Data privacy

Privacy statement of Klingele Paper & Packaging SE & Co. KG for the website www.klingele.com and information according to Articles 13 and 14 of the EU Data Protection Regulation

General information

Details of the responsible body

Company:

Klingele Paper & Packaging SE & Co. KG  

Legal representative:

Executive Director: Dr. Jan Klingele

Adress:

Alfred-Klingele-Str. 56–76 
73630 Remshalden, Germany

Contact details of data protection officer:

datenschutz@klingele.com

1. Collection, processing and use of personal data

Personal data is only collected if you provide it to us (e.g. when registering for our newsletter, using our contact form, registering for a seminar in our Academy or completing an online application). No personal data is stored beyond this scope. Any processing of your personal data that exceeds the scope of statutory authorisation will only be done with your express consent.

Processing purpose:

Contract execution.

Recipient categories:

• Public authorities subject to priority statutory provisions.
• External service providers or other contractors.
• Other external bodies providing that the data subject has given their consent or transfer is permitted by predominant interest.

Third-party country transfers:

As part of contract execution, contractors outside the European Union may also be used.

Duration of data storage:

The duration of data storage is in accordance with statutory storage requirements and is generally 10 years.

Specific information about the website

Use of a newsletter

When you register for our newsletter, you provide us with your e-mail address and optional additional data. We only use these details to send you the newsletter.

The details specified when you register for our newsletter will be stored by us until you unsubscribe from the newsletter. You can unsubscribe at any time using the link provided in the newsletter or via a corresponding message to us. By unsubscribing, you contradict the use of your e-mail address.

Your e-mail address, which we obtain in connection with the sale of goods or services, is only used by us for the purpose of direct advertising in the form of our newsletter for our own goods or services similar to those you ordered, unless you have objected to this use. You may object to the use of your e-mail address at any time without incurring any costs other than the base-rate transmission costs. You may also object (and thus also unsubscribe from our newsletter) by sending a corresponding message to our e-mail address (see legal notice).

Specific information about the website

Newsletter data

If you would like to subscribe to the newsletter offered on this website, we will need from you an e-mail address as well as information that allow us to verify that you are the owner of the e-mail address provided, and consent to the receipt of the newsletter. No further data shall be collected or shall be collected only on a voluntary basis. We shall use such data only for the sending of the requested information and shall not share such data with any third parties.

The processing of the information entered into the newsletter subscription form shall occur exclusively on the basis of your consent (Art. 6(1)(a) GDPR). You may revoke the consent you have given to the archiving of data, the e-mail address and the use of this information for the sending of the newsletter at any time, for instance by clicking on the “Unsubscribe” link in the newsletter. This shall be without prejudice to the lawfulness of any data processing transactions that have taken place to date.

The data deposited with us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter or the newsletter service provider and deleted from the newsletter distribution list after you unsubscribe from the newsletter or after the purpose has ceased to apply. We reserve the right to delete or block e-mail addresses from our newsletter distribution list at our own discretion within the scope of our legitimate interest in accordance with Art. 6(1)(f) GDPR.

After you unsubscribe from the newsletter distribution list, your e-mail address may be stored by us or the newsletter service provider in a blacklist to prevent future mailings. The data from the blacklist is used only for this purpose and not merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6(1)(f) GDPR). The storage in the blacklist is indefinite. You may object to the storage if your interests outweigh our legitimate interest.

Rapidmail

This website uses Rapidmail for the sending of newsletters. The provider is the rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg i.Br., Germany.

Rapidmail services can, among other things, be used to organize and analyze the sending of newsletters. The data you enter for the purpose of subscribing to the newsletter are archived on Rapidmail servers in Germany.

Data analysis by Rapidmail

For analytical purposes, e-mails sent via Rapidmail are tagged with a so-called “Tracking Pixel”, which connects to Rapidmail’s servers once the e-mail is opened. As a result, it is possible to determine whether a newsletter e-mail was actually opened.

With the assistance of Rapidmail we are also able to determine whether and which links in the newsletter message the recipient clicked. All links integrated into the e-mail are so-called Tracking Links that enable us to count your clicks. If you do not want to permit an analysis by Rapidmail, you must unsubscribe from the newsletter. We provide a link for you to do this in every newsletter message. Moreover, you can also unsubscribe from the newsletter right on the website.

For more details on the Rapidmail analysis functions, please follow this link: de.rapidmail.wiki/kategorien/statistiken/.

Legal basis

The data is processed based on your consent (Art. 6(1)(a) GDPR). You may revoke any consent you have given at any time by unsubscribing from the newsletter. This shall be without prejudice to the lawfulness of any data processing transactions that have taken place prior to your revocation.

Storage period

The data deposited with us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter or the newsletter service provider and deleted from the newsletter distribution list after you unsubscribe from the newsletter. Data stored for other purposes with us remain unaffected.

After you unsubscribe from the newsletter distribution list, your e-mail address may be stored by us or the newsletter service provider in a blacklist to prevent future mailings. The data from the blacklist is used only for this purpose and not merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6(1)(f) GDPR). The storage in the blacklist is indefinite. You may object to the storage if your interests outweigh our legitimate interest.

For more details, please consult the Data Protection Regulations of Rapidmail at: www.rapidmail.de/datensicherheit.

Data processing

We have concluded a data processing agreement (DPA) with the above-mentioned provider. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

2. Website anlytics using Matomo

We use Matomo, a web analysis service, to optimally design our website. To evaluate and analyze the use of our website, usage information is transmitted to our servers and stored for analysis. Your IP address will be shortened during this process and thus anonymized.

4. LinkedIn

The call to LinkedIn, LinkedIn, 2029 Stierlin Courtm, Mountain View, CA 94043 USA, is indicated by the "in" sign on a blue background. If you activate our "in" button as part of the 2-click solution, you will be connected to the LinkedIn server and the LinkedIn plug-in will be reloaded on the respective website. The content of the "in" button is sent directly from LinkedIn to your browser and integrated into the website by LinkedIn. There is a possibility that your IP address will be transmitted to LinkedIn in the USA in this way. For details on the purpose and scope of the data collection and the further processing and use of the data by LinkedIn, as well as your rights and options to protect your privacy, please refer to LinkedIn's privacy policy (http://www.linkedin.com/legal/privacy-policy) to the "in" button. If you are a LinkedIn member and do not want LinkedIn to collect data about you through our web site and link it to your LinkedIn data stored on LinkedIn, with the "in" button enabled, you will need to log out of LinkedIn before visiting our website.

Information on other data processing methods

The personal data collected through Academy registration is only used for contacting you and sending you further information concerning the seminar or workshop you have booked.

Specific information on the application process

Affected data:

Application information.

Processing purpose:

Execution of application process.

Recipient categories:

• External service providers or other contractors, including for data processing and hosting.
• Other external bodies providing that the data subject has given their consent or transmission is permitted by predominant interest, including to other plants or companies in the Klingele Groups if the applicant has consented thereto.

Third-party country transfers:

None.

Duration of data storage:

Application details are generally deleted within four months of decision notification, unless consent has been given for a longer period of data storage.

Specific information on employee data processing

Affected data:

Data provided for the purpose of contract execution; if necessary, additional data for processing provided express consent is given.

Processing purpose:

Contract execution as part of employment relationship

Recipient categories:

• Public authorities subject to the existence of priority statutory provisions, including tax office, social security institution, employers’ liability insurance association.
• External service providers or other contractors, including for data processing and hosting, for insurance services.
• Other external bodies providing that the data subject has given consent.

Third-party country transfers:

None.

Duration of data storage:

The duration of data storage is in accordance with statutory storage requirements and is generally 10 years.

Specific information on customer/prospective customer data processing

Affected data:

Data provided for the purpose of contract execution; if necessary, additional data for processing provided express consent is given.

Processing purpose:

Contract execution, including enquiries and offers, orders, sales and invoicing, quality assurance

Recipient categories:

• Public authorities subject to the existence of priority statutory provisions, including tax office.
• External service providers or other contractors, including for data processing and hosting, for insurance services.
• External service providers or other contractors, including for data processing and hosting, shipping, transport and logistics, service providers for printing and shipping information.
• Other external bodies providing that the data subject has given their consent or transmission is permitted by predominant interest, including for credit rating information and the electronic delivery of information.

Third-party country transfers:

None.

Duration of data storage:

The duration of data storage is in accordance with statutory storage requirements and is generally 10 years.

Specific information on supplier data processing

Affected data:

Data provided for the purpose of contract execution; if necessary, additional data for processing provided express consent is given.

Processing purpose:

Contract execution, including enquiries, purchasing, quality assurance.

Recipient categories:

• Public authorities subject to the existence of priority statutory provisions, including tax office, customs.
• External service providers or other contractors, including for data processing and hosting.

Third-party country transfers:

None.

Duration of data storage:

The duration of data storage is in accordance with statutory storage requirements and is generally 10 years.

Specific information on registration for the Klingele Academy

Affected data:

Registration for participation in a Klingele seminar.

Processing purpose:

Contacting you and sending information on your reserved seminar or workshop.

Recipient categories:

• Public authorities subject to the existence of priority statutory provisions, including tax office.
• External service providers or other contractors, including for data processing and hosting.

Third-party country transfers:

None.

Duration of data storage:

The duration of data storage is in accordance with statutory storage requirements and is generally 10 years.

5. Further information and contacts

You may at any time assert your right to access, rectify, delete or limit the processing of your data, or exercise your right to object to its processing and the right to data portability. You can find e-mail and postal contact details here. You also have the right to contact the data protection supervisory authority regarding complaints.