Skip to main navigationSkip to main contentSkip to footer

I. General Information

The protection of your personal data is very important to us. Your personal data is processed exclusively in accordance with applicable data protection regulations, in particular the General Data Protection Regulation (GDPR) and the relevant national data protection laws.

1. Data Controller

The controller responsible for the processing of your personal data described in this Privacy Policy is the following company: Triflex GmbH & Co. KG Karlstraße 59 D-32423 Minden Phone:  +49 571 / 3 87 80 - 0        info@triflex.de Managing Director: Dr. Clemens von Trott zu Solz

2. Data Protection Officer

If you have any questions regarding the processing of personal data, please contact our Data Protection Officer: Triflex GmbH & Co. KG Karlstraße 59 D-32423 Minden Email: datenschutzbeauftragter@triflex.de

3. Scope

This Privacy Policy applies to the processing of personal data in connection with the use of the website: www.triflex.com/de/, including all content, features, and services provided through it. It applies exclusively to the German country section (“/de/”). For other country-specific sections of this domain, the privacy policies of the respective responsible companies, as published from time to time, apply. There is no joint responsibility within the meaning of Article 26 of the GDPR, unless expressly stated otherwise.

II. Nature, Purpose, and Legal Basis of Data Processing

1. Hosting and Technical Provisioning

Purpose of processing: The data is processed to ensure the stable and high-performance operation of the website, to guarantee IT and system security, to analyze errors, and to prevent misuse.
Type of data:
  • IP address
  • Date and time of access
  • Content accessed
  • Browser, device, and operating system data
  • Server and CDN log data
Legal basis: Art. 6(1)(f) GDPR (legitimate interest) — Our legitimate interest lies in ensuring the long-term functionality, stability, and security of our website. This includes, in particular, the detection, analysis, and prevention of technical malfunctions, as well as the prevention of misuse and unauthorized access. Furthermore, the processing serves to protect the integrity of our systems and ensure the smooth operation of our online services.
Transfer to Third Countries: The transfer of personal data to third countries, in particular to the United States, cannot be ruled out. If the respective provider is certified under the EU-U.S. Data Privacy Framework (DPF), the transfer is based on the European Commission’s adequacy decision pursuant to Article 45 of the GDPR. If no certification exists, the transfer is based on EU Standard Contractual Clauses pursuant to Article 46 of the GDPR, as well as additional technical and organizational measures where applicable.
Retention Period: The collected data is stored for 30 days and then deleted, unless longer retention periods are required due to security-related events.

2. Content and Asset Management

Purpose of processing: The collected data is processed to provide media content, optimize its delivery via a global content delivery network (CDN), and to ensure technical performance. Type of data:
  • IP address
  • Time of access
  • Content accessed (assets, images, downloads)
  • Usage data
Legal basis: Art. 6(1)(f) GDPR (legitimate interest) — Our legitimate interest lies in the efficient and secure provision of our online content, as well as in optimizing loading speeds and system performance. In addition, the processing serves to maintain technical stability, analyze errors, and prevent disruptions or misuse of our services. Transfer to Third Countries: The transfer of personal data to third countries, in particular to the United States, cannot be ruled out. If the respective provider is certified under the EU-U.S. Data Privacy Framework (DPF), the transfer is based on the European Commission’s adequacy decision pursuant to Art. 45 GDPR. If no certification exists, the transfer is based on EU Standard Contractual Clauses pursuant to Article 46 of the GDPR, as well as additional technical and organizational measures where applicable. Retention period: Server and CDN logs are generally stored for up to 30 days and then deleted.

3. Cookies, Local Storage, and Consent Management

We use Cookiebot to obtain and manage consent
a) Technically Necessary Cookies
Purpose of processing: These cookies are used to provide essential website functions and to store user-specific settings (e.g., language or target audience) to improve the website’s user-friendliness.
Type of data:
  • TargetGroup – (storage of the selected target group)
  • SELECTED_LOCALE – (Stores the selected language)
  • DismissedHints – (Stores hidden UI prompts)
Legal basis: Section 25(2) of the German Telemedia Act (TDDDG) in conjunction with Article 6(1)(f) of the General Data Protection Regulation (GDPR) (legitimate interest) – Our legitimate interest lies in providing a functional, user-friendly website that is tailored to user preferences.
Retention period: TargetGroup and SELECTED_LOCALE are stored for 365 days. DismissedHints is stored for 180 days and then deleted.
b) Local Storage
Purpose of processing: The processing serves to improve user guidance and optimize the user experience by retaining individual settings and enabling smooth navigation.
Type of data:
  • downloadCenterFilters – Storage of filter settings in the download area
Legal basis: § 25(2) TDDDG in conjunction with Art. 6(1)(f) GDPR (legitimate interest) — Our legitimate interest lies in the user-friendly design of the website and in the efficient provision of the desired functions.
Retention period: The data in local storage is retained until users manually delete it. There is no automatic deletion
c) Consent Management
Purpose of processing: The processing serves to obtain, manage, and document cookie consents, as well as to automatically block non-essential cookies until consent is given. Additionally, Cookiebot allows users to subsequently adjust or revoke the settings they have selected.
Type of data:
  • Consent status (consent/revocation)
  • Cookie categories (necessary, preferences, statistics, marketing)
  • Consent ID
  • Anonymized IP address
  • Consent timestamp
  • Browser and device settings
Legal basis: Section 25(1) of the TDDDG in conjunction with Article 6(1)(a) of the GDPR (Consent)
Retention period: This data is stored for 12 months. After this period expires, it will be automatically deleted.

4. Web Analytics and Tracking

We use various analytics, marketing, and convenience services. Depending on the service, data processing is carried out either based on your consent or on the basis of our legitimate interest or to fulfill a contract. All of the following tools are activated only after consent is given

We use Google Analytics 4, a web analytics service provided by Google LLC, on our website. Google Analytics 4 enables us to analyze and evaluate user behavior on our website. To this end, various types of data are collected, such as pages visited, time spent on the site, devices used, approximate location data, and user interactions. The information collected by Google Analytics 4 is generally transmitted to and stored on Google’s servers. Purpose of processing: Analysis of user behavior, evaluation of reach, and optimization of content and website functions. Type of data:
  • IP address (truncated/anonymized)
  • User IDs (pseudo-IDs)
  • Device, browser, and interaction data
  • Interaction data (page views, events)
  • Geographic location (region)
Legal basis: Section 25(1) TDDDG, Article 6(1)(a) GDPR (Consent) Transfer to third countries: The transfer of personal data to third countries, in particular to the the United States, cannot be ruled out. If the respective provider is certified under the EU-U.S. Data Privacy Framework (DPF), the transfer is based on the European Commission’s adequacy decision pursuant to Art. 45 of the GDPR. If no certification exists, the transfer is based on EU Standard Contractual Clauses pursuant to Article 46 of the GDPR, as well as additional technical and organizational measures where applicable. Retention period: The collected data is stored for 2 months. After this period expires, it is automatically deleted.

We use Google Tag Manager on our website. Google Tag Manager is a service provided by Google LLC that allows us to manage and deploy website tags through a central interface. Google Tag Manager itself does not process any personal data of users, but serves exclusively to manage and deploy other components (so-called tags). Data may be collected via these tags under certain circumstances. We have access to this data processing via Google Tag Manager. Purpose of processing: Management and organization of website tags, as well as control and activation of analytics, tracking, and marketing services to optimize our website and advertising efforts. Type of data: Google Tag Manager itself does not collect any personal data. However, it triggers tools that process personal data. Legal basis: Art. 6(1)(a) GDPR (Consent) Transfer to third countries: A transfer of personal data to third countries, in particular to the U.S., cannot be ruled out. If the respective provider is certified under the EU-U.S. Data Privacy Framework (DPF), the transfer is based on the European Commission’s adequacy decision pursuant to Art. 45 GDPR. If no certification exists, the transfer is based on EU Standard Contractual Clauses pursuant to Art. 46 GDPR, as well as additional technical and organizational measures where applicable. Retention period: Google Tag Manager does not store any personal data.

We use the online advertising program “Google Ads” on our website, as well as Google LLC’s conversion tracking as part of this program. Through Google Ads, we place ads in Google’s search results and on the Google Display Network. Conversion tracking allows us to measure the success of our advertising efforts. This enables us to track whether users perform specific actions on our website (e.g., contact requests) after clicking on an ad. When you click on an ad placed by Google, a cookie or similar technology is stored on your device. This allows us to recognize you and analyze certain user interactions. The information collected in this way is used exclusively for statistical analysis to optimize our advertising efforts. Purpose of processing: The data is processed for the statistical evaluation of the ads we place, to measure conversions (e.g., actions taken such as purchases or inquiries), and to analyze and optimize our advertising campaigns.
Type of data:
  • Pseudonymous cookie IDs
  • Interaction data (clicks, conversions)
  • IP address
  • Device and browser data
Legal basis: Art. 6(1)(a) of the GDPR (Consent) Transfer to third countries: The transfer of personal data to third countries, in particular to the United States, cannot be ruled out. If the respective provider is certified under the EU-U.S. Data Privacy Framework (DPF), the transfer is based on the European Commission’s adequacy decision pursuant to Art. 45 GDPR. If no certification exists, the transfer is based on EU Standard Contractual Clauses pursuant to Art. 46 GDPR, as well as additional technical and organizational measures where applicable. Retention Period: The collected data is stored for up to 540 days. After this period expires, it is automatically deleted.

We use the Meta Pixel, a service provided by Meta Platforms, Inc., on our website. The Meta Pixel allows us to measure the effectiveness of advertising campaigns on our website and analyze certain user interactions. Purpose of processing: The data is used to measure reach and conversions, analyze and optimize advertising campaigns, and to deliver targeted advertising (retargeting) in order to show users relevant content. Type of data:
  • IP address
  • Cookie ID
  • Interaction data (page views, events)
Legal basis: Art. 6(1)(a) GDPR (Consent) Transfer to third countries: The transfer of personal data to third countries, in particular to the United States, cannot be ruled out. If the respective provider is certified under the EU-U.S. Data Privacy Framework (DPF), the transfer is based on the European Commission’s adequacy decision pursuant to Art. 45 GDPR. If no certification exists, the transfer is based on EU Standard Contractual Clauses pursuant to Art. 46 GDPR, as well as additional technical and organizational measures where applicable. Retention Period: The collected data is stored for up to 180 days. After this period expires, it is automatically deleted.

We use the LinkedIn Insight Tag on our website, a service provided by LinkedIn Corporation. The LinkedIn Insight Tag enables us to measure the effectiveness of our LinkedIn advertising campaigns, analyze user interactions on our website, and serve targeted ads. Purpose of processing: The data is used to measure reach and conversions, analyze and optimize LinkedIn advertising campaigns, and carry out targeted advertising (retargeting) to display relevant content to users. Type of data:
  • IP address
  • Cookie ID
  • Page views
  • LinkedIn demographic data (aggregated)
Legal basis: Art. 6(1)(a) of the GDPR (Consent) Transfer to third countries: The transfer of personal data to third countries, in particular to the United States, cannot be ruled out. If the respective provider is certified under the EU-U.S. Data Privacy Framework (DPF), the transfer is based on the European Commission’s adequacy decision pursuant to Art. 45 GDPR. If no certification exists, the transfer is based on EU Standard Contractual Clauses pursuant to Art. 46 GDPR, as well as additional technical and organizational measures where applicable. Retention Period: The collected data is stored for up to 180 days. After this period expires, it is automatically deleted.

We use Microsoft Advertising (Bing Ads), a service provided by Microsoft Corporation, on our website. Microsoft Advertising enables us to measure the performance of our advertising campaigns, analyze user interactions on our website, and display targeted ads. Purpose of processing: The data is used to measure reach and conversions, analyze and optimize advertising campaigns, and deliver targeted advertising (retargeting) to provide users with relevant ads. Type of data:
  • IP address
  • Cookie ID
  • Device data
  • Interaction data
  • Event data (conversions)
Legal basis: Art. 6(1)(a) GDPR (Consent) Transfer to Third Countries: The transfer of personal data to third countries, in particular to the United States, cannot be ruled out. If the respective provider is certified under the EU-U.S. Data Privacy Framework (DPF), the transfer is based on the European Commission’s adequacy decision pursuant to Art. 45 GDPR. If no certification exists, the transfer is based on EU Standard Contractual Clauses pursuant to Art. 46 GDPR, as well as additional technical and organizational measures where applicable. Retention Period: The collected data is stored for up to 390 days. After this period expires, it is automatically deleted.

We use Hotjar, a service provided by Hotjar Ltd., on our website. Hotjar enables us to analyze user behavior on our website—for example, through heat maps, click and scroll tracking, and feedback tools—in order to improve the user experience on our website. Purpose of processing: The data is processed to analyze user behavior and optimize the website’s user-friendliness. Type of data:
  • IP address (anonymized)
  • Click and scroll behavior
  • Session recording without input fields
  • Device information
Legal basis: Art. 6(1)(a) GDPR (Consent) Retention period: The collected data is stored for up to 365 days. After this period expires, it is automatically deleted.

On our website, we use newsletter sign-ups, contact forms, and a customer relationship management (CRM) system to process inquiries, orders, or other communications from users. These services enable us to contact you, process your inquiries, and provide you with relevant information or offers. Purpose of processing: The data is used to process your inquiries, send newsletters with your consent, and provide you with downloads or content as part of marketing campaigns. Type of data:
  • Name
  • Email address
  • Company
  • Phone number (optional)
  • Inquiry details
  • Newsletter Consent (Double Opt-In)
Legal basis: Art. 6(1)(b) GDPR (performance of a contract) – For processing inquiries and providing contractual services Art. 6(1)(a) GDPR for sending newsletters (consent) Retention period: Your data will be stored only as long as it is needed for the stated purposes or until you revoke your consent. Statutory retention periods remain unaffected.

We embed content from YouTube, a service provided by Google LLC, on our website. By embedding YouTube videos, you can watch videos directly on our website without having to visit the platform separately. When you play an embedded video, information about your use is transmitted to YouTube. This includes, in particular, data about your device, your IP address, and your interactions with the video. Purpose of processing: The data collected is processed to provide and embed YouTube content, analyze the use of embedded videos, and improve and optimizing our multimedia offerings. Type of data:
  • IP address
  • Cookie ID
  • Device information
  • Interaction data (video plays, etc.)
Legal basis: Art. 6(1)(a) of the GDPR (Consent) Transfer to third countries: The transfer of personal data to third countries, in particular to the United States, cannot be ruled out. If the respective provider is certified under the EU-U.S. Data Privacy Framework (DPF), the transfer is based on the European Commission’s adequacy decision pursuant to Art. 45 GDPR. If no certification exists, the transfer is based on EU Standard Contractual Clauses pursuant to Art. 46 GDPR, as well as additional technical and organizational measures where applicable. Retention Period: The collected data is stored for up to 24 months. After this period expires, it is automatically deleted.

III. Right to Withdraw Consent

If the processing of your personal data is based on your consent pursuant to Article 6(1)(a) of the GDPR, you have the right under Article 7(3) of the GDPR to withdraw your consent at any time with future effect. The withdrawal may be made in any form and must be sent to the contact information of the data controller . Upon receipt of your withdrawal, the personal data in question will no longer be processed on the basis of this consent, provided there is no other legal basis for the processing.

IV. Right to Object

If the processing of your personal data is based on Article 6(1)(f) of the GDPR (processing to safeguard legitimate interests), you have the right, pursuant to Article 21 of the GDPR, to object to the processing of your personal data at any time for reasons arising from your particular situation to object at any time to the processing of your personal data. In the event of a valid objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims. The objection may be submitted in any form and must be addressed to the contact information of the data controller provided in this Privacy Policy.

V. Other Rights of Data Subjects

Data subjects have the following rights under Articles 15–21 of the GDPR:
  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Article 20 of the GDPR)
  • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)