social networks are used, data is processed outside the European Union (EU) and the European Economic Area (EEA). An equivalent level of data protection to that existing in the EU cannot be guaranteed in all countries outside the EU.

In this context, it can lead to risks for you as a user if the transferred data is processed in so-called third countries with an inadequate level of data protection.

This makes it more difficult to enforce known user rights. In addition, your data may not be processed in your interest by the provider in the third country.

If providers from the USA have certified themselves under the so-called Privacy Shield Agreement – an agreement on data protection between the USA and the EU – these providers are obliged to comply with the data protection standards of the EU.

The processing purposes pursued by the social networks generally differ from ours. For example, data collected from you in social networks is usually processed for the purposes of market research, advertising and creating user profiles for personalised advertising (e.g. Facebook, Google, Instagram, etc.).

In order to achieve this, cookies are used which record user behaviour and enable the user to create a profile. In the case of Facebook, a user profile is also created for persons who do not have a registered account on Facebook.

A concrete list of the processing purposes of the user data can be found in the data protection notices of the respective providers. By making the appropriate settings in your user account, you can, at least to a certain extent, restrict the creation of your profile. For the exact procedure, please read the corresponding data protection information of the respective provider.

Facebook Fanpage

When you visit our Facebook page, Facebook collects information such as your IP address and other information that is stored on your PC in the form of cookies. This information is used to provide us, as operators of Facebook pages, with statistical information about the use of the Facebook page. Facebook provides further information on this under the following link: http://de-de.facebook.com/help/pages/insights-en.facebook.com/help/pages/insights.

The statistical information provided does not allow us to draw conclusions about individual users. We only use this information to respond to the interests of our users and to continuously improve our online presence and ensure its quality.

We only collect your data via our fan page in order to provide you with the opportunity to communicate and interact with us. This collection usually includes your name, news content, commentary content and the profile information you “publicly” provide.

The processing of your personal data for the above-mentioned purposes is based on our legitimate business and communicative interest in providing an information and communication channel pursuant to Art. 6 Para. 1 lit. f DSGVO. If you as a user have given your consent to data processing to the respective provider of the social network, the legal basis for processing extends to Art. 6 Para. 1 lit. a, Art. 7 DSGVO.

Due to the fact that the actual data processing is carried out by the provider of the social network, our access possibilities to your data are limited. Only the provider of the social network is authorized to have full access to your data. Because of this, only the provider can directly take and implement appropriate measures to fulfill your user rights (request for information, request for deletion, objection, etc.). The assertion of corresponding rights is therefore most effective directly against the respective provider.

Should you nevertheless require help in this matter, please do not hesitate to contact us.

Rights affected

With the Facebook “Page Controller Add-on the rights and duties to be observed together with Facebook are shown. These can be found under the following link: https://www.facebook.com/legal/terms/page_controller_addendum

Please use the corresponding contact form under the following link for a request for information: https://www.facebook.com/help/contact/308592359910928.

Below you will find a detailed description of the respective data processing by the providers and their opt-out options via the corresponding links to the websites of the providers:

  • Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) – Privacy Policy: https://www.facebook.com/about/privacy/, Opt-Out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active https://www.facebook.com/legal/terms/page_controller_addendum.
  • Google/ YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) – Privacy Statement: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
  • LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland) – Privacy Policy: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out-policy, Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active.
  • Xing (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany) – Privacy Policy / Opt-Out: https://privacy.xing.com/de/datenschutzerklaerung.

Data security

Unfortunately, the transmission of information over the Internet is never 100% secure, which is why we cannot guarantee the security of the data transmitted over the Internet to our website.

However, we use technical and organisational measures to protect our website against the loss, destruction, access, alteration or distribution of your data by unauthorised persons.

In particular, your personal data will be transmitted by us in encrypted form. We use the coding system SSL/TLS (Secure Sockets Layer/ Transport Layer Security). Our security measures are continuously improved in line with technological developments.

Rights of the person concerned

If you are a data subject within the meaning of Art. 4 No. 1 DSGVO, you have the following rights with regard to the processing of your personal data under the DSGVO. The legal text of the rights listed below can be found at https://www.bfdi.bund.de/SharedDocs/Publikationen/Faltblaetter/Datenschutz_MeineRec hte.html?nn=5217272.

Right to confirmation and information

Subject to the requirements of Art. 15 DSGVO, you have the right to request confirmation as to whether personal data relating to you will be processed and to obtain at any time free information about the personal data stored about you and a copy of this information from the data controller.

Right of rectification

Under the conditions of Art. 16 DSGVO, you have the right to demand the immediate correction of incorrect personal data concerning you.

You also have the right to request the completion of incomplete personal data – also by means of a supplementary declaration – taking into account the purposes of the processing.

Right to cancellation

Under the conditions of Art. 17 DSGVO, you have the right to demand that the personal data relating to you be deleted immediately if one of the reasons stated in Art. 17 DSGVO applies and if processing is not necessary.

Right to limitation of processing

Under the conditions set out in Art. 18 DSGVO, you have the right to demand the restriction of processing if one of the conditions set out in Art. 18 DSGVO applies.

Right to data transferability

Subject to the requirements of Art. 20 DSGVO, you have the right to receive the personal data concerning you which you have provided to us in a structured, common and machine-readable format and you have the right to transfer this data to another responsible person without any hindrance on our part, provided that the further requirements of Art. 20 DSGVO are met.

Right to revoke consent

You have the right to revoke any consent given to us for the processing of personal data at any time with effect for the future. Please address the revocation to the contact data given above.

Right of objection

Under the conditions of Art. 21 DSGVO, you have the right to object to the processing of your personal data at any time. If the prerequisites for an effective objection are met, processing by us may no longer take place.

Right of appeal to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to complain to a supervisory authority, in particular in the Member State in which you are staying, at your place of work or at the place where the alleged infringement is alleged, if you consider that the processing of your personal data is contrary to the requirements of the DSGVO.

Disclosure of your personal data

Your personal data will be passed on as described below.

The website is hosted by an external service provider in Germany. Here we ensure that data processing takes place solely in Germany and the EU. This is necessary for the operation of the website, as well as for the justification, implementation and processing of the existing user contract and is also possible without your consent.

A passing on takes place besides then if we are entitled or obligated due to legal regulations and/or official or judicial orders to a data passing on. In particular, this may involve providing information for the purposes of criminal prosecution, averting danger or enforcing intellectual property rights.

Insofar as your data is passed on to service providers to the extent necessary, they will only have access to your personal data to the extent necessary to fulfil their tasks. These service providers are obliged to treat your personal data in accordance with the applicable data protection laws, in particular the DSGVO.

Beyond the aforementioned circumstances, we do not transfer your data to third parties without your consent. In particular, we do not pass on any personal data to a third party or an international organisation.

Storage period for personal data

With regard to the storage period, we delete personal data as soon as their storage is no longer necessary for the fulfilment of the original purpose and there are no longer any legal storage periods. The legal retention periods are ultimately the criterion for the final duration of the storage of personal data. After this period has expired, the corresponding data is routinely deleted. If retention periods exist, the processing is restricted by blocking the data.

References and links

When calling up Internet pages to which reference is made within the framework of our website, information such as name, address, e-mail address, browser properties, etc. can be asked again. This data protection declaration does not regulate the collection, disclosure or handling of personal data by third parties.

Third party service providers may have different and their own regulations in dealing with the collection, processing and use of personal data. It is therefore advisable to inform yourself on the websites of third parties about their practice in handling personal data before entering personal data.

For application procedures

Your details

Puracon GmbH attaches particular importance to the protection of your personal data. Your personal data will be stored and used by puracon GmbH in accordance with the provisions of the EU Data Protection Basic Regulation (EUDSGVO) and the new version of the Federal Data Protection Act (BDSG). We refer you to the further details in our general data protection declaration.

Online application by e-mail

When you decide to apply online, you facilitate and speed up the processing of your application and agree to the storage of your data.

Processing and use of your data

Your personal data will only be stored and used electronically for the purpose of processing your application. Your personal data will not be passed on to third parties. In both application procedures (i.e. online application procedure and application by post), we store your details in our applicant management system for a period of 6 months. Your data will be completely deleted after the expiry of the aforementioned period. Your details can only be accessed by employees from the personnel department who have been bound to data secrecy. In the selection process, your documents will be made available to the responsible manager.

Puracon GmbH is entitled to remove illegal content from online applications (e.g. content that violates official prohibitions or morality) without informing the applicant in advance.

Modification of the data protection declaration

We are constantly developing our website in order to provide you with an ever improving service. We will always keep this data protection declaration up to date and adapt it accordingly if and to the extent that this should become necessary.

We will, of course, inform you in good time of any changes to this data protection declaration. We will do this, for example, by sending an e-mail to the e-mail address you have given us. If, in addition, further consent from you should become necessary for our handling of your data, we will of course obtain it from you before corresponding changes take effect.

You can call up the current version of our data protection declaration at any time on the Internet under this link.

Data Protection Officer

We have appointed a data protection officer:

Philipp Herold


Harbour road 1a

23568 Lübeck, Germany

E-mail: philipp.herold@hub24.de