Data protection declaration


§ 1 Information about the collection of personal data

(1) In the following, we inform you about the collection of personal data that is carried out during the use of our website and its sub-domains. Personal data include all information that can be related to you personally, such as, for instance, your name or address. The data that we collect from you can include: your name, postal address, telephone number, e-mail address, default contact settings, marketing settings, information about social media accounts and possibly your IP address. This declaration will explain to you which data are collected by what type of use of our services.
(2) In conformity with Art. 4 Par. 7 of the European General Data Protection Regulation (GDPR), the responsible party is:
VF-Verpackungen GmbH
Gewerbepark 9
D-87477 Sulzberg, Germany
(3) Our Data Protection Officer can be reached under the e-mail address datenschutz@vf-verpackungen.de.
(4) When you take up contact with us by e-mail or a via a contact form, we store the data that are provided by you (your e-mail address, possibly your name and your telephone number), so as to be able to answer your questions.
The stored data that are registered in this connection are deleted by us, or their processing is limited, whenever they are no longer required. More detailed information on this is contained in the following statements.
(5) If, for individual functions of our offer, it should be necessary to fall back on contractual service providers, or if we would like to use your data for promotional purposes, then we will inform you in detail about the corresponding procedures, as explained below. In this regard, we will also state the criteria defined for the storage duration.

§ 2 Your rights
(1) You have the following rights with us with regard to personal data concerning you:
Right to disclosure;
Right to correction or deletion;
Right to a limitation of processing;
Right of appeal against such processing;
Right to data portability.
(2) You furthermore have the right to complain with a corresponding supervisory data protection authority about the processing of your personal data by us.
(3) These rights are defined as follows:

Right to disclosure
From the responsible party, you can demand information about whether personal data concerning you are being processed by us. If such processing does occur, then you can demand the following information from the responsible party:
– the purposes for which such personal data are being processed;
– the categories of personal data which are being processed;
– the recipients or the categories of recipients to whom the personal data concerning you were disclosed or will be disclosed;
– the planned duration of the storage of the personal data concerning you, or, if concrete information is not possible in this regard, the criteria for the determination of the storage period;
– the existence of a right to correct or delete the personal data concerning you, a right to the limitation of processing of such data by the responsible party, or a right of objection to such processing;
– the existence of a right to complain to a supervising authority;
– all available information about the origin of such data, whenever such personal data have not been collected from the corresponding person;
– the existence of an automated decision-making process, including profiling, according to Art. 22 Par. 1 and 4 of (DSGVO) GDPR and – at a minimum for such cases – meaningful information about the involved logic and scope, as well as the intended effects of such processing for the person concerned.
You have the right to demand information as to whether the personal data concerning you are transmitted to a third country or to an international organization. In this context, you can demand to be informed about suitable guarantees regarding such a transmission in conformity with Art. 46 of GDPR.

Right of correction
To the extent that the processed personal data concerning you are incorrect or incomplete, you have the right to demand a correction and/or completion from the responsible party. The responsible party must carry out such a correction immediately.

Right to the limitation of processing
You can demand a limitation of the processing of the personal data concerning you, under the following preconditions:
– Whenever you dispute the correctness of the personal data concerning you for a specified period that makes it possible for the responsible party to examine the correctness of the personal data;
– Whenever such processing is illegal and you refuse to have such personal data deleted and, instead, demand the limitation of the use of such personal data;
– Whenever the responsible party no longer needs such personal data for processing, but you need such personal data for the establishment, exercise or defence of legal claims; or
– When you have lodged an objection to such processing, in conformity with Art. 21 Par. 1 of GSDVO (GDPR), and when it is still uncertain whether the justified reasons of the responsible party outweigh your reasons.
If the processing of the personal data concerning you has been restricted, then, with the exception of its storage, such data may only be used with your agreement or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural person or legal entity, or they may be processed for important reasons of public interest of the European Union or one of its member states.
If the limitation of processing was restricted based on one of the above-mentioned preconditions, then you will be informed by the responsible party before the limitation is repealed.

Right to deletion
Deletion obligation – You can demand from the responsible party that the personal data concerning you are deleted immediately, whereby the responsible party has the obligation to immediately delete such data, if one of the following reasons obtains:
– The personal data concerning you are no longer required for those purposes for which they were registered or had been processed in some other way.
– You retract your agreement on which such processing in conformity with Art. 6 Par. 1 lit. a or Art. 9 Par. 2 lit. a of GSDVO (GDPR) was based, and another legal basis for such processing is missing.
– In conformity with Art. 21 Par. 1 of GSDVO (GDPR), you file an objection against such processing, whereby no overriding and justified reasons for such processing obtain or, in conformity with Art. 21 Par. 2 of GSDVO (GDPR), you file an objection against such processing.
– The personal data concerning you were processed unlawfully.
– The deletion of the personal data concerning you is required for the fulfilment of a legal obligation in conformity with the laws of the European Union or the legislation of the member states to which the responsible party is subjected.
– The personal data concerning you were collected on the basis of the offered services of the information society, in conformity with Art. 8 Par. 1 of GSDVO (GDPR).

Information to third parties
If the responsible party has publicized the personal data concerning you and if it is obliged to delete these according to Art. 17 Par. 1 of GSDVO (GDPR), then it will take measures, also of a technical nature, that are suitable in consideration of the available technology and the cost of implementation, to inform the persons responsible for the processing of such personal data that you, the person concerned, have demanded the deletion of all links to such personal data, or of copies or replications of such personal data.

Exceptions to the right of deletion
The right of deletion does not obtain, to the extent that processing is required:
– for the exercise of the right of freedom of expression and information;
– for the fulfilment of a legal obligation that requires such processing according to the laws of the European Union or the member states to which the responsible party is subject, or for the performance of a task that has been assigned to the responsible party and that liesis in the public interest or is carried out to exercise official authority;
– for reasons of the public interest in the area of public health in conformity with Art. 9 Par. 2 lit. h and i as well as Art. 9 Par. 3 of GSDVO (GDPR);
– for archiving purposes that are in the public interest, for scientific or historical research purposes, or for statistical purposes in conformity with Art. 89 Par. 1 of GSDVO (GDPR), to the extent that the right mentioned under section a) would probably make the realization of the goals of such processing impossible or seriously impair these; or
– for the establishment, exercise or defence of legal entitlements.

Right of information
If you have exercised the right for correction, deletion or limitation of processing with regard to the responsible party, then it is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this correction or deletion of the data, or of the limitation of processing, unless this turns out to be impossible or is connected with a disproportional expenditure. You have the right to be informed by the responsible party about these recipients.

Right to data portability
You have the right to receive in a structured, common and machine-readable format the personal data concerning you that you have provided to the responsible party. Furthermore you have the right to transmit these data to a different responsible party, without any hindrance by the responsible party to which these personal data were provided, provided that:
– the processing is based on an agreement in conformity with Art. 6 Par. 1 lit. a of GSDVO (GDPR) or Art. 9 Par. 2 lit. a of GDPR, or it is based on a contract in conformity with Art. 6 Par. 1 lit. b of GSDVO (GDPR); and
– the processing is carried out with the help of automated procedures.
In exercising this right, you furthermore have the right to effect that the personal data concerning you are directly transmitted from one responsible party to a different responsible party, to the extent that this is technically possible. Liberties and rights of other persons may not be impaired by this.
The right to data portability is not valid for a processing of personal data that are required for the exercise of a task that had been assigned to the responsible party and that lies in the public interest or that is carried out in exercising official authority.

Right of objection
At all times, you have the right to object, for reasons that are due to your special situation, against the processing of the personal data concerning you that is carried out on the basis of Art. 6 Par. 1 lit. e or f of GSDVO (GDPR); this is also applicable to profiling that is based on these provisions.
The responsible party will no longer process the personal data concerning to you, unless it can substantiate compelling and legitimate grounds for such processing which takes precedence on your interests, rights and liberties, or unless such a processing serves the claim, exercise or defence of legal entitlements.
If the personal data concerning you are processed for the purpose of direct advertising, then you at all times have the right to enter an objection against such processing of the personal data concerning you for such purposes; this is also valid for profiling, to the extent that it is connected to such direct advertising.
If you object to such processing for the purposes of direct advertising, then the personal data concerning you will no longer be processed for these purposes. In connection with the use of the services of the information society, and notwithstanding the European Directive 2002/58/EC, you may exercise your right of objection by means of automated processes in which technical specifications are utilized.

Right to withdraw a data protection agreement declaration
You have the right to retract your agreement declaration concerning data protection at any time. Due to such a retraction of your agreement, the legality of the processing that was carried out on the basis of your agreement is not affected, up to the time of retraction.

§ 3 Collection of personal data during a visit to our website
(1) If you use our website only for information, namely if you do not register on our website or transmit other information to us, then we only register the personal data that your browser sends to our server.
If you would like to look at our website, then we collect the following data, which are technically required for displaying our website and which ensure the stability and security (the legal basis is Art. 6 Par. 1, S. 1 lit. f of GSDVO (GDPR)):
– IP address
– Date and time of the request
– Time zone difference to Greenwich Mean Time (GMT)
– Content of the request (specific page)
– Access status/HTTP status code
– Data volume transmitted in each instance
– Website from which the request is made
– Browser
– Operating system and user interface
– Language and the version of the browser software.
(2) The legal basis for this is Art. 6 Par. 1 f) of GSDVO (GDPR).

§ 4 Cookies and web beacons
The websites, advertising, e-mails and online services make use of certain technologies for automated data collection, such as for instance cookies or web beacons. With these we collect data, including personal data, about you, while you are using our website or our products, or while you are interacting with us.
The collected user data help us to understand the behaviour of our users, and they show us what they are searching for on the Internet. In addition, they permit us to read out which of our websites have been visited by the users. We use cookies on our website, for the purpose of differentiating you from other users of our website and for offering you a good user experience while navigating on our website. In addition, they provide us with indications for improvements of our website. A cookie is a small data packet that your web browser stores on the hard disk of your computer. When you visit our web pages, our server detects the cookie, which provides us with information about your last visit on our website. Many browsers accept cookies automatically; however, you can deactivate this by changing the settings of your browser. If you decide not to use any cookies, it is possible that the functionality of our website is limited for you.
Web beacons (or also counting pixels, tracking pixels, pixel tags) help us to optimize the content of our website by informing us about which content is effective. A web beacon is embedded in a website or an e-mail message, and it is used for tracking user activities on the website or in the e-mail. Exactly like a cookie, a beacon also follows up on user visits, sending the corresponding data to the server. In contrast with a cookie, a beacon however cannot be used for identification, and also not for storing data on your computer, since it is not browser-based.
Data collected by cookies and similar technologies are handled as non-personal data, to the extent that the IP addresses (or similar means of identification) have not been defined as personal data according to applicable legislation.
The legal basis for the use of cookies and web beacons is contained in Art. 6 Par. 1 a) and f) of GSDVO (GDPR).
Data that are collected or transmitted by cookies and web beacons are stored for 26 months.

§ 5 The use of Google Analytics
(1) This website uses Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses so-called “cookies”, namely small text files that are stored on your computer, through which an analysis of the use of the website by you is made possible. The information about your use of this website that is collected by the cookie will usually be transmitted to a server of Google in the USA, where it is stored. If the IP anonymisation function has been activated on this website, then your IP address will be abbreviated by Google within member states of the European Union or other treaty states of the European Economic Area before this. Only in exceptional cases will the full IP address be transmitted to a global server of Google in the USA, where it is abbreviated. At the request of the operator of this website, Google will use this information to analyse your use of the website, compose reports about website activities and provide other services to the website operator that are connected with the use of the website and the Internet.
(2) The IP address that is transmitted by your browser to Google Analytics is not combined with other data of Google.
(3) You can prevent the storage of cookies by means of a corresponding setting in your browser software; however, we would like to point out that you will possibly not be able to use all of the functions of this website to the full extent. In addition, you can prevent the collection, and the transmission to Google, of the data that are collected by the cookie and that refer to your use of the website (incl. your IP address), and you can also prevent the processing of these data by Google by downloading and installing the browser plug-in that is available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
(4) This website utilizes Google Analytics with the extension “_anonymizeIp()”. Thereby IP addresses are processed in an abbreviated manner so that a direct reference to your person can be excluded. To the extent that the data that are collected from you contain a reference to a person, such a reference is immediately excluded and the personal data are therefore immediately deleted.
(5) We use Google Analytics for analysing utilization that is made of our website and for improving it regularly. Via these collected statistics, we can improve our offer and make it more interesting for you as the user. In the exceptional cases where personal data are transmitted to the USA, Google has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the utilization of Google Analytics is contained in Art. 6 Par. 1, S. 1 lit. f of GSDVO (GDPR).
(6) Information of the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
User conditions: http://www.google.com/analytics/terms/de.html ,
Overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html ,
Data protection declaration: http://www.google.de/intl/de/policies/privacy.
(7) This website also utilizes Google Analytics for a cross-device analysis of visitor streams that is carried out by means of a user-ID. In your user account, and under the tab “My data” / “Personal data”, you can de-activate the cross-device analysis of your utilization.
(8) The legal basis is Art. 6 Par. 1 f) of GSDVO (GDPR).

§ 6 Newsletter
(1) With your consent, you can also subscribe to our Newsletter, with which we inform you about our interesting current offers. The advertised goods and services correspond to those goods and services that are shown on our website.
(2) For a registration to our Newsletter, we use the so-called double opt-in procedure. This means that, after you have registered, we will send you an e-mail message to the indicated e-mail address, in which we ask you to confirm that you have requested the transmission of the Newsletter. If you do not confirm your registration within 24 hours, your personal data are blocked and automatically deleted after one month. In addition to this, we also store the IP address that you use in each case, as well as the date and time of registration and its confirmation. The objective of the procedure is to substantiate your registration, and to be able to clarify a possible misuse of your personal data.
(3) Your e-mail address is the only mandatory information that is required for the transmission of the Newsletter. We store your e-mail address after your confirmation for the purpose of sending you our Newsletters. Furthermore, we also store the date of your registration and your IP address. The legal basis is Art. 6 Par. 1, S. 1 lit. a of GSDVO (GDPR).
(4) You can at all times revoke your agreement for the transmission of the Newsletter, with which your subscription is cancelled. By clicking on the link (“unsubscribe”) that is contained in each e-mailed Newsletter, you can declare your revocation of the subscription.
(5) We herewith would like to inform you that, on transmission of the Newsletter, your user behaviour is analysed. For this analysis, the transmitted e-mail message contains so-called web beacons, counting pixels, tracking pixels and pixel tags.
For the analyses, we link the data that are mentioned in § 5 and the web beacons with your e-mail address and an individual ID. Also the links received in the Newsletter contain this ID. With the data that are acquired in this way, we create a user profile that will serve to adapt the Newsletter to your individual interests. As part of this, we register when you read our Newsletter and what links are clicked on by you, from which we infer your personal interests. These data are then linked with actions you have undertaken on our website.
You can object to this tracking at all times, either by clicking on the special link that is made available in each e-mail message, or by informing us via a different channel. This information is stored for the period during which you have subscribed to the Newsletter. After deregistration, these data are stored anonymously and solely used for statistics.
(6) We will store these data for as long as they are required for the transmission of the Newsletter. These data are deleted when you deregister.
(7) The legal basis for storage is contained in Art. 6 Par. 1 a) of GSDVO (GDPR).

§ 7 Communications and subscriber settings
(1) It is up to you to decide which information you will obtain about products and services and how you acquire such information, by defining your communications settings on the contact page, together with your message or question. Whenever you no longer wish to receive marketing information and/or non-transactional e-mails from us, the settings can also be adapted correspondingly in this area, or by clicking on the link for cancelling your subscription (“unsubscribe”) that is found in each e-mail message.
(2) If you do not wish to disclose certain personal data, then, under certain circumstances, we may not be capable of replying completely or suitably to your requests, providing updates and/or informing you about our products and services. Via the opt-out procedure, you can always unsubscribe to the receipt of certain types of e-mails. For cancelling your subscription, click on the link “unsubscribe” that you can find in every e-mail message. In all instances, however, we do use your personal data for providing you with important information about products, as well as about changes in our guidelines and agreements, or for other legally permitted purposes.

§ 8 Social plug-ins
(1) On our website, we provide you with the possibility of using so-called “Social Media Buttons”. During implementation, we make use of the “Shariff” solution for protecting your data. Due to this, these buttons are only embedded in the website as graphic elements that contain a link to the corresponding website of the button provider. By clicking on this graphic element, you are transferred to the services of the corresponding provider. Only then will your data be transmitted to this provider. If you do not click on this graphic element, then absolutely no exchange of data occurs between you and the providers of the social media buttons. Information about the collection and use of your personal data on social networks can be found in the corresponding terms of use of the corresponding providers.
(2) The social media buttons of the following companies have been embedded on our website:
Facebook Inc. (1601 S. California Ave – Palo Alto – CA 94304 – USA)
Twitter Inc. (795 Folsom St. – Suite 600 – San Francisco – CA 94107 – USA)
Google Plus/Google Inc. (1600 Amphitheatre Parkway – Mountain View – CA 94043 – USA)
XING AG (Gänsemarkt 43 – 20354 Hamburg – Deutschland)
LinkedIn Corporation (2029 Stierlin Court – Mountain View – CA 94043 – USA)
YouTube, LLc (901 Cherry Ave – San Bruno – CA 94066 – USA).

For taking up contact directly, you can reach us as follows:

VF-Verpackungen GmbH
Gewerbepark 9
D-87477 Sulzberg, Germany

Tel.: +49 (0) 8376 / 9295 – 0
Fax: +49 (0) 8376 / 9295 – 10
E-mail: info@vf-verpackungen.de
Website: www.vf-verpackungen.de