Privacy Policy

In the following, we provide information about the processing of personal data when using our website www.treffpack.de. Personal data is all data that can be related to you personally, e.g. name, address, email addresses, user behaviour. We have taken extensive technical and organisational precautions to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security procedures are regularly reviewed and adapted to technological progress.

 

1 Responsible for data processing (controller)

Responsible according to Art. 4 para. 7 EU General Data Protection Regulation (GDPR) is

 

C. E. Gätcke's Glas Gesellschaft mbH
Bredowstraße 31
22113 Hamburg

 

Germany

 

Managing Directors: Peter Börner, Dorothée Kuhnert, Harold Lienau

 

Phone: +49 40 731 206-0
Fax: +49 40 731 206-10
Mail: sales@treffpack.de

 

(see our Legal Notice)

 

2 Contact details of the data protection officer
You can contact our data protection officer at datenschutz@treffpack.de or our postal address with the addition of "data protection officer".

 

3 Legal bases of our data processing

The processing of personal data can be based on various legal bases. If we need your data for the performance of a contract with you or to respond to inquiries from you regarding a contract, the legal basis for this data processing is Art. 6 para. 1 p. 1 lit. b GDPR. If we obtain your consent for a certain data processing, the legal basis is Art. 6 para. 1 p. 1 lit. a GDPR. We carry out some data processing on the basis of our legitimate interest, whereby a balancing of your interests worth protecting and our legitimate interests is always carried out. The legal basis here is Art. 6 para. 1 p. 1 lit. f GDPR. Insofar as processing is necessary for the fulfilment of a legal obligation to which we are subject, the legal basis is Art. 6 para. 1 p. 1 lit. c GDPR.

 

In the following, we explain how we process personal data via our website.

4 Your rights

You have the following rights towards us regarding your personal data:

 

4.1 General rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), objection to processing (Art. 21 GDPR) and the right to data portability (Art. 20 GDPR). Insofar as the processing is based on your consent, you have the right to withdraw your consent with effect for the future (Art. 7 para. 3 p. 1 GDPR). 

 

4.2 Rights regarding data processing based on legitimate interest

Pursuant to Article 21 para. 1 GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data which is based on Article 6 para. 1 p. 1 lit. e GDPR (data processing in the public interest) or on Article 6 para. 1 p. 1 lit. f GDPR (data processing for the purposes of safeguarding a legitimate interest); this also applies to profiling based on those provisions. In the event of your objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

 

4.3 Rights in case of direct marketing

If we process your personal data for direct marketing purposes, you have the right pursuant to Article 21 para. 2 GDPR to object at any time to processing of personal data concerning you for such marketing; this includes profiling to the extent that it is related to such direct marketing.

In the event of your objection to processing for direct marketing purposes, we will no longer process your personal data for these purposes.

 

4.4 Right to lodge a complaint with a supervisory authority
You also have the right to complain to a competent data protection supervisory authority about the processing of your personal data by us.

 

5 Collection of personal data when visiting our website

In the case of merely informational use of the website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security:

• IP address
• Date and time of the request
• Content of the request (the page/file accessed)
• access status/HTTP status code
• amount of data transferred in each case
• the website from which the request came (referrer URL)
• operating system
• Browser software, language and version of the browser software
• host name of the accessing computer

 

The legal basis is Art. 6 para. 1 p. 1 lit. f GDPR and Section 25 para. 2 no. 2 TDDDG. Since the collection of data for the provision of the website and the storage in log files are absolutely necessary for the operation of the website and to protect against misuse, our legitimate interest in data processing prevails at this point.

 

6 Contacting us by email

When you contact us by email, the data you provide (your email address, name and telephone number, if applicable) will be stored by us in order to answer your questions.

 

Insofar as we request information that is not necessary for contacting you, we have always marked this as optional. This information is used to specify your request and to improve the processing of your request. Giving us this information is voluntary and based on your consent, Art. 6 para. 1 p. 1 lit. a GDPR. Insofar as this involves information on communication channels (for example, email address, telephone number), you also consent to us contacting you if necessary via this communication channel, in order to respond to your request. You can, of course, withdraw this consent at any time with effect for the future.

 

Your data that we have received in the course of contacting us will be deleted as soon as it is no longer required to achieve the purpose for which it was collected, your request has been fully processed and no further communication with you is necessary or desired by you.

 

As the controller, our company has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. Nevertheless, internet-based data transmissions can generally have security gaps. Absolute protection cannot be guaranteed; in any case, sending unencrypted emails is not secure. We therefore ask you not to send sensitive data by unencrypted email, but to use either encrypted communication channels or the postal service for this purpose.

 

7 Use of cookies

Cookies are data that are stored on your computer by a website you visit and enable your browser to be reassigned. Cookies transmit information to the entity that sets the cookie. Cookies can store various information, such as your language setting, the duration of your visit to our website or the entries you have made there. This prevents you, for example, from having to re-enter required form data each time you use the website. The information stored in cookies can also be used to recognize preferences and to align content according to areas of interest.

 

There are different types of cookies: session cookies are sets of data that are only temporarily held in the RAM and are deleted when you close your browser. Permanent or persistent cookies are automatically deleted after a predetermined duration, which may vary depending on the cookie. The information can also be stored in text files on your computer with this type of cookie. However, you can also delete these cookies at any time via your browser settings.

 

First-party cookies are set by the website you are currently visiting. Only that website is allowed to read information from these cookies. Third-party cookies are set by organizations that do not operate the website you are visiting. For example, these cookies are used by marketing companies.

 

The legal basis for possible processing of personal data using cookies and their storage period may vary. Insofar as you have given us your consent, the legal basis is Art. 6 para. 1 p. 1 lit. a GDPR. Insofar as the data processing is based on our overriding legitimate interests, the legal basis is Art. 6 para. 1 p. 1 lit. f GDPR. The stated purpose then corresponds to our legitimate interest.

 

Insofar as we use cookies or similar technologies to access a terminal device used by you within the meaning of Section 2 para. 2 No. 6 TDDDG by storing or reading out information there regardless of personal reference, we will obtain your purpose-related, voluntary and informed consent in accordance with Section 25 para. 1 TDDDG beforehand.

 

Insofar as consent under the GDPR and the TDDDG can be bundled, we will obtain it uniformly.

 

No consent under the TDDDG is required to access information in your terminal device that is already stored there and has been sent to us by its active transmission, this concerns the public IP address of the terminal device, the address of the website accessed, the user agent string with browser and operating system incl. version and the language set. Furthermore, no consent is required under the TDDDG if the cookie or similar technology is used to ensure the execution of the transmission of a message via a public telecommunications network in accordance with Section 25 para. 2 No. 1 TDDDG or insofar as the setting of the cookie is necessary for the provision of a telemedia service expressly requested by you in accordance with Section 25 para. 2 No. 2 TDDDG.

 

We use cookies to ensure the proper operation of the website, to provide basic functionality.

 

You can delete cookies already stored on your terminal device at any time. If you want to prevent cookies from being stored, you can do this via the settings in your internet browser. Alternatively, you can also install so-called ad blockers. Please note that individual functions of our website may not work if you have disabled the use of cookies.

 

8 Web analysis tools

 

Matomo

 

Our website uses the open source web analytics service Matomo, a service provided by "InnoCraft Ltd", a company located at 7 Waterloo Quay PO625 Wellington, New Zealand. As InnoCraft is located outside the EU, InnoCraft has appointed a representative in the EU: ePrivacy Holding GmbH, Große Bleichen 21, 20354 Hamburg, Germany (privacy@innocraft.com). Matomo uses cookies, through which an analysis of the use of the website becomes possible. For this purpose, the usage information collected in the cookie (including your shortened IP address) is transmitted to Matomo's server located in the EU and stored for usage analysis purposes. Matomo does not transmit any data to servers that are outside of our control. Your IP address is immediately anonymized during this process, so that you as a user are not identifiable to us. The information collected about your use of this website is not shared with third parties. We use the collected data for statistical analysis of user behavior for the purpose of optimizing the functionality and stability of the website and for marketing purposes. Our interest in and purpose of data processing is the optimization of our website, the adaptation of the content and the improvement of our offer. The interests of the users are sufficiently protected by anonymization.

 

We store the analysis data only as long as the purpose of the data processing requires, but for a maximum of 12 months. You may refuse the use of cookies (individual or all) by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. If you do not agree to the storage and analysis of your usage data from your visit to our website, you can also prevent its collection by Matomo below by clicking on it at any time. An opt-out cookie will then be set via your browser, which means that Matomo will not collect any session data. Please note: If you delete your cookies, the opt-out cookie is also deleted and must be set by you again.

 

 

Legal basis and revocation option

for this data processing is your consent, Art. 6 para. 1 lit. a) DSGVO. You can revoke your consent at any time with effect for the future by calling up the cookie settings in our Consent Management Platform and changing your selection there.

 

9 Podcast

On our website you have the opportunity to listen to our LAGERWARE Treffpack podcast. In our podcast episodes we deal with issues of design, sustainability and packaging.

 

You can listen to our podcast on our website. We host our podcasts via podcaster.de, a podcast hosting platform provided by Fabio Bacigalupo, Brunnenstraße 147, 10115 Berlin, Germany. For data transfer to the provider in the context of hosting, see section 12.

 

To protect your personal data, we use a two-click solution via a content blocker. When you call up a page in which a podcast is embedded, a connection to the podcaster.de servers is not established until you click on the "Show podcast" button. After the click, certain visit data of your person will be transmitted to podcaster.de.

 

Further information on data protection at podcaster.de is provided under the following link: https://www.podcaster.de/privacy.

 

However, you can also listen to our podcast via the following podcast platforms:

• itunes, of the provider Apple Inc, One Apple Park Way, Cupertino, CA 95014, USA
• de, of the provider Fabio Bacigalupo, Brunnenstraße 147, 10115 Berlin, Germany
• Deezer, of the provider Deezer, 24 rue de Calais, 75009 Paris, France
• Amazon Music, of the provider Amazon.com Services LLC, c/o Amazon.com, P.O. Box 81226, Seattle, WA 98108-1226, USA
• Spotify, of the provider Spotify AB, Regeringsgatan 19, SE-111 53 Stockholm, Sweden.

 

You can access the podcast platforms via links on our website, among other places. You can recognize links to the websites of the podcast services for example by the respective company logo. If you follow these links, you will reach our podcast on these platforms. When you click on a link to such a platform, a connection to the platform's servers is established. This transmits to the servers of the platform that you have visited our website.

 

In addition, further data is transmitted to the provider of the platform. This may include the following data:

• Address of the website on which the activated link is located
• Date and time when the website was called up or the link was activated
• Information about the browser and operating system used
• IP address

 

We would also like to point out that we have no influence on the scope, type and purpose of data processing by the providers of the podcast platform. Where our influence on data processing ends, the limit of our responsibility is reached. At these points, it is not possible for us to influence the data processing by the operator of the podcast platform. We are therefore unable to provide any information about which personal data is processed by the operators of the podcast platforms. For more detailed information on the processing of the personal data collected and the options to object, we refer to the corresponding data protection declarations of the platform operators.

 

The podcast platform providers are partly located in the USA and other countries outside the EU and the EEA. The data may therefore also be processed by the provider of the respective platform in countries outside the EU. We would like to point out that companies in these countries may be subject to data protection laws that do not offer the same degree of protection for your personal data as the member states of the EU.

 

10 Social Bookmarks

So-called social bookmarks of the following providers are integrated on our website:

• Instagram (Operator: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
• LinkedIn (Operator: LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland)
• Spotify (Operator: Spotify AB, Regeringsgatan 19, SE-111 53 Stockholm, Sweden)

 

Social bookmarks are Internet bookmarks that allow users of such a service to collect links and news stories. These are included on our website only as a link to the corresponding services. After clicking on the embedded graphic, you will be redirected to the page of the respective provider, i.e. only then will user information be transmitted to the respective provider. For information on how your personal data is handled when using these websites, please refer to the respective provider's privacy policy.

 

11 Data transfer

As a matter of principle, your personal data will not be transferred to third parties unless we are required to do so by law, or the transfer of data is necessary for the performance of the contractual relationship, or you have previously given your explicit consent to the transfer of your data.

 

Our websites are hosted by external service providers. These provide the necessary infrastructure and computing power, storage space and database services, security services and maintenance services. We use these services for the purpose of efficient and secure operation of our websites.

 

In doing so, we or our hosting providers only process the data required for the service, namely usage data, content data, meta and communication data, but also inventory data, contact data and contract data of users and customers of our websites. This data processing is based on our legitimate interest in providing our websites efficiently and securely. The legal basis for this is Art. 6 para. 1 p. 1 lit. f GDPR.

 

Other external service providers and partner companies, such as IT service providers, receive your data also only to the extent necessary. However, the scope of the transmitted data is limited to the necessary minimum. Insofar as our service providers process your personal data on our behalf, we ensure within the scope of commissioned processing pursuant to Art. 28 GDPR that they comply with the provisions of the data protection laws in the same manner. Please also refer to the data protection notices of the respective providers.

 

We attach importance to processing your data within the EU / EEA. However, it may happen that we use service providers who process data outside the EU / EEA. In these cases, we ensure that an appropriate level of data protection comparable to the standards within the EU is established at the recipient before transferring your personal data. This can be achieved, for example, via EU standard contractual clauses or Binding Corporate Rules or special agreements to whose regulations the company may be subject.

 

The respective service provider is responsible for the content of third-party services, whereby we check the services for compliance with legal requirements within the scope of reasonableness.

 

12 Applications

You can apply to our company electronically, i.e. via email. Please note that emails sent unencrypted will not be protected against unauthorized access.

 

Your data will be used for processing your application and deciding on the establishment of an employment relationship. The legal basis is Section 26 para. 1 in conjunction with para. 8 p. 2 BDSG. Furthermore, your personal data may be processed insofar as this should be necessary for the defense of asserted legal claims against us arising from the application process. The legal basis for this is Art. 6 para. 1 p. 1 lit. f GDPR. The stated purposes also constitute the legitimate interest in the processing.

 

Insofar as an employment relationship arises between you and us, we may, in accordance with Section 26 para. 1 BDSG, further process the personal data already received from you for the purposes of the employment relationship if this is necessary for the performance or termination of the employment relationship or for the exercise or fulfilment of the rights and obligations of the representation of employees' interests resulting from a law or a collective agreement, a works agreement or a service agreement (collective agreement).

 

Your application data will not be processed beyond the described use.

 

Your personal data will be deleted after completion of the application process after 6 months at the latest, provided that no other legitimate interests on our part oppose deletion or you have not given us your consent for longer storage. Other legitimate interests in this sense include, for example, a duty to provide evidence in proceedings under the German General Equal Treatment Act (AGG).

 

13 Data security

We have taken extensive technical and operational precautions to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security procedures are regularly reviewed and adapted to technological progress.

 

Effective April 2023