Copyright 2019 thyssenkrupp Steel Europe AG. All rights reserved. The content including images and the design of the application SteelOnline are subject to copyright protection and other laws for the protection of intellectual property. No dissemination or alteration of the content of SteelOnline or of the frames or similar measures is permitted. Moreover, these contents may not be copied, disseminated, modified or made available to third parties for commercial purposes.

The information that thyssenkrupp Steel Europe AG presents to you on this application has been compiled with the greatest of care and is constantly updated. Despite careful checking, it is impossible to guarantee freedom from all errors. For this reason, thyssenkrupp Steel Europe AG excludes all liability or warranty with regard to the accuracy, completeness and up-to-dateness of the information provided on this application. This applies in particular also to websites to which reference is made by hyperlinks. These concern websites of third parties over which we have no control. For this reason, thyssenkrupp Steel Europe AG expressly excludes any liability for the content of such websites. thyssenkrupp Steel Europe AG is also not responsible for the data protection precautions of the operators of such websites. thyssenkrupp Steel Europe AG reserves the right to undertake alterations or additions to the information or data provided at all times without prior notice. Insofar as our internet pages contain forward-looking statements, these statements are based on opinions and estimations of the thyssenkrupp Steel Europe management and are subject to risks and uncertainties. thyssenkrupp Steel Europe AG is not obliged to update such forward-looking statements. All liability for such statements is expressly excluded.

Unless otherwise indicated, all trademarks used on the application SteelOnline are protected by trademark law. This applies above all to company logos and signs.

thyssenkrupp Steel Europe AG would like to present itself to you with an innovative and informative application. We hope that we meet your expectations. However, we draw your attention, as a precaution, to the fact that the intellectual property contained therein, including patents, trademarks and copyrights is legally protected. This application does not grant any license to use the intellectual property owned by companies of the thyssenkrupp Steel Europe group. Duplication, dissemination, reproduction and further transmission and other use are prohibited without the written consent of thyssenkrupp Steel Europe AG

The data controller within the meaning of the European General Data Protection Regulation, other national data protection laws and other statutory data protection requirements is in each case:

thyssenkrupp Steel Europe AG (abbreviation: SE AG)

Kaiser-Wilhelm-Strasse 100

47166 Duisburg

Germany

Tel.: +49 203 52-0

Website: www.thyssenkrupp-steel.com

thyssenkrupp Rasselstein GmbH

Koblenzer Strasse 141

56626 Andernach

thyssenkrupp Hohenlimburg GmbH

Oeger Strasse 120

58119 Hagen

thyssenkrupp Electrical Steel GmbH

Kurt-Schumacher-Strasse 95

45881 Gelsenkirchen

depending on, in the name of which company the data were provided.

The data protection officers are in each case:

thyssenkrupp Steel Europe AG

data protection officer

Kaiser-Wilhelm-Strasse 100

47166 Duisburg

Email: datenschutzbeauftragter-seag@thyssenkrupp.com

thyssenkrupp Rasselstein GmbH

data protection officer

Koblenzer Str. 141

56626 Andernach

Email: dataprotection.packagingsteel@thyssenkrupp.com

thyssenkrupp Hohenlimburg GmbH

data protection officer

Oeger Str. 120

58119 Hagen

Email: marc.solmecke@thyssenkrupp.com

thyssenkrupp Electrical Steel GmbH

data protection officer

Kurt-Schumacher-Straße 95

45881 Gelsenkirchen

Email: datenschutzbeauftragter.electricalsteel@thyssenkrupp.com

depending on, in the name of which company the data were provided.

1. Extent of processing personal data

We, thyssenkrupp Steel Europe AG, collect and use your personal data only insofar as this is necessary to provide a functioning customer platform SteelOnline, content and services. The collection and use of personal data takes place only with your consent. An exception applies where prior consent cannot be obtained for factual reasons and the processing of data is permitted by law.

2. Legal basis for the processing of personal data

If we have received your consent to the processing of your personal data, the legal basis for processing personal data is Art. 6 (1) a) of the EU General Data Protection Regulation (GDPR).

Where the processing of personal data is necessary for the performance of a contract to which the data subject is party, the legal basis is Art. 6 (1) b) GDPR. This also applies to the processing of personal data which is necessary to take steps prior to entering into a contract.

Where the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, the legal basis is Art. 6 (1) c) GDPR.

If the processing of personal data is necessary in order to protect the vital interests of the data subject or of another natural person, the legal basis is Art. 6 (1) d) GDPR.

If the processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, the legal basis is Art. 6 (1) f) GDPR.

3. Data deletion and duration of storage

Personal data will be deleted or blocked as soon as the purpose of storage no longer applies. Data can be stored beyond this time if this is provided for by the European or national legislator in regulations, laws or other rules to which SE AG is subject.

The data will also be blocked or deleted when a maximum storage period prescribed by the above legal norms expires, unless further storage is necessary to enter into or perform a contract.

1. Description and extent of the data processing

Each time our website is visited our system automatically collects data and information from the system of the visiting computer.

The following data are collected:

(1) Information about the browser type and version used

(2) Information about the App version used

(3) The user’s operating system

(4) The user’s IP address 

(5) Date and time of access

2. Legal basis for data processing

The legal basis for the temporary storage of the data and logfiles is Art. 6 (1) f) GDPR.

3. Purpose of data processing

The temporary storage of the IP address by the system is necessary to allow delivery of the customer platform SteelOnline to the user’s device. For this the user’s IP address needs to be stored for the duration of the session.

The data are stored in logfiles to ensure the functioning of the application. In addition, the data enable us to optimize the customer platform SteelOnline and ensure the security of our IT systems. The data are not analyzed for marketing purposes in this context.

These purposes also constitute our legitimate interest in processing the data pursuant to Art. 6 (1) f) GDPR.

4. Duration of storage

The data will be deleted as soon as they are no longer needed to achieve the purpose of their collection. In the case of collection of data for the provision of the customer platform SteelOnline this is the case when the respective session is ended.

5. Possibility of objection and deletion

The collection of data for the provision of the application and the storage of data in logfiles is essential for the operation of the service. Consequently there is no possibility of objection on the part of the user.

a) Description and extent of data processing

Our customer platform SteelOnline uses cookies. Cookies are text files stored by the browser on the user’s computer system. When a user accesses the customer platform SteelOnline a cookie can be stored on the user’s device. This cookie contains a characteristic string of characters allowing unique identification of the browser when the website is visited again. 

We use cookies to make our customer platform SteelOnline more user-friendly. Some elements of our website require that the accessing browser can be identified even after a change of page.

b) Legal basis for data processing

The legal basis for the processing of personal data using cookies is Art. 6 (1) f) GDPR. 

c) Purpose of data processing

The purpose of using technically necessary cookies is to simplify the use of our customer platform SteelOnline for users. Some functions of our website cannot be provided without the use of cookies. For these it is necessary for the browser to be re-identified even after a change of page.

The user data collected by technically necessary cookies are not used to create user profiles.

d) Duration of storage, possibility of objection and deletion

Cookies are placed on the user’s computer and transmitted from there to our website. You as a user therefore have full control over the use of cookies. By changing the settings in your browser you can disable or limit the transmission of cookies. Previously stored cookies can be deleted at any time. This can also be made to take place automatically. If cookies are disabled for our website, it might not be possible to use all the functions of the customer platform SteelOnline in full.

1. Description and extent of data processing

The customer platform SteelOnline uses a free newsletter to communicate new developments. 

During the registration process your consent to the processing of the data is requested and your attention is drawn to this privacy statement.

2. Legal basis for data processing

If the user has given consent, the legal basis for the processing of the data for the newsletter is Art. 6 (1) a) GDPR.

3. Purpose of data processing

The user’s email address is used to send the newsletter. 

4. Duration of storage

The data are deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. The user’s email address is therefore stored for as long as the user is active on our customer platform SteelOnline. 

5. Possibility of objection and deletion

The subscription to the newsletter can be cancelled by the user at any time. To do this you need to send an email to the stated contact address.

1. Description and extent of data processing

For our customer platform SteelOnline we offer users the opportunity to register with personal data. The data are entered on an entry screen and transmitted to us and stored. The data are not passed on to third parties. The following data are collected in the registration process: 

At the time of registration the following data are also stored:

(1) The IP address of the accessing device

(2) Date and time of registration

During the registration process the consent of the user to the processing of these data is obtained.

2. Legal basis for data processing

If the user has given consent, the legal basis for the processing of the data is Art. 6 (1) a) GDPR.

If registration is necessary for the performance of a contract to which the user is party or to take steps prior to entering into a contract, the additional legal basis for the processing of the data is Art. 6 (1) b) GDPR. 

3. Purpose of data processing

Registration by the user is necessary for the performance of a contract with the user or to take steps prior to entering into a contract.

4. Duration of storage

The data are deleted as soon as they are no longer necessary to achieve the purpose for which they were collected.

During the registration process for the performance of a contract or to take steps prior to entering into a contract this is the case when the data are no longer necessary for the performance of the contract. Once the contract has been entered into there may still be a need to save personal data of the contract partner in order to fulfill contractual or statutory obligations. 

5. Possibility of objection and deletion

As a user you have the possibility to cancel registration at any time. You can have the data stored about you amended at any time. 

If the data are necessary for the performance of a contract or to take steps prior to entering into a contract, early deletion of the data is only possible if not opposed by contractual or statutory obligations. 

1. Description and extent of data processing

Our customer platform SteelOnline features a contact facility via the email address provided. In this case the user’s personal data transmitted with the email are stored. 

None of the data are passed on to third parties in this connection. The data are used exclusively for processing the conversation. 

2. Legal basis for data processing

If the user has given consent, the legal basis for the processing of the data is Art. 6 (1) a) GDPR. 

The legal basis for the processing of data transmitted while sending an email is Art. 6 (1) f) GDPR. If the email contact is aimed at entering into a contract, the additional legal basis for processing is Art. 6 (1) b) GDPR.

3. Purpose of data processing

The processing of the personal data from the form is used solely to process your contact. In the case of contact by email, this is also our legitimate interest in processing the data. 

The other personal data processed during the sending of the form serve to prevent misuse of the contact form and to ensure the security of our IT systems. 

4. Duration of storage

The data are deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. For the personal data from the contact form and those sent by email this is the case when the respective conversation with the user is over. The conversation is over when the circumstances indicate that the matter concerned has been definitively dealt with. 

5. Possibility of objection and deletion

The user has the possibility at all times to withdraw his/her consent to the processing of personal data. If the user contacts us by email, he/she can object to the storage of his/her personal data at any time. In this case the conversation cannot be continued. 

In this case all personal data stored in the contact procedure are deleted.

If your personal data are processed, you are the data subject within the meaning of the GDPR and you have the following rights vis-à-vis the data controller: 

1. Right of access

You can demand confirmation from the data controller as to whether or not personal data concerning you are being processed by us. 

If this is the case, you can demand the following information from the data controller:

(1) the purposes of the processing;

(2) the categories of personal data concerned;

(3) the recipients or categories of recipient to whom the personal data have been or will be disclosed;

(4) the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;

(5) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing; 

(6) the right to lodge a complaint with a supervisory authority;

(7) where the personal data are not collected from the data subject, any available information as to their source;

(8) the existence of automated decision-making, including profiling, referred to in Art. 22 (1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

You have the right to be informed of whether your personal data are transferred to a third country or to an international organization. In this connection you can demand to be informed of the appropriate safeguards pursuant to Art. 46 GDPR relating to the transfer. 

2. Right to rectification

You have the right to obtain from the controller rectification and/or completion if the processed personal data concerning you are incorrect or incomplete. The controller must carry out the rectification without undue delay.

3. Right to restriction of processing

You have the right to demand restriction of processing of personal data concerning you where one of the following applies:

(1) you contest the accuracy of the personal data, for a period enabling the controller to verify the accuracy of the personal data;

(2) the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;

(3) the controller no longer needs the personal data for the purposes of the processing, but you require them for the establishment, exercise or defense of legal claims, or

(4) you have objected to processing pursuant to Art. 21 (1) GDPR pending the verification whether the legitimate grounds of the controller override your grounds.

Where processing of the personal data concerning you has been restricted, such personal data may, with the exception of storage, only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

Where restriction of processing under the above conditions has been obtained, you will be informed by the controller before the restriction of processing is lifted.

4. Right to erasure

a) Obligation to erase

You have the right to obtain from the controller the erasure of personal data concerning you without undue delay and the controller is obligated to erase personal data without undue delay where one of the following grounds applies:

(1) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.

(2) you withdraw your consent on which the processing is based according to Art. 6 (1) a) or Art. 9 (2) a) GDPR, and where there is no other legal ground for the processing. 

(3) you object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR. 

(4) the personal data concerning you have been unlawfully processed. 

(5) the personal data concerning you have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject. 

(6) the personal data concerning you have been collected in relation to the offer of information society services referred to in Art. 8 (1) GDPR.

b) Information to third parties

Where the controller has made the personal data concerning you public and is obliged pursuant to Art. 17 (1) GDPR to erase the personal data, the controller, taking account of available technology and the cost of implementation, will take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you as the data subject have requested the erasure by such controllers of any links to, or copy or replication of, those personal data. 

c) Exceptions

The right to erasure does not apply to the extent that the processing is necessary 

(1) for exercising the right of freedom of expression and information;

(2) for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

(3) for reasons of public interest in the area of public health in accordance with Art. 9 (2) h) and i) as well as Art. 9 (3) GDPR;

(4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 (1) GDPR in so far as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing, or

(5) for the establishment, exercise or defense of legal claims.

5. Right to notification

If you have asserted the right to rectification, erasure or restriction of processing vis-à-vis the controller, the controller is obligated to communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. 

You have the right to obtain information from the controller about those recipients.

6. Right to data portability

You have the right to receive the personal data concerning you, which you have provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where:

(1) the processing is based on consent pursuant to Art. 6 (1) a) GDPR or Art. 9 (2) a) GDPR or on a contract pursuant to Art. 6 (1) b) GDPR and

(2) the processing is carried out by automated means.

In exercising this right, you also have the right to have the personal data transmitted directly from one controller to another, where technically feasible. This must not adversely affect the rights and freedoms of others.

The right to data portability does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

7. Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 (1) e) or f) GDPR, including profiling based on those provisions. 

The controller will no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.

Where personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for such purposes.

8. Right to withdraw consent to data processing

You have the right to withdraw your consent to data processing at any time. Your withdrawal of consent will not affect the lawfulness of the processing carried out on the basis of the consent before it was withdrawn.

9. Automated individual decision-making including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision: 

(1) is necessary for entering into, or performance of, a contract between you and the data controller,

(2) is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or

(3) is based on your explicit consent.

However such decisions must not be based on special categories of personal data referred to in Art. 9 (1) GDPR, unless Art. 9 (2) a) or g) applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.

In the cases referred to in (1) and (3), the data controller will implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.

10. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR. 

The supervisory authority with which the complaint is lodged must inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

Translation: The German version has priority

thyssenkrupp Steel Europe AG provides a application (SteelOnline) which enables registered customers to purchase steel products directly from thyssenkrupp Steel Europe AG and use order tracking services.

In order to use SteelOnline, you need to:

• be a registered partner (the customer) and
• accept the following Online General terms and conditions of use of thyssenkrupp Steel Europe AG (the terms and conditions of use) as well as in case of transactions the respective terms and conditions of sale and delivery of thyssenkrupp Steel Europe AG (the terms and conditions of sale)

In order to register for the use of SteelOnline the customer files a registration application.

The prerequisite for registration and use of transaction services in SteelOnline is the deposition or proof of sufficient collateral (e.g. commercial loan insurance) by the customer.

In order to register, the customer must submit an application to the Team E-Business/EDI. As part of the registration, the customer must confirm these terms and conditions of use. Once thyssenkrupp Steel Europe AG has successfully validated and approved the application, the customer will receive his automatically generated access data by email. The customer can access SteelOnline using a combination of a user name and a password. Access to transaction applications requires the entry of a supplementary password for sales activities. Each customer can register for SteelOnline him-/herself and receives a user name, an alphanumeric password and a password for sales activities with the confirmation from thyssenkrupp Steel Europe.

The customer accepts the terms and conditions of use of SteelOnline by actively acknowledging them when registering.

thyssenkrupp Steel Europe AG reserves the right to reject a customer registration application at its own discretion or to restrict/exclude customer use of the site at any time, and to amend these terms and conditions of use at any time. Amended terms and conditions of use will be made available to customers via SteelOnline.

2.1. Only those customers registered and approved by thyssenkrupp Steel Europe AG are authorized to use SteelOnline.

2.2. Through the use of the sales applications for the purchase of material, the customer accepts each terms and conditions of sale and delivery of thyssenkrupp Steel Europe AG unrestrictedly in its (respective) current version. The (corresponding) terms and conditions are available to the customer on the website of SteelOnline.

2.3. The customer is obligated to keep his user name, password and password for sales activities (only for transaction applications) confidential at all times and to only pass these on to employees he has authorized to use SteelOnline. The customer shall be fully liable in the event that, through his actions or negligence, persons not authorized by him or third parties are able to use the user name, password and/or password for sales activities.

2.4. SteelOnline strives to be available 24 hours a day and 7 days a week. However, specific sales events such as auctions only take place over a limited period of time. More information can be obtained on the SteelOnline homepage. thyssenkrupp Steel Europe AG shall not be liable for any damages caused by the interruption, inaccessibility or closure of SteelOnline applications. The customer shall be responsible for maintaining all necessary equipment required to access the internet and the site.

thyssenkrupp Steel Europe AG

Salesstrategy/- planning

Team E-Business/EDl

Kaiser-Wilhelm-Straße 100

47166 Duisburg

Phone: +49 (0)203 52-23333

E-mail: team.e-business@thyssenkrupp.com

online.thyssenkrupp-steel-europe.com

thyssenkrupp Steel Europe AG provides the applications ProWeld 6.0 and ProWear calculation programs to registered users. ProWear is a web application which helps to calculate expected wear life of different steel grades.

ProWeld enables model wear calculations of steel grades:

• Carbon equivalents
• Minimum preheat temperature
• Cooling time t8/5
• Heat input
• Maximum hardness in the HAZ

The ProWear tool makes it possible to

• estimate wear life in relation to a selection of the reference steel grades (e.g. XAR® or mild steel S355)
• individually select different abrasive materials and their mixtures
• choose wear conditions relevant for the application

To use ProWear or ProWeld you must be a registered user.

To register to use ProWeld 6.0, the customer submits a registration application. As part of the registration process the customer must agree to these Terms of Use. After validation and authorization by thyssenkrupp Steel Europe AG, the customer will obtain access to the application. All visitors to the application may register for ProWeld 6.0. Only users authorized by thyssenkrupp Steel Europe AG are entitled to use ProWeld 6.0.

In the registration process the user is required to accept the Terms of Use for ProWeld 6.0. thyssenkrupp Steel Europe AG reserves the right to reject user registration applications at its own discretion, to restrict or bar the use of ProWeld 6.0 by a user at any time, and to change these Terms of Use at any time. Changed Terms of Use will be made accessible to customers via ProWeld 6.0.

ProWeld 6.0 was developed by thyssenkrupp Steel Europe AG with the greatest possible care. The user bears sole responsibility for the correctness of data entered into this calculation program. The user is aware that calculated values may differ from real values encountered in practice. thyssenkrupp Steel Europe AG provides no guarantee for the correctness of the calculation results and bears no liability for direct or indirect damages, secondary damages or any other damages incurred by the user or third parties as a result of using this calculation program.

Translation: The German version has priority

thyssenkrupp Steel Europe AG

Kaiser-Wilhelm-Straße 100

47166 Duisburg

E-mail: info.plate@thyssenkrupp.com

www.thyssenkrupp-steel.com/grobblech