Privacy statement

Privacy Statement

We are very pleased about your interest in our company. Data protection is of high importance for the management of the GSD Verpackungen Gerhard Schürholz GmbH. A use of the websites of the GSD Verpackungen Gerhard Schürholz GmbH is generally possible without stating any personal data. Insofar as a data subject intends to use specific services of our company via the website, a processing of personal data may be required. If the processing of personal data is required and if no legal basis exists for such a processing, we will generally obtain the consent of the data subject.

The processing of personal data, such as name, address, email address or phone number of a data subject will always be in accordance with the General Data Protection Regulation (GDPR) and in accordance with the country-specific data protection regulations applicable to the GSD Verpackungen Gerhard Schürholz GmbH. This privacy statement is used by our company to inform the public about the nature, scope and purpose of the personal data collected, used and processed by our company. Furthermore, the data subject will be informed by way of this privacy statement about their respective rights.

The GSD Verpackungen Gerhard Schürholz GmbH has implemented – acting as the controller responsible for the processing – various different technical and organizational measures to ensure a protection of the personal data processed via this website as completely as possible. Nevertheless, web-based data transfer may generally have security loopholes, so that an absolute protection cannot be guaranteed. For this reason each data subject will be free to submit to us personal data in other ways, such as by phone for example.

1. Definition of terms

The privacy statement of the GSD Verpackungen Gerhard Schürholz GmbH is based on the terminology used by the European Authorities for Directives and Regulations when enacting the General Data Protection Regulation (GDPR). Our privacy statement shall be easily readable and understandable by the public as well as by our customers and business partners. In order to ensure this, we would like to explain before the terms used.

We use the following terms, inter alia, in this privacy statement:

• a) Personal data
  „Personal data“ means any information relating to an identified or identifiable natural person (hereinafter called „Data Subject“). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
• b) Data subject
  „Data Subject“ is each identified or identifiable natural person, whose personal data are processed by the controller.
• c) Processing
  „Processing“ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
• d) Restriction of processing
  „Restriction of processing“ means the marking of stored personal data with the aim of limiting their processing in the future.
• e) Profiling
  „Profiling“ means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
• f) Pseudonymisation
  „Pseudonymisation“ means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
• g) Controller or controller for the processing
  „Controller or controller for the processing“ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
• h) Processor
  „Processor’ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
• i) Recipient
  „Recipient“ means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive Personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients.
• j) Third party
  „Third party“ means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
• k) Consent
  „Consent“ of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

2. Name and address of controller for processing

Controller in accordance with the General Data Protection Regulation, with other data protection laws valid in the Member States of the European Union and with other regulations of a data protection nature is the:

GSD Verpackungen Gerhard Schürholz GmbH
Bahnhofstraße 19
57489 Drolshagen
Germany
Phone: ++49 276197440
E-Mail: info@gsd-verpackungen.de
Website: www.gsd-verpackungen.de/english

3. Name and address of data protection officer

The data protection officer of the controller is:

VIA Consult GmbH & Co. KG
Frau Dr. Hanni Koch
Martinstraße 25
57462 Olpe
Germany

Phone: +49 (2761) 83668-0
E-Mail: gsd.datenschutz@via-consult.de
Website: www.via-consult.de

In case of any questions and suggestions with respect to data protection, each data subject may directly contact our data protection officer.

4. Cookies

The websites of the GSD Verpackungen Gerhard Schürholz GmbH use cookies. Cookies are text files, which are filed and stored via an internet browser on a computer system.

Many websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is an unambiguous identification of the cookies. It consists of a string, by which websites and servers can be assigned to the concrete internet browser, in which the cookie was stored. This enables the websites and servers visited to distinguish the individual browser of the data subject from other internet browsers containing other cookies. A specific internet browser can be recognized again and identified via the unambiguous cookie ID.

The use of cookies enables the GSD Verpackungen Gerhard Schürholz GmbH to provide our website user-friendly, which would be impossible without setting the cookie.

A cookie is used to optimize the information and offers on our website in accordance with the requirements of the user. Cookies enable us, as mentioned above, to recognize the user of our website. The purpose of this recognition is a facilitation of the use of our website for the user. The user of a website using cookies will not be required, for example, to again enter his/her access data with each visit of the website, because this will be made by the website and by the cookie filed on the computer system of the user. A further example is the cookie of a shopping basket in an online shop. The online shop will note the article, which has been placed by a customer into the virtual shopping basket via a cookie.

The data subject can prevent at any time the setting of a cookie through our website by means of a respective setting of the internet browser used and can thus permanently object to the setting of cookies. Furthermore, any cookies already set can be deleted at any time via an internet browser or another software program. This is possible in all commonly used internet browsers. If the data subject will deactivate the setting of cookies in the internet browser used, it might be possible that not all of the functions of our website will be fully usable.

5. Collection of general data and information

The website of the GSD Verpackungen Gerhard Schürholz GmbH will collect a number of general data and information with each call of the website through a data subject or an automated system. These general data and information will be stored in the logfiles of the server. The following data and information may be collected: (1) the browser types and versions used, (2) the operating system of the accessing system, (3) the website, from which an accessing system has access to our website (so-called referrer), (4) the sub-sites, which will be called from our website via an accessing system, (5) the date and time of the access onto the website, (6) an Internet Protocol Address (IP Address), (7) the internet service provider of the accessing system and (8) other similar data and information designed as an emergency response in case of attacks onto our information technology systems.

When using these general data and information, the GSD Verpackungen Gerhard Schürholz GmbH will not draw any conclusion on the data subject. This information is rather required (1) to correctly deliver the contents of our website, (2) to optimize the contents of our website as well as the advertising for the website, (3) to ensure the permanent functioning of our information technology systems and of the engineering of our website, (4) to provide the information to law enforcement agencies required for prosecution in case of cyber attacks. These anonymously collected data and information will be analysed by the GSD Verpackungen Gerhard Schürholz GmbH, on the one hand, for statistical purposes and, on the other hand, to increase data protection and data security in our company, in order to finally ensure an optimum protection level with respect to the personal data processed by us. The anonymous data of the server logfiles will be stored separately from all personal data stated by a data subject.

6. Contact options via our website

The website of the GSD Verpackungen Gerhard Schürholz GmbH contains data due to statutory regulations enabling a fast electronic contacting of our company as well as a direct communication with us, which also covers a general address of the so-called electronic post (email address). Where a data subject will contact the controller responsible for processing via email or via a contact form, the personal data submitted by the data subject will be automatically stored. Those personal data submitted by the data subject on a voluntary basis to the controller responsible for the processing will be stored for the purpose of processing or contacting with respect to the data subject. These personal data will not be passed on to third parties.

7. Routine erasure and blocking of personal data

The controller will process and store the personal data of the data subject only for the period of time, which is necessary to achieve the purpose of such storage or insofar as this is provided for in laws or regulations of the European Legislators and Regulators or of a another legislator, to which the controller is subject.

If the purpose for storage will lapse or if a period of storage defined by the European Legislators and Regulators or by another competent legislator will expire, the personal data will be erased or blocked as a routine measure and in accordance with statutory regulations.

8. Rights of Data Subject

• a) Right of information
  Each data subject has the right granted by the European Legislators and Regulators to obtain from the controller a cost-free information about the personal data stored with respect to his/her person and to obtain a copy of this information. Furthermore, the European Legislators and Regulators have granted to the data subject the right to be informed about the following data:
  • the purposes of the processing
  • the categories of personal data processed
  • the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations
  • where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period
  • the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing
  • the right to lodge a complaint with a supervisory authority
  • where the personal data are not collected from the data subject: any available information as to their source
  • the existence of automated decision-making, including profiling, referred to in Article 22, paras. 1 and 4 GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject

  In addition, the data subject has the right of information, whether personal data have been transmitted to a third country or to an international organization. Insofar as this is the case, the data subject also has the right to obtain information about the suitable guarantees in connection with the transmission.

  If a data subject intends to exercise this right of information, he/she may contact an employee of the controller responsible for the processing at any time for this purpose.

• b) Right to correction
  Each data subject, of which personal data are processed, has the right granted by the European Legislators and Regulators to request the immediate correction of incorrect personal data referring to him/her. Furthermore, the data subject has the right to have incomplete personal data completed – also by means of a supplemental statement – taking into account the purposes of the processing.
  If a data subject intends to exercise this right to correction, he/she may contact an employee of the controller responsible for the processing at any time for this purpose.
• c) Right to erasure („Right to be forgotten“)
  Each data subject, of which personal data are processed, has the right granted by the European Legislators and Regulators to request from the controller, that the personal data referring to him/her shall be immediately erased, if one of the following reasons will apply and insofar as the processing is not required:
  • the personal data had been collected or had been processed otherwise for those purposes, for which such data will not be necessary anymore.
  • he data subject withdraws consent on which the processing is based according to Article 6, para. 1, lit. a GDPR or Art. 9, para. 2, lit. a GDPR and where there is no other legal ground for the processing.
  • the data subject objects to the processing pursuant to Art. 21, para. 1 GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Art. 21, para. 2 GDPR.
  • the personal data have been unlawfully processed.
  • the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
  • the personal data have been collected in relation to the offer of information society services referred to in Article 8, para. 1 GDPR.

  If any of the above reasons applies and if a data subject intends to have the personal data stored at the GSD Verpackungen Gerhard Schürholz GmbH erased, the data subject can contact an employee of the controller at any time. The employee of the GSD Verpackungen Gerhard Schürholz GmbH will initiate that the request for erasure will be fulfilled without delay.

  If the GSD Verpackungen Gerhard Schürholz GmbH has made the personal data public and if our company is obliged to the erasure of the personal data as controller pursuant to Art. 17, para. 1 GDPR, the GSD Verpackungen Gerhard Schürholz GmbH will take adequate measures – taking into account the technology available and the costs of implementation, also of a technical nature – to inform others responsible for the data processing of the published personal data, that the data subject has requested from these other controllers the erasure of any links to such personal data or of copies or replications of such personal data, insofar as the processing is not required. The employee of the GSD Verpackungen Gerhard Schürholz GmbH will arrange for the required measures in the individual case.

• d) Right to restriction of processing
  Each data subject, of which personal data are processed, has the right granted by the European Legislators and Regulators to request from the controller the restriction of processing, if any of the following conditions is met:
  • The accuracy of the personal data is contested by the data subject, namely for a period enabling the controller to verify the accuracy of the personal data.
  • The processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead.
  • The controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims.
  • The data subject has objected to processing pursuant to Art. 21, para. 1 GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject.

  If any of the above conditions is met and if a data subject intends to request the restriction of personal data stored at the GSD Verpackungen Gerhard Schürholz GmbH, the data subject may contact an employee of the controller at any time. The employee of the GSD Verpackungen Gerhard Schürholz GmbH will arrange for the restriction of the processing.

• e) Right to data portability
  Each data subject, of which personal data are processed, has the right granted by the European Legislators and Regulators to receive the personal data referring to him/her, which the data subject has made available to the controller, in a structured, commonly used and machine-readable format. The data subject also has the right to transfer such data to another controller without hindrance from the controller, to which the personal data have been provided, where the processing is based on consent pursuant to Art. 6, para. 1, lit. a GDPR or Art. 9, para. 2, lit. a GDPR or is based on a contract pursuant to Art. 6, para. 1, lit. b GDPR and if the processing is carried out by automated means, unless such processing will be required to perform a task in the public interest or in exercising public authority vested in the controller. Furthermore, the data subject has the right when exercising his/her right to data portability according to Art. 20, para. 1 GDPR to enforce that the personal data will be directly transferred from one controller to another controller, insofar as this is technical feasible and unless the rights and freedoms of other persons will be affected. In order to enforce the right to data portability, the data subject may contact an employee of the GSD Verpackungen Gerhard Schürholz GmbH at any time.
• f) Right to object
  Each data subject, of which personal data are processed, has the right granted by the European Legislators and Regulators to object to the processing of the personal data referring to the data subject on grounds relating to the particular situation of the data subject carried out on the basis of Art. 6, para. 1, lit. e or f GDPR, including profiling based on those provisions. The GSD Verpackungen Gerhard Schürholz GmbH shall no longer process the personal data in case of an objection, unless we will be able to demonstrate compelling legitimate grounds for the processing overriding the interests, rights and freedoms of the data subject or the processing is used for the establishment, exercise or defence of legal claims. If the GSD Verpackungen Gerhard Schürholz GmbH processes personal data for direct marking purposes, the data subject will have the right to object at any time to the processing of personal data for the purpose of direct marketing, which includes profiling, to the extent that it is related to such direct marketing. If the data subject will object towards the GSD Verpackungen Gerhard Schürholz GmbH to the processing for the purpose of direct marketing, the GSD Verpackungen Gerhard Schürholz GmbH shall no longer process the personal data for such purposes.Where personal data are processed at the GSD Verpackungen Gerhard Schürholz GmbH for scientific or historical research purposes or statistical purposes pursuant to Art. 89, para. 1 GDPR, the data subject, on grounds relating to his/her particular situation, will have the right to object to the processing of the personal data referring to him/her, unless such a processing is necessary for the performance of a task carried out for reasons of public interest.In order to exercise the right to object, the data subject may directly contact any employee of the GSD Verpackungen Gerhard Schürholz GmbH. Furthermore, the data subject will be free to exercise the right to object to the use of information society services, notwithstanding the Directive 2002/58/EC, by way of automated processes, for which technical specifications are used.
• g) Automated individual decision-making, including profiling
  Each data subject, of which personal data are processed, has the right granted by the European Legislators and Regulators not to be subjected to a decision solely based on automated processing, including profiling, which produces legal effects concerning or significantly affects the data subject, insofar as the decision (1) is not necessary for entering into or for the performance of a contract between the data subject and the controller, (2) is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the rights, freedoms and legitimate interests of the data subject or (3) is based on the explicit consent of the data subject. If the decision (1) is necessary for the conclusion or the fulfilment of a contract between the data subject and the controller or (2) is made upon the explicit consent of the data subject, the GSD Verpackungen Gerhard Schürholz GmbH will take adequate measures to safeguard the rights and freedoms and legitimate interests of the data subject, including at least the right to obtain human intervention on the part of the controller to express his or her point of view and to contest the decision. If the data subject intends to exercise his/her rights with respect to automated decisions, the data subject may contact an employee of the controller at any time for that purpose.
• h) Right to revoke a data protection consent
  Each data subject, of which personal data are processed, has the right granted by the European Legislators and Regulators to revoke the consent for the processing of personal data. If the Data subject intends to exercise his/her right to revoke a consent, the data subject may contact an employee of the controller at any time.

9. Data protection for job applications and during job application procedure

The controller collects and processes the personal data of applicants for the purpose of handling the application procedure. The processing may be done by electronic means. This, in particular, the case if an applicant has submitted to the controller the relevant application documents by electronic means, e.g. by email or via a web form available on the website. If the controller will conclude an employment contract with an applicant, the data submitted for the purpose of the processing of the employment will be stored taking into account the applicable statutory regulations. If the controller will not conclude an employment contract with the applicant, the application documents will be automatically deleted two months after the notification of the cancellation, unless no other legitimate interest of the controller will be in contradiction thereto. Another legitimate interest would be, inter alia, an obligation of providing evidence in proceedings in accordance with the AGG (German Act of Equal Treatment).

10. Data protection regulations on the use and application of Google Analytics (with anonymization function)

The controller has integrated on its website the component Google Analytics (with anonymization function). Google Analytics is a web analysis service. Web analysis is the collection, compiling and analysis of data on the behaviour of users of websites. A web analysis service collects data, inter alia, from which website a data subject had accessed a website (so-called Referrer), which sub-sites of the website have been accessed or how frequently and for which period of time a sub-site had been looked at. A web analysis is mainly used to optimize a website and for the cost-benefit analysis of internet advertising.

The company operating the Google Analytic component is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. The operating body is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Irland.

The controller uses the supplement „_gat._anonymizeIp“ for the web analysis via Google Analytics. When using the supplement, the IP address of the internet connection of the data subject will be cut and anonymized, if the access is effected to our website from a Member State of the European Union or from another State as a member of the Treaty on the European Economic Area.

The purpose of the Google Analytics component is the analysis of the user flows on our website. Google uses, inter alia, the data and information collected to analyse the use of our website, to compile for us online reports showing the activities on our website and to render additional services in connection with the use of our website.

Google Analytics will set a cookie on the information technology system of the data subject. We have already explained above the nature of cookies. The setting of a cookie will enable Google to carry out an analysis of the use of our website. Any time the individual pages of this website are called, which is operated by the controller and on which a Google Analytics component had been integrated, the internet browser on the information technology system of the data subject will be automatically instructed by the Google Analytics component to transfer data for the purpose of an online analysis to Google. Within the scope of this technical procedure, Google will obtain knowledge about personal data, such as the IP address of the data subject, which will allow to Google, inter alia, to trace the origin of the users and clicks and to enable the subsequent commission settlements.

The cookies are used to store personal data and information, for example access time, place, from which the website has been accessed and the frequency of the visits of our website by the data subject. With each visit of our website, these personal data, including the IP address of the internet connection used by the data subject, will be transmitted to Google in the United States of America. These personal data will be stored by Google in the United States of America. Under certain circumstances, Google will pass on these personal data collected via technical procedures to third parties.

The data subject may, as explained above, prevent the setting of cookies through our website at any time by way of a relevant setting of the internet browser used and may thus permanently object to the setting of cookies. Such a setting of the internet browser used would also prevent, that Google would set a cookie onto the information technology system of the data subject. In addition, any cookie already set by Google Analytics can be deleted at any time via the internet browser or another software program.

In addition, the data subject has the option to object to a collection of the data generated by Google Analytics with respect to the use of this website as well as to the processing of such data through Google and to prevent such processing. For this purpose, the data subject has to download and install a browser add-on under the link https://tools.google.com/dlpage/gaoptout . This browser add-on will inform Google Analytics via Java Script, that it is not allowed to transmit data and information to Google Analytics with respect to the visits of websites. The installation of the browser add-on is regarded by Google as an objection. If the information technology system of the data subject will be deleted, formatted or newly installed at a later date, the data subject has to install the browser add-ons again to deactivate Google Analytics. Insofar as the browser add-on will be deinstalled or deactivated by the data subject or by another person attributed to the sphere of influence of the data subject, it is possible to newly install or activate the browser add-ons.

Further information and the valid data protection regulations of Google can be called under https://www.google.de/intl/de/policies/privacy/ and under http://www.google.com/analytics/terms/de.html . Google Analytics will be explained in detail under this link https://www.google.com/intl/de_de/analytics/ .

You will be able to prevent the collection of your data through Google Analytics by clicking onto the following link. This way, an Opt-Out cookie will be set preventing the collection of your data with respect to any future visits of this website:

Deactivate Google Analytics

11. Data protection regulations on the use and application of YouTube

The controller has integrated on its website components of YouTube. YouTube is an internet video portal enabling video publishers the cost-free posting of video clips and the cost-free viewing, evaluation and commenting of such video clips through others. YouTube allows the publishing of all kinds of videos, thus complete movies and televisions broadcasts as well as music videos, trailers or videos generated by users themselves can be called via the internet portal.

The company operating YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube LLC is a daughter company of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. The operating body is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Irland.

With each call of one of the individual pages of this website, which is operated by the controller and on which a YouTube component (YouTube video) had been integrated, the internet browser of the information technology system of the data subject will be automatically instructed by the respective YouTube component to download a representation of the respective YouTube component from YouTube. Further information on YouTube can be obtained under https://www.youtube.com/yt/about/de/ . Within the scope of this technical procedure, YouTube and Google will be informed, which concrete sub-site of our website is visited by the data subject.

Insofar as the data subject is logged in with YouTube at the same time, YouTube will identify, which concrete sub-site of our website is visited by the data subject, namely as soon as the sub-site is called containing a YouTube video. These data are collected by YouTube and Google and will be assigned to the respective YouTube account of the data subject.

YouTube and Google will receive an information via the YouTube component any time the data subject will visit our website, if the data subject will be logged in with YouTube at the same time as calling our website; this will happen irrespective of whether the data subject will click onto a YouTube video or not. If the data subject does not want such a transmission of this information to YouTube and Google, the data subject will be able to prevent this by way of logging out of his/her YouTube account before calling our website.

The privacy statement published by YouTube, which can be called under https://www.google.de/intl/de/policies/privacy/ , explain in detail the collection, processing and use of personal data through YouTube and Google.

12. Legal basis of processing

Art. 6 I lit. a GDPR is used by our company as the legal basis for processing procedures, for which we obtain a consent for a specific purpose of processing. If the processing of personal data is required to fulfil a contract, where the data subject is a party to the contract, such as for processing procedures required for the delivery of goods or the rendering of another performance or counter-performance, such processing will be based on Art. 6 I lit. b GDPR. The same is applicable for those processing procedures required to perform pre-contractual measures, such as in case of inquiries for our products or services. If our company is subject to a legal obligation requiring the processing of personal data, such as for the fulfilment of tax obligations, the processing will be based on Art. 6 I lit. c GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or of another natural person. This would be the case, for example, if a visitor would be injured on our premises and if – as a consequence – name, age, health insurance data or other vitally important information would have to be submitted to a doctor, a hospital or other third parties. In such a case, the processing would be based on Art. 6 I lit. d GDPR.
Finally, processing procedures may be based on Art. 6 I lit. f GDPR. Any processing procedures not covered by any of the legal bases mentioned above would be performed on that legal basis, if the processing will be required to protect a legitimate interest of our company or of a third party, unless the interests, basic rights and basic freedoms of the data subject will override such interest. Such processing procedures are, in particular, allowed to us, because these have been particularly mentioned by the European Legislator. The legislator has expressed the opinion, that a legitimate interest could be assumed, if the data subject is a customer of the controller (Recital 47, sent. 2 GDPR).

13. Legitimate interests in the processing pursued by controller or by a third party

If the processing of personal data is based on Art. 6 I lit. f GDPR, our legitimate interest is the performance of our business activities to the benefit of the well-being of all of our employees and our shareholders.

14. Duration of retention of personal data

The criterion for the duration of the retention of personal data is the relevant statutory period of retention. Upon the expiration of the period, the respective data will be routinely deleted, unless such data are required for the contract fulfilment or contract initiation.

15. Statutory or contractual regulations for the provision of personal data; requirement for the contract conclusion; obligation of the data subject to provide personal data; possible consequences of failure to provide data

We would like to advise you, that the provision of personal data is sometimes obligatory (e.g. tax regulations) or may result from contractual provisions (e.g. data on contractual partner). In some cases, it may be necessary to conclude a contract, that a data subject will provide to us personal data, which have to be subsequently processed by us. The data subject is, for example, obliged to provide personal data to us, if our company is going to conclude a contract with such data subject. The failure to provide personal data would have the consequence, that it would not be possible to conclude the contract with the data subject. Before providing personal data through the data subject, the data subject shall contact one of our employees. Our employee will advise the data subject in the individual case, whether the provision of personal data is required by law or under the contract or required for the conclusion of the contract, whether an obligation exists to provide the personal data and which consequences the failure to provide the personal data would have

16. Existence of an automated decision-making

As a responsible company, we refrain from an automatic decision-making or a profiling.

17. SSL encryption

This website uses an SSL encryption in order to secure and protect the transmission of confidential contents, such as inquiries addressed to us as the operator of the website. You will recognize an encrypted connection, because the address line of the browser will change from http:// to https:// and a lock symbol will be shown in your browser line.

If the SSL encryption is activated, the data transmitted by you to us cannot be read by third parties.

18. Server logfiles

The provider of the websites automatically collects and stores data in so-called server logfiles automatically transferred to us by your browser. These data are:

• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing processor
• Time of the server request

These data cannot be assigned to specific persons. These data will not be merged with other data sources. We reserve the right to subsequently check these data in case of concrete indications for an illegal use.

19. Google Maps

This website uses the product Google Maps of Google Inc. When using this website, you herewith agree to the collection, editing as well as use of the data automatically collected through Google Inc, through their representatives and third parties.
The terms of use of Google Maps are stated under “Terms of Use of Google Maps” .

The company operating the Google Maps component is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. The operating body is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Irland.

This privacy statement has been generated by the privacy statement generator of the DGD Deutsche Gesellschaft für Datenschutz GmbH and has been subsequently individualized.

20. Online Presence in Social Media

We provide online presences in social media, in order to be able to communicate with and inform interested persons and users about us. The data of users may be processed in this case through the service provider outside the territory of the European Union. This may result in risks for the users, because this may cause difficulties in the enforcement of rights of the users, for example.

In general, the data of the users may be processed by the service provider for market research and advertising. This way, the interests of users resulting from the usage behaviour, for example, may be used to place advertisements inside and outside the platforms, which may match the interests of the users. For this purpose, cookies will mainly be stored on the computers of the users. In addition, also data may be stored in the usage profiles irrespective of the equipment used (in particular, if the users are members of the relevant platforms and are logged in).

We inform you in the following section about our processing of your Personal Data within the scope of the online presences provided by us. The European Court of Justice has confirmed the joint responsibility of the service provider and the website operator in its judgement of June 5, 2018.The social media website visited by you offers to you the opportunity to react to our articles, to post comments, to provide an own user post and to submit to us private messages with your personal concern. The data stated by you in this connection and possibly accessible by us (e.g. user name, photos, possibly interests, contact data) will be exclusively used by us for the purposes of customer and interest communication. Our interest is to offer a platform to you, on which we display updated information and which you can use to address your concern towards us enabling us to comply with your concern as fast as possible.

GSD Verpackungen uses photos and videos for marketing purposes on social media platforms. Any Personal Data contained therein will only be processed upon the consent of the Data Subject. The legal basis for the processing of the data recorded is Art. 6, Sect. 1 lit. a DSGVO (Data Protection Regulation). Data Subjects will have the opportunity at any time to have their stored Personal Data deleted. The Data Subject will get the information at any time about the Personal Data stored about him/her. The data will be deleted as soon as these are not required anymore to achieve the purpose of their collection or if the consent will be revoked.

We do not additionally process any data by way of the website except for the basic functions. Please note that the service provider Tracking may use tools as well as cookies irrespective of the use of the website through us. We would like to point out to the information of the following linked providers for a detailed description of the respective processing and of the opt-out options.

Also in the case of inquiries for information and with respect to the enforcement of usage rights, we would like to point out that this is most effectively towards the providers. Only the providers have access to the data of the user and can directly take the relevant measures and supply information. If you will still require assistance, you may, of course, contact us.

• Facebook (Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland): Privacy Statement, Opt-Out, Privacy Shield.
• Google / YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA): Privacy Statement, Opt-Out, Privacy Shield.
• Instagram (Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland): Privacy Statement / Opt-Out.

The criterion for the duration of the storage of Personal Data is the respective statutory retention period. Upon the expiration of that period, the relevant data will be routinely deleted, insofar as such data will not be required for the performance of the contract anymore.

Your data stored within the course of using our online presences will be deleted – as far as this is possible for us – when ceasing to operate the website.