The company Polymerpacker GmbH & Co. KG the protection of your data is very important. Therefore, we would like to inform you in the following which data we use for which purposes. If you have any further questions regarding the handling of personal data, please do not hesitate to contact our data protection officer (see below for contact details).
Responsible
The controller pursuant to Art. 4 (7) GDPR and other national data protection laws of the Member States of the European Union as well as other data protection regulations is
Polymerpacker GmbH & Co. KG
Am Fuldaer Kreuz 9
DE 97786 Motten
Phone +49 9748 863 99 20
info@polymerpacker.de
Data protection officer
If you have any questions, suggestions or comments on the subject of data protection and the enforcement of your rights, please contact our data protection officer:
Rüdiger Möller (CEO)
E-Mail: DSB@polymerpacker.de
Definition
Our privacy policy uses terms that are defined in the GDPR. We explain the most important terms so that you know what they mean.
What is personal data?
The term "personal data" is defined in the General Data Protection Regulation. It defines "personal data" as any information relating to an identifiable natural person. This includes, for example, your name, your address, your telephone number or your date of birth. Information about how you use this or other websites may also contain personal data.
What does data processing mean?
Processing is any operation or set of operations which is performed on personal data, whether or not by automated means. This basically includes any handling of personal data such as the collection, storage, modification, use, transmission, dissemination, deletion, reading or destruction, etc.
Who is responsible?
The controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. The controller must ensure the permissibility of data processing through the use of technical and organizational measures that are regularly reviewed.
What is a processor?
A processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
Who is the recipient?
Recipient is a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients.
What does third party mean?
Third party is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data.
What is consent?
Consent is an expression of self-determination under data protection law. It is the voluntary, informed and unambiguous expression of will in the form of a statement or other unambiguous affirmative act by which the data subject indicates that they consent to the processing of their personal data. Consent that has been given can be revoked at any time.
General information on data processing
Scope of the processing of personal data
In principle, we only process your personal data insofar as this is necessary to fulfill the purpose of processing. Your personal data will only be collected and used with your consent or if the processing of the data is permitted by law.
Legal basis for the collection and processing of personal data
In data protection, the so-called prohibition with reservation of permission applies. This means that the processing of personal data is generally unlawful unless the data subject has given consent or it is legitimized by a legally regulated reason for permission. We are obliged to inform you of the legal basis for data processing.
Insofar as we obtain your consent for the processing of personal data, Art. 6 para. 1 sentence 1 lit. a GDPR serves as the legal basis for the processing of your personal data.
When processing your personal data to fulfill a contract between you and Polymerpacker GmbH & Co. Kg, Art. 6 para. 1 sentence 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 para. 1 sentence 1 lit. c GDPR serves as the legal basis.
If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 sentence 1 lit. f GDPR serves as the legal basis for the processing.
Disclosure of personal data to third parties and processors
As a matter of principle, we do not pass on any personal data to third parties without your express consent. If we nevertheless disclose your data to third parties in the course of processing, transfer it to them or otherwise grant them access to the data, this is also done exclusively on the basis of one of the aforementioned legal bases. We transmit data if this is necessary to fulfill the contract. If we are obliged to do so by law or by court order, we must transmit your data to authorities entitled to receive such information.
In some cases, we use carefully selected external service providers to process data. If data is passed on to service providers as part of so-called order processing, this is done on the basis of Art. 28 GDPR. Our processors are carefully selected and bound by our instructions. We only commission processors who offer sufficient guarantees that suitable technical and organizational measures are taken to ensure that the processing is carried out in accordance with the requirements of the GDPR and BDSG-new and guarantees the protection of your rights.
Data transfer to third countries
As a rule, data is not transferred to third countries.
However, if data is transferred to a third country, we will only allow data to be processed in a third country if the special requirements of Art. 44 et seq. GDPR are fulfilled. This means that data may then only be processed on the basis of special guarantees, such as the EU Commission's official recognition of a level of data protection equivalent to that in the EU or compliance with officially recognized special contractual obligations, the so-called "standard contractual clauses". We require US service providers to use these standard clauses or to submit to the "Privacy Shield", the data protection agreement negotiated between the European Union and the United States (privacyshield.gov).
Deletion of data and storage duration
We will delete or block your personal data as soon as the purpose for storing it no longer applies. In addition, however, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which we are subject. This applies, for example, to data that must be stored for commercial or tax law reasons, such as invoice data. Your data will be blocked or deleted if a storage period prescribed by these regulations expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.
Automated decision making
Automated decision-making or profiling does not take place at Polymerpacker GmbH & Co. KG does not take place.
Your rights as a data subject
Under the GDPR, you are a data subject if your personal data is processed. You therefore have the following rights:
Right to information (Art. 15 GDPR):
We are happy to provide you with information about whether and which of your personal data we process and for what purposes.
Right to rectification (Art. 16 GDPR):
You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
Right to erasure (Art. 17 GDPR):
Insofar as we are not bound by statutory archiving obligations or your data is required for the assertion, exercise or defense of legal claims, you have the right to have your personal data deleted.
Right to restriction (Art. 18 GDPR):
You have the right to demand that we restrict the processing of your personal data if one of the following conditions is met:
You contest the accuracy of the personal data concerning you for a period enabling us to verify the accuracy of the personal data;
the processing is unlawful and you request the restriction of the use of the personal data instead of erasure;
we no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims, or
You have lodged an objection to the processing as long as it has not yet been determined whether our legitimate reasons outweigh your reasons.
Right to data portability (Art. 20 GDPR):
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from us, where the processing is based on consent or on a contract and carried out by automated means.
In exercising your right to data portability, you have the right to have the personal data transmitted directly from us to another controller, where technically feasible.
Right to object (Art. 21 GDPR):
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR. This also applies to profiling based on these provisions. We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.
Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.
Data collection when visiting our website
If you use our websites purely for information purposes, we only collect the personal data that your browser transmits to our servers. When you visit our websites, we collect the following data, which is technically necessary for us to display our websites to you and to ensure stability and security.
- IP address of the user
- Date and time of the request
- Content of the request (specific page)
- Access status/HTTP status code
- Amount of data transferred in each case
- Website from which the request comes
- Operating system of the user
- Language and version of the browser software.
Since the collection of data to display the websites and the storage of data in log files is absolutely necessary for the operation of our website and the maintenance of IT security, you have no option to object in this respect.
Purpose of the processing
Ensuring the operation and security of the website.
Legal basis
The legal basis for the processing of the data that you transmit to us by visiting our website is the legitimate interest of the controller Art. 6 para. 1 sentence 1 lit. f GDPR.
Duration of data storage
The data will be deleted as soon as it is no longer required for the purpose for which it was collected.
Use of cookies
Cookies are small text files that are stored on your computer when you visit our website and enable your browser to be reassigned. Cookies store information such as your language setting, the duration of your visit to our website or the entries you make there.
There are different types of cookies. Session cookies are temporary cookies that are stored in the user's Internet browser until the browser window is closed and the session cookies are deleted. Permanent or persistent cookies are used for repeated visits and are stored in the user's browser for a predefined period of time. First-party cookies are set by the website that the user visits. Only this website may read information from the cookies. Third-party cookies are set by organizations that do not operate the website that the user is visiting. These cookies are used by marketing companies, for example.
Legal basis
The legal basis for the use of cookies is Art. 6 para. 1 sentence 1 lit. f GDPR.
Legitimate interests
We use cookies for the proper operation of the website, to provide basic functionalities and to tailor our web pages to preferred areas of interest. This is also the legitimate interest in data processing within the meaning of Art. 6 para. 1 sentence 1 lit. f GDPR.
Objection option
You can delete cookies already stored on your end device at any time. If you wish to prevent the use of cookies, you can refuse to accept cookies in your browser. Please refer to your browser manufacturer's instructions to find out how this works in detail.
Registration function/customer account
You can optionally create user accounts for our online offers in order to use our online offers, but this is not necessary in order to use the store. The personal data that is transmitted to us and stored is determined by the input screen and the information provided during registration. The data entered during registration is used for the purpose of using our services. You have the option of canceling your user account at any time. In this case, your data will be deleted unless we are obliged to retain it for commercial or tax law reasons.
The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR if you have given your consent. If the registration serves the fulfillment of a contract to which you are a party or the implementation of pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 para. 1 lit. b GDPR.
As part of the use of our registration and login functions and the use of the user account, we may store the IP address and the time of the respective user action. This data is stored on the basis of our legitimate interests and serves to protect against misuse and other unauthorized use. This data is not passed on to third parties unless it is necessary to pursue our claims or there is a legal obligation to do so. The legal basis for this collection and storage is Art. 6 para. 1 lit. c GDPR.
SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Newsletter
In some areas of our online services, we offer you the opportunity to subscribe to one of our free e-mail newsletters. We only send these newsletters with your consent or on the basis of legal permission. When you register for a newsletter, the data from the input screen (name and email address) is transmitted to us and stored for as long as the subscription to the newsletter is active.
Your consent is obtained for the processing of this data for the purpose of sending the newsletter and reference is made to this privacy policy. We use the so-called double opt-in procedure for the registration process. Before the newsletter is sent, you will receive an email in which you must click on a link to confirm your registration. In this way, we prevent unauthorized third parties from registering using your e-mail address. We log the registration process in order to be able to prove the process in accordance with legal requirements. The IP address of the accessing device, date and time of registration are stored. The data you provide will be stored for as long as the subscription to the newsletter is active. You can cancel your subscription at any time. For this purpose, there is a corresponding unsubscribe link in every newsletter. This also enables you to withdraw your consent. The legal basis for the processing of your data if you have given your consent to receive newsletters is Art. 6 para. 1 lit. a GDPR.
Use of our contact form:
We collect personal data when you provide it to us of your own accord, for example when you contact us. We will, of course, use the personal data transmitted to us in this way exclusively for the purpose for which you provide it to us when contacting us.
This information is provided on a voluntary basis and in these cases is initiated by you. If this involves information on communication channels (e.g. e-mail address, telephone number), we will use these channels to contact you in accordance with your request.
Purposes of processing
The purpose of processing your data is to process and respond to your request.
Legal basis
The legal basis for the processing of the data that you transmit to us in the course of contacting us is the legitimate interest of the controller Art. 6 para. 1 sentence 1 lit. f GDPR.
Duration of data storage
We will delete your data that we have received in the course of contacting you as soon as it is no longer required to achieve the purpose for which it was collected, i.e. your request has been fully processed and no further communication with you is required or desired by you.
Use of the order form/shop:
We collect, process and use the information you provide via our order form as part of an order for the purpose of executing the contract in accordance with Art. 6 para. 1 lit. b GDPR. We store the information you provide for the period of processing and handling your order. Your data will then be deleted. Data that we must store due to legal, statutory or contractual retention obligations will be archived by us instead of being deleted.
Purposes of the processing
The purpose of processing your data is the execution of the contract.
Legal basis
The legal basis for the processing of the data that you transmit to us when using our order form is the fulfillment of a contract Art. 6 para. 1 sentence 1 lit. b GDPR.
Duration of data storage
We will delete your data that we have received in the course of processing the contract as soon as it is no longer required for the purpose for which it was collected, with the exception of data required to guarantee legal obligations Art. 6 para. 1 sentence 1 lit. c GDPR.
Web analysis service Trackboxx
We use the web analysis service on our website Trackboxx. We use it to statistically evaluate visitor access and analyze the use of our website. The data is stored anonymously on a server in Germany for this purpose and is subject to the provisions of the GDPR.We do not use cookies or store any personal data. Rather, your IP address is used to generate a code that is then assigned to an anonymous user ID for as long as you are on our website. This data cannot be assigned to a specific person and is encrypted with a code that changes daily. It is therefore not possible to "recognize" you when you visit our website again.
There is no cross-site tracking, linking of data with other sources or forwarding of information to third parties.
The legal basis for the processing is Art. 6, para. 1, lit. f, GDPR. Our legitimate interest lies in the needs-based design and optimization of our website.
If you still do not want to help improve our site, you can control this at any time using the "Do-Not-Track" function in your browser. We have summarized links here on how this works for the most common browser types:
Changes to the privacy policy
We reserve the right to amend this privacy policy at any time in compliance with the applicable data protection regulations.