Data Privacy

This data protection notice applies to all social media channels of PFENNING GROUP (KMP Holding GmbH) as well as to the following websites:

We are delighted that you are interested in our company. Data protection is very important to PFENNING GROUP (KMP Holding GmbH) and we take the protection of your personal data very seriously. We treat your personal data confidentially, in compliance with legal data protection provisions and this privacy policy.

It is generally possible to use our website without providing any personal data. If our site asks for personal data (e.g. name, address or e-mail address), this is always given on a voluntary basis wherever possible. This data is not shared with third parties without your explicit consent. If a data subject wants to use specific services offered by our company via our website, this may, however, require the processing of personal data. If the processing of personal data is required and is there is no legal basis for this, we generally obtain consent from the data subject.

Personal data, for example a data subject’s name, address, e-mail address or telephone number, is always processed in compliance with the General Data Protection Regulation and in accordance with the country-specific data protection provisions applicable to PFENNING GROUP (KMP Holding GmbH).

Please note that the security of data submissions via the internet (e.g. e-mail communication) may be compromised. It is not possible to completely secure data against third-party access.

Name and contact details of the controller responsible for processing and the company data protection officer

This privacy policy applies to data processing by:
The controller: PFENNING GROUP (KMP Holding GmbH)
Managing Director: Karl-Martin Pfenning, Rana Matthias Nag, Manuel Pfenning
Phone: +49 (6203) 9545-0
Fax: +49 (6203) 9545 9910-0
VAT Number: DE 206997505
Commercial Register Court: Mannheim Regional Court
Commercial Register Number: HRB 716596
PFENNING GROUP’s (KMP Holding GmbH) data protection officer pursuant to Article 4(7) of the EU General Data Protection Regulation (GDPR) is Mr Hans Schnakenberg.
If you have any questions, suggestions and/or criticism regarding, please contact:
Mr Hans Schnakenberg, in his capacity as PFENNING GROUP’s (KMP Holding GmbH) data protection officer, at the above-mentioned address:
Benzstrasse 1, 68542 Heddesheim, e-mail:
All data subjects can contact our data protection officer directly and at any time with any questions or suggestions regarding data protection.

Collecting and storing personal data, as well as type and purpose of data use

a. When visiting the websites

When accessing our websites, information is automatically sent to our website’s server by the browser used on your end device. This information is temporarily stored in a ‘log file’. The following information is collected without any action on your part and is stored until it is automatically deleted:

  • IP address of the requesting computer;
  • date and time of access;
  • name and URL of the file accessed;
  • website that access comes from (referrer URL); and
  • the browser used and operating system of your computer, if applicable, as well as the name of your access provider.

The specified data is processed by us for the following purposes:

  • to ensure the provision of an uninterrupted connection with the website;
  • to ensure the convenient use of our website;
  • to evaluate system security and stability; and
  • for other administrative purposes.

The legal basis for data processing is Article 6 (1) Sentence 1 lit. f GDPR. Our legitimate interests are based on the above-mentioned purposes for collecting data. We never use the data collected to draw conclusions about you personally.

We also use cookies and analysis services when you visit our website. You can find more information about this in the sections ‘Cookies’ and ‘Analysis tools’ in this privacy policy.

Sharing data

Your personal data is not shared with third parties for purposes other than those listed below.

We only share your personal data with third parties if:

  • you explicitly consent to this under Article 6 (1) Sentence 1 lit. a GDPR;
  • if there is a legal obligation to share it pursuant to Article 6 (1) Sentence 1 lit. c GDPR; and
  • if this is legally permissible and required in order to process contractual relationships pursuant to Article 6 (1) Sentence 1 lit. b GDPR.

Other website features and offerings

a. As well as the purely informational use of our website, we offer various services that you may be interested in using. You generally have to provide additional personal data for in order to do so, which we use to provide the service in question and to which the above-mentioned data processing principles apply.

b. We sometimes use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly reviewed.

c. We may also share your personal data with third parties if we offer contracts or similar services together with partners. You will receive more information about this when you provide your personal data or in the description of the offer. (Note: if necessary, link to offers and T&Cs/full description of the respective partner here)

d. If our service providers or partners have their head office outside the European Economic Area (EEA), we will inform you of the consequences of this in the offer description. (Note: if necessary, link to offers and T&Cs/full description of the respective partner here)

Objection to or withdrawal of data processing

a. If you have given your consent to data processing, you can withdraw this at any time. Such a withdrawal has an impact on the permissibility of processing your personal data after you have notified us of this.

b. If we base the processing of your personal data on balancing interests, you may object to processing. This is the case if processing is not specifically required to fulfil a contract with you, which we outline in the following description of the functions. When exercising such an objection, we ask that you provide a description of the reasons why you no longer want us to process your personal data. If you provide a reasoned objection, we will review the matter and cease or adjust data processing or present you with our compelling legitimate reasons why we will continue processing.

c. You can, of course, object to the processing of your personal data for the purposes of advertising and data analysis at any time. You can notify us of your objection to advertising by using the following contact details:

KMP HOLDING GMBH, Benzstrasse 1, 68542 Heddesheim

Managing Director: Karl-Martin Pfenning, Rana Matthias Nag, Manuel Pfenning



Phone: +49 (6203) 9545-0

Contact options via the website

On the basis of legal provisions, PFENNING GROUP’s (KMP Holding GmbH) website contains information that allows quick electronic contact to be made with our company and facilitates direct communication with us, which also includes a general ‘electronic mail’ address (e-mail address). If a data subject gets in touch with the controller responsible for processing by e-mail or by using a contact form, the personal data sent by the data subject will be automatically saved. Such personal data, which is voluntarily sent by a data subject to the controller responsible for processing, is stored for the purposes of processing or to contact the data subject. This personal data is not shared with third parties.

Application form
(Job adverts)

If you make an online application, we collect the following list of personal application data from you and process it:

  • Surname, first name
  • Address
  • Date of birth
  • Telephone number
  • E-mail
  • Special skills
  • Application documents (cover letter, CV, references, certificates, etc.)

Purpose of data collection/sharing data

Your personal application data is collected and processed exclusively for the purpose of filling positions at our company. In principle, your data is only sent to internal persons responsible for the specific application process and specialist departments in our company. Your personal application data is not shared with other companies without your prior explicit consent. Your online application data is encrypted when sent to our server.

Your data is deleted no later than three months after the application process comes to an end, unless you have specifically agreed to a longer storage period. This also applies if the applicant is rejected before this date. This excludes identification and communication details (e.g. name, address, telephone number) and internal processing notes. These are deleted after a period of three years.


We use cookies on our website. These are small files that your browser automatically creates and stores on your end device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies are not harmful to your end device and do not contain viruses, Trojans or other malware.

Information is stored in the cookie that results from connection to the specific end device used. However, this does not mean that we are able to directly determine your identity.

Cookies are utilised to design the use of our website in a manner that is more convenient for you. We use ‘session cookies’ to recognise that you have already visited individual pages of our website. These are automatically deleted when you leave our site.

We also use temporary cookies to optimise user friendliness. These are stored on your end device for a set period of time. If you visit our site again to use our services, it is automatically recognised that you have already visited us and what your entries and settings were so that you do not have to enter these again.

We also use cookies to statistically record the use of our website and to evaluate it for the purposes of optimising our website for you (see ‘Analysis tools’ section). These cookies allow us to automatically recognise that you have already visited us when you visit our website again. These cookies are automatically deleted after a set period of time.

Data processed by cookies is required for the specified purposes to safeguard our legitimate interests, as well as those of third parties pursuant to Article 6 (1) Sentence 1 lit. f GDPR.

Most browsers automatically accept cookies, but you can configure your browser so that no cookies are saved on your computer or so that a notification always appears before a new cookie is saved. However, fully disabling cookies may result in you being unable to use all of the features of our website.

Analysis tools

a. Tracking tools

Our use of the following list of tracking tools is based on Article 6 (1) Sentence 1 lit. f GDPR. The intention of using these tracking tools is to ensure the needs-based design and ongoing optimisation of our website. We also use tracking tools to statistically record the use of our website and to evaluate it for the purposes of optimising our website for you. These interests are ‘legitimate’ within the meaning of the above-mentioned provision.

The respective data processing purposes and data categories can be found in the corresponding tracking tool.

b. Google Analytics

We use Google Analytics, a web analysis service from Google Inc. ( (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter ‘Google’) for the purposes of the needs-based design and ongoing optimisation of our website. In this regard, pseudonymised user profiles are created and cookies are used (see ‘Other functions and services on our website’). Information generated by the cookie about your use of this website, such as

  • the browser type/version;
  • the operating system used;
  • the referrer URL (the site previously visited);
  • the host name for the accessing computer (IP address); and
  • the time of the server request,

is sent to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports about website activities and to provide other services that relate to website use and internet use for the purposes of market research and the needs-based design of this website. This information may also be sent to third parties if this is legally permissible or if third parties process this data by order. Your IP address is never connected with other Google data. IP addresses are anonymised such that assignment is not possible (IP masking).

You can prevent cookies from being installed by changing your browser settings accordingly; however, please note that if you do so, you may be unable to use all of the functions of this website in full.

You can also prevent the data generated by the cookie relating to your use of the website (including your IP address) from being collected and processed by Google by downloading and installing the browser add-on (

As an alternative to the browser add-on, with particular reference to browsers on mobile end devices, you can also prevent collection by Google Analytics by clicking on this link. This will place an opt-out cookie on your device that will prevent your data from being collected when you visit this website in future. The opt-out cookie only works with this browser and only for our website and is stored on your device. If you delete cookies stored by this browser, you will have to install the opt-out cookie again.

You can find more information about data protection in connection with Google Analytics on the Google Analytics support pages (

bb. Google Adwords conversion tracking

We also use Google conversion tracking to statistically record the use of our website and to evaluate it for the purposes of optimising our website for you. In this respect, Google Adwords stores a cookie (see ‘Cookies’ section) on your computer if you accessed our website via a Google ad.

These cookies expire after 30 days and are not used for personal identification. If the user visits certain pages on the Adwords customer’s website and the cookie has not yet expired, the fact that a user has clicked on the advert and has been directed to the site via an advert can be recognised by Google and by the customer.

Each Adwords customer receives a different cookie. Cookies therefore cannot be monitored via the Adwords customer’s website. The information obtained using the conversion cookie is used to compile conversion statistics for Adwords customers who have opted for conversion tracking. Adwords customers can determine the total number of users who have clicked on their adverts and have been directed to the page that has a conversion tracking tag. However, they do not receive any information that can reveal the personal identity of the user.

If you do not wish to take part in tracking, you can prevent the cookies required for this from being used, for example by changing browser settings to generally disable cookies from automatically being accepted. You can also disable cookies for conversion tracking by changing your browser settings so that cookies from the domain ‘’ are blocked. You can find Google’s data protection notice with respect to conversion tracking here (

bbb Google Analytics remarketing

We use Google Inc.’s remarketing feature on our website. We use this feature to show our visitors customised and interest-based adverts together with Google. Cookies are placed on your computer for this. These are text files that recognise users when they access websites again, making interest-related advertising possible throughout the whole Google network. In this context, Google denies that personal data is collected and claims that it does not link this with other Google services. You can prevent Google’s remarketing feature from being used by changing your settings accordingly at The use of cookies can also be disabled at or by changing your browser settings. If necessary, use the help function. You can find more information about Google remarketing and Google’s general privacy policy at

c. Matomo (formerly PIWIK)

This website uses “Matomo” (formerly “Piwik”), a web analytics service provided by InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand (hereinafter referred to as: “InnoCraft”). Matomo uses cookies, i.e. small text files that are stored on your end device and that enable an analysis of your use of our website. For this analysis the cookies are stored on your computer. The information collected in this way is stored exclusively on our server. Our website uses Matomo with the extension “AnonymizeIP”. This means that IP-addresses are processed in a shortened form, a direct personal reference can be excluded. The IP address transmitted by your browser via Matomo is not merged with other data collected by us.

We use Matomo for the purpose of analyzing the use of our website and to continuously improve individual functions and offers as well as the user experience. Through the statistical evaluation of user behaviour we can improve our offer and make it more interesting for you as a user. This is also our legitimate interest in the processing of the above data by the third party provider. The legal basis is Art. 6 para. 1 p. 1 lit. f) DSGVO.
You can prevent the evaluation by objecting to the collection under the following link:

Matomo is an open source project. Contact details of the third party supplier: InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand. For more information about the third-party vendor’s privacy practices, please visit the following InnoCraft web pages:

Privacy Policy:
Information on data protection:
The data will be deleted as soon as they are no longer necessary for the purpose of their collection.

d. Leadinfo

We use the lead generation service provided by Leadinfo B.V., Rotterdam, The Netherlands, which recognizes visits of companies to our website based on IP addresses and shows us related publicly available information, such as company names or addresses. In addition, Leadinfo places two first-party cookies for providing transparency on how our visitors use our website and the tool processes domains from provided form inputs (e.g. “”) to correlate IP addresses with companies and to enhance its services. For additional information, please visit On this page: you have an opt-out option. In the event of an opt-out, your data will no longer be used by Leadinfo.

e. SalesViewer®

This website uses SalesViewer® technology from SalesViewer® GmbH on the basis of the website operator’s legitimate interests (Section 6 paragraph 1 lit.f GDPR) in order to collect and save data on marketing, market research and optimisation purposes.

In order to do this, a javascript based code, which serves to capture company-related data and according website usage. The data captured using this technology are encrypted in a non-retrievable one-way function (so-called hashing). The data is immediately pseudonymised and is not used to identify website visitors personally.

The data stored by Salesviewer® will be deleted as soon as they are no longer required for their intended purpose and there are no legal obligations to retain them.

The data recording and storage can be repealed at any time with immediate effect for the future, by clicking on in order to prevent SalesViewer® from recording your data. In this case, an opt-out cookie for this website is saved on your device. If you delete the cookies in the browser, you will need to click on this link again.

Our activities in social networks

In order that we can communicate with you in social networks and inform you about our services, we have our own pages to represent us.

We are not the original provider (Controller) of these pages, but use them only in the context of the possibilities offered by the respective provider.

Therefore, as a precautionary measure, we advise that your data may also be processed outside the European Union or the European Economic Area. Usage can therefore have data protection risks for you, as the safeguarding of your rights e.g. to information, deletion, contradiction, etc. can be impeded and processing in the social networks directly for advertising purposes or for the analysis of user behaviour by the provider often takes place without our being able to influence this. If user profiles are created by the provider, cookies are often used or the usage behaviour is assigned directly to your own member profile of the social networks (if you are logged in here).

The processing operations of personal data in accordance with Article 6 (1) lit. f GDPR based on our legitimate interest and the legitimate interests of the respective provider are carried out in order to communicate with you in a timely manner or to inform you about our services. If you have to give consent to the data processing as a user with the respective providers, the legal basis refers to Art. 6 para. 1 lit. a GDPR in conjunction with Art. 7 GDPR.

As we have no access to the databases of the provider, we advise that your rights (e.g., to information, correction, deletion, etc.) are best asserted directly with the respective provider. We have listed further information on the processing of your data in the social networks below and the possibility of exercising your right to revocation or opting out (opt-out), with the respective provider of social networks we use:


Controller for data processing in Europe:

Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Privacy Policy (Data Policy):

Opt-out and advertising settings:

Facebook has joined the EU-US Privacy Shield Agreement:

Data subject rights

You have the right:

  • to request information about your personal data that is processed by us, pursuant to Article 15 GDPR. In particular, you can request information relating to the purposes of processing, the category of personal data, the categories of recipients to whom the data has been or is being disclosed, the intended storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and meaningful information about the details of this, where applicable;
  • to request that incorrect or incomplete personal data stored by us is immediately rectified pursuant to Article 16 GDPR;
  • to request that your personal data stored by us is deleted pursuant to Article 17 GDPR, provided that processing is not required to exercise the right to free expression of opinion and information, to fulfil a legal obligation, for reasons in the public interest or to assert, exercise or defend legal claims;
  • to request that the processing of your personal data is restricted pursuant to Article 18 GDPR if the accuracy of the data is disputed by you or processing is unlawful, and you have objected to such data being deleted and we no longer require the data, but you require it to assert, exercise or defend legal claims, or you have objected to processing pursuant to Article 21 GDPR;
  • to request that you receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format or that it is transmitted to another controller, pursuant to Article 20 GDPR; and
  • to withdraw the consent you have previously provided at any time pursuant to Article 7(3) GDPR. This results in us no longer being able to conduct the data processing that was based on this consent in the future; and
  • to lodge a complaint with a supervisory authority pursuant to Article 77 GDPR. Generally, you can contact the supervisory authority in your usual place of residence, place of work, or where our company’s head office is located.

data security

Within the scope of the website visit, we use the common SSL (secure socket layer) protocol together with the respective highest encryption level supported by your browser. This is generally 256-bit encryption. If your browser does not support 256-bit encryption, we revert to 128-bit v3 technology. You can tell that individual pages of our website are being transmitted in an encrypted way when a key or padlock symbol is shown in your browser’s lower status bar.

We also take appropriate technical and organisational security measures to protect your data from any accidental or intentional manipulation, partial or total loss, destruction or unauthorised access by third parties. Our security measures are continually improved in line with technological developments.

Updating and changing this privacy policy

This privacy policy is currently valid as at July 2019.

The further development of our website and its services, or a change in legal or official requirements, may necessitate changing this privacy policy. You can access and print out the respectively applicable privacy policy on the website at any time at