Data Protection Declaration


Here you will find all relevant information regarding our, Graf Chemicals GmbH, use of personal data according to our privacy policy and according to the data protection laws.

1.We are Responsible for the Privacy Policy

Graf Chemicals GmbH
Prof.-Max-Lange-Platz 4

D-83646 Bad Tölz-Germany

Phone: +49 (0) 8041 79285-0


Owners/Management: Hans-Jürgen Graf, Joachim Graf

2. For Questions Regarding our Privacy Policy and Data Protection Please Contact:

Graf Chemicals GmbH
Prof.-Max-Lange-Platz 4

D-83646 Bad Tölz-Germany

Phone: +49 (0) 8041 79285-0


3. Our Uses for your Personal Data
We use your personal data for the fulfilment of pre-contractual, contractual, and/or post-contractual as well as for any legal obligations (article 6 paragraph 1 b, c GDPR).

We need you personal information when entering into a contract with us or within the scope of legal obligations to which we are subject. For example (but not limited to):

-If you buy/wish to buy a product from us

-within the warranty services provided by us or a manufacturer

-to fulfil out statutory warranty obligations

However, we sometimes also need your personal data even before we enter into a contract together. For example: To send or receive samples or by inquiries.

We use your personal data for the fulfilment of any further legal obligations (ex. Tax obligations).

We use your personal data for the fulfilment of legitimate interests according to article 6 Abs. 1 f GDPR.

We also process your personal data when we have a legitimate interest: We use your personal data in the context of direct marketing and within the context of newsletters, as long as you haven’t objected.

We use your personal information as you have not objected against according to Art. 6 Abs. 1 a GDPR.

For certain cases we will need your specific consent to process your data. For this we will ask for your consent first and inform you accordingly.

4. Your requirement to give your personal information
When we work with you (for example: under contract), we can only do so if you provide us with all data required for a lawful contract. In some cases, there is also a legal obligation to provide us with your personal information. We will inform you accordingly in such a case. In the case of pure business customers, without a contact person and without any personal data provided, the obligation to notify is waived.

5. The Sources in Which We obtain Personal Data
We only process the personal data that we receive from you by email, telephone calls and other letters. In addition, we use the personal information you publish openly.

For details, we will gladly inform you in a specific case.

6. Your rights
If you would like to know which personal data we have stored about you, we will tell you, because you have a right to this information according to Art. 15 GDPR in connection with § 34 BDSG.

If you tell us that the personal information is incorrect, we must correct that personal information. You are entitled to a correction under Art. 16 GDPR.

If you tell us your personal information should be deleted, we must comply with your request. After observing the legal archiving periods, we will then delete your data. During these deadlines your data will be restricted in their processing (see next point). You have the right to have your personal data erased according to Art. 17 GDPR in conjunction with § 35 BDSG.

In rare cases (ex. if it is not clear if personal data is right or wrong or if we would like to delete your personal data, but you do not want it deleted or if we comply with legal and statutory archiving deadlines but you want to have your personal data deleted) you may request the restriction of the processing of your personal data. You have the right to restrict the processing of your personal data according to Art. 18 GDPR.

If you object to us processing your personal information in the manner outlined, we will immediately comply with your request. You have a right of objection under Art. 21 GDPR.

Any consent given by you to the processing of your personal data may be withdrawn at any time with effect for the future.

If you do not wish to receive direct contact from us, you can object to this at any time and we will no longer use your personal data for direct contacting in the future.

If you object to the processing of your personal data, that will not affect the lawfulness of the processing on the basis of your consent until the objection is given.

You have a right to data portability according to Art. 20 GDPR.

If you exercise your rights, it is free of charge for you. Contact us in such a case.

If you have a complaint or privacy issue, please contact us (point 1 above) or our data protection officer (point 2 above). You also have the right to complain to a competent regulatory authority or to report violations.

7. Recipients to Whom We Transfer your Personal Data
We use your personal data only and exclusively within the Graf & Co GmbH Technology Service to fulfil our contractual or legal obligations.

If necessary and permitted, or required by law, we will disclose your personal information to third parties or to processors. Processors process personal data on our behalf and only according to our specifications. Third parties or processors are for example: external financial accounting and tax consultants.

8. We Store your Personal Information as Short as Possible
We store your personal data for as long as it is necessary to fulfil our contractual obligation or a legal duty. Your personal data will be deleted as soon as we no longer need it and no law demands further storage from us. Your personal information will not be erased as long as it is needed to assert, exercise or defend legal claims.

9. Your personal information will not be transferred to countries outside the EU or to international organizations.
A processing based on an automated decision does not occur within our company. A profiling (the automated processing with the aim to evaluate certain personal aspects) does not occur within our company.

10. Google Maps
This site uses the Google Maps map service via an API. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use Google Maps, it is necessary to save your IP address. This information is generally transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.

The use of Google Maps is in the interest of making our website appealing and to facilitate the location of places specified by us on the website. This constitutes a justified interest pursuant to Art. 6 (1) (f) DSGVO.

Further information about handling user data, can be found in the data protection declaration of Google at