Privacy policy
Your data is important
Our privacy policy
In this privacy policy, we inform you about what data we collect on our website, how we process it and what rights you have in relation to your data. We focus on transparency and security so that you can visit our website without any worries.
Status of the privacy policy is July 2025.
General notes and mandatory information
Controller within the meaning of the GDPR
The controller responsible for data processing on this website is
BUTTING Group
Gifhorner Straße 59
29379 Knesebeck
Germany
Phone: +49 5834 50-0
Fax: +49 5834 50-320
E-mail: info(at)butting.de
Contact the data protection officer
We have appointed a data protection officer for our company.
scope & focus Service-Gesellschaft mbH
Leonhardtstraße 2
30175 Hanover
Telephone: 0511 | 364 221-0
If you have any questions about data protection, please contact the following e-mail address with the reference Butting: information(at)scope-and-focus.com
Purpose and legal basis for data processing
Your rights as a data subject
Information, correction and deletion
Within the framework of the applicable legal provisions, you have the right to information (Art. 15 GDPR) about your stored personal data, its origin and recipients and the purpose of the data processing at any time.
If applicable, you have the right to rectification (Art. 16 GDPR) of your data.
You have the right to erasure of your data, provided that the requirements of Art. 17 GDPR are met and there are no statutory retention periods or other legal grounds to the contrary.
Right to restriction of processing
If you have restricted the processing of your personal data, this data - apart from its storage - may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.
Right to object to the collection of data in special cases and to direct marketing
If the data processing is carried out on the basis of Art. 6 para. 1 lit. e or f GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions.
The respective legal basis on which processing is based can be found in this information. If you object, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise or defence of legal claims (objection pursuant to Art. 21 (1) GDPR).
If your personal data are processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is associated with such direct marketing. If you object, your personal data will subsequently no longer be used for the purpose of direct marketing (objection pursuant to Art. 21 (2) GDPR).
Right to data portability
In accordance with Art. 20 GDPR, you have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.
Right to lodge a complaint with the supervisory authority
In the event of violations of the GDPR, you have the right to lodge a complaint with the competent supervisory authority in accordance with Art. 77 GDPR. The right to lodge a complaint is without prejudice to any other administrative or judicial remedies.
You can find the competent supervisory authority on this website: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_li nks-node.html
However, you can submit your complaint to any authority. This applies regardless of any rules of jurisdiction.
Data collection on our website
External hosting
This website is hosted by our external service provider IONOS SE (hoster). The personal data collected on this website is stored on the hoster's servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website.
The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR).
Our hoster will only process your data to the extent necessary to fulfil its performance obligations and follow our instructions with regard to this data.
Conclusion of a contract for order processing
In order to ensure data protection-compliant processing, we have concluded an order processing contract with our hoster.
Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server enquiry
- IP address
This data is not merged with other data sources.
This data is collected on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website, for which purpose the server log files must be recorded.
Use of cookies
Our Internet pages use so-called cookies. Cookies are small files and do not cause any damage to your end device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or they are automatically deleted by your web browser.
In some cases, cookies from third-party companies may also be stored on your device when you visit our website (third-party cookies). These enable us or you to use certain services of the third-party company (e.g. cookies for processing payment services).
Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping basket function or the display of videos). Other cookies are used to evaluate user behaviour or display advertising.
Cookies that are required to carry out the electronic communication process (necessary cookies) or to provide certain functions that you have requested (functional cookies, e.g. for the shopping basket function) or to optimise the website (e.g. cookies to measure the web audience) are stored on the basis of Art. 6 para. 1 lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimised provision of its services. If consent to the storage of cookies has been requested, the cookies in question are stored exclusively on the basis of this consent (Art. 6 para. 1 lit. a GDPR); consent can be revoked at any time.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.
If cookies are used by third-party companies or for analysis purposes, we will inform you about this separately within the scope of this privacy policy and, if necessary, request your consent.
We use the consent management software of sgalinski Internet Services to manage your consent for cookies and external services. An order processing contract has been concluded with the operator of this software.
The legal basis for the use of the consent management software results from Art. 6 para. 1 lit. c GDPR in conjunction with § 25 TDDDG.
Consent is generally voluntary and is subject to a general retention period of 3 years as proof of accountability under Art. 5 para. 2 GDPR. If consent is not given, certain parts of the website cannot be visited/used.
Contact form
We offer various contact forms on our website, for example to send us general enquiries, to download information or white papers or to subscribe to a newsletter.
If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We will not pass on this data without your consent.
This data is processed on the basis of Art. 6 para. 1 lit. b GDPR if your enquiry is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested or on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the publication of general information on our website (public relations).
If you register for a newsletter, the newsletter will be sent via our service provider Brevo (sendinblue GmbH). Your relevant data will only be passed on to Brevo for this purpose, with whom we have concluded an order processing contract. You can unsubscribe from the newsletter at any time by clicking on the unsubscribe link contained therein.
We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Mandatory statutory provisions - in particular retention periods - remain unaffected.
Enquiry by e-mail, telephone or fax
If you contact us by e-mail, telephone or fax, your enquiry including all personal data (name, enquiry) will be stored and processed by us for the purpose of processing your request. We will not pass on this data without your consent.
This data is processed on the basis of Art. 6 para. 1 lit. b GDPR if your enquiry is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested.
The data you send to us via contact requests will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.
Plugins and tools
Google Web Fonts and Google Photos
This site uses so-called web fonts and Google Photos, both services provided by Google, for the standardised display of fonts in an appropriate design planned by Butting. Google Fonts are installed locally. There is no connection to Google servers.
Further information on Google Web Fonts can be found at developers.google.com/fonts/faq and in Google's privacy policy: policies.google.com/privacy.
Google Inc. is certified in the EU-US Data Privacy Framework.
Youtube
We publish YouTube videos by embedding them on our homepage or by forwarding them to our YouTube channel.
Data protection information on this is shown in the social media section.
Further information on Google Web Fonts can be found at developers.google.com/fonts/faq and in Google's privacy policy: policies.google.com/privacy.
Audio and video conferencing
Data processing
We use online conferencing tools, among others, to communicate with our customers. The individual tools we use are listed below. If you communicate with us by video or audio conference via the internet, your personal data will be collected and processed by us and the provider of the respective conference tool.
The conferencing tools collect all the data that you provide/enter to use the tools (e-mail address and/or your telephone number). The conference tools also process the duration of the conference, the start and end (time) of participation in the conference, the number of participants and other "context information" in connection with the communication process (metadata).
Furthermore, the provider of the tool processes all technical data required for the processing of online communication. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or loudspeaker and the type of connection.
If content is exchanged, uploaded or provided in any other way within the tool, this is also stored on the tool provider's servers. Such content includes, in particular, cloud recordings, chat/instant messages, voicemails, uploaded photos and videos, files, whiteboards and other information shared while using the service.
Please note that we do not have full control over the data processing operations of the tools used. Our options are largely determined by the company policy of the respective provider. Further information on data processing by the conference tools can be found in the privacy policies of the tools used, which we have listed below this text.
Purpose and legal basis
The conference tools are used to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6 para. 1 sentence 1 lit. b GDPR). Furthermore, the use of the tools serves the general simplification and acceleration of communication with us or our company (legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR). If consent has been requested, the tools in question are used on the basis of this consent; consent can be withdrawn at any time with effect for the future.
Storage duration
The data collected directly by us via the video and conference tools will be deleted from our systems as soon as you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies. Stored cookies remain on your end device until you delete them. Mandatory statutory retention periods remain unaffected.
We have no influence on the storage period of your data that is stored by the operators of the conference tools for their own purposes. For details, please contact the operators of the conference tools directly.
Conference tools used
Microsoft Teams
We use Microsoft Teams; the provider is Microsoft Corporation, 1 Microsoft Way, Redmond, WA 98052, USA. Microsoft is certified in accordance with the EU-US Data Privacy Framework. Details on data processing can be found in Microsoft's privacy policy: https://www.microsoft.com/en-us/privacy/privacystatement.
Conclusion of a contract for order processing
We have concluded an order processing contract with the provider of Microsoft Teams.
Handling applicant data
We offer you the opportunity to apply to us (e.g. by e-mail, post or online application form). In the following, we inform you about the scope, purpose and use of your personal data collected as part of the application process. We assure you that your data will be collected, processed and used in accordance with applicable data protection law and all other statutory provisions and that your data will be treated in strict confidence.
Scope and purpose of data collection
If you send us an application, we will process your associated personal data (e.g. contact and communication data, application documents, notes taken during interviews, etc.) insofar as this is necessary to decide on the establishment of an employment relationship. The legal basis for this is § 26 BDSG-new under German law (initiation of an employment relationship), Art. 6 para. 1 lit. b GDPR (general contract initiation) and, if you have given your consent, Art. 6 para. 1 lit. a GDPR. Consent can be revoked at any time. Your personal data will only be passed on within our company to persons who are involved in processing your application.
If the application is successful, the data submitted by you will be stored in our data processing systems on the basis of § 26 BDSG-new and Art. 6 para. 1 lit. b GDPR for the purpose of implementing the employment relationship.
Data retention period
If we are unable to make you a job offer, you reject a job offer or withdraw your application, we reserve the right to retain the data you have submitted on the basis of our legitimate interests (Art. 6 para. 1 lit. f GDPR) for up to 6 months from the end of the application process (rejection or withdrawal of the application). The data will then be deleted and the physical application documents destroyed. The retention serves in particular as evidence in the event of a legal dispute. If it is evident that the data will be required after the 6-month period has expired (e.g. due to an impending or pending legal dispute), the data will only be deleted when the purpose for further storage no longer applies.
Longer storage may also take place if you have given your consent (Art. 6 para. 1 lit. a GDPR) or if statutory retention obligations prevent deletion.
Inclusion in the applicant pool
If we do not make you a job offer, you may have the opportunity to be included in our applicant pool. If you are accepted, all documents and details from your application will be transferred to the applicant pool in order to contact you in the event of suitable vacancies.
Inclusion in the applicant pool is based exclusively on your express consent (Art. 6 para. 1 lit. a GDPR). Giving consent is voluntary and is not related to the current application process. The data subject can revoke their consent at any time. In this case, the data from the applicant pool will be irrevocably deleted, provided there are no legal reasons for storage.
The data from the applicant pool will be irrevocably deleted no later than two years after consent has been given.
Our social media presence
Data processing by social networks
We maintain publicly accessible profiles on social networks. The individual social networks we use are listed below.
Social networks such as Facebook, Twitter etc. can generally analyse your user behaviour comprehensively when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media presences triggers numerous data protection-relevant processing operations. In detail:
If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected if you are not logged in or do not have an account with the respective social media portal. In this case, this data is collected, for example, via cookies that are stored on your end device or by recording your IP address.
With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you inside and outside the respective social media presence. If you have an account with the respective social network, the interest-based advertising can be displayed on all devices on which you are logged in or have been logged in.
Please also note that we cannot track all processing operations on the social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and data protection provisions of the respective social media portals.
Legal basis
Our social media presence is intended to ensure the widest possible presence on the Internet. This is a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. The analysis processes initiated by the social networks may be based on different legal bases, which must be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 para. 1 lit. a GDPR).
Responsible party and assertion of rights
If you visit one of our social media sites (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. You can assert your rights (information, rectification, erasure, restriction of processing, data portability and complaint) both against us and against the operator of the respective social media portal (e.g. Facebook).
Please note that, despite the joint responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are largely determined by the company policy of the respective provider.
Storage duration
The data collected directly by us via the social media presence will be deleted from our systems as soon as the purpose for its storage no longer applies, you request us to delete it, revoke your consent to storage or the purpose for data storage no longer applies. Stored cookies remain on your end device until you delete them. Mandatory statutory provisions - in particular retention periods - remain unaffected.
We have no influence on the storage period of your data that is stored by the operators of social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).
Social networks in detail
We have a profile on Facebook. The provider of this service is Meta Platforms Ireland Limited, Merrion Road, Dublin, Ireland. According to Meta, the data collected is also transferred to the USA and other third countries.
We have concluded an agreement with Meta on joint processing (Controller Addendum). This agreement specifies which data processing operations we or Meta are responsible for when you visit our Facebook page. You can view this agreement at the following link: https: //www.facebook.com/legal/terms/page_controller_addendum.
Further information on joint responsibility
Meta's task in relation to the Butting company profile: Provision of the Facebook social media platform
Personal data:
Photo, audio and video material, first name, surname, company name, title, social media profile data, official contact details and general data provided by users in their account
Meta's information obligations can be viewed at the following link: https://www.facebook.com/privacy/policy/
Data subjects can assert their rights with regard to the processing carried out by the controller Meta at the following link: https://www.facebook.com/privacy/center
Contact point of the Meta controller (Facebook) for data protection issues within the meaning of Art. 26 para. 1 sentence 3 GDPR: https://www.facebook.com/privacy/center
You can adjust your advertising settings yourself in your user account. To do this, click on the following link and log in: https://www.facebook.com/settings?tab=ads.
Details can be found in Facebook's privacy policy: https: //www.facebook.com/about/privacy/.
META is certified in the EU-US Data Privacy Framework.
Joint Controller: Meta Platforms Ireland Limited, Merrion Road, Dublin , Ireland
Meta's role in relation to the Butting company profile: Provision of the social media platform Instagram
Personal data: Photo, audio and video material, first name, surname, company name, title, social media profile data, business contact details and general data stored by users in their account
Information obligations of the controller Meta (Instagram) can be viewed at the following link: https://privacycenter.instagram.com/policy
With regard to the processing carried out by the controller Meta (Instagram), data subjects can assert their rights at the following link: https://privacycenter.instagram.com/
We have a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn is certified in accordance with the EU-US Data Privacy Framework. LinkedIn uses advertising cookies.
LinkedIn's role in relation to the Butting company profile: Provision of the LinkedIn social media platform
Personal data: Photo, audio and video material First name, surname, company name, job title, title, social media profile data, business contact data and general data stored by users in their account
Information obligations of the LinkedIn controller can be viewed at the following link: https://www.linkedin.com/legal/privacy/eu
With regard to the processing carried out by the LinkedIn controller, data subjects can assert their rights at the following link: www.linkedin.com/help/legacy/redirect/app/ask/pa th/ppq/loc/na/trk/microsites-frontend_legal_privacy-policy/
Contact point of the LinkedIn controller for data protection issues within the meaning of Art. 26 para. 1 sentence 3 GDPR: www.linkedin.com/help/legacy/redirect/app/ask/path/ppq/loc/na/trk/microsites-frontend_legal_privacy-policy/
If you wish to deactivate LinkedIn advertising cookies, please use the following link: https: //www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
Youtube
We have a profile on YouTube. The provider of this service is Google LLC (YouTube), 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA.
We have concluded an agreement with google on joint processing (Controller Addendum). This agreement specifies which data processing operations we or google are responsible for when you visit our YouTube page. You can view this agreement at the following link: https: //www.facebook.com/legal/terms/page_controller_addendum.
Further information on joint responsibility
Task of google in relation to the Butting company profile: Provision of the social media platform Youtube
Personal data:
Photo, audio and video material, first name, surname, company name, title, social media profile data, official contact details and general data stored by users in their account
Information obligations of the controller Google (YouTube) can be viewed at the following link: policies.google.com/privacy
With regard to the processing carried out by the controller Google, data subjects can assert their rights under the following link: https://support.google.com/youtube/answer/7671399?hl=de&p=privacy_guidelines
Contact point of the controller Google (YouTube) for data protection issues within the meaning of Art. 26 para. 1 sentence 3 GDPR: Email: dpfcore-team@google.com
Google is certified under the EU-US Data Privacy Framework.
Our products
Innovative stainless steel solutions
The BUTTING Group offers you a broad portfolio of product solutions made of stainless steel, clad materials and special materials for your specific requirements. Our metallurgists, welding engineers and production staff are always ready to take on new challenges for you.
