Privacy Policy – Service Portal CURRENTA Group

Status: 31.12.2025

This website (hereinafter “website” or “service portal”) is provided by CURRENTA GmbH & Co. OHG (hereinafter “us” or “we”). Further information about the provider of the website can be found in our legal notice. If you are looking for information on how we process your personal data when using the basic online presence of CURRENTA and the CHEMPARK, please read the corresponding privacy policy of our website.

Handling of personal data

In the following, we would like to inform you about how we handle personal data when you use this website. Unless otherwise described in the following sections, the legal basis for processing your personal data arises from the necessity to provide the functionalities requested by you on this website (Art. 6 para. 1 lit. b GDPR).

Use and access of the website

Purpose(s) of processing and categories of personal data

When you access our website, your browser automatically transmits certain data to our web server in order to provide you with the requested information. The following data is collected, temporarily stored, and used:

• IP address
• Date and time of the request
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Operating system and its interface
• Access status / HTTP status code
• Transferred data volume
• Website from which the request originates
• Browser, language, and version of the browser software

Legal basis and retention periods for personal data

We also store this data temporarily to safeguard our legitimate interests in tracking unauthorized access attempts (Art. 6 para. 1 lit. f GDPR). Where required for storage or access on the user’s device, the legal basis is § 25 para. 2 no. 2 TDDDG.

Transfer to third parties

Where necessary, we share data with authorities and organizations with security responsibilities (BOS), for example during investigations.

Registration and login

Purpose(s) of processing and categories of personal data

For certain services, you must register and create a customer account. We collect:

• First and last name
• Email address
• Password
• Login protocol including timestamp
• Assignment to customer / external company
• Telephone number
• Address

Retention periods

If you deactivate your account or do not use the portal for more than 6 months, your data will be deleted.

Use of the portal

Purpose(s) of processing and categories of personal data

To improve the portal and ensure security, we process:

• IP addresses
• Logins
• Browser history

Retention periods

Deletion occurs after 6 months of inactivity or account deactivation.

Digital commissioning of services

Purpose(s), categories of personal data, and legal bases

Different systems process different categories of data to enable, manage, and bill services.

Commissioning of transports, maintenance, energy deliveries, equipment, investor portal, complaint inquiries:

• Master and contact data
• Billing data if applicable

Commissioning of training, ID issuance, appointments, visitor registration:

• Master and contact data
• Identification data

Commissioning of biomonitoring services:

• Master data of management or authorized persons
• Master and contact data of contact persons
• Master data of employees

Legal bases: Art. 6 para. 1 lit. b GDPR; Art. 6 para. 1 lit. f GDPR; Art. 6 para. 1 lit. c GDPR.

Retention periods

Data is retained per legal and contractual periods. Biomonitoring data is stored for two years. Visitor data is forwarded to administration and not stored in the portal.

Transfer to third parties

We share data with CHEMPARK clients and external companies for verification. Data may be shared with BOS authorities when necessary.

Use of cookies

What cookies are

Cookies store small information units on your device.

Which cookies we use

• Session cookies
• Opt-out cookie

Your consent

Optional cookies require consent (Art. 6 para. 1 lit. a GDPR; § 25 para. 1 TTDSG).

How to prevent cookies

You may disable cookies via your browser; functionality may be limited.

Data processing on our behalf

We use service providers bound by data processing agreements.

Processing outside EU/EEA

Where necessary, we ensure adequate protection via contractual measures or consent.

Your rights

• Right of access
• Right to rectification, deletion, restriction
• Right to object
• Right to data portability
• Right to lodge a complaint
• Right to withdraw consent

Contact

Group Data Protection Officer
Email: datenschutz@currenta.biz
Address: CURRENTA GmbH & Co. OHG, Building E1, 51368 Leverkusen

Changes to this privacy policy

Updates will be published on this website. Last updated: 31.12.2025