Data privacy policy

 

1. Intro­duc­tion

The following infor­ma­tion is meant to provide you as a “data subject” with an overview of our processing of your personal data and your rights according to data privacy legis­la­tion. Visiting our internet pages is prin­ci­pally possible without entering any personal data. Should you intend to make use of any partic­ular services of our company via our website, however, this might require the processing of personal data. If the processing of personal data is neces­sary and if there is no legal basis for such processing, we gener­ally ask for your consent.

2. Data controller

The data controller in the sense of the GDPR is:

Uhlmann Pac-Systeme GmbH & Co. KG
Uhlmannstraße 14-18, 88471 Laupheim, Germany

Repre­sen­ta­tive of the data controller:

Managing Direc­tors

Prof. Dr.-Ing. Matthias Niemeyer (CEO)
Michael Mrachacz (CSO)
Cris­tian Reiter (CTO)
Alexander Schöll­horn (CFO)

3. Data Protec­tion Officer

You can contact the data protec­tion officer as follows:

E-mail: datenschutz@uhlmann.de

You can contact our data protec­tion officer directly at any time with any ques­tions and sugges­tions regarding data protec­tion.

4. Legal basis of the processing

Art. 6 (1) lit. a GDPR (in conjunc­tion with § 25 (1) TTDSG [German Telecom­mu­ni­ca­tions Act]) serves our company as the legal basis for processing oper­a­tions in which we obtain consent for a specific processing purpose.

If the processing of personal data is neces­sary for the perfor­mance of a contract to which you are a party, as is the case, for example, with processing oper­a­tions that are neces­sary for a delivery of goods or the provi­sion of another service or return service, the processing is based on Article 6 (1) lit. b GDPR. The same applies to such processing oper­a­tions that are neces­sary for the imple­men­ta­tion of pre-contrac­tual measures, for example in cases of enquiries about our prod­ucts or services.

Should our company be subject to a legal oblig­a­tion by virtue of which processing of personal data becomes neces­sary, such as for the fulfill­ment of tax oblig­a­tions, the processing shall be based on Art. 6 (1) lit. c GDPR.

In rare cases, the processing of personal data might become neces­sary to protect vital inter­ests of the data subject or another natural person. This would be the case, for example, if a visitor were to be injured on our premises and, as a result, their name, age, health insur­ance data or other vital infor­ma­tion would have to be passed on to a doctor, hospital or other third party. In such a case, the processing would be based on Art. 6 (1) lit. d GDPR.

Finally, processing oper­a­tions could be based on Art. 6 (1) lit. f GDPR. Processing oper­a­tions which are not covered by any of the afore­men­tioned legal bases are based on this legal basis if the processing is neces­sary for the protec­tion of a legit­i­mate interest of our company or a third party, provided that the inter­ests, funda­mental rights and free­doms of the data subject are not to be consid­ered higher. Such processing oper­a­tions are permitted to us in partic­ular because they were specif­i­cally mentioned by the Euro­pean legis­lator. In this respect, it took the view that a legit­i­mate interest could be assumed if you are a customer of our company (Recital 47 Clause 2 GDPR).

5. Tech­nology

5.1 SSL/TLS encryp­tion

This site uses SSL or TLS encryp­tion to ensure the secu­rity of data processing and to protect the trans­mis­sion of confi­den­tial content, such as orders, log-in details or contact requests that you send to us as the oper­ator. You can recog­nize an encrypted connec­tion by the fact that “https://” appears in the address line of the browser rather than “http://” and by the lock symbol in your browser line.

We use this tech­nology to protect your trans­mitted data.

5.2 Cloud­flare (Content Delivery Network)

Our website makes use of func­tions provided by Cloud­Flare. The provider is Cloud­Flare, Inc. 665 3rd St. #200, San Fran­cisco, CA 94107, USA.

Cloud­Flare offers a glob­ally distrib­uted content delivery network with DNS. Tech­ni­cally, the infor­ma­tion transfer between your browser and our website is routed through CloudFlare’s network. Cloud­Flare is thus able to analyze the traffic between users and our websites, for example, to detect and prevent attacks on our services. In addi­tion, Cloud­Flare might store cookies on your computer for reasons of opti­miza­tion and analysis.

You can set your browser in such a way that you will be informed about the setting of cookies and only allow cookies in indi­vidual cases, exclude the accep­tance of cookies for certain cases or in general and acti­vate the auto­matic dele­tion of cookies when closing the browser. If cookies are deac­ti­vated, the func­tion­ality of this website may be limited.

We have concluded a corre­sponding agree­ment with Cloud­flare on the basis of the GDPR for commis­sioned processing or in accor­dance with EU stan­dard contrac­tual clauses. Cloud­flare collects statis­tical data about visits to this website. The access data includes: the name of the website accessed, file, date and time of access, amount of data trans­ferred, noti­fi­ca­tion of successful access, browser type along with version, the user’s oper­ating system, referrer URL (the previ­ously visited page), IP address and the requesting provider. Cloud­flare uses the log data for statis­tical eval­u­a­tions for the purpose of oper­a­tion, secu­rity and opti­miza­tion of the website.

If you have consented to Cloud­flare being used, the legal basis for the processing of personal data is Art. 6 (1) lit. a GDPR. In addi­tion, there is a legit­i­mate interest on our part to use Cloud­flare to opti­mize our online offer and make it more secure. The corre­sponding legal basis for this is Art. 6 (1) lit. f GDPR. The personal data will be retained for as long as it is neces­sary to fulfill the purpose of processing. The data will be deleted as soon as it is no longer required to achieve the purpose.

The transfer of your personal data to the US takes place on the basis of the stan­dard contrac­tual clauses.

For more infor­ma­tion on Cloud­Flare, please visit: https://www.cloudflare.com/privacypolicy/.

5.3 Hosting by Host Europe

We host our website at Host Europe GmbH, Hans­es­trasse 111, 51149 Cologne, Germany (here­inafter referred to as Host Europe).

When you visit our website, your personal data (e.g. IP addresses in log files) is processed on Host Europe’s servers.

The use of Host Europe is based on Art. 6 (1) lit. f GDPR. We have a legit­i­mate interest in the most reli­able presen­ta­tion and provi­sion as well as safe­guarding of our website.

We have concluded a contract for order processing (AVV) with Host Europe in accor­dance with Art. 28 GDPR. This is a contract required under data privacy legis­la­tion which ensures that Host Europe only processes personal data of our website visi­tors according to our instruc­tions and in compli­ance with the GDPR.

For more infor­ma­tion on Host Europe’s data protec­tion policy, please visit: https://www.hosteurope.de/AGB/Datenschutzerklaerung/

6. Cookies

6.1 General infor­ma­tion about cookies

Cookies are small files that are auto­mat­i­cally created by your browser and stored on your IT system (laptop, tablet, smart­phone or similar) when you visit our website.

The cookie stores infor­ma­tion that results in each case from the context of the specific end device used. However, this does not mean that we gain direct knowl­edge of your iden­tity.

The use of cookies is meant to make the use of our offer more pleasant for you. We use so-called session cookies to recog­nize that you have already visited indi­vidual pages of our website. These are auto­mat­i­cally deleted after you have left our site.

In addi­tion, we also use tempo­rary cookies to opti­mize user-friend­li­ness, which are stored on your end device for a certain fixed period of time. If you visit our site again to use our services, it is auto­mat­i­cally recog­nized that you have visited us before, and which entries and settings you have made so that you do not have to enter them again.

On the other hand, we use cookies to statis­ti­cally record the use of our website and to eval­uate our offer for you for the purpose of opti­miza­tion. These cookies enable us to auto­mat­i­cally recog­nize that you have already visited our website when you visit it again. The cookies set in this way are auto­mat­i­cally deleted after a defined period of time. The respec­tive storage period of the cookies can be found in the settings of the consent tool used.

7. Newsletter mailing

7.1 Adver­tising newslet­ters

On our website, you are given the oppor­tu­nity to subscribe to our company’s newsletter. Which personal data is trans­mitted to us when ordering the newsletter is defined by the input mask used for this purpose.

We inform our customers and busi­ness part­ners about our offers at regular inter­vals by means of a newsletter. The newsletter of our company can prin­ci­pally only be received by you if

1. You have a valid e-mail address, and
2. You have regis­tered for the newsletter mailing.

For legal reasons, a confir­ma­tion e-mail will be sent to the e-mail address you entered the first time for the newsletter mailing using the double opt-in proce­dure. This confir­ma­tion e-mail serves to verify that you, as the owner of the e-mail address, have autho­rized the receipt of the newsletter.

When you register for the newsletter, we also store the IP address of the IT system used by you at the time of regis­tra­tion, as assigned by your internet service provider (ISP), as well as the date and time of regis­tra­tion. The collec­tion of this data is neces­sary in order to be able to track the (possible) misuse of your e-mail address at a later date and there­fore serves our legal protec­tion.

The personal data collected in the context of a regis­tra­tion for the newsletter will be used exclu­sively for sending our newsletter. Further­more, subscribers to the newsletter could be informed by e-mail if this is neces­sary for the oper­a­tion of the newsletter service or a related regis­tra­tion, as could be the case in the event of changes to the newsletter offer or changes in the tech­nical circum­stances. No personal data collected as part of the newsletter service will be passed on to any third parties. The subscrip­tion to our newsletter can be cancelled by you at any time. The consent to the storage of personal data that you have given us for the newsletter mailing can be revoked at any time. For the purpose of revoking the consent, you will find a corre­sponding link in each newsletter. Further­more, it is also possible to unsub­scribe from the newsletter mailing directly on our website at any time or to inform us of this in another way.

The legal basis for data processing for the purpose of sending newslet­ters is Art. 6 (1) lit. a GDPR.

7.2 Rapid­mail

For analyt­ical purposes, all e-mails sent with Rapid­mail, a service by rapid­mail GmbH, Wentzinger­strasse 21, 79106 Freiburg im Breisgau, Germany, include a so-called tracking pixel which connects with Rapidmail’s servers when the e-mail is opened. This allows deter­mining whether a newsletter message has been opened.

With the help of Rapid­mail we can also see if and possibly which links were clicked in the newsletter. All links in the e-mail are so-called tracking links, and with these your clicks can be counted.

For more infor­ma­tion regarding the analysis func­tions by Rapid­mail please go to the following link: https/de.rapidmail.wiki/kategorien/statistiken/.

The data processing is carried out based on your consent (Art. 6 (1) lit. a GDPR). You can revoke this consent at any time. The legit­i­macy of data processing already carried out remains unaf­fected by the revo­ca­tion.

You can revoke the consent you have given at any time. You can also prevent the data processing by unsub­scribing from the newsletter. You can also prevent the storing of cookies by setting your web browser accord­ingly. You can also prevent the storage and trans­mis­sion of personal data by deac­ti­vating Java script in your web browser or by installing a Java script blocker (e.g. https://noscript.net or https://www.ghostery.com). We would like to point out that by under­taking these measures it could be possible that not all func­tions of our internet offer will be avail­able any more.

The data provided by you to be able to receive the newsletter is stored by us until your dereg­is­tra­tion from the newsletter and after the unsub­scribing of the newsletter it will be deleted both from our servers as well as the servers of Rapid­mail. Data that was stored by us for other purposes (e.g. e-mail address for the member area) are not affected by this.

Rapidmail’s data privacy regu­la­tions can be found at:
https://www.rapidmail.de/datensicherheit.

8. Web analysis

8.1 Matomo

We have inte­grated the compo­nent Matomo by the provider InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand on our website. Matomo is a soft­ware tool for web analysis, which means the gath­ering, collec­tion and eval­u­a­tion of data regarding the behavior of website visi­tors. Among others, data is collected through which website a data subject has come to a website (so-called data referrer), which subpages of a website have been opened or how often and how long subpages have been visited. This is used to opti­mize the website and to analyze the cost-benefit ratio of internet adver­tizing.

The soft­ware is oper­ated on the server of the party in charge of processing; the log files subject to data privacy laws are stored exclu­sively on this server.

Matomo sets a cookie on your IT system. The setting of the cookie allows us to analyze the use of our website. When­ever an indi­vidual page of this website is called up, the internet browser in your IT system will auto­mat­i­cally cause the Matomo compo­nent to transmit data to our server for online analysis.

With the help of the cookie, personal infor­ma­tion, such as access time, the place from where the access was initi­ated, and the frequency of visits on our website, are saved. For every visit to our website, this personal data, including the IP address of the internet connec­tion used by you, are trans­mitted to our server. This personal data is stored by us. We do not forward this personal data to any third party.

These processing oper­a­tions are carried out exclu­sively when explicit consent is given in accor­dance with Art. 6 (1) lit. a GDPR.

Matomo’s data privacy regu­la­tions can be found at:
https://matomo.org/privacy/

9. Your rights as a data subject

9.1 Right to confir­ma­tion

You have the right to request confir­ma­tion from us as to whether personal data concerning you is being processed.

9.2 Right to infor­ma­tion Art. 15 GDPR

You have the right to receive from us at any time free of charge infor­ma­tion about the personal data stored about you, as well as a copy of this data in accor­dance with the statu­tory provi­sions.

9.3 Right of recti­fi­ca­tion Art. 16 GDPR

You have the right to request the correc­tion of inac­cu­rate personal data concerning you. Further­more, you have the right to request the comple­tion of incom­plete personal data, taking into account the purposes of the processing.

9.4 Dele­tion Art. 17 GDPR

You have the right to demand that we delete the personal data concerning you without delay, provided that one of the reasons provided for by law applies and insofar as the processing or storage is not neces­sary.

9.5 Restric­tion of processing Art. 18 GDPR

You have the right to demand that we restrict processing if one of the legal require­ments is met.

9.6 Data porta­bility Art. 20 GDPR

You have the right to receive the personal data concerning you, which has been provided to us by you, in a struc­tured, common and machine-read­able format. You also have the right to transfer this data to another controller without hindrance from us, to whom the personal data has been provided, provided that the processing is based on consent in accor­dance with Art. 6 (1) a GDPR or Art. 9 (2) a GDPR or on a contract in accor­dance with Art. 6 (1) b GDPR and the processing is carried out with the aid of auto­mated proce­dures, unless the processing is neces­sary for the perfor­mance of a task carried out in the public interest or in the exer­cise of offi­cial authority vested in us.

Further­more, when exer­cising your right to data porta­bility in accor­dance with Article 20(1) GDPR, you have the right to have the personal data trans­ferred directly from one controller to another controller, to the extent that this is tech­ni­cally feasible and provided that this does not adversely affect the rights and free­doms of other indi­vid­uals.

9.7 Right to objec­tion Art. 21 GDPR

You have the right to object at any time, on grounds relating to your partic­ular situ­a­tion, to the processing of personal data concerning you that is carried out on the basis of Art. 6(1) e) (data processing in the public interest) or f) (data processing on the basis of a balance of inter­ests) GDPR.

This also applies to profiling based on these provi­sions within the meaning of Art. 4 No. 4 GDPR.

If you object, we will no longer process your personal data unless we can demon­strate compelling legit­i­mate grounds for the processing which over­ride your inter­ests, rights and free­doms, or where the processing serves the purpose of asserting, exer­cising or defending legal claims.

In indi­vidual cases, we process personal data in order to conduct direct adver­tising. You may object to the processing of personal data for the purpose of such adver­tising at any time. This also applies to profiling, insofar as this is related to such direct adver­tising. If you object to us processing for direct marketing purposes, we will no longer process the personal data for these purposes.

In addi­tion, you have the right, on grounds relating to your partic­ular situ­a­tion, to object to the processing of personal data concerning you which is carried out by us for scien­tific or histor­ical research purposes or for statis­tical purposes in accor­dance with Article 89 (1) GDPR, unless such processing is neces­sary for the perfor­mance of a task carried out in the public interest.

You are free to exer­cise your right to object in connec­tion with the use of infor­ma­tion society services, notwith­standing Direc­tive 2002/58/EC, by means of auto­mated proce­dures using tech­nical spec­i­fi­ca­tions.

9.8 Revo­ca­tion of consent under data protec­tion law

You have the right to revoke consent to the processing of personal data at any time with effect for the future.

9.9 Complaint to a super­vi­sory authority

You have the right to complain about our processing of personal data to a super­vi­sory authority respon­sible for data protec­tion.

10. Up-to-date­ness and modi­fi­ca­tion of the data privacy infor­ma­tion

This data privacy infor­ma­tion is currently valid and its status is July 2023.

Due to the further devel­op­ment of our internet pages and offers or due to changed legal or offi­cial require­ments, it may become neces­sary to change this data privacy infor­ma­tion. You can access and print out the current version at any time on the website at “https://pactuell.com/en/data-privacy”.

This data privacy infor­ma­tion was gener­ated with the support of the data privacy soft­ware audatis MANAGER.