Privacy policy

Information on data processing for this website in accordance with Art. 13 EU General Data Protection Regulation (GDPR) when collecting personal data from the data subject

(Version: GDPR 2.1 from 22 July 2024)

Synthetic Turf Resources Corp is responsible for this website and, as a provider of a teleservice, is obliged to inform you at the beginning of your visit about the type, scope and purpose of the collection and use of personal data in a precise, transparent, understandable and easily accessible form in clear and simple language. This content must be available to you at all times.

We attach great importance to the security of your data and compliance with data protection regulations. The processing of personal data is subject to the provisions of the European and national laws currently in force.

With the following data protection information, we would like to show you how we handle your personal data and how you can contact us:

Synthetic Turf Resources Corp

421 Callahan Rd SE

Dalton, GA 30721

USA

VAT No.: 81-2479820

Managing Director: Robert Carey

E-Mail: [email protected]

Our internal contact for data protection issues

Matthew Wagner, 2680 Abutment Rd, Dalton, GA 30721

Should you have any questions or concerns pertaining to data protection, please contact us at the following e-mail address: [email protected]

A. General

For better comprehensibility, we refrain from making any gender-specific differentiation. In the interests of equal treatment, the terms used apply to all genders. The meaning of the terms used, such as “personal data” or their “processing”, can be found in Art. 4 GDPR.

The personal data processed on this website include

– Usage data (e.g. pages visited on our website) and

– Content data (e.g. entries in online forms).

B. Specific

Data protection information

We guarantee that we will only process your data in connection with the processing of your enquiries and for internal purposes as well as to provide the services or content you have requested.

Basics of data processing

We process your personal data only in compliance with the relevant data protection regulations and on the basis of the following legal bases:

-Processing to fulfil our services and carry out contractual measures

Art. 6.1(b) GDPR

-Processing to fulfill our legal obligations

Art. 6.1(c) GDPR

-Consent

Arts. 6.1(a) and 7 GDPR

-Processing to protect our legitimate interests

Art. 6.1(f) GDPR

Data transfer to third parties

Please note that the use of our website may result in the transmission of data when you select the services offered via the “cookie consent tool” on the website. If you do not select a service, no data will be transmitted to third parties.

As part of website hosting, the service provider used may have access to your data. This privacy policy includes information about our web hosting provider.Data transfer to a third country or an international organisation

Third countries are countries in which the GDPR is not directly applicable law. This basically includes all countries outside the EU or the European Economic Area.

No data is transferred to a third country or international organisation without a legal basis.

A data transfer will be made to a third country or international organisation.

The adequacy decision of the EU Commission is taken into account here. This means that it is a safe third country or a safe international organisation that offers an adequate level of protection.

The following applies to data transfers to the USA: In July 2023, the European Commission adopted its adequacy decision on the EU-US Data Privacy Framework, concluding that the United States ensures an adequate level of protection comparable to that of the European Union. The adequacy decision can now serve as a basis for data transfers to certified organizations in the USA.

The US services used are certified under the Data Privacy Framework. You can find details about this in the individual services.

Storage period of your personal data

We adhere to the principles of data minimisation and data avoidance. This means that we only store your data for as long as it is necessary to fulfil the aforementioned purposes or as stipulated by the various storage periods provided for by law. If the respective purpose no longer applies or after the relevant deadlines have expired, your data will be blocked or deleted routinely and in accordance with legal regulations.

We have drawn up an internal company concept to ensure this procedure.

Contact us

When you contact us electronically (e.g. via contact form or email), personal data is processed. The information you provide will be stored solely for the purpose of processing your inquiry and for possible follow-up questions.

In this respect, please note the legal basis:

• Processing to fulfill our services and carry out contractual measures

Art. 6.1(b) GDPR

Be aware that e-mails can be read or changed during transmission without authorisation or detection.

We would also like to point out that we use software to filter unwanted emails (spam filter). The spam filter can reject emails if they have been incorrectly identified as spam due to certain characteristics.

What rights do you have?

a) Right to access

You have the right to obtain information about your stored data free of charge. Upon request, we will inform you in writing about which personal data we have stored about you. This also includes the origin and recipients of your data as well as the purpose of data processing.

b) Right to rectification

You have the right to have your data stored by us corrected if it is inaccurate. You can request that processing be restricted, for example if you contest the accuracy of your personal data.

c) Right to block or suppress processing

You can also have your data blocked. Your data must be stored in a lock file for control purposes so that it can be blocked at any time.

d) Right to erasure

You can request the deletion of your personal data unless there are legal retention obligations. If such an obligation exists, we will block your data upon request. If the relevant legal requirements are met, we will delete your personal data even without your request.

e) Right to data portability

You have the right to request that we make the personal data transmitted to us available in a medium that allows the transmission to another organisation.

f) Right to lodge a complaint with a supervisory authority

You have the option of submitting a complaint to one of the data protection supervisory authorities.

Note: A complaint can be addressed to any data protection supervisory authority within the EU.g) Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you under Article 6.1(e–f); including profiling based on these provisions.

We will then no longer process your personal data unless you can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.

If personal data is processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing; this also applies to profiling insofar as it is related to such direct marketing. In the event of such an objection, we will no longer process your personal data for the purposes of direct marketing. Simply send us an e-mail to this effect.

h) Right of withdrawal

You may withdraw your consent with regard to the processing of your data at any time with effect

for the future with no need to give reasons. The revocation will not cause you any disadvantages. Simply send us an e-mail to this effect.

However, withdrawal of consent does not affect the lawfulness of the processing conducted up to the time of withdrawal on the legal basis of Article 6.1(a) GDPR.

To exercise your rights as a data subject, send us an email to one of the email addresses listed above.

Protection of your personal data

We take contractual, technical and organizational security measures in accordance with the state of the art to ensure that data protection laws are complied with and to protect the processed data against accidental or intentional manipulation, loss, destruction or access by unauthorized persons.

The security measures include in particular the encrypted transmission of data between your browser and our server. 256-bit SSL (AES 256) encryption technology is used for this purpose.

Your personal data will be protected in the following ways (excerpt):

a) Maintaining the confidentiality of your personal data

We have implemented a range of access, login and permission control measures to protect the confidentiality of the data concerning you that we store.

b) Maintaining the integrity of your personal data

We have taken a series of measures to safeguard the integrity of the data we store about you through the use of transfer and input controls.

c) Maintaining the availability of your personal data

We have taken a series of order and availability control measures to safeguard the availability of the data concerning you that we store.

The security measures in use are continuously improved in line with technological developments.

Despite these precautions, due to the insecure nature of the Internet, we cannot guarantee the security of your data transmission to our website. Therefore, any data transmission you make shall remain at your own risk.

Protection of minors

Anyone under the age of 16 may only provide us with personal information if they have the express consent of their legal guardian to do so. This data will be processed in accordance with this privacy policy.

Server log files

The website host automatically collects and stores information in what are referred to as server log files, which your browser automatically shares with us. These are:

• Browser type and version

• Operating system used

• Referrer URL

• Hostname of the accessing computer

• Time of server request

• IP address

This data will not be merged with other data sources.The basis for data processing is our legitimate interest in accordance with Art. 6.1(f) GDPR.

Cookies

Cookies are small text files that are stored locally in the cache of your Internet browser. The cookies enable, for example, the Internet browser to be recognized. The files are used to facilitate browsing on the website and enable full use of all functions.

Cookie Consent Tool

This website uses the Cookie Consent Tool from CookieYes Limited, 3 Warren Yard Warren Park, Wolverton Mill, Milton Keynes, MK12 5NW, United Kingdom, to obtain effective user consent for cookies and cookie-based applications that require consent. The “Cookie Consent Tool” appears as an interactive user interface when visiting the website, where users can grant consent for certain cookies and/or cookie-based applications by simply ticking a box. By using the tool, all cookies/services requiring consent are only loaded if the respective user gives their consent by checking the appropriate box. This ensures that such cookies are only placed on the user’s device if consent has been given.

The tool sets technically necessary cookies to save your cookie preferences. Personal user data is generally not processed.

Personal data (such as the IP address) may be processed in individual cases for the purpose of storing, assigning or logging cookie settings. In such cases, this processing is done in accordance with Art. 6.1(f) GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website.

A further legal basis for the processing is Art. 6.1(c) GDPR. As the responsible party, we are legally obliged to make the use of technically unnecessary cookies dependent on the respective user consent.

Where necessary, we have concluded a data processing agreement with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.

Further information about the operator and the setting options of the cookie consent tool can be found directly in the corresponding user interface on our website.

Website hosting

To host our website and display the page content, we use the system of the following provider:

CloudFlare, 101 Townsend St, San Francisco, CA, United States, 94107.

All data collected on our website is processed on the provider’s servers.

We have an order processing contract in place with the provider, ensuring that the data of our website visitors are protected and prohibiting unauthorised disclosure to third parties.

CloudFlare CDN

To host our website and display the page content, we use a provider who provides its services itself or through selected subcontractors exclusively on servers within the European Union.

All data collected on our website is processed on these servers.

We have concluded a data processing agreement with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.

We use a content delivery network from the following provider: Cloudflare Inc., 101 Townsend St.

San Francisco, CA 94107, USA.

This service enables us to deliver large media files such as graphics, page content or scripts more quickly via a network of regionally distributed servers. The processing is carried out to protect our legitimate interest in improving the stability and functionality of our website in accordance with Art.

6.1(f) GDPR. We have an order processing contract in place with the provider, ensuring that the data

of our website visitors are protected and prohibiting unauthorised disclosure to third parties.

For data transfers to the USA, the provider subscribes to the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection pursuant to the European Commission’s adequacy decision.

Google Analytics 4 (with cookies, with user IDs, with Google Signals)

We use Google Analytics 4 on our website, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which can be used to analyze the use of websites.

This version uses what are referred to as “Cookies”. Cookies are text files that are stored on your device and enable analysis of your use of a website. The information collected through cookies about your use of the website is usually transmitted to a Google server and stored and processed there. A transmission of information to the servers of the company Google LLC, based in the USA, cannot be excluded. Google LLC processes the data for its own purposes and may merge the data and other information into a comprehensive profile about you.The IP address transmitted by your end device is always collected and processed anonymously by default and automatically, so that the information collected cannot be directly linked to a person.

Google conducts this automatic anonymisation by shortening the IP address transmitted by your end device within EU Member States or other contracting states of the Agreement on the European Economic Area (EEA) by the last few digits.

Our website uses Google Analytics to analyse visitor activity on our website, compile reports on your website activity and usage behaviour and provide us with other services relating to your use of the website and the Internet. The “demographic characteristics” function collects statistics with statements about the age, gender and interests of website users on the basis of an evaluation of interest based advertising and with the involvement of third-party information. These serve the purpose of enabling us to implement target group-oriented marketing measures. However, data collected in this way cannot be assigned to a specific person and therefore cannot be assigned to you personally.

We also use the “UserIDs” function as an extension of Google Analytics 4.

Individual UserIDs can be assigned so that we can have Google create cross-device reports (also referred to as “Cross-Device Tracking”). If you have set up a personal account by registering on this website and are logged into your personal account on various devices using your login data, your user behavior will also be analyzed across devices. The data collected in this way shows, among other things, on which device you first clicked on an ad and on which device the corresponding conversion took place.

We also use the Google Signals service as an extension of Google Analytics 4.

Google Signals also allows us to create cross-device reports (also referred to as “Cross-Device Tracking”). If you have activated “personalised ads” in your Google account and linked your internet-enabled devices to your Google account, Google can analyse usage behaviour across devices and create corresponding database models. The data can be used to ascertain the end device you used to click on an advert for the first time and the end device on which the relevant conversion took place. We only receive statistics based on Google Signals. You have the option of deactivating the “personalized ads” function in the settings of your Google account and thus turning off cross-device analysis in connection with Google Signals.

Data collected while using Google Analytics 4 are stored for 2 months and then deleted.

All processing described above is carried out exclusively on the basis of your express consent in accordance with Art. 6.1(a) GDPR. You can revoke your consent at any time with future effect.

To exercise your right of withdrawal, please deactivate this service using the “Cookie Consent Tool” provided on the website.

Further information about Google Signals can be found under the following link:

https://support.google.com/analytics/answer/7532985?hl=de.

We have entered into a data processing agreement with Google for our use of Google Analytics 4, through which Google undertakes to safeguard the data of our website users and refrain from transferring these data to third parties.

To ensure compliance with the European data protection level even when data is transferred from the EU or the EEA to the USA and possibly further processed there, Google relies on the so-called Standard Contractual Clauses of the European Commission, which we have contractually agreed with Google.

Further legal notices regarding Google Analytics 4, including a copy of the aforementioned standard contractual clauses, can be found at https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sites.

Use of Google Maps

We use Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”) on this website. Google Maps is a web service for displaying interactive maps. By using this service, our location will be shown to you and any possible journey there will be made easier.

Whenever legally required, we have secured your consent to the processing of your data as described above in accordance with Art. 6.1(a) GDPR.

You can revoke your consent at any time with effect for the future. You can exercise your right to withdraw your consent by deactivating this service in the “cookie consent tool” on our website or in the privacy policy settings.

Data is transferred to a third country (here the USA) or an international organization. Since July 2023, there has been an adequacy decision of the EU Commission (Data Privacy Framework), which identifies the USA as a third country with a level of data protection comparable to that of the EU. The adequacy decision can now serve as a basis for data transfers to certified organizations in the USA.

According to the list of certified companies published by the US Department of Commerce, Google LLC is listed as a certified company.

Google stores your data (even for users who are not logged in) as usage profiles and evaluates them.You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right. If you do not agree to the future transmission of your data to Google when using Google Maps, you also have the option of completely deactivating the Google Maps web service by disabling the JavaScript application in your browser. Google Maps and therefore the map display on this website cannot then be used.

You can view Google’s terms of use at: https://www.google.de/intl/de/policies/terms/regional.html , and the additional terms of use for Google Maps can be found at: https://www.google.com/intl/de_US/help/terms_maps.html

Detailed information on data protection in connection with the use of Google Maps can be found on the Google website (“Google Privacy Policy”): https://www.google.de/intl/de/policies/privacy

Google Tag Manager

We use the service called Google Tag Manager from Google. “Google” is a group of companies and consists of the companies Google Ireland Ltd. (provider of the service), Gordon House, Barrow Street, Dublin 4, Ireland and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and other affiliated companies of Google LLC.

The Google Tag Manager is an auxiliary service and processes personal data only for technically necessary purposes. The Google Tag Manager ensures that other components are loaded, which in turn may collect data. The Google Tag Manager does not access this data. Whenever legally required, we have secured your consent to the processing of your data as described above in accordance with Art. 6.1(a) GDPR. You can revoke your consent at any time with effect for the future. You can exercise your right to withdraw your consent by deactivating this service in the “cookie consent tool” on our website or in the privacy policy settings.

Data may be transferred to a third country (here the USA) or an international organization. In July 2023, the European Commission adopted its adequacy decision on the EU-US Data Privacy Framework, concluding that the United States ensures an adequate level of protection comparable to that of the European Union. The adequacy decision can now serve as a basis for data transfers to certified organizations in the USA. According to the list of certified companies published by the US Department of Commerce, Google LLC is listed as a certified company.

To learn more about Google Tag Manager, please refer to Google’s privacy policy: https://policies.google.com/privacy?hl=de&gl=de.

Google reCAPTCHA

On this website we use the CAPTCHA service of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transmitted to: Google LLC, USA. The provider uses “Google Fonts”, i.e. fonts downloaded from the Internet by Google, for the visual design of the Captcha window. No further information other than that mentioned above, which is already transmitted to Google via the ReCaptcha functionality, will be processed here.

This service checks whether an entry is made by a natural person or abusively by machine and automated processing, and blocks spam, DDoS attacks and similar automated malicious access. To ensure that an action is carried out by a human and not by an automated bot, the provider collects the IP address of the end device used, identification data of the browser and operating system type used, as well as the date and duration of the visit and transmits these to the provider’s servers for evaluation.

The legal basis is our legitimate interest in determining individual responsibility on the Internet and the prevention of misuse and spam in accordance with Art. 6.1(a) GDPR.

We have concluded a data processing agreement with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.

Changes to our privacy policy

We reserve the right to amend our data protection information at short notice to ensure that it always complies with current legal requirements or to implement changes to our services. This may, for example, concern the introduction of new services. Our updated privacy policy will then apply on your next visit.