Privacy Policy

We are delighted that you are visiting our website. The protection and security of your personal information when using our website is very important to us. We would therefore like to take this opportunity to inform you about which of your personal data we collect when you visit our website and for what purposes it is used.

This privacy policy applies to our website, which is accessible under this domain and the various subdomains ("our website").

Objection to advertising emails

We hereby object to the use of contact data published in the imprint, the privacy policy, and elsewhere on the website for the purpose of sending unsolicited advertising and information materials. The operators of the website expressly reserve the right to take legal action in the event of unsolicited advertising information being sent, for example via spam emails.

Who is responsible and how can I contact them?

Responsible

for the processing of personal data within the EU General Data Protection Regulation (GDPR)

Fashion Chemicals GmbH & Co. KG
Isardamm 79-83
82538 Geretsried

Data protection officer

Germany: Pulcra Chemicals GmbH, Stephan Krischke, datenschutz@pulcrachem.com

Spain: Pulcra Chemicals s.l., lopd@pulcrachem.com

What is this about?

This privacy policy meets the legal requirements for transparency in the processing of personal data. This includes all information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, email address, IP address, or user behavior when visiting a website. Information that we cannot link to your person (or only with disproportionate effort), e.g. through anonymization, is not personal data. The processing of personal data (e.g. collection, retrieval, use, storage, or transmission) always requires a legal basis and a defined purpose.

Stored personal data is deleted as soon as the purpose of processing has been achieved and there are no legitimate reasons for further storage of the data. We will inform you of the specific storage periods or criteria for storage in the individual processing operations. Irrespective of this, we store your personal data in individual cases for the assertion, exercise, or defense of legal claims and in the event of statutory retention obligations.

Who receives my data?

Your personal data will not be transferred to third parties for purposes other than those listed below.

We only pass on your personal data to third parties if:

you have given us your express consent in accordance with Art. 6 (1) (a) GDPR,

the transfer is permissible under Art. 6 (1) lit. f GDPR to safeguard our legitimate interests and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,

there is a legal obligation to disclose the data in accordance with Art. 6 (1) (c) GDPR, and

this is legally permissible and necessary for the performance of contractual relationships with you in accordance with Art. 6 (1) (b) GDPR.

To protect your data and, if necessary, enable us to transfer data to third countries (outside the EU/EEA), we have concluded agreements on order processing based on the European Commission's standard contractual clauses. If the standard contractual clauses are not sufficient to establish an adequate level of security, your consent pursuant to Art. 49 (1) (a) GDPR may serve as the legal basis for the transfer to third countries. This does not apply in the case of data transfers to third countries for which the European Commission has issued an adequacy decision pursuant to Art. 45 GDPR.

Within the scope of the processing operations described in this privacy policy, personal data may be transferred to the USA. US investigative authorities may require US companies to disclose personal data without the subject of data being able to take effective legal action against this. This means that there is a possibility that your personal data may be processed by US investigative authorities. We have no influence on these processing activities. Data transfer to the USA is carried out in accordance with Art. 45 (1) GDPR based on the adequacy decision of the European Commission. The US companies involved and/or their US subcontractors are certified under the EU-US Data Privacy Framework (EU-US DPF). In cases where no adequacy decision by the European Commission exists (including US companies that are not certified under the EU-US DPF), we have agreed on other appropriate safeguards with the recipients of the data within the meaning of Art. 44 et seq. GDPR. Unless otherwise specified, these are standard contractual clauses of the European Commission in accordance with Implementing Decision (EU) 2021/914 of June 4, 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE. If the standard contractual clauses are not sufficient to establish an adequate level of security or if it is not possible to conclude the standard contractual clauses, your consent pursuant to Art. 49 (1) (a) GDPR may serve as the legal basis for the transfer.

Do you use cookies?

Cookies are small text files that we send to your device's browser and store there when you visit our website. As an alternative to using cookies, information can also be stored in your browser's local storage. Some functions of our website cannot be offered without the use of cookies or local storage (technically necessary cookies). Other cookies, on the other hand, enable us to perform various analyses so that, for example, we can recognize the browser you are using when you visit our website again and transmit various information to us (non-necessary cookies). Cookies enable us, among other things, to make our website more user-friendly and effective for you by tracking your use of our website and determining your preferred settings (e.g., country and language settings). If third parties process information via cookies, they collect the information directly via your browser. Cookies do not cause any damage to your device. They cannot execute programs or contain viruses.

We provide information about the respective services for which we use cookies in the individual processing operations. Detailed information about the cookies used can be found in the cookie settings or in the Consent Manager of this website.

What rights do I have?

Under the conditions of the legal provisions of the General Data Protection Regulation (GDPR), you as the data subject have the following rights:

Information pursuant to Art. 15 GDPR about the data stored about you in the form of meaningful information about the details of the processing and a copy of your data;

Rectification pursuant to Art. 16 GDPR of inaccurate or incomplete data stored by us;

Erasure pursuant to Art. 17 GDPR of the data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;

Restriction of processing pursuant to Art. 18 GDPR, insofar as the accuracy of the data is disputed, the processing is unlawful, we no longer need the data and you refuse to have it deleted because you need it to assert, exercise or defend legal claims or you have objected to the processing pursuant to Art. 21 GDPR.

Data portability pursuant to Art. 20 GDPR, insofar as you have provided us with personal data within the scope of consent pursuant to Art. 6 (1) lit. a GDPR or based on a contract pursuant to Art. 6 (1) lit. b GDPR and this has been processed by us using automated procedures. You will receive your data in a structured, commonly used, and machine-readable format, or we will transmit the data directly to another controller, insofar as this is technically feasible.

Objection pursuant to Art. 21 GDPR to the processing of your personal data, insofar as this is based on Art. 6 (1) (e), (f) GDPR and there are reasons for this arising from your situation, or the objection is directed against direct marketing. The right to object does not apply if there are compelling legitimate grounds for the processing or if the processing is for the establishment, exercise, or defense of legal claims. If the right to object does not apply to individual processing operations, this will be indicated there.

Revocation pursuant to Art. 7 (3) GDPR of your consent with effect for the future.

Complaint pursuant to Art. 77 GDPR to a supervisory authority if you believe that the processing of your personal data violates the GDPR. As a rule, you can contact the supervisory authority of your usual place of residence, your place of work, or our company headquarters.

How is my data processed in detail?

Below, we provide information about the individual processing operations, the scope and purpose of data processing, the legal basis, the obligation to provide your data, and the respective storage period. There is no automated decision-making in individual cases, including profiling.

Provision of the website

Type and scope of processing

When you access and use our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called log file:

IP address of the requesting computer

Date and time of access

Name and URL of the file accessed

Website from which access is made (referrer URL)

Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider

Our website is not hosted by us, but by a service provider who processes the data on our behalf in accordance with Art. 28 GDPR.

Purpose and legal basis

The processing is carried out to protect our overriding legitimate interest in displaying our website and ensuring security and stability based on Art. 6 (1) lit. f GDPR. The collection of data and storage in log files is essential for the operation of the website. There is no right to object to the processing due to the exception under Art. 21 (1) GDPR. Insofar as further storage of the log files is required by law, processing is carried out based on Art. 6 (1) lit. c GDPR. There is no legal or contractual obligation to provide the data, but it is technically impossible to access our website without providing the data.

Storage period

The data is stored for the duration of the website display and, for technical reasons, for a maximum of 7 days thereafter.

SAP SuccessFactors

To further process your application, we use HR software from SAP Deutschland SE & Co. KG, Hasso-Plattner-Ring 7, 69190 Walldorf, Germany. For more information about SAP SuccessFactors, please visit https://www.sap.com/germany/about/trust-center/data-privacy.html.

Contact

Type and scope of processing

When you contact us (e.g., via contact form or email), personal data is collected. The data collected in the case of a contact form can be seen in the respective contact form. In addition, you can voluntarily provide additional information that you believe is necessary for processing the contact request.

When using the contact form, your personal data will not be passed on to third parties.

Purpose and legal basis

The processing of your data using our contact form is carried out for the purpose of communication and processing your request based on your consent in accordance with Art. 6 (1) lit. a GDPR. If your request relates to an existing contractual relationship with us, the processing is carried out for the purpose of fulfilling the contract based on Art. 6 (1) lit. b GDPR. There is no legal or contractual obligation to provide your data, but it is not possible to process your request without providing the information in the mandatory fields. If you do not wish to provide this data, please contact us by other means.

Storage period

If you use the contact form based on your consent, we will store the data collected for each request for a period of three years, beginning with the completion of your request or until you revoke your consent.

If you use the contact form within the framework of a contractual relationship, we will store the data collected for each inquiry for a period of three years from the end of the contractual relationship.

Registration of a user account

Type and scope of processing

To use our talent network, you have the option of registering a user account. The information collected during registration via the mandatory fields is required to provide access to the user account.

When registering a user account, your personal data will only be passed on in accordance with this privacy policy.

Purpose and legal basis

We process your data for the purpose of providing a user account to fulfill a contract with you in accordance with Art. 6 (1) (b) GDPR. There is a contractual obligation to provide your data, as this information is necessary to identify you and for us to fulfill the contract. There is no legal obligation to provide the data. Without the provision of this information, it is not possible to register a user account and thus conclude a contract.

Storage period

We store your personal data for the duration of the contractual relationship within the scope of providing the user account. After the end of the contract/deletion of the user account, your data will only be stored further if there are legal storage obligations (e.g., tax and commercial law).

Technology

SSL/TLS encryption

This site uses SSL or TLS encryption to ensure the security of data processing and to protect the transmission of confidential content, such as orders, login data, or contact requests that you send to us as the operator. You can recognize an encrypted connection by the fact that the address line of the browser contains "https://" instead of "http://" and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Data protection information for applicants

We are delighted that you are interested in our company and are applying for a position with us. We would like to provide you with information below about how your personal data is processed in connection with your application.

Who is responsible for data processing?

The party responsible for data protection is the respective company to which you are applying. In this case, this company acts as the sole party responsible for your personal data. However, if your application is considered by several companies at the same time, those companies act as joint responsible parties to which your application is submitted.

Pulcra Chemicals GmbH

Isardamm 79-83, 82538 Geretsried

Fashion Chemicals GmbH & Co. KG

Isardamm 79-83, 82538 Geretsried

Phone: +49 (0)8171 628 0

Email: info@pulchrachem.com

You can find further information about our company, details of authorized representatives, and additional contact options in the legal notice on our website: https://www.pulcra-chemicals.com/legal-notice/

In the case of cross-company applications, Pulcra Chemicals GmbH, its sister companies at the respective international locations, and Fashion Chemicals GmbH & Co. KG have entered into agreements on joint responsibility in accordance with Art. 26 GDPR for the purpose of a joint application process.

Our data protection officer

We have appointed a data protection officer in our company. You can contact Stephan Krischke at datenschutz@pulcrachem.com

What data do we process about you? And for what purposes?

We process the data you have sent us in connection with your application to assess your suitability for the position (or other open positions in our companies, if applicable) and to carry out the application process.

We use Microsoft Corporation's "Teams" tool to conduct online interviews as needed. When using "Teams," various types of data (video, usage, and contact data) are processed. For more information, see the sections "To which recipients are the data passed on?" and "Where is the data processed?"

We do not plan to process any special categories of personal data from you. This includes data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, health data, or data concerning a natural person's sex life or sexual orientation. If you provide us with such personal data on your own initiative, our processing will also include such data.

Some positions in our company are subject to a separate review, known as "terrorism screening." This requires a review of the applicant against sanctions lists.

What is the legal basis for this?

The legal basis for the processing of your personal data in this application process is primarily Art. 6 (1) (b) GDPR. According to this, the processing of data that is necessary in connection with the decision to establish an employment relationship is permissible. This also includes the use of the online applicant portal.

If special categories of personal data within the meaning of Art. 9 GDPR are processed (e.g., health data), the legal basis is Section 26 (3) BDSG or Art. 9 (2) lit. b) GDPR in conjunction with Art. 6 (1) lit. b) GDPR.

If you have given your consent to be included in our applicant pool, Art. 6 (1) (a) GDPR in conjunction with § 26 (2) BDSG is the legal basis for our processing.

Nevertheless, the use of "Teams" is an essential component in conducting an effective job interview, so Art. 6 (1) (f) GDPR is the legal basis for data processing. In these cases, our interest lies in the effective conduct of "online meetings."

If the data is required for legal purposes after the application process has been completed, data processing may be carried out based on the requirements of Art. 6 GDPR, for the purposes of legitimate interests pursuant to Art. 6 (1) (f) GDPR. Our interest then lies in asserting or defending claims and related proceedings or in checking the person against sanctions lists ("terrorist screening") within the framework of export control.

We also carry out terror screening in accordance with Art. 6 (1) (c) GDPR to comply with a legal obligation, as according to EC Regulations No. 2580/2001 and No. 881/2002, the persons, groups, or organizations listed in the annex to the regulations - terrorist organizations and suspects - may not be provided with funds or economic resources. Violations of this provision, including negligent violations, constitute a criminal offense under Section 34 of the Foreign Trade Act.

How long is the data stored?

Data from applicants will be deleted after 6 months in the event of rejection.

If you have consented to the further storage of your personal data, we will transfer your data to our applicant pool. The data will be deleted after 12 months.

If you are offered a position as part of the application process, the data will be transferred from the applicant data system to our personnel information system.

To whom is the data passed on?

We use a specialized software provider for the application process. This provider acts as a service provider for us and may also obtain knowledge of your personal data in connection with the hosting of the system and the online applicant portal, as well as the maintenance and servicing of the systems. We have concluded a so-called data processing agreement with this provider, which ensures that data processing is carried out in a permissible manner.

Your application data will be reviewed by the Human Resources department after we receive your application. Suitable applications will then be forwarded internally to the department managers responsible for the respective open positions. The next steps will then be coordinated. Within the company, only those persons who need your data for the proper execution of our application process have access to it.

Any audio, video, or chat content will also only be processed during the respective online meeting. "Teams" is an online meeting product from Microsoft 365 that we use via the service provider Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown Dublin 18, Ireland, by way of so-called order processing.

If "terrorism screening" is necessary for recruitment, we have the option of checking applicants online against a sanctions list.

Your application data may also be disclosed to third parties if we are legally obliged to do so, e.g., by court order (legal basis for processing: Art. 6 (1) (c) GDPR).

Where is the data processed?

The data is processed exclusively in data centers within the European Economic Area (EEA). Data processing outside the European Economic Area (EEA) does not take place. However, we cannot rule out the possibility that data may be routed via Internet servers located outside the EU. This may be the case if participants in "Teams" are in a third country.

However, the data is encrypted during transport via the Internet and is therefore protected against unauthorized access by third parties.

Consequences of non-provision

The provision of personal data is necessary to carry out the application process with you and subsequently conclude an employment contract with you. You are not obliged to provide us with this personal data. If you do not provide us with the personal data required for the selection process or the conclusion of an employment contract, we may not be able to consider you in the application process.

Your rights as a "data subject"

Right to information

You have the right to obtain information about the personal data we process about you. If you submit a request for information that is not in writing, we ask for your understanding that we may then require proof from you that you are the person you claim to be.

Right to correct or deletion

Furthermore, you have the right to rectification or erasure of the processing, insofar as you are legally entitled to do so.

Right to notification

If you have asserted your right to correction, deletion, or restriction of processing against us, we are obliged to correct or delete all recipients to whom we have disclosed personal data concerning you. Furthermore, the restriction of processing must be communicated, unless this proves impossible or involves disproportionate effort. You have the right to be informed by us about these recipients.

Right to restriction of processing

You have the right to request that we restrict processing if one of the following conditions applies:

You dispute the accuracy of the personal data, for a period enabling us to verify the accuracy of the personal data.

The processing is unlawful, you refuse to have the personal data deleted and instead request the restriction of the use of the personal data.

We no longer need your personal data for our processes, but you may still need it to enforce, exercise, or defend legal claims.

You have objected to the processing pursuant to Art. 21 (1) GDPR and it is not yet clear whether our legitimate reasons outweigh yours.

If the processing of personal data concerning you has been restricted, such data may, with the exception of storage, only be processed with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

If the restriction on processing has been restricted in accordance with the above conditions, we will inform you before the restriction is lifted.

Your right to restriction of processing may be limited to the extent that it is likely to render impossible or seriously impair the achievement of the research or statistical purposes and the restriction is necessary for the fulfillment of the research or statistical purposes.

Right to data portability

You have the right to obtain access to your personal data that you have provided to us in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us, provided that

1. the processing is based on consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR and

2. the processing is carried out using automated means.

In exercising this right, you also have the right to have the personal data concerning you transferred directly from one controller to another, where technically feasible. The freedoms and rights of other persons must not be affected by this.

Objection to processing

You have the right to object at any time, on grounds relating to your situation, to the processing of personal data concerning you which is carried out based on Art. 6 (1) (e) or (f) GDPR.

We will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.

Right to revoke the data protection consent form

You have the right to revoke your declaration of consent under data protection law at any time. Revoking your consent does not affect the legality of the processing carried out based on your consent prior to revocation.

Right to lodge a complaint

You have the right to complain to a data protection supervisory authority about our processing of personal data.

November 2025