PRIVACY POLICY

NOVOPLAST – PRIVACY POLICY

General information obligations/privacy notices

Data controller

Novoplast- Verpackungen GmbH Co.KG

Unterzeiler Weg 5
88299 Leutkirch im Allgäu, Germany

Phone: +49 (0) 829 – 0
Fax: +49 (0) 829 – 24
E-Mail: info@novoplast.de

Represented by:

Murat Yavuz, managing director
Register Court: Ravensburg, HRA 610146

Contact details of the data protection officer

Michaela Helbig
Helbig Datenschutz GmbH

Bräunleinsberg 51
91233 Neunkirchen a.S.

Phone: +49 (0)9123 70275-0
Email: michaela.helbig@helbig-datenschutz.de

Data processing: purpose and legal basis

We process personal data for the purpose of fulfilling contracts or carrying out pre-contractual measures. This includes customer data, such as contacts, contact history, offers, orders/contracts, invoices, project data and other data required to meet the data controller’s statutory obligations.

The legal basis for this processing is outlined in Article 6 of the GDPR. Other relevant legal grounds are found in the Commercial Code, tax laws, the Limited Liability Companies Act (GmbH-Gesetz) and other legal requirements applicable to Novoplast-Verpackungen GmbH Co. KG. Such grounds also include the establishment of contractual agreements. We also process data for the purpose of distributing newsletters – this processing is based on the consent granted by the data subjects.

Data processing to protect the legitimate interests of the controller or a third party

Where necessary, we process your data beyond the scope of the contract to safeguard our own legitimate interests, or those of third parties. Examples of these activities are:

– Sales management and sales monitoring

– Asserting legal claims and defending ourselves during legal disputes

– Ensuring IT security and maintaining IT operations

– Building/plant security measures (e.g. access controls) and enforcing property rights

– Business management and development activities

– Conducting surveys

– Internal and external reporting

Categories of recipients of personal data (data sharing)

Within Germany, the European Union and the European Economic Area:

– Auditors

– Tax authorities

– Tax offices

– Bailiffs and other creditors

– Government agencies (to meet statutory obligations and submit/request certificates)

– Logistics companies

– External IT service providers within the scope of order processing

Third countries, including adequacy decisions

In the context of international business relationships, data transfers are carried out in accordance with Article 6(1)(b) GDPR for the purpose of contractual performance or the implementation of pre-contractual measures. An adequacy decision is not required in such cases.

Retention period

The specific purposes for the storage of data are determined by statutory requirements as well as relevant industry-specific regulations. Personal data is deleted once the reason for storing it is no longer valid.

Rights of data subjects

You can exercise your rights at any time using the contact details provided above. If your personal data is processed, you are classified as a data subject within the meaning of the GDPR, which means you have the following rights vis-à-vis the data controller:

Summary of your rights as a data subject

  • The right to obtain information about your personal data stored by us
  • The right to have your personal data rectified if it is incorrect, outdated or non-compliant
  • The right to have your personal data erased if any of the reasons listed in Article 17 of the GDPR apply
  • The right to restrict the processing of your personal data if any of the requirements outlined in Article 18 of the GDPR are met
  • The right to object to the processing of your personal data
    The right to lodge a complaint with the relevant supervisory authority

In Baden-Württemberg, the relevant supervisory authority is:

The State Commissioner for Data Protection and Freedom of Information

Office Address:
Königstrasse 10 a
70173 Stuttgart

Postal address:
Postfach 10 29 32
70025 Stuttgart

Phone: 0711/615541-0
Email: poststelle@lfdi.bwl.de

If you have granted your consent for us to process your personal data for specific purposes (e.g. the processing of images), such processing is lawful based on that consent.

You can revoke your consent at any time. This also applies to your consent granted before the GDPR came into effect on 25 May 2018.

Please note that, in this case, the withdrawal of your consent only applies to future processing. Any processing carried out before the withdrawal of your consent will not be affected.

Provision of personal data

In the context of our business relationship, you are only required to provide the personal data necessary to fulfil a contract, carry out pre-contractual measures, or data that we are legally obliged to collect. Without this data, we will generally be unable to enter into or maintain a contractual relationship with you.

Changes to this Privacy Policy

Change of purpose

We reserve the right to update this Privacy Policy in compliance with the applicable data protection laws. The most up-to-date version is available on our website at https://www.novoplast.de/de/datenschutz.html. You can also request the current version at any time using the contact details above.

If we intend to process your data for purposes other than those for which it was collected, we will notify you in advance, in accordance with legal requirements.

Last updated: 03/2023

Information obligations / data protection information for applicants

Data controller

Novoplast- Verpackungen GmbH Co.KG

Unterzeiler Weg 5
88299 Leutkirch im Allgäu, Germany

Phone: +49 (0) 829 – 0
Fax: +49 (0) 829 – 24
E-Mail: info@novoplast.de

Represented by:

Murat Yavuz, managing director
Register Court: Ravensburg, HRA 610146

Contact details of the data protection officer

Michaela Helbig

Helbig Datenschutz GmbH

Bräunleinsberg 51
91233 Neunkirchen a.S.

Phone: +49 (0)9123 70275-0
Email: michaela.helbig@helbig-datenschutz.de

Data processing: purpose and legal basis

We process personal data received from applicants for the purpose of establishing an employment relationship. This includes fulfilling legally mandated processing requirements and the legal obligations of the data controller.

The legal basis for this processing is Article 6 of the GDPR, particularly Article 6(1)(a) (consent) and Section 26 of the German Federal Data Protection Act (BDSG neu), i.e. data processing for the purpose of establishing an employment relationship. Additional legal foundations include relevant legal provisions, contractual agreements, and internal policies and regulations in force at Novoplast GmbH Co. KG.

Types of data processed:

As part of our decision-making process regarding the establishment of an employment relationship with you (application procedure/process), we process the data you submit or provide during the application process.

This includes, in particular:

– Your personal details

– Your CV

– Your photo

– Your certificates, qualifications and references

– Additional information provided or submitted during the application process

Sources of personal data used in our applicant management process

Typically, your personal data is provided directly by you, by email or post.

In some cases, we may also receive your personal data, including your application documents, from recruitment agencies, online job portals, job placement services or headhunters.

Data processing to protect the legitimate interests of the controller or a third party

Where necessary, we process your data beyond the scope of the contract to safeguard our own legitimate interests, or those of third parties. Examples of these activities are:

– Applicant management

– Asserting legal claims and defending ourselves during legal disputes

– Building/plant security measures (e.g. access controls) and enforcing property rights

Categories of recipients of personal data (data sharing)

Within Germany, the European Union and the European Economic Area:

– Government agencies (to meet statutory obligations and submit/request certificates)

Third countries, including adequacy decisions

We do not transfer your data to third countries.

Retention period

The specific purposes for the storage of data are determined by statutory requirements as well as relevant industry-specific regulations. Personal data is deleted once the reason for storing it is no longer valid.

Rights of data subjects

You can exercise your rights at any time using the contact details provided above. If your personal data is processed, you are classified as a data subject within the meaning of the GDPR, which means you have the following rights vis-à-vis the data controller:

Summary of your rights as a data subject

  • The right to obtain information about your personal data stored by us
  • The right to have your personal data rectified if it is incorrect, outdated or non-compliant
  • The right to have your personal data erased if any of the reasons listed in Article 17 of the GDPR apply
  • The right to restrict the processing of your personal data if any of the requirements outlined in Article 18 of the GDPR are met
  • The right to object to the processing of your personal data
    The right to lodge a complaint with the relevant supervisory authority

In Baden-Württemberg, the relevant supervisory authority is:

The State Commissioner for Data Protection and Freedom of Information

Office address:
Königstrasse 10 a
70173 Stuttgart

Postal address:
Postfach 10 29 32
70025 Stuttgart

Phone: 0711/615541-0
Email: poststelle@lfdi.bwl.de

If you have granted us your consent to process your personal data for specific purposes (e.g. for inclusion in our applicant pool), such processing is lawful based on that consent.

You can revoke your consent at any time. This also applies to your consent granted before the GDPR came into effect on 25 May 2018.

Please note that, in this case, the withdrawal of your consent only applies to future processing. Any processing carried out before the withdrawal of your consent will not be affected.

Provision of personal data

During the application process, you are only required to provide the personal data necessary to establish the employment relationship, or data that we are legally required to collect. Without this data, we will generally be unable to enter into or maintain an employment relationship with you.

Changes to this Privacy Policy

Change of purpose

We reserve the right to update this Privacy Policy in compliance with the applicable data protection laws. The current version can be found in the Privacy Policy on our website https://www.novoplast.de/de/datenschutz.html. You can also request the current version at any time using the contact details above. If we intend to process your data for purposes other than those for which it was collected, we will notify you in advance, in accordance with legal requirements.

Last updated: 02/2023

Our social media accounts

This Privacy Policy applies to the following social media accounts:

https://www.facebook.com/people/Novoplast-Verpackungen-GmbH-CoKG/100062978242438/
https://www.instagram.com/novoplast_azubi/
https://de.linkedin.com/company/novoplast-verpackungen-gmbh-co-kg

Data processing by social networks

We maintain publicly accessible profiles on various social networks, which are listed below.

Social networks like Facebook and Twitter can typically track and analyse your user behaviour in detail when you visit their websites or a site with embedded social media content (such as “like” buttons or ad banners). Each time you visit our social media pages, several data processing operations related to privacy are triggered. Specifically:

If you are logged into your social media account and access our social media pages, the platform operator can link this visit to your user account. Even if you are not logged in or do not have an account with the relevant social media platform, your personal data may still be collected. This data collection may occur via cookies stored on your device or by logging your IP address.

Using the data collected, the social media platform operators can create user profiles that store your preferences and interests. In this way, interest-based advertising can be served to you both inside and outside the social media platform. If you have an account with the social network concerned, interest-based advertising may be shown on all devices on which you are – or have been – logged in.

Please also note that we are not able to track all processing operations on the relevant social media platforms. Depending on the provider, additional processing may be carried out by the platform operators. For details, please refer to the terms of use and privacy policies of the respective social media platforms.

Legal basis

Our social media presence is designed to ensure maximum visibility for our company on the internet. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR. The analysis processes initiated by social networks may rely on different legal grounds, which must be specified by the social network operators (e.g. consent under Article 6(1)(a) GDPR).

Data controller, exercising your rights

When you visit one of our social media profiles (e.g. Facebook), we are jointly responsible, along with the operator of the platform, for the data processing activities triggered by your visit. You can exercise your rights (e.g. to information, rectification, erasure, restricted processing, data portability, and to lodge a complaint) vis-à-vis both us and the operator of the relevant platform (e.g. Facebook).

Please note that, despite our shared responsibility with the social media platform operators, we do not have full control over their data processing activities. Our influence is largely determined by the corporate policies of each provider.

Retention period

The data we collect directly through our social media channels will be deleted from our systems once you request its deletion, revoke your consent to its storage, or the purpose for its retention no longer exists. Stored cookies will remain on your device until you delete them. Mandatory legal provisions – especially statutory retention periods – will remain unaffected.

We have no control over how long the social network operators store your data for their own purposes. For details, please refer to the information published by the operators of respective social networks (e.g. their privacy policies, see below).

Your rights

You have the right to request, at any time and free of charge, information about the origin, recipients and purpose of your stored personal data. You also have the right to object to the data processing, the right to data portability, and the right to lodge a complaint with the relevant supervisory authority. Additionally, you can request the rectification, blocking and deletion of your personal data. In certain cases, you can also request restrictions on its processing.

Social networks in detail

Facebook

We maintain a profile on Facebook. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter referred to as “Meta”). According to Meta, the data it collects is also transferred to the USA and other third countries.

We have entered into a joint processing agreement with Meta (Controller Addendum). This agreement outlines the responsibilities of Meta and ourselves with regard to data processing activities when you visit our Facebook page. You can review this agreement via the following link: https://www.facebook.com/legal/terms/page_controller_addendum.

You can adjust your ad settings independently in your user account. To do so, click the following link and log in: https://www.facebook.com/settings?tab=ads. https://www.facebook.com/settings?tab=ads.

Data transfers to the USA are based on the EU Commission’s Standard Contractual Clauses. Further details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

For more information, please refer to Facebook’s privacy policy: https://www.facebook.com/about/privacy/.

Instagram

We maintain a profile on Instagram. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Data transfers to the USA are based on the EU Commission’s Standard Contractual Clauses. Further details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://help.instagram.com/519522125107875 and https://de-de.facebook.com/help/566994660333381.

Details on how they handle your personal data can be found in Instagram’s privacy policy: https://help.instagram.com/519522125107875.

LinkedIn

We maintain a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.

To disable LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

Data transfers to the USA are based on the EU Commission’s Standard Contractual Clauses. Further details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.

Details on how they handle your personal data can be found in LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy.

1. Data protection overview

General information

The following information provides a brief overview of what happens to your personal data when you visit our website. Personal data includes all information that can be used to personally identify you. Detailed information on data protection can be found in the Privacy Policy below.

Data collection on this website

Who is responsible for data collection on this website?

The data processing on this website is managed by the website operator. You can find their contact details in the section of this Privacy Policy entitled “Information about the Data Controller”.

How do we collect your data?

There are two ways we collect your data. One is when you provide it directly, such as by filling out a contact form.

Other data is automatically collected by our IT systems when you visit our website, either automatically or with your consent. This mainly includes technical data (e.g. your internet browser, operating system or the time you accessed the page). This data is automatically collected as soon as you visit the website.

What do we use your data for?

We collect some of this data to ensure that our website functions properly. Other data may be used to analyse your browsing behaviour.

What are your rights concerning your data?

You have the right to request, at any time and free of charge, information about the origin, recipients and purpose of your stored personal data. You also have the right to request that your data be corrected or deleted. If you have granted your consent for us to process your data, you can revoke this consent at any time with regard to future processing. You also have the right, under certain circumstances, to request that we restrict the processing of your personal data. You also have the right to lodge a complaint with the relevant supervisory authority.

To do so, and for any questions regarding data protection, you can contact us at any time.

Analysis tools and third-party tools

When you visit this website, your browsing behaviour may be analysed statistically. This is primarily done by means of analysis programs.

You can find more detailed information about these analysis programs in the following Privacy Policy.

2. Hosting

We host our website’s content with the following provider:

Hetzner

The provider is Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen (referred to as “Hetzner”).

For further details, please see Hetzner’s privacy policy: https://www.hetzner.com/de/rechtliches/datenschutz.

We use Hetzner based on Article 6(1)(f) of the GDPR, due to our legitimate interest in ensuring the reliable operation of our website. Where the user’s consent is requested, the processing is carried out solely based on Article 6(1)(a) of the GDPR and Section 25(1) of the German Telecommunications Telemedia Data Protection Act (TTDSG), provided that the aforementioned consent covers the storage of cookies or access to information on the user’s device (e.g. device fingerprinting) in accordance with the TTDSG. You can revoke this consent at any time.

Data processing agreement

We have concluded a data processing agreement (DPA) with the above-mentioned service provider. This is a legally required agreement that ensures the provider processes all personal data collected from our website’s visitors in accordance with our instructions and in compliance with the GDPR.

3. General information and mandatory disclosures

Data protection

The operators of this website take the protection of your personal data very seriously. We handle your personal data confidentially and in accordance with the statutory data protection regulations and this Privacy Policy.

When you use this website, various types of personal data are collected. Personal data includes any data that can be used to identify you. This Privacy Policy explains what data we collect, how we use it and both how and why the data is processed.

Please be aware that data transmission over the internet (e.g. email communication) may be subject to security vulnerabilities. Therefore, it is not possible to fully protect this data from third-party access.

Information about the data controller

The entity responsible for data processing on this website is:

Novoplast-Verpackungen GmbH Co KG
Unterzeiler Weg 5
88299 Leutkirch im Allgäu, Germany

Phone: +49 (0)7561 / 829-0
Email: info@novoplast.de

The data controller is the individual or legal entity who, alone or jointly with others, determines the purposes and means of processing personal data (e.g. names, email addresses, etc.).

Retention period

Unless a different retention period is specified elsewhere in this Privacy Policy, your personal data will remain stored by us until the purpose for its processing no longer applies. If you submit a legitimate request for its deletion, or revoke your consent to its processing, your data will be deleted, provided we have no other legally valid reasons to retain it (e.g. statutory retention periods under tax or commercial law). In such cases, the data will be deleted once these reasons no longer apply.

General information on the legal basis for data processing on this website

Where you have given your consent for us to process your personal data, we do so on the basis of Article 6(1)(a) GDPR or, if special categories of data are processed under Article 9(1) GDPR, based on Article 9(2)(a) of the GDPR. In the case of explicit consent to transfer personal data to third countries, the data processing is also based on Article 49(1)(a) of the GDPR. Similarly, if you have consented to the storage of cookies or allowed us to access information on your device (e.g. through device fingerprinting), we will process your data in accordance with Section 25(1) TTDSG. You can revoke this consent at any time. If your data is necessary to fulfil a contract or for pre-contractual measures, we will process it on the basis of Article 6(1)(b) GDPR. Additionally, in cases where we are legally required to process your data, the processing is based on Article 6(1)(c) of the GDPR. In some cases, data processing may also be based on our legitimate interests, as outlined in Article 6(1)(f) of the GDPR. The specific legal basis that applies in each case is detailed in the following sections of this Privacy Policy.

Data Protection Officer

We have appointed a data protection officer.

Michaela Helbig
Helbig Datenschutz GmbH
Bräunleinsberg 51
91233 Neunkirchen a.S.

Phone: 09123 70275-0
Email: michaela.helbig@helbig-datenschutz.de

Notice regarding data transfer to the USA and other third countries

We use tools provided by companies based in the USA and other countries where data protection laws may not offer the same level of security as within the EU. When these tools are active, your personal data may be transferred to and processed in these countries. Please note that these countries, including the USA, do not guarantee the same level of data protection as the EU. For instance, US companies may be required to share personal data with security authorities, and as a data subject, you would not have any legal recourse against this. Consequently, US authorities (such as intelligence agencies) may process, analyse and store your data stored on US servers for surveillance purposes. We have no control over such activities.

Revocation of your consent to data processing

Many data processing operations are only possible with your explicit consent. You can revoke any consent you have previously granted at any time. This will not affect the legality of the data processing carried out before the withdrawal of your consent.

Right to object to data collection in specific cases and to direct advertising (Art. 21 GDPR)

IF THE PROCESSING OF YOUR DATA IS BASED ON ARTICLE 6(1)(E) OR (F) OF THE GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR CIRCUMSTANCES; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE SPECIFIC LEGAL BASIS FOR THE PROCESSING CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THAT THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION UNDER ARTICLE 21(1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT-MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH PURPOSES AT ANY TIME; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO DIRECT-MARKETING ACTIVITIES. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT-MARKETING PURPOSES (OBJECTION UNDER ARTICLE 21(2) GDPR).

Your right to lodge a complaint with the competent supervisory authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the member state of their habitual residence, place of work or the place of the alleged violation. Your right to lodge such a complaint is without prejudice to any other administrative or judicial remedies.

Right to data portability

You have the right to receive data that we process based on your consent or in the fulfilment of a contract in an automated manner, either directly or via a third party, in a commonly used, machine-readable format. If you request the direct transfer of your data to another controller, this will only be done to the extent that it is technically feasible.

Your right to information, rectification and deletion

Within the scope of the applicable legal provisions, you have the right to obtain, free of charge, information about your stored personal data, its origin, recipients and the purpose of the data processing, and, if applicable, the right to request the rectification or deletion of this data. To arrange this, as well as for any other questions regarding personal data, you can contact us at any time.

Your right to restrict processing

You have the right to request that we restrict the processing of your personal data. To arrange this, you can contact us at any time. Your right to restrict the processing of your data applies in the following cases:

  • If you contest the accuracy of your personal data stored by us, we will usually need time to verify this. You have the right to request that we restrict the processing of your personal data for the duration of this verification process.
  • If the processing of your personal data was/is unlawful, you may request the restriction of its processing instead of its deletion.
  • If we no longer need your personal data, but you require it to establish, enforce or defend yourself against legal claims, you have the right to request the restriction of the processing of your personal data instead of its deletion.
  • If you have objected to the processing of your data under Article 21(1) of the GDPR, a balance must be struck between your interests and ours. In this case, you can request that we restrict the processing of your data while a determination is made as to whose interests prevail – yours or ours.

If the processing of your personal data has been restricted, your data may only be processed (beyond mere storage) with your consent or to establish, enforce or defend ourselves against legal claims, or to protect the rights of another individual or legal entity, or for reasons of significant public interest to the European Union or a member state.

SSL/TLS encryption

This site uses SSL or TLS encryption for security purposes and to safeguard the transmission of confidential information, such as orders or enquiries you send to us as the site operator. You can identify an encrypted connection by the change in the browser address bar from “http://” to “https://”. A padlock icon will also be visible in your browser’s address bar.

When SSL or TLS encryption is active, the data you transmit to us cannot be intercepted by third parties.

4. data collection on this website

Cookies

Our website uses “cookies” – small data files that do not harm your device. These cookies may either be temporarily stored for the duration of your session (“session cookies”) or remain stored on your device long-term (“persistent cookies”). Session cookies are automatically deleted when you finish browsing. Persistent cookies remain stored on your device until you delete them or your web browser automatically removes them.

Cookies may be stored on your device by us (“first-party cookies”) or by third-party companies (“third-party cookies”). Third-party cookies enable the integration of specific services from third-party providers within websites (e.g. cookies for processing payment services).

Cookies serve different functions. Many cookies are essential, as certain website features do not work without them (e.g. the shopping cart function or playing embedded videos). Other cookies may be used to analyse the user’s browsing behaviour or for advertising purposes.

The storage of “necessary cookies” on your device – those required for electronic communication, specific functions you have requested (e.g. the shopping cart), or website optimisation (e.g. measuring web traffic) – is based on Article 6(1)(f) of the GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing essential cookies to ensure the smooth and optimised operation of the website. Where your consent has been requested for the storage of cookies or similar recognition technologies, the processing is based exclusively on this consent (Article 6(1)(a) GDPR and Section 25(1) TTDSG) – which you can revoke at any time.

You can adjust your browser settings to notify you when cookies are stored, only to allow cookies on a case-by-case basis, to block cookies in certain situations or entirely, and to enable automatic deletion of cookies when the browser is closed. Please note that disabling cookies may make certain features of this website unusable.

Detailed information about the cookies and services used on this website is provided in this Privacy Policy.

Consent to the use of Usercentrics

This website uses consent technology from Usercentrics to obtain your consent to the storage of certain cookies on your end device, or to the use of certain technologies, and to document this consent in compliance with data protection regulations. The provider of this technology is Usercentrics GmbH, Sendlinger Strasse 7, 80331 Munich, Germany, website: https://usercentrics.com/de/ (hereinafter referred to as “Usercentrics”).

When you visit our website, the following personal data is transmitted to Usercentrics:

  • Your consent or the revocation of your consent
  • Your IP address
  • Information about your browser
  • Information about your device
  • The time of your visit to the website

Furthermore, Usercentrics stores a cookie in your browser to track the types of consent you have granted or revoked. The data collected in this way will remain stored until you request its deletion, delete the Usercentrics cookie yourself, or the purpose for storing the data no longer applies. The statutory retention periods will remain unaffected.

We use the Usercentrics service to obtain the statutorily required consent for the use of certain technologies. The legal basis for this is Article 6(1)(c) of the GDPR.

Data processing agreement

We have entered into a data processing agreement (DPA) for the use of the aforementioned service. This is a legally required agreement that ensures the provider processes all personal data collected from our website’s visitors in accordance with our instructions and in compliance with the GDPR.

Server log files

The provider of this website automatically collects and stores information in server log files, which your browser sends to us automatically. This information includes:

  • The user’s browser type and browser version
  • The operating system installed on the user’s end device
  • The referrer URL
  • The hostname of the device accessing the site
  • The time of the server request
  • The user’s IP address

This data is not merged with data from any other sources.

This data is collected in accordance with Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in ensuring that its website is displayed correctly and runs optimally, which requires the collection of server log files.

Contact form

When you submit an enquiry via our contact form, we will store the information you provide, including your contact details, to process your request and for any follow-up questions. We will not share this data with third parties without your consent.

This data is processed on the basis of Article 6(1)(b) of the GDPR, provided your enquiry relates to the fulfilment of a contract or is necessary for pre-contractual measures. In all other instances, the processing is based on our legitimate interest in efficiently handling enquiries (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), if obtained. You can revoke your consent to the processing at any time.

The data you enter in the contact form will be retained by us until you request its deletion, revoke your consent to its use, or the purpose for storing the data no longer applies (e.g. once your enquiry has been resolved). Our statutory obligations, especially the mandatory retention periods, will remain unaffected.

Enquiries via email, telephone or fax

When you contact us by email, telephone or fax, your enquiry, along with any personal data provided (e.g. your name, details of your enquiry), will be stored and processed so that we can process your request. We will not share this data with third parties without your consent.

This data is processed on the basis of Article 6(1)(b) of the GDPR, provided your enquiry relates to the fulfilment of a contract or is necessary for pre-contractual measures. In all other instances, the processing is based on our legitimate interest in efficiently handling enquiries (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), if obtained. You can revoke your consent to the processing at any time.

The data you submit to us via your enquiry will remain stored by us until you request its deletion, revoke your consent, or the reason for storing your data no longer applies (e.g. once we have finished processing your request). Our statutory obligations, especially mandatory retention periods, will remain unaffected.

5. social media

Facebook

This website includes integrated elements from the social network Facebook. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook, the data it collects is also transferred to the USA and other third countries.

An overview of Facebook’s social media features can be found here: https://developers.facebook.com/docs/plugins/?locale=de_DE.

When the social media feature is active, a direct connection is established between your device and Facebook’s servers. This allows Facebook to receive information that your IP address was used to visit this website. If you are logged into your Facebook account and click the “Like” button, you can link the content of this website to your Facebook profile. This enables Facebook to link your visit to this website to your Facebook account. Please note that, as the provider of this website, we have no control over the data transmitted to Facebook or how it is used. Further details can be found in Facebook’s privacy policy: https://de-de.facebook.com/privacy/explanation.

If your consent has been obtained, the above-mentioned service is used on the basis of Article 6(1)(a) GDPR and § 25 TTDSG. You can revoke this consent at any time. If no consent was obtained, our use of the service is based on our legitimate interest in maximising the visibility of our company on social media.

Insofar as personal data is collected on our website and transferred to Facebook using the tool described here, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for the data processing (Article 26 GDPR). Our joint responsibility is limited to the collection of data and its transfer to Facebook. The subsequent processing of data by Facebook after the transfer lies outside the scope of the aforementioned joint responsibility. Our mutual obligations in this regard are outlined in a joint processing agreement, which you can read here: https://www.facebook.com/legal/controller_addendum. Under this agreement, we are responsible for providing the necessary data protection information when using the Facebook tool, and for ensuring that the tool is implemented on our website in accordance with data protection laws. Facebook is responsible for data security in respect of its products. With regard to your data processed by Facebook, you can contact Facebook directly to exercise your rights as a data subject (e.g. information requests). If you submit such a request to us, we will be obliged to forward your request to Facebook.

Data transfers to the USA are based on the EU Commission’s Standard Contractual Clauses. Further details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://de-de.facebook.com/help/566994660333381 and https://www.facebook.com/policy.php.

6. Analysis tools and advertising

Google Tag Manager

We use the Google Tag Manager, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The Google Tag Manager is a tool that allows us to integrate tracking or analytics tools and other technologies into our website. The Google Tag Manager itself does not create user profiles, store cookies or perform any kind of independent analysis. Its purpose is solely to manage and deploy the integrated tools. However, the Google Tag Manager does collect your IP address, which may be transferred to Google’s parent company in the United States.

Our use of the Google Tag Manager is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in ensuring the efficient and straightforward integration and management of various tools on its website. Where the user’s consent is requested, the processing is carried out solely based on Article 6(1)(a) of the GDPR and Section 25(1) of the German Telecommunications Telemedia Data Protection Act (TTDSG), provided that the aforementioned consent covers the storage of cookies or access to information on the user’s device (e.g. device fingerprinting) in accordance with the TTDSG. You can revoke this consent at any time.

Google Analytics

This website uses components of the web analytics service Google Analytics, provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyse the browsing behaviour of visitors to the site. The operator receives various types of usage data, such as page views, the browsing durations, the operating systems used, as well as the user’s geographical location. This data is linked to the user’s end device but is not associated with a user ID.

Google Analytics uses technologies, such as cookies or device fingerprinting, to recognise users and analyse their browsing behaviour. The information collected by Google about the use of this website is typically transferred to and stored on a Google server in the USA.

The use of this service is based on your consent in accordance with Article 6(1)(a) of the GDPR and Section 25(1) TTDSG. You can revoke this consent at any time.

Data transfers to the USA are based on the EU Commission’s Standard Contractual Clauses. Further details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

IP anonymisation

We have enabled IP anonymisation on this website. This means that your IP address is shortened by Google within member states of the European Union or other countries that are parties to the Agreement on the European Economic Area before being transmitted to the USA. In exceptional cases, your full IP address may be transmitted to a Google server in the USA and then shortened there. On behalf of the operator of this website, Google uses this information to evaluate your use of the website, compile reports on website activity and provide other services related to website and internet usage at the request of the website operator. The IP address transmitted by your browser via Google Analytics is not combined with other data held by Google.

Browser plugin

You can prevent Google from collecting and processing your data by downloading and installing the browser plugin available via the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

For more information on how Google Analytics handles user data, please refer to Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Data processing agreement

We have entered into a data processing agreement with Google – our use of Google Analytics fully complies with the strict requirements set forth by the German data protection authorities.

7. Plugins and tools

YouTube with enhanced privacy

This website integrates videos from the YouTube website, operated by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in enhanced privacy mode. According to YouTube, this mode ensures that YouTube does not store information about visitors to this website unless they watch the embedded videos. However, this mode does not necessarily prevent data from being shared with YouTube’s partners. YouTube may still establish a connection to the Google DoubleClick network, regardless of whether or not you watch a video.

Whenever you play a YouTube video on this website, a connection is established to YouTube’s servers, which receive information about which of our pages you have visited. If you are logged into your YouTube account, YouTube can directly link your browsing activity to your personal profile. You can prevent this by logging out of your YouTube account.

Additionally, after starting a video, YouTube may store cookies on your device or use similar recognition technologies (e.g. device fingerprinting). This allows YouTube to collect information about visitors to this website, which it uses to generate video statistics, enhance the user experience and prevent fraud.

Additional data processing operations may be triggered once you start a YouTube video, over which we have no control.

Our use of YouTube is based on our interest in ensuring an engaging presentation of our online services. This constitutes a legitimate interest in accordance with Article 6(1)(f) of the GDPR. Where the user’s consent is requested, the processing is carried out solely based on Article 6(1)(a) of the GDPR and Section 25(1) of the German Telecommunications Telemedia Data Protection Act (TTDSG), provided that the aforementioned consent covers the storage of cookies or access to information on the user’s device (e.g. device fingerprinting) in accordance with the TTDSG. You can revoke this consent at any time.

For more information on data protection at YouTube, please see the privacy policy at: https://policies.google.com/privacy?hl=de.

Google Fonts (local hosting)

This website uses Google Fonts, provided by Google, to ensure that fonts are displayed consistently. As Google Fonts are hosted locally, no connection to Google’s servers is established.

For further information about Google Fonts, please visit https://developers.google.com/fonts/faq and read Google’s privacy policy: https://policies.google.com/privacy?hl=de.

Font Awesome (local hosting)

This website uses Font Awesome to ensure that fonts are displayed consistently. As Font Awesome is hosted locally, no connection to Fonticons, Inc.’s servers is established.

For more details, please refer to the Font Awesome privacy policy: https://fontawesome.com/privacy.

Google Maps

This website uses the Google Maps service, provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

To enable the functionality of Google Maps, your IP address must be stored. This information is typically transmitted to and stored on a Google server in the USA. We have no control over this data transmission. Whenever Google Maps is active, Google may also use Google Fonts to ensure that fonts are displayed consistently. As soon as you access Google Maps, your browser downloads the required web fonts into its cache to display text and fonts correctly.

We use Google Maps to ensure an appealing presentation of our online services and make it easier for users to locate the places listed on our website. This constitutes a legitimate interest in accordance with Article 6(1)(f) of the GDPR. Where the user’s consent is requested, the processing is carried out solely based on Article 6(1)(a) of the GDPR and Section 25(1) of the German Telecommunications Telemedia Data Protection Act (TTDSG), provided that the aforementioned consent covers the storage of cookies or access to information on the user’s device (e.g. device fingerprinting) in accordance with the TTDSG. You can revoke this consent at any time.

Data transfers to the USA are based on the EU Commission’s Standard Contractual Clauses. Further details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

For more information about how Google handles user data, please see Google’s privacy policy: https://policies.google.com/privacy?hl=de.

8. Our own services

Management of applicant data

We offer you, the website visitors, the option to apply for jobs at our company (e.g. by email, post or via our online application form). The following information explains the scope, purpose and use of the personal data we collect within the scope of our application process. We guarantee that your data will be collected, processed and used in accordance with the applicable data protection regulations and other legal requirements, and will be treated with strict confidentiality.

Scope and purpose of data collection

If you submit an application to our company, we will process your personal data (e.g. your contact and communication information, application documents, notes from interviews, etc.) to the extent necessary to make a decision on whether to offer you a job at Novoplast. The legal basis for this processing under German law is Section 26 of the Federal Data Protection Act (BDSG) (initiation of an employment relationship), Article 6(1)(b) of the GDPR (general contract initiation) and – where your consent has been given – Article 6(1)(a) of the GDPR. You can revoke this consent at any time. Your personal data will only be shared within our company with individuals involved in processing your application.

If your application is successful, the data you have submitted will be stored in our data processing systems for the purpose of establishing and maintaining the employment relationship, based on § 26 of the BDSG and Article 6(1)(b) of the GDPR.

Data retention period

If we are unable to offer you a position, or if you decline a job offer or withdraw your application, we reserve the right to retain the data you provided for up to six months after the conclusion of the application process (rejection or withdrawal), based on our legitimate interests (Article 6(1)(f) GDPR). After this period, your data will be deleted and any physical application documents concerning you will be destroyed. The primary purpose of this retention period is to safeguard evidence in case of a legal dispute. Should it become apparent that the data will be required beyond the aforementioned six-month period (e.g. due to a pending or imminent legal dispute), it will not be deleted until the reason for its continued storage no longer exists.

We may store your data for a longer period based on your consent (Article 6(1)(a) GDPR) or if our statutory retention obligations prevent its deletion.

Inclusion in our applicant pool

If we are unable to offer you a position, you may be given the option of inclusion in our applicant pool. In this case, all documents and information relating to your application will be retained in our applicant pool, allowing us to contact you if suitable vacancies should arise.

Your inclusion in our applicant pool is solely based on your explicit consent (Article 6(1)(a) GDPR). This consent must be granted voluntarily and is not linked to your original application. As the data subject, you can revoke your consent at any time. If you do so, we will irreversibly delete your data from our applicant pool, unless it is subject to statutory retention obligations.

The data in our applicant pool is irreversibly deleted no later than two years after the consent was granted.