Protection of your privacy when you use our website is of the utmost importance to us. For this reason, when processing personal data we obviously implement the legal provisions on data privacy that apply to us and we have taken numerous technical and organizational measures in order to ensure seamless protection of the personal data processed when our website is accessed.
However, we would like to point out that internet-based data transfers can be prone to security loopholes so that we are unable to guarantee absolute protection. For this reason, every data subject is of course at liberty to provide personal data to us using alternative routes. Data can also be provided by post or by fax.
1. Person or body responsible
The body responsible for the data-processing in the sense of data protection legislation is:
PAN-PLAST Kunststoffverarbeitungs GmbH
Vehlberger Str. 25
D-91589 Aurach - Weinberg
Tel.: +49 (0) 9804/91900
Registry court: Local Court (AG) Ansbach, HRB 3987
VAT ID No.: DE 296 206 184
Our Legal Notice is available here
2. Subject-Matter and fundamental Principles of Data Privacy Protection
The subject-matter of data privacy protection is personal data. Personal data means any information relating to an identified or identifiable natural person (the so-called data subject). This includes, for example, information such as a person’s name, postal address, e-mail address and telephone number, as well as information necessarily generated during use of our website, e.g. information on the start, end and extent of the use made as well as transmission of your IP address.
We process personal data in compliance with the relevant legal provisions on data privacy. This means that your data is processed by us only in case of consent or statutory authorization to process, e.g. where the data-processing is necessary or required by law for the provision of our contractual performance (e.g. the processing of orders), or on the basis of our legitimate interests in the sense of Art. 6(1)(f) of the EU General Data Protection Regulation (e.g. our interest in the analysis, optimization and secure operation of our online services).
We take organizational, contractual and technical security measures in accordance with the state of the art in order to ensure that the data privacy provisions are complied with, and in order to thus protect the data we process against accidental or intentional manipulation, loss, destruction and access by unauthorized persons.
3. DATA-PROCESSING DURING USE OF OUR WEBSITE
Use of our website is generally possible without registration and without having to provide personal data. However, even if you use our website in this manner purely to obtain information, personal data might be automatically collected and processed. The following sections provide an overview of the manner, extent, purposes and legal basis of data-processing during use of our website.
3.1 MAKING OUR WEBSITE AVAILABLE
Beim Zugriff auf unsere Webseite durch Ihr Endgerät werden von uns in den Server-Logfiles folgende Daten automatisiert erfasst und verarbeitet:
- date and time at which access was sought,
- duration of the visit,
- type of end device,
- operating system used,
- the functions you use,
- quantity of data sent,
- type of occurrence,
- referrer URL
- domain name
- IP address
We process this data on the basis of our legitimate interests in the sense of Art. 6(1)(f) of the EU General Data Protection Regulation, namely in order to make available and display the website, in order to ensure and maintain its technical operation, for the purpose of detecting and rectifying occurrences of malfunctioning and for safety reasons (e.g. in order to investigate cases of improper use and fraud). This data is automatically processed when our website is accessed. Otherwise it is not possible to use our website. We do not use the data in order to draw conclusions as to your identity.
The data collected is generally deleted after 28 days unless, in an exceptional case, we require it for a longer period for the above-mentioned purposes. In that case we delete the data promptly after the purpose no longer applies.
We use certain cookies because they are essential for the proper operation and functioning of our website (“Essential Cookies”). These cookies are placed automatically when our website or a specific function is accessed, unless you have prevented the placement of cookies in the relevant settings of your browser. In contrast, non-essential cookies are placed (e.g. in the area of “statistics”) in order to improve the comfort and performance of our website, for example, or to store certain settings you select. We also use such cookies in order to obtain information about the frequency of use of certain areas of our website so that we can customize such areas in future to match your needs.
The majority of cookies are only required for the duration of your current access or session and are then deleted or become invalid as soon as you leave our website or as soon as your current session expires (so-called “Session Cookies”). In individual cases, cookies are stored for a longer period of time, for example in order to recognize you when you return to our website at a later point in time and to retrieve stored settings (so-called “Persistent Cookies”). This enables you to access our website faster and more comfortably, and means you do not have to select certain settings again. Persistent Cookies are also automatically deleted after a pre-defined period of time expires, which can vary depending on the type of cookie and its function, when you visit the page or domain that placed the cookie.
In order to simplify the handling of cookies on our website for you, we have implemented the extended cookie banner SWHCCM from SHW Komplett, Feuchtwanger Str. 19, 91583 Schillingsfürst. The cookies required for the functioning of the web pages and the services offered are pre-selected. Hence, the data-processing takes place in pursuit of our legitimate interests in the sense of Art. 6(1)(f) of the EU General Data Protection Regulation. Our legitimate interest lies in the making available and maintenance of our online products and services. Further details can be found in the following section under Nos. 3.4 - 3.10.
Be removing the tick from the box you can prevent the placing of cookies in specific categories (e.g. “Statistics”, “Personalization”). If, however, you enable statistics (analysis services such as, e.g., Google Analytics) and personalized contents (recognition of your webpage retrievals with us and with advertising partners or social media providers such as LinkedIn), we are able to provide customized information in the customary manner, reminders of contents already viewed and can optimize our websites based on the anonymous analysis of your user behavior on our webpages and within our services and platforms.
3.3 SOCIAL MEDIA AND SOCIAL NETWORKS
Our website contains links to our accounts in the social networks Instagram and Facebook. Having clicked on the embedded graphic, you will be directed to the website of the relevant provider, i.e. only then will user information be transmitted to the relevant provider. If you are logged in to your user profile in the relevant social network, having activated the button your profile will be attributed to your visit on our website. If you do not wish data about the website to be collected by social networks, you should log out from the social network before accessing our website.
3.4 PRESENCE ON SOCIAL NETWORKS
We operate publicly accessible profiles on social networks and within that context process users’ data in order to communicate with users active there or to provide information about ourselves, presently on:
On our various social media channels we would like to offer you a wide range of multimedia services, present our products to you in detail and exchange ideas and queries with you on topics that are important to you. The data-processing serves the following purposes in particular:
Presentation of our enterprise and the culture within it, including existing career and continuing education and training options at PAN-PLAST Kunststoffverarbeitungs GmbH
Extensive advice on products, answers to questions posed by customers and potential customers on technical details, use options and other background topics
Communication with and provision of information to social media channel visitors; presentation of current events, including online seminars
Collection of statistical information about the reach of the social media channels;
Conducting of customer surveys, marketing campaigns, market analysis, sweepstakes, competitions, similar activities and events;
Resolution of disputes and legal disputes, establishment, assertion and defence of claims made and legal disputes, enforcement of existing contracts.
Unless otherwise indicated expressly, the legal basis for the data-processing is Art. 6(1)(f) of the EU General Data Protection Regulation. Our legitimate interest lies in presenting our enterprise and the products and services you seek to you on the channels you prefer, and in being able to respond rapidly to your messages and queries. In addition, we have a legitimate interest in analyzing the reach and use of our social media channels so as to achieve an appropriate design and continual optimization. Insofar as your query is aimed at entering into a contractual relationship with PAN-PLAST, the legal basis for such data-processing is Art. 6(1)(b) of the EU General Data Protection Regulation.
We will inform you accordingly prior to the data-processing if we intend to process your personal data for a purpose other than that mentioned above.
We would like to point out that in this respect users’ data could be processed outside the territory of the European Union. This can lead to risks for users because such processing could adversely affect the enforcement of their rights.
We process the following personal data in particular through our social media presence:
Your user name on the social network as well as comments published on our social media presence and news that you sent using our social networks.
Your activity on our social networks via the relevant service of the providers (especially Facebook Insights, Instagram Insights, “Analytics” at YouTube), e.g. visits to the social media presence, the extent of interactions, visits and the average duration of videos played, information about the countries and cities that our users come from and statistics about general relations of our visitors.
Further information required in order to respond to queries from our users or to precisely identify our users within our systems.
When you visit one of our social media presences, the operators of the social media portals are able to compile user profiles in which your preferences and interests are deposited. This enables interested-related advertising to be displayed to you both within and outside the relevant social media presence. If you have an account with the relevant social network, interest-related advertising can be displayed on all devices on which you are or were logged in.
When you visit one of our social media presences, it is possible that together with the operator of the social media platform we are responsible for the data-processing triggered by that visit.
Joint responsibility in the sense of the EU General Data Protection Regulation arises especially with regard to the use of statistical information on Facebook (“Facebook Insights”), in which respect Facebook makes data available to us in anonymized form so that we are unable to draw conclusions about individual users or access individual user profiles. Further information is available at: https://www.facebook.com/legal/terms/information_about_page_insights_data. PAN-PLAST and Facebook have entered into an agreement on the joint responsibility: https://www.facebook.com/legal/terms/page_controller_addendum.
As a matter of principle, you are entitled to assert your rights (right to information, correction, erasure, restriction of processing, data portability and right to submit a complaint) against us or against the operator of the relevant social media portal (e.g. against Facebook), although we would like to point out that such rights can be asserted most effectively against the providers. The providers alone are able to access the data of users and to provide information and implement corresponding measures directly. However, should you require assistance, please do not hesitate to contact us.
The data collected directly by us on the social media platform will be deleted from our systems as soon as the purpose of its storage lapses, as soon as you require us to erase it, your consent to storage is revoked or the purposes of data storage lapses. Cookies stored will remain on your end device until you erase them. Mandatory statutory provisions - especially retention periods - shall remain unaffected.
We have no influence on the length of time for which your data is stored by operators of social networks for their own purposes. Kindly obtain information about details directly from the operators of the social networks. Our website also contains links to our accounts on the social networks Instagram, YouTube and Facebook. Having clicked on the embedded graphic, you will be directed to the page of the relevant provider, i.e. only then will user information be transmitted to the relevant provider. If you are logged in to your user profile on the relevant social network, having activated the button your profile will be attributed to your visit on our website. If you do not wish data to be collected about the website by social networks, you should log out from the social network before accessing our website.
3.5 EMBEDDED YOUTUBE VIDEOS
We have embedded YouTube videos on our website, that are hosted by YouTube but can be played directly from our website. YouTube is a product of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). This service is inactive by default, but can be activated by the user. When you retrieve a sub-page on our website containing an embedded YouTube video, the embedding technology enables general framework data such as your IP address to be transmitted back to Google. Google processes the IP address of users since without the IP address it is unable to send the contents to their browsers. If you consent to the transmission of data to Google, we are unable to influence the manner in which Google uses the data. For example, Google might use so-called Pixel Tags for statistical or marketing purposes. Pixel Tags enable the analysis of information such as visitor traffic to the pages of the website. Furthermore, the pseudonymous information can be stored in cookies on the users’ device and among other things can contain technical information about the browser and the operating system, information on referring websites, on the duration of visits as well as other information on use of our online presence. YouTube might store your data as user profiles and use it for advertising and market research purposes and/or to design its products based on user preferences. If you do not want the information collected to be attributed to your profile at YouTube or Google, you have to log out before viewing the video. The legal basis for the integration of YouTube on our website is your consent according to Art. 6(1)(a) of the EU General Data Protection Regulation.
Further information on data-processing and data privacy at YouTube and/or Google can be found at www.google.de/intl/de/policies/privacy/; settings for the presentation of inserted advertising at Google can be found at https://adssettings.google.com/authenticated.
3.6 GOOGLE MAPS
We also use Google Maps (API) on our website, another service of Google LLC. Google Maps is a web service for the presentation of interactive (land) maps in order to visually present geographical information.
When you retrieve the sub-pages into which Google Maps is embedded, information about your use of our website is transmitted to Google servers in the USA and stored there, this applies especially to your IP address. This does not depend on whether or not you have a Google user account and are logged-in to it, or whether a user account does not exist. If you are logged-in at Google, your data could possibly be directly attributed to your account.
The data-processing takes place on the basis of our legitimate interests, namely our interest in the analysis, optimization and operation of our online products and services in the sense of Art. 6(1)(f) of the EU General Data Protection Regulation. Google is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data privacy law. Detailed information on data privacy in connection with the use of Google Maps can be found on the Google website: https://www.google.de/intl/de/policies/privacy/
3.7 GOOGLE RECAPTCHA
4. ESTABLISHING CONTACT – CONTACT FORM
If you provide personal data to us by e-mail or using the contact form, this is always voluntary. Your information is processed by us in order to handle your contact request or to process an order, in accordance with Art. 6(1)(b) of the EU General Data Protection Regulation. In this context the information can also be stored by us in our Customer Relationship Management (CRM) system. The provider of our Customer Relationship Management system is.....? We will delete the data you provide as soon as the purpose of its collection lapses completely and no further statutory basis applies (e.g. further processing of the data is or becomes necessary for fulfillment of an agreement concluded). Insofar and as long as statutory retainment periods apply, we will not delete the data until the relevant set periods have expired.
5. JOB ADVERTISEMENTS / ONLINE APPLICATIONS
In addition to the declarations above, the following additional provisions apply to job applications via our website:
5.1. CATEGORIES OF PERSONAL DATA AND THEIR ORIGIN
The categories of personal data processed include, in particular, your master data (including your first name, surname, suffixes to names, nationality), contact data (including your private address, (cell) phone number, e-mail address) as well as the data of the entire application procedure (including correspondence, CV, testimonials, questionnaires, interviews, qualifications and previous employment positions). As separate categories of personal data according to Art. 9(1) of the EU General Data Protection Regulation, e.g. information on a disability and/or on your religious beliefs can be processed within the context of your job application. This takes place on the basis of Art. 9(2)(b) of the EU General Data Protection Regulation, in conjunction with Sec. 26(3) of the German Federal Data Protection Act (BDSG).
Within the context of your application we also collect and process certain additional data required for fulfillment of our contractual obligation in relation to you. This includes, in particular:
Data from correspondence (postal and electronic) between yourself and us;
Data from postal, electronic, telephone and personal communication.
As a matter of principle, your personal data is collected from you directly within the context of the job application procedure. We may also have received personal data from third parties (including a recruitment agency) to which you made your personal data available for forwarding. We also process personal data lawfully obtained by us from publicly accessible sources (including professional social networks).
(The list below contains the above-mentioned categories of personal data within a job application, summarized as “Job Application Data”.)
5.2 PURPOSES AND LEGAL BASIS FOR PROCESSING OF JOB APPLICATION DATA
We process your Job Application Data in accordance with the EU General Data Protection Regulation, the German Federal Data Protection Act (BDSG) and all other pertinent legal provisions (including the German Works Council Constitution Act (BetrVG) and the German General Equal Treatment Act (AGG)).
The data-processing primarily serves to conduct and handle the application procedure and the assessment of the extent to which a candidate is suitable for the relevant position.
The processing of your Job Application Data is necessary in order to arrive at a decision on the establishment of an employment relationship. The predominant legal basis for this is Art. 6(1)(b) of the EU General Data Protection Regulation in conjunction with Sec. 26(1) of the German Federal Data Protection Act (BDSG).
Insofar as necessary we also process certain personal data on the basis of Art. 6(1)(f) of the EU General Data Protection Regulation in order to exercise the legitimate interests of ourselves or of third parties (including authorities).
5.3 CATEGORIES OF RECIPIENTS
Solely the persons or offices within our enterprise who require your Job Application Data for the decision on recruitment and for the fulfillment of our pre-contractual, contractual and statutory obligations regarding your specific application will receive such Data.
5.4 DURATION OF STORAGE OF JOB APPLICATION DATA
We will erase your personal data six (6) months after completion of the job application procedure insofar as an employment relationship does not come about.
6. RECIPIENTS OF PERSONAL DATA
Within our enterprise only those persons have access to personal data who require it for the purposes indicated in an individual case. We only provide your personal data to external third parties if this is necessary in order to process or handle your concerns, if there is statutory authorization or if you have granted your consent.
The communication of data within our enterprise takes place for sales and marketing purposes on the basis of our legitimate interests according to Art. 6(1)(f) of the EU General Data Protection Regulation.
External recipients can include, in particular, service providers we deploy as sub-contractors for the provision of services, for example in the areas of technical infrastructure and maintenance of our website. Such external service providers are carefully selected by us and reviewed regularly. They may use the data solely for the purposes we stipulate and in accordance with our instructions.
It is also possible that we have to transfer personal data to authorities or government institution such as, for example, offices of public prosecution, courts or the tax authorities, on mandatory statutory grounds. Such transfers take place on the basis of Art. 6(1)(c) of the EU General Data Protection Regulation.
7. DATA-PROCESSING IN THIRD COUNTRIES
Where data is transferred to bodies the registered office or data-processing location of which is not situated in a Member State of the European Union or in another contracting state of the EAA Agreement, prior to the transfer we ensure that either an appropriate level of data privacy protection exists at the recipient (e.g. by way of an adequacy decision of the European Commission, suitable guarantees such as the agreement on so-called EU standard contractual clauses of the European Union with the recipient), save for exceptional cases allowed by law, or that you have granted your consent to the data transfer.
8. DURATION OF STORAGE
We only store your personal data for as long as it is required for fulfillment of the purposes of processing or - if consent has been granted - until you revoke your consent. Should an objection be raised, we will delete your personal data unless continued processing thereof is permitted under the pertinent statutory provisions. We also erase your personal data when we are obliged to do so by law. Insofar and as long as statutory retainment periods apply, we will not delete the data until the relevant set periods have expired.
9. RIGHTS OF DATA SUBJECTS
As a data subject affected by the data-processing, you are entitled to numerous rights. These are, in detail:
Right to information:
You are entitled to obtain information from us about the personal data about you that we have stored.
Rights to Rectification and Erasure:
You may require us to rectify data that is incorrect and to erase your data.
Restriction of Processing:
You may require us to restrict the processing of your data.
If you have provided data to us on the basis of a contract or your consent, you may obtain the data you provided, in a structured, common and machine-readable format, or that we transfer such data to another responsible person or body.
Objection to Data-Processing Based on a “Legitimate Interest”:
You are entitled to object at any time, on grounds relating to your particular situation, to the processing by us of personal data concerning you insofar as such data-processing is based on a “legitimate interest”. If you exercise your right to object, we shall discontinue the processing of your data unless we are able to prove compelling grounds for continued processing that merit protection, grounds that override your rights. Information on the numerous options for raising an objection against the automated data-processing on our website can also be found in No. 3 above in the descriptions of the individual services and functions we deploy.
• Revocation of Consent:
Insofar as you have granted your consent to us for the processing of your personal data, such consent may be revoked at any time with future effect. This shall not affect the lawful nature of the processing of your data up to time your consent is revoked.
• Right to Complain to a Supervisory Authority:
You are also entitled to submit a complaint to the competent supervisory authority if you believe that the processing of your personal data is in breach of the law in force. To this end, you may contact the data protection authority responsible for your place of residence or your country, or the data protection authority responsible for us. The supervisory authority responsible for us is:
Bayerisches Landesamt für Datenschutzaufsicht
Tel. No.: +49 (0) 981 180093-0
Fax No.: +49 (0) 981 180093-800
You are entitled to the above-mentioned rights provided that the applicable statutory requirements are met, even where they are not expressly mentioned within the context of the above description.
In case of questions about the processing of your personal data, your rights as a data subject and about any consent granted, please do not hesitate to contact us free of charge. Please do not hesitate to contact firstname.lastname@example.org or the address indicated above in No. 1 in order to exercise all your above-mentioned rights. In doing so, kindly ensure that were are able to unambiguously establish your identity.
10. LINKS TO AND INCORPORATION OF THIRD-PARTY PRODUCTS AND SERVICES
Websites and services of other providers to which our website is linked, are made available by the other service provider in each case. We have no influence on the design, contents or functions of such third-party services. We expressly disassociate ourselves from all contents of all linked third-party products and services. Please keep in mind that the linked third-party products and services could install their own cookies on your end device and could collect personal data. We are unable to influence this. If necessary, kindly obtain information in this respect directly from the providers of such linked third-party products and services.
10.2 THIRD-PARTY SERVICES AND CONTENTS
Within our online products and services, on the basis of our legitimate interests in the sense of Art. 6(1)(f) of the EU General Data Protection Regulation, namely our interest in the analysis, optimization and business operation of our online products and services, we use contents and services offered by third parties in order to incorporate their items, for example videos (hereinafter referred to collectively as “Contents”). This presupposes that the third-party providers of such Contents record the users’ IP address since without the IP address they are unable to send the Contents to their browsers. Hence, the IP address is required for presentation of such Contents. We endeavor to use solely Contents where the individual provider only uses the IP address in order to supply the Contents.
Third-party providers might also use so-called Pixel Tags (invisible graphics also referred to as Web Beacons) for statistical or marketing purposes. Pixel Tags enable the analysis of information such as visitor traffic to the pages of the website. Furthermore, the pseudonymous information can be stored in cookies on the users’ device and among other things can contain technical information about the browser and the operating system, information on referring websites, on the duration of visits as well as other information on use of our online services, and can also be linked with information from other sources.
11. EFFECTIVE DATE
As at: October 2021