Privacy Policy
Thank you for your interest in our website. We are committed to respecting and protecting your personal data. This Privacy Policy explains how we manage your personal data when you visit our website or use our online services.
Personal data means any information relating to an identified or identifiable natural person. This could include, for instance, your name, address, telephone number or date of birth.
Defined terms below have the meaning ascribed to them under Regulation (EU) 2016/679 (General Data Protection Regulation – “GDPR”).
1. Identity and contact details of the Controller
The Controller responsible for the processing of personal data through this website is:
Kuraray Europe GmbH
Philipp-Reis-Straße 4
65795 Hattersheim am Main
Germany
Phone: +49 69 305 85300
We administer this website together with our parent company Kuraray Co., Ltd (“KRC”). To the extent that Kuraray Europe GmbH and KRC jointly determine the purposes and means of processing personal data in connection with this website, we act as joint controllers within the meaning of Art. 26 GDPR.
We have entered into an arrangement pursuant to Art. 26 GDPR that allocates our respective responsibilities for complying with data protection obligations. In particular, Kuraray Europe GmbH is the primary contact point for data subjects in the EU in relation to the joint processing activities described in this Privacy Policy. However, data subjects may exercise their rights under the GDPR in relation to and against each controller.
Further information on how KRC processes personal data is available in its privacy policy.
2. Contact details of the Data Protection Officer
You may at any time contact our Data Protection Officer directly with all questions and suggestions concerning data protection:
Data Protection Officer
Kuraray Europe GmbH
Philipp-Reis-Straße 4
65795 Hattersheim am Main
Germany
Email: datenschutz@kuraray.com
Phone: +49 69 305 85358
3. Categories of personal data we process
Depending on how you use our website, we may process the following categories of personal data:
- identification and contact data, such as your name, company, job title, email address, postal address and telephone number;
- communication data, such as the content of your inquiry or correspondence;
- technical and usage data, such as IP address, browser type, device information, language settings, date and time of access, referring pages, pages visited and interaction data;
- consent and preference data, such as your cookie preferences and records of consents given or withdrawn;
- newsletter and marketing data, such as subscription status, open rates, click behavior and campaign interactions, where applicable;
- security-related data, such as log files and information used to detect misuse, fraud or security incidents.
You are not generally required to provide personal details in order to visit our website. However, certain functions or services may not be available if you do not provide the personal data necessary for them – for example where you submit an inquiry, subscribe to a newsletter, use protected website areas or enable optional website features.
If you do not provide us with any personal details, the only personal data we will process will be the data potentially transferred by your browser in order to permit your use of the website as well as information provided to us through the installed cookies.
4. Purposes and legal bases of processing
4.1. Provision of the website and IT security
When you visit our website, we process technical data that is necessary to deliver the website, ensure system security, maintain stability, prevent misuse and investigate incidents. This may include server log data such as IP address, date and time of access, browser information, operating system, referrer URL and requested pages.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interests are the secure, stable and efficient operation of our website and the protection of our systems, users and business against misuse and cyber threats.
4.2. Cookies and similar technologies
We use cookies and similar technologies to operate the website, remember your preferences, measure usage and, where applicable, support embedded content, analytics and marketing.
Strictly necessary cookies are used where required to provide the website and its core functions. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to provide a functional and secure website.
All non-essential cookies and similar technologies, including analytics, personalization and marketing technologies, are used only on the basis of your consent. The legal basis is Art. 6(1)(a) GDPR. You may give, refuse or withdraw your consent at any time via our cookie settings.
On our website, we use the consent manager platform “OneTrust” of OneTrust, LLC, 1200 Abernathy Road NE, Building 600, Atlanta, Georgia 30328, USA. OneTrust acts on a processor on our behalf in accordance with Art. 28 GDPR and is certified in line with the EU-US Data Privacy Framework. OneTrust offers a technical solution that we use to obtain your consent for certain data processing activities that require your consent (e.g. analysis, tracking or similar). By using OneTrust, we can inform you about the cookies and tools we use, and enable you to choose which cookies and tools you want to allow or reject.
For more detailed information on the specific cookies and technologies we use, including providers, purposes and storage periods, you may access OneTrust’s cookie list: https://www.kuraray.com/eu-en/cookie-policy/. You have the option to change or revoke your consent at any time through the banner on our website.
4.3. Responding to inquiries
If you contact us by email, contact form or by other means through the website, we process your contact details, your message and any related correspondence in order to handle your inquiry. For that, we use the services of the following platforms:
· JotForm, Inc., 4 Embarcadero Center, Suite 780, San Francisco, CA 94111, USA.
· Salesforce, Inc., Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, USA.
JotForm and Salesforce act as processors on our behalf in accordance with Art. 28 GDPR and are both certified in line with the EU-US Data Privacy Framework. JotForm and Salesforce act as processors on our behalf in accordance with Art. 28 GDPR and are both certified in line with the EU-US Data Privacy Framework. JotForm allows the creation of custom online forms and automation of workflows, while Salesforce is used for lead management and follow-up activities (more information on the section “Newsletter and marketing communications”).
Where your inquiry relates to the initiation or performance of a contract, the legal basis is Art. 6(1)(b) GDPR. In other cases, the legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the efficient handling of inquiries and business communications.
4.4. Newsletter and marketing communications
If you subscribe to our newsletter or other electronic communications, we process your email address and, where applicable, additional information provided during subscription in order to send you the requested communications. For that, we may use the services of the following platforms:
• Salesforce, Inc., Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, USA
• HubSpot, Inc., 2 Canal Park, Cambridge, MA 02141, USA
Salesforce and HubSpot act as processors on our behalf in accordance with Art. 28 GDPR and are both certified in line with the EU-US Data Privacy Framework.
The legal basis is Art. 6(1)(a) GDPR. If required by law, we use a double opt-in process and store the subscription confirmation, including date, time and IP-related evidence, in order to document your consent. The legal basis for storing proof of consent is Art. 6(1)(c) GDPR where a legal obligation applies, and/or Art. 6(1)(f) GDPR, based on our legitimate interest in demonstrating compliance with legal requirements.
You may withdraw your consent at any time, for example by using the unsubscribe link in the newsletter or by contacting us.
4.5. Newsletter and campaign performance measurement
If you have consented, we measure whether newsletters are opened or links are clicked and process interaction data in order to evaluate and improve our communications and tailor content to user interests.
The legal basis is your consent under Art. 6(1)(a) GDPR.
LinkedIN API
We may use the LinkedIn Marketing API to retrieve campaign-level and otherwise aggregated performance metrics, such as impressions, clicks, campaign statistics and related advertising performance data, for internal reporting and analysis in Power BI and other authorized internal reporting tools. We use this data to monitor, evaluate and improve the performance of our LinkedIn campaigns and to prepare internal management and performance reports. The data is not used to make decisions about individuals or to create individual profiles.
Our use of the LinkedIn Marketing API is limited to such aggregated reporting metrics. We do not access, process or store personal data submitted through LinkedIn Lead Gen Forms or other individual-level LinkedIn data for these purposes.
4.6. Embedded media and third-party services
Since the data received through the LinkedIn Marketing API is aggregated and does not permit an individual to be identified or singled out by any means reasonably likely to be used, we treat it as anonymous information. Anonymous information that does not relate to an identified or identifiable individual is not considered personal data under the GDPR.Embedded media and third-party services
We may integrate third-party services and content, such as videos, maps, social media content, captcha/security services or other external features. When such content is loaded, the relevant third-party provider may receive technical data, including your IP address and information about your interaction with the content.
Such services are loaded only on the basis of your consent under Art. 6(1)(a) GDPR. In particular, our website has embedded the following third-party services and content.
A. YouTube
Our website may embed videos from YouTube, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
When a YouTube video is loaded, Google may process personal data such as IP address, device and browser information, information about the page on which the video is embedded, interaction data, such as whether you start or stop a video, cookie identifiers and similar technologies, and information relating to your Google or YouTube account, if you are logged in.
We use YouTube to display video content and present information in a user-friendly format. Data is only transferred to Google if you choose to activate the video functions; the legal basis is you consent under Art. 6(1)(a) GDPR.
Once video functions are activated, Google may act as a separate controller, independently processing data for its own purposes in accordance with its privacy policy. We have no control over such further processing by YouTube/Google as an independent provider. Google may also transfer or make data accessible in the United States or other countries outside the EEA. Further information is available at https://policies.google.com/privacy and https://www.youtube.com/howyoutubeworks/user-settings/privacy/.
B. LinkedIn
Our website may contain LinkedIn content, links, insight technologies or other LinkedIn-related features provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
When LinkedIn features are activated, LinkedIn may process personal data such as IP address, browser and device information, referrer URL, pages visited, timestamps, interaction data with LinkedIn content or features, cookie and tracking identifiers, and information associated with your LinkedIn account if you are logged in.
We use LinkedIn-related technologies to display corporate content, measure campaign performance, understand website interactions, or support business-oriented communication and marketing activities. Data is only transferred to LinkedIn if you choose to activate LinkedIn functions in our website; the legal basis is you consent under Art. 6(1)(a) GDPR.
Once LinkedIn functions are activates, LinkedIn may act as a separate controller, independently processing data for its own purposes in accordance with its privacy policy. We have no control over such further processing by LinkedIn as an independent provider. LinkedIn may also transfer or make data accessible in the United States or other countries outside the EEA. Further information is available at https://www.linkedin.com/legal/privacy-policy and https://www.linkedin.com/legal/cookie-policy.
C. Xing
Our website may contain Xing content, links, share functions or other Xing-related features provided by New Work SE, Am Strandkai 1, 20457 Hamburg, Germany.
When Xing features are activated, Xing may process personal data such as IP address, browser and device information, referrer URL, pages visited, timestamps, interaction data with Xing content or features, cookie identifiers and similar technologies, and information associated with your Xing account if you are logged in.
We use Xing-related technologies to display corporate content, support professional networking and communication, and present business-related information in a user-friendly format. Data is only transferred to Xing if you choose to activate Xing functions on our website; the legal basis is your consent under Art. 6(1)(a) GDPR.
Once Xing functions are activated, Xing may act as a separate controller, independently processing data for its own purposes in accordance with its privacy policy. We have no control over such further processing by Xing as an independent provider. Further information is available at https://privacy.xing.com/en/privacy-policy.
D. Google Analytics
If you have given your consent via cookie banner, this website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics uses cookies and similar technologies to collect information about your use of the website. This may include, in particular, IP address, device and browser information, pages viewed, visit duration, interactions with website content, approximate location derived from IP address, and technical information about your browser and device.
We use Google Analytics to analyse website usage, compile reports on website activity, improve our website, and better understand user interests and website performance. The legal basis is your consent under Art. 6(1)(a) GDPR. You can withdraw your consent at any time through our cookie settings.
Google may process personal data on our behalf and may also act as a separate controller for certain processing operations under its own privacy terms. Further information is available at https://policies.google.com/privacy and https://support.google.com/analytics.
Google may process data in the United States or other countries outside the EEA. Where personal data is transferred outside the EEA, we rely on appropriate safeguards in accordance with Chapter V GDPR.
E. Google Ads (formerly AdWords)
Our website may use Google Ads and related conversion tracking, remarketing or advertising technologies provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
When Google Ads features are activated, Google may process personal data such as IP address, browser and device information, information about the pages visited on our website, timestamps, interaction data, advertising identifiers, cookie identifiers and similar technologies, search and browsing behaviour, and information associated with your Google account if you are logged in.
We use Google Ads-related technologies to promote our services, measure the effectiveness of advertising campaigns, reach relevant audiences, and better understand user interactions with our website and advertising content. Data is only transferred to Google if you choose to activate these functions on our website; the legal basis is your consent under Art. 6(1)(a) GDPR.
Once Google Ads functions are activated, Google may act as a separate controller, independently processing data for its own purposes in accordance with its privacy policy. We have no control over such further processing by Google as an independent provider. Google may also transfer or make data accessible in the United States or other countries outside the EEA. Further information is available at https://policies.google.com/privacy and https://support.google.com/google-ads/answer/2407785.
5. Recipients of personal data
We may share personal data with the following categories of recipients where necessary:
• IT hosting and infrastructure providers;
• website support and maintenance providers;
• providers of consent management, analytics, newsletter, CRM or marketing tools;
• providers of embedded or security-related services;
• companies within the Kuraray group, where necessary for internal administration or service provision, or in the context of processing of our contractual relationships;
• professional advisers, such as legal, tax or audit advisers;
• public authorities, courts, regulators or law enforcement bodies where required by law or necessary to establish, exercise or defend legal claims.
Where third parties process personal data on our behalf, they act as processors under a data processing agreement and may process the data only on our documented instructions.
6. International data transfers
Some recipients may be located outside the European Economic Area (“EEA”), or may process personal data in countries that do not provide a level of data protection considered equivalent under EU law (the so-called “third countries”).
Where recipients process personal data on our behalf outside of the EEA, we ensure that appropriate safeguards are in place as required by Chapter V GDPR. Depending on the recipient and destination country, these safeguards may include:
• an adequacy decision of the European Commission;
• certification under an applicable recognized transfer framework (such as the EU-US Data Privacy Framework);
• the European Commission’s Standard Contractual Clauses; and/or
• supplementary contractual, technical and organizational measures where required.
You may contact us if you would like more information about the safeguards used for specific transfers.
7. Retention periods
We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
In particular:
• server log data is retained for a limited period necessary to ensure security and system integrity;
• inquiry and correspondence data is retained for as long as necessary to handle the request and, where relevant, for the duration of statutory limitation periods;
• newsletter subscription data is retained until you withdraw your consent or unsubscribe; in addition, prospects with no email opened for more than five years are automatically deleted from our database;
• consent records are retained for as long as necessary to demonstrate that valid consent was obtained or withdrawn;
• analytics and cookie-related data is retained in accordance with the settings of the relevant tool and as described in the cookie declaration.
If personal data is no longer required for the relevant purpose and no legal retention obligation applies, it will be deleted or anonymized.
8. Automated decision-making
We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you within the meaning of Art. 22 GDPR.
If individual services involve personalization, segmentation, analytics or similar processing, this does not involve solely automated decision-making with legal or similarly significant effects unless expressly stated otherwise.
9. Your rights
Under the GDPR, you have the following rights, subject to the applicable legal requirements:
• the right to obtain confirmation as to whether we process personal data concerning you and, if so, access to that data;
• the right to request rectification of inaccurate personal data and completion of incomplete personal data;
• the right to request erasure of your personal data;
• the right to request restriction of processing;
• the right to data portability, where the processing is based on consent or contract and carried out by automated means;
• the right to object, on grounds relating to your particular situation, to processing based on Art. 6(1)(f) GDPR;
• the right to object at any time to the processing of your personal data for direct marketing purposes, including profiling related to direct marketing;
• the right to withdraw your consent at any time with effect for the future, where processing is based on consent;
• the right to lodge a complaint with a supervisory authority.
To exercise your rights, please contact us or our Data Protection Officer using the contact details above.
10. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, your place of work or the place of the alleged infringement.
Unless another authority is competent, the supervisory authority responsible for Kuraray Europe GmbH is:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Gustav-Stresemann-Ring 1
65189 Wiesbaden
Germany
Website: https://datenschutz.hessen.de
11. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect legal, technical or business developments. The version published on this website is the current version.
Last updated: July 2026
As of 10/4/2024