Data Protection Statement

Contact details of the person responsible (controller)

OPTIMA packaging group GmbH
Steinbeisweg 20
74523 Schwäbisch Hall
 
+49 791 506 – 0
+49 791 506 - 9000
info(at)optima-packaging.com 

Contact data of our data protection officer

Hanspeter Preißler
Steinbeisweg 20
74523 Schwäbisch Hall
+49 791 506 – 0
+49 791 506 - 9000
datenschutz(at)optima-packaging.com 


When you visit the Website

a) Purpose of data collection and processing 

Every time a user accesses a page of our website and every time a file stored on the website is called up, access data about this process is stored in a log file. Each data record consists of:

(1) the page from which the file was requested,
(2) the name of the file,
(3) the date and time of the request,
(4) the amount of data transferred,
(5) the access status (file transferred, file not found, etc.),
(6) a description of the type of operating system and web browser used,
(7) the client IP address.

The client IP address is used for the purpose of transmitting the requested data; it will be made anonymous by deleting the last digit block (Ipv4) or the last octet (Ipv6) once the technical requirement no longer applies. 

b) Duration of storage

The data is stored each time a user accesses a page of our website and each time our website is accessed and is deleted as soon as it is no longer required for the purpose of collection, which is the case when the visitor leaves our website.

c) Legal basis

The temporary storage of the aforementioned data is carried out on the legal basis of Art. 6 para. 1 letter f of the General Data Protection Regulation (GDPR). The legitimate interest lies in the provision of our website.

d) Possibility of objection and deletion

You may object to this processing.

 

Google Analytics


a) Purpose of data collection and processing 

The client IP address is collected for use of the Google Analytics service. This website uses Google Analytics, a web analysis service of Google Inc. "("Google"). Google Analytics uses so-called "cookies", text files which are stored on your end device to enable an analysis of the use of the website. The information generated by the cookie about the use of this website is usually transferred to a Google server in the USA and stored there. However, due to the activation of IP anonymisation on this website, Google will reduce the IP address of the person concerned within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and be shortened there. Google will use this information on our behalf, to evaluate the use of the website, to compile reports on the website activities and to provide us with further services associated with the use of the website and the Internet. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data. 

b) Duration of storage

As soon as the data are no longer necessary to achieve the purpose, they will be deleted, which is the case when the anonymisation within the European Union has been completed. This takes less than a second.

c) Legal basis

The storage of the data as described above is based on Art. 6 para. 1 letter f of the General Data Protection Regulation (GDPR). The legitimate interest lies in the fact that we are able to analyse the use of the website by all users in its entirety without drawing conclusions about the behaviour of identifiable persons; this enables us to optimise our website and our offers.

d) Possibility of objection and deletion

You can prevent the storage of cookies by changing the settings of your browser software; however, we must point out that if you do this, not all functions of this website may be fully functional. In addition, you can prevent the collection of data generated by the cookie and relating to the use of the website (including the IP address) from Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link: tools.google.com/dlpage/gaoptout.


Cookies

 


Rechte des Betroffenen

The right to information in accordance with Art. 15 of the General Data Protection Regulation (GDPR). 

The right to information in accordance with Art. 15 of the General Data Protection Regulation (GDPR).
You have the right to the following information:

(a) the purposes of the processing;

(b) the categories of personal data being processed;

(c) the recipients or categories of recipients to whom the personal data have been or are disclosed, in particular recipients in third countries or international organisations;

(d) if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration;

(e) the existence of a right of rectification or deletion of your personal data or of a restriction on processing by the controller or of a right of opposition to such processing;

(f) the right of appeal to a supervisory authority;

(g) if the personal data are not collected from the data subject, all available information on the origin of the data;

(h) the existence of automated decision-making, including profiling in accordance with Article 22(1) and (4) of the Basic Regulation on Data Protection (DSGVO) and - at least in these cases - meaningful information on the logic involved and the scope and intended effects of such processing for the data subject.

(i) where personal data are transferred to a third country or an international organisation, the data subject shall have the right to be informed of the appropriate guarantees in accordance with Article 46 of the Basic Regulation on Data Protection (DSGVO) in connection with the transfer.

We will provide you with a copy of the personal data that is the subject of the processing. For all other copies that you request, Optima may charge an appropriate fee based on the administrative costs.


The right to correction in accordance with Article 16 of the General Data Protection Regulation (GDPR). 

You have the right to ask us to rectify any inaccurate personal data without delay. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data, including by means of a supplementary declaration.


The right to erasure (“right to be forgotten”) in accordance with Art.17 of the General Data Protection Regulation (GDPR)

You have the right to ask us to delete your personal data immediately and we are obliged to delete your personal data immediately if one of the following reasons applies:

a) if the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;

b) if you withdraw your consent to processing (Art. 6 para. 1a or Art. 9 para. 2a of the General Data Protection Regulation), and there is no other legal basis for the processing;

c) if you object to processing pursuant to Art. 21 para. 1 of the General Data Protection Regulation (GDPR) and there are no overriding legitimate grounds for the processing, or if you object to processing pursuant to Art. 21 para. 2 of the General Data Protection Regulation (GDPR);

d) if your personal data have been processed unlawfully;

e) if the deletion of personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which Optima is subject;

f) if the personal data was collected in relation to information society services offered to children under the age of 16 (Art. 8 para. 1 of the General Data Protection Regulation).


The right to restrict processing in accordance with Article 18 of the General Data Protection Regulation (GDPR)

You have the right to require Optima to restrict processing if one of the following conditions is met:

(a) if you disagree with the accuracy of your personal data, we will restrict processing until  the accuracy of your personal data can be verified;

(b) if the processing is unlawful and you prefer that the use of the personal data be restricted, instead of deleted;

(c) if Optima no longer needs to process the personal data, but you need the data for the purpose of asserting, exercising or defending claims; or

(d) if you have objected to processing pursuant to Art. 21 para. 1 of the General Data Protection Regulation (GDPR), as long as it is not yet clear whether Optima’s legitimate interests outweigh yours.


Right to information in accordance with Art. 19 of the General Data Protection Regulation (GDPR)

If you have informed Optima about: corrections to your personal data in accordance with Art. 16 of the General Data Protection Regulation (GDPR); a deletion in accordance with Art. 17 (1) of the General Data Protection Regulation (GDPR); or a restriction on processing in accordance with Art. 18, and if Optima has informed all recipients to whom your personal data have been disclosed of your request (unless this was impossible or disproportionate), then you have the right to be informed of the recipients by Optima.


Right to Data Transferability Art. 20 General Data Protection Regulation (GDPR)

You have the right to receive the personal data that you have provided to Optima in a structured, current and machine-readable format and have the right to transmit this data to another controller without our interference, provided that:

a) the processing is based on: your consent (Art. 6 para. 1 lit a or Art. 9 para. 2a GDPR); or on a contract (Art. 6 para. 1b GDPR)

and

(b) processing is carried out by means of automated methods.
The rights and freedoms of other persons must not be affected by this.
When exercising the right to data transferability pursuant to paragraph 1, you have the right to request that the personal data be transferred directly by us to another data controller, insofar as this is technically feasible.

The exercise of the right to data transferability does not affect your right to deletion (as described in Art. 17 of GDPR). The right to transferability shall not apply to processing necessary for the performance of a task in the public interest; or in the exercise of public authority conferred on the controller.


Right to object in accordance with Art. 21 of the General Data Protection Regulation (GDPR)

You have the right to object at any time to the processing of your personal data on the basis of Article 6(1) (e) or (f) of GDPR for reasons arising from your particular situation; this also applies to profiling based on these provisions.

We will stop processing your personal data unless we can prove that the processing is absolutely necessary and worthy of protection, and that this outweighs your interests, rights and freedoms; or that the processing serves to assert, exercise or defend legal claims.

Where your personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purposes of such advertising, including profiling in so far as it is related to such direct marketing. If you object to processing for direct marketing purposes, your personal data will no longer be processed for this purpose.

You may withdraw your consent at any time. However, the collection and processing that has taken place up to this point remains legal.


Automated decisions in individual cases including profiling in accordance with Art. 22 General Data Protection Regulation (GDPR) 

You shall not be subject to a decision based exclusively on automated processing - including profiling - which has legal effect against you or significantly impacts you in a negative manner.

This does not apply if the decision:

(a) is necessary for the conclusion or performance of a contract between yourself (or your employer) and us,

(b) is admissible by law of the Union or of the Member States to which we are subject, and that law contains appropriate measures to safeguard your rights, freedoms and legitimate interests; or

(c) you have given your express consent.
These decisions may not be based on special categories of personal data (as described in Art. 9 para. 1 GDPR) unless Art. 9 para. 2 a or g of the General Data Protection Regulation (GDPR) applies and appropriate measures have been taken to protect your rights, freedoms and legitimate interests.
In the above-mentioned examples of your rights, we take appropriate measures to protect your rights and freedoms as well as your legitimate interests, including at least the right to obtain the intervention of a person on our side, to state his own position and to challenge the decision.


Right of appeal to a supervisory authority pursuant to Art. 77 General Data Protection Regulation (GDPR).

If you consider that the processing of your personal data is contrary to the General Data Protection Regulation (GDPR) you have the right of appeal to a supervisory authority in the Member State of his place of residence, his place of employment or the place where the suspected infringement occurred.

The supervisory authority with whom the complaint has been lodged will inform you of the status and results of your complaint, including the possibility of a judicial remedy under Article 78 of the General Data Protection Regulation (GDPR).


The right to an effective judicial remedy against Optima or our contract processors pursuant to Article 79 of the General Data Protection Regulation (GDPR).

Without prejudice to any available administrative or extra-judicial remedy, including the right of appeal to a supervisory authority: if you consider that your rights have been infringed as a result of processing of your personal data in breach of the General Data Protection Regulation (GDPR) you have the right to an effective judicial remedy under Article 77 of the General Data Protection Regulation (GDPR).

Any action against us by a processor shall be brought in the courts of the Member State in which we or the processor have a place of business. Alternatively, such actions may also be brought before the courts of the Member State in which the person concerned is resident, unless the controller or processor is a public authority of a Member State acting in the exercise of its public powers.

 

The data protection statement was updated and published on May 15th, 2018.