In the following, we inform you about the collection of personal data in the context of visiting and using our website. Personal data is all data that can be related to you personally, such as your e-mail address, your user behavior or your IP address. The terms used are not gender-specific. The relevant legal bases for compliance with data protection are the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the specific state data protection laws of the respective federal states. We use appropriate technical and organizational security measures to adequately protect your personal data.
Name and address: KTP Kunststoff Palettentechnik GmbH, Saarstraße 1, 66359 Bous, Germany.
Phone: Phone: +49 6834 9210 0
E-mail: E-mail: email@example.com
For all questions and as a contact person on the subject of data protection in our company, you can reach our external data protection officer at the following e-mail address: firstname.lastname@example.org.
a) During the mere informative use of our website, we only collect the personal data that your browser transmits to our server. We collect the following listed data, as they are technically necessary to display our website and to ensure the stability and security of our website. The processing is based on our legitimate interest according to Art. 6 para. 1 p. 1 lit. f) DSGVO:
– IP address
– Date and time of the request
– Time zone difference to Greenwich Mean Time (GMT)
– Content of the request (specific page)
– Access status/http status code
– Amount of data that was transferred
– Web page from which the request came
– Operating system and interface
– Version and language of the browser software
b) When you contact us by e-mail or via a contact form, the data you provide (e-mail address, name and telephone number, if applicable, content of the message) will be stored by us for the purpose of answering your questions. The processing of the data provided by you is in our legitimate interest according to Art. 6 para. 1 lit. f) DSGVO. If the data processing is carried out for the purpose of initiating or implementing a concluded contract, this (pre-)contractual relationship is the relevant legal basis, Art. 6 para. 1 lit. b) DSGVO). In addition to your message, it is only mandatory to provide your email address so that we can respond to your inquiry. All other information provided is voluntary; its processing is based on your consent pursuant to Art. 6 (1) a) DSGVO.
c) We delete the personal data concerned if processing is no longer necessary, or restrict it if there are legal obligations to retain it.
You have the following rights against us regarding the personal data concerning you:
– Right of access to the personal data processed by us, Art. 15 DSGVO. The right to information extends to the purposes of data processing, the categories of personal data concerned, the categories of recipients to whom your data is disclosed, the storage period or criteria that measure the storage period, the origin of your data, in the event that it was not collected by us, as well as the existence of the rights to rectification, erasure, restriction of processing, objection, right of appeal.
– Right to rectification of incorrect or incomplete stored personal data, Art. 16 DSGVO.
– Right to erasure of your personal data stored by us, Art. 17 DSGVO.
– Right to restriction of the processing of personal data, Art. 18 DSGVO, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse its erasure, furthermore, if we no longer need the data for the specific purpose, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing in accordance with Art. 21 DSGVO.
– Right to data portability, Art. 20 DSGVO. According to this, you have the right to receive the personal data concerning you that you have provided to us in a structured, common and ma-chine-readable format or to request that it be transferred to another person responsible.
– Right of appeal to a supervisory authority, Art. 77 DSGVO. For this purpose, you can con-tact the supervisory authority of your usual place of residence or workplace.
– Right to object, Art. 21 DSGVO. According to this, you have the right to object to the processing of your personal data by us, provided that it takes place on the basis of our legitimate interest or is necessary for the performance of a public task.
a) In order to process our business transactions, we use external service providers, so-called order processors (e.g. in the area of IT, computer center services). These are only active according to our instructions, were conscientiously selected and contractually obligated by us to comply with the provisions of data protection in accordance with Article 28 DSGVO.
b) In addition, we may be subject to a statutory or legal obligation to make the legitimately processed personal data available to third parties, in particular public bodies, Art. 6 para. 1 p. 1 lit. c DSGVO.
We use the services of a web hosting provider so that you can access our online offer securely and efficiently from their managed servers. This enables us to use infrastructure and platform services, computing capacity, storage space and database services as well as security services and technical maintenance services. When the online service is used or communicated, user data is processed, such as the IP address and all entries made on the website.
For security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
A transfer of your data to countries outside the EU and the EEA (third countries) does not take place in principle as planned on our part. However, we use tools on our website whose providers are companies based in the USA. If these tools are active, personal data of website visitors may be transferred to these third countries and processed there. We expressly point out that currently no data protection level equivalent to the EU can be guaranteed in the USA. We have no influence on this. However, personal data will only be transferred to a third country if you have previously given your express consent, Art. 6 (1) a) DSGVO. Once you have given your consent, you can revoke it at any time with effect for the future. In the following passages, we inform you about the tools used for which such data transmission can take place.
b) Furthermore, cookies are used in the context of the use of additional functions, about which we provide detailed information below (functional cookies).
c) Before your data is processed on the basis of cookies that are not essential for the operation of our website, you as a website visitor will be informed in detail in this statement and asked for your express consent via the cookie banner, Art. 6 para. 1 sentence 1 lit. a) DSGVO. Once you have given your consent, you can revoke it at any time with effect for the future.
d) Furthermore, you can configure/deactivate your browser settings accordingly and refuse the acceptance of certain cookies from the outset.
a) We use the Google Tag Manager. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is a tool that allows us to embed tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create user profiles, does not save cookies and does not perform any independent analyses. It only serves to manage and play out the tools integrated via it. The Google Tag Manager does, however, record your IP address, which may also be transmitted to Google’s parent company in the United States. The use of the Google Tag Manager is based on Art. 6 para. 1 lit. f DSGVO. We, as the website operator, have a legitimate interest in a quick and uncomplicated integration and management of various tools on its website.
b) Information of the third party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User conditions: http://www.google.com/analytics/terms/de.html, Overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html, as well as the data protection declaration: http://www.google.de/intl/de/policies/privacy.
c) We use the Google Analytics web analysis and tracking tool for data traffic analysis on our website. Via this tool, we create pseudonymous usage profiles for the needs-based design of our website. Google Analytics uses so-called targeting cookies, which are stored on your end device and can be used by us to read usage data, such as page views, length of stay, operating systems used and the origin of the user. This enables us to recognize returning visitors and to evaluate the frequency of visits to our website by different users. Google Analytics is used exclusively on the basis of your express consent (legal basis Art. 6 para. 1 lit. a) DSGVO), provided that you have given this at the beginning of your visit to our website via the cookie banner. There, you can also revoke consent once given at any time. If you refuse consent to the use of Google Analytics, you will not suffer any disadvantages when using our website.
d) The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. For this purpose, we have activated the IP masking function (“anonymizeIP”), by means of which your IP address is shortened beforehand by Google within the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website. We have reduced the scope of the data collected to a minimum in order to evaluate user behavior.
e) The collected data will be deleted by us after 14 months at the latest.
f) The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.
g) Information of the third party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User conditions: http://www.google.com/analytics/terms/de.html, overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html, as well as the data protection declaration: http://www.google.de/intl/de/policies/privacy.
We also use Google Ads. Google Ads is an online advertising program provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Ads enables us to play advertisements in the Google search engine or on third-party websites when the user enters certain search terms on Google (keyword targeting). Furthermore, targeted advertisements can be played on the basis of user data available at Google (e.g. location data and interests) (target group targeting). As the website operator, we can evaluate this data quantitatively by analyzing, for example, which search terms have led to the display of our advertisements and how many advertisements have led to corresponding clicks. The use of this service is based on your consent in accordance with Art. 6 Para. 1 lit. a DSGVO and § 25 Para. 1 TTDSG. The consent can be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://policies.google.com/privacy/frameworks?hl=en
a) Third-party functional and content elements may be embedded in websites and online of-fers. We use these services to make our online offer more user-friendly. The content is obtained from the servers of the third-party providers. This means that when the content and functions are used, the third-party providers must process the IP addresses of the website users in order to transmit the content to their browsers.
b) We use the “Google Fonts” service, through which we integrate fonts from the provider Google on our website. However, the integration takes place “locally” on our website. This means that there is no connection to Google’s servers and thus no personal data of website visitors is transmitted to Google.
We have integrated iThemes Security on this website. The provider is iThemes Media LLC, 1720 South Kelly Avenue Edmond, OK 73013, USA (hereinafter “iThemes Security”). iThemes Security serves to protect our website from unwanted access or malicious cyberattacks. For this purpose, iThemes Security collects, among other things, your IP address, time and source of login attempts and log data (e.g. the browser used). iThemes Security is installed locally on our servers. iThemes Security transmits IP addresses of recurring attackers to a central database of iThemes in the USA (Network Brute Force Protection) in order to prevent such attacks in the future. The use of iThemes Security is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in protecting its website as effectively as possible against cyberattacks. If a corresponding consent was requested, the processing is carried out exclusively on the basis of Art. 6 Para. 1 lit. a DSGVO and § 25 Para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time.
18. Newsletter and Pixel/Web-beacon
a) We offer the regular sending of our newsletter, by means of which we inform you about current topics and interesting offers. The sending takes place only after submission and based on your previously expressly declared consent, Art. 6 para. 1 lit. a) DSGVO. Within the scope of the registration for the newsletter, we require the specification of your email address in order to be able to send you the newsletter. Additional information, such as your name or gender, is optional and only serves to address you personally. In accordance with the law, we use the double opt-in procedure for newsletter registration. After registering on our website, the user also receives an e-mail with a link that must be clicked by the user to confirm the registration. In this way, we can ensure that the actual owner of the email address provided has registered for our newsletter and that no unwanted mailings are sent to third parties. For the purpose of fulfilling our documentation and verification obligations, the newsletter registrations are logged and the registration and confirmation times as well as the IP address of the user are stored.
b) If the sent link is not confirmed within 24 hours, the newsletter registration will be discarded and your data will be deleted after one month.
c) Once you have given your consent, you can revoke it at any time for the future. To do so, click on the “Unsubscribe Newsletter” link at the bottom of a newsletter sent to you or send a message to the contact details given in the imprint. The sending of the newsletter to the email address provided by you will then be cancelled immediately.
d) Once unsubscribed, email addresses are stored by us for 3 years for the purpose of proving that consent was once given. The proof serves only the defense of claims.
e) This data is collected for the technical improvement of the newsletter service and for the analysis of target group behavior in order to adapt the contents of the newsletter to the corresponding interests. The data processing corresponds to our legitimate interest according to Art. 6 para. 1 lit. f) DSGVO.
f) The sending, organization and analysis of our newsletter is carried out by the German service provider “Rapidmail GmbH”, which we have contractually obligated to comply with data protection, Art. 28 DSGVO.
g) We use so-called web beacons/pixels when sending our newsletter. This refers only to pixel-sized files that are incorporated into the newsletter. When the newsletter is opened, the files are then retrieved from our server and that of the dispatch service provider. This in turn means that certain data is collected from the addressee of the newsletter and forwarded to Rapidmail’s servers for the purpose of analysis. Affected are among others:
– Technical information about the browser
– System of the user
– IP address
– reading behavior
– retrieval location
– access times
– Clicking behavior for links
h) If you wish to unsubscribe from the newsletter, we will provide a corresponding link in each newsletter message sent. For more information about the analysis functions of Rapidmail, please refer to the following link: HTTPS://WWW.RAPIDMAIL.COM/STATISTICS
i) The data you provide for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe. Data that has been stored with us for other purposes remains unaffected by this. After you have unsubscribed from the newsletter distribution list, your e-mail address will be stored by us or the newsletter service provider in a blacklist, if necessary, to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with the legal requirements for sending newsletters (legitimate interest within the meaning of Art. 6 Para. 1 lit. f DSGVO). The storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest. For more details, please also refer to the data security information of Rapidmail at: https://www.rapidmail.com/data-security