Privacy policy

The protection of your personal data ("data") is important to us. Below we inform you about the handling of your data when using our website https://www.palplast.com.

 

Data is individual information about the personal or factual circumstances of a specific or identifiable natural person. This includes information such as the civil name, address, telephone number and date of birth.

 

Our data protection declaration is based on the General Data Protection Regulation ("DS-GVO") and the Federal Data Protection Act ("BDSG"). The technical terms used by us correspond in content to the DS-GVO definitions of these terms.

 

We refer in particular to the definitions of terms in Art. 4 DS-GVO.

 

1. Responsible

Person responsible within the meaning of the General Data Protection Regulation:

 

pal plast GmbH

Lämmerspieler Straße 8

63165 Mühlheim am Main

Phone: +49 (0) 6108-705-0

Fax: +49 (0) 6108-705-222

E-mail: datenschutz@palplast.de

AG Offenbach 5 HRB 6931

Managing directors: Josef Wirnik, Amit Wirnik

VAT no. DE 113 577 968

 

2. Data Protection Officer

You can reach our data protection officer via datenschutz@palplast.de or via our postal address.

 

3. We collect data from the categories:

 

• Personal identification data such as names and addresses;
• Electronic identification data such as IP addresses, screen resolution;
• Contact information such as phone numbers, email addresses;
• Contract data such as date of contract conclusion, separate contract content;
• Content data such as submitted documents, text input.

 

4. Purposes and legal bases of the processing operations

A detailed description of the individual purposes can be found in the respective subsection. Processing is based exclusively on the following legal bases:

 

• 6 para. 1 p. 1 lit. a) as well as Art. 7 DS-GVO for consents to process data for one or more specific purposes;
• 6 para. 1 p. 1 lit. b) DS-GVO for the performance of a contract or the implementation of pre-contractual measures, which are carried out at the request of the data subject;
• 6 para. 1 p. 1 lit. c) DS-GVO for the fulfillment of legal obligations on our part;
• 6 (1) p. 1 lit. d) DS-GVO to protect vital interests of the data subject or another natural person;
• 6 para. 1 p. 1 lit. f) DS-GVO for the protection of our legitimate interests or those of a third party, or
• 88 DS-GVO in conjunction with. § Section 26 of the German Federal Data Protection Act (BDSG) when processing data in connection with the initiation or implementation of an employment relationship.
• A change of the purpose of processing is governed by Art. 6 (4) DS-GVO.

 

5. Rights of data subjects

Data subjects have the following rights:

 

- in accordance with Art. 15 DS-GVO to request information about your data processed by us. In particular, you can request information about the processing purposes, the category of data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it was not collected by us, as well as the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details;

- in accordance with Art. 16 DS-GVO to demand the correction of incorrect or the completion of your data stored by us without delay;

- pursuant to Art. 17 DS-GVO to request the deletion of your data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims;

- to request the restriction of the processing of your data in accordance with Art. 18 DS-GVO, insofar as the accuracy of the data is disputed by you or the processing is unlawful;

- pursuant to Art. 20 DS-GVO to receive your data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller ("data portability");

 

Right of objection

Pursuant to Art. 21 (1) DS-GVO, data subjects may object at any time to data processing that we carry out on the basis of Art. 6 (1) p.1 lit. e) (public interest) and f) DS-GVO (legitimate interest) for reasons arising from their particular situation. In particular, data subjects may object to the use of their data for direct marketing purposes at any time with effect for the future. Unless it is an objection to direct advertising, when exercising such an objection, we ask you to explain the reasons why we should not process your data as we have done. In the event of your justified objection, we will review the situation and either discontinue or adjust the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing.

 

Right of withdrawal

In accordance with Art. 7 (3) DS-GVO, data subjects may revoke their consent at any time and without giving reasons. However, the revocation does not affect the lawfulness of the processing carried out until the revocation. A revocation can be sent by e-mail to datenschutz@palplast.de or by mail to us be addressed to us.

 

You can assert the aforementioned rights vis-à-vis the data protection officer of our company, whose name and contact details are listed in section 1.

 

Please note that we reserve the right to request more detailed evidence from you regarding your identity as the actual data subject asserting the rights mentioned here, if there is any doubt that you are asserting these rights as the actual data subject.

 

Right of appeal to a supervisory authority

Data subjects may also contact a data protection supervisory authority pursuant to Art. 77 DS-GVO with questions or complaints. Responsible for us is:

 

The Hessian Commissioner for Data Protection and Freedom of Information

PO Box 3163

65021 Wiesbaden.

 

6. Data recipient

Under certain circumstances, it may be appropriate for a smooth process to pass on data to, for example, a processor. In the respective section for individual processing, you will find information on which recipients receive data. We only use carefully selected and commissioned service providers.

 

If data is transferred as part of a commissioned processing, this transfer takes place on the basis of a commissioned processing agreement within the meaning of Art. 28 DS-GVO. Such a contract defines how data of data subjects are to be handled and ensures protection for them.

 

7. Third country transfer

When using our online service, data is transferred to third countries. Should the transfer of data to a third country take place, this is done in accordance with the DS-GVO (in particular Art. 44 et seq. DS-GVO). Details on data transfers to third countries and the respective recipients of the data are described in the respective subsections.

 

8. Storage period principle

We delete your data when it is no longer required for the purpose for which it was processed (e.g. the performance of contracts) and there are no longer any statutory retention obligations or legal bases for justification. The retention periods regulated in the German Commercial Code (HGB) and the German Fiscal Code (AO) are six to ten years. In addition, the statutory periods of limitation also influence the storage period. According to §§ 195 ff. of the German Civil Code (BGB), the regular statute of limitations is three years, but in certain cases the statute of limitations can be thirty years. Additional information on the storage period can be found in the respective subsection.

 

9. Automated decision making / profiling

We do not use automated decision making or profiling.

 

10. No obligation to provide data

In principle, you are not required by law to provide us with your data. However, if you do not do this, we may not be able to provide you with the full scope of our website, answer your inquiries to us and enter into or perform a contract with you. Data that is mandatory is marked with an "*", all other data that you provide us with is voluntary.

 

11. Collection and processing of anonymous and pseudonymized data for the technical provision of our online offers

Even if you use our online offers without logging in, general information is automatically recorded on our servers. These are:

 

• IP address;
• Browser type / version (Ex: Mozilla/5.0);
• Time and date of access.

 

This information (also referred to as server log files) is of a general nature and is not used to draw conclusions about the person visiting the website. The IP address is changed immediately by deleting the last three digits. This makes it almost impossible to identify the connection used.

 

The processing of this data takes place in order to ensure the functionality of the website (in particular connection establishment). Without this data, it would not be technically possible in part to deliver and display the contents of the website. In addition, we use the data to optimize the website, to protect against misuse and to ensure the security and stability of our systems. This is also our legitimate interest. The legal basis for this processing is Art. 6 para. 1 p.1 lit. f) DS-GVO. Under certain circumstances, the processing also takes place in order to ensure the initiation or execution of a contract. If the visit to this website occurs in connection with a contract concluded or to be concluded between the data subject and us, the processing is based on Art. 6 para. 1 sentence 1 lit. b) DS-GVO.

 

The recipient of this data is our hosting provider STRATO AG, Pascalstraße 10, 10587 Berlin, Germany

 

All visitors to our website are affected by this processing.

 

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of processing the data to provide the website, this is the case when the respective session has ended. In the case of storage of the data in log files, deletion takes place at a later point in time.

 

12. Use of technically necessary cookies

Within our online offer we use cookies. In this context, we would like to point out that cookies can also originate from third parties and / or be loaded from third-party servers, even though you are only visiting our website.

 

Cookies are small files that are stored on the devices used to use the online offers (computers, cell phones, tablets, TVs, etc.). In these files, information is stored that is related to the use of the online offer and the device used for use. There are "permanent cookies", which store data for a defined period of time beyond the visit of the online offer. "Non-permanent cookies" or so-called "session cookies" are deleted directly after the end of the visit to the online offer. Cookies can also be used to store various preferences of the user for marketing purposes, whereby such use in our online offers takes place exclusively within the framework of the user's consent. More on this in the section on technically unnecessary cookies.

 

The following technically necessary cookies are used within the scope of our online offer:

Application: Technical functions

Provider: WordPress

Purpose/ Description: Technical functionality

Categories of personal data: Electronic identification data

Validity period: 1 year

Third country transfer: No

 

These cookies are used exclusively to provide our websites with their technical functions. Some functions of our websites cannot be offered without the use of cookies. For this purpose, it is necessary that the browser is also recognized when visiting our online offer again. A cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the websites are called up again. We use this circumstance for cross-call identification of the user. This function also justifies our legitimate interest.

 

We do not use the user data processed by technically necessary cookies for advertising purposes or user profiles without the consent of the data subject.

 

The legal basis for the processing of data using technically necessary cookies is Art. 6 para. 1 p.1 lit. f) DS-GVO and is based on the interests mentioned. Insofar as you visit our online offers in order to obtain specific information about our products or to make a purchase, these are (pre-)contractual measures within the meaning of Art. 6 (1) sentence 1 lit. b) DS-GVO.

 

Until cookies are switched off via our website or in the settings of the browser used, all visitors to our online offers are affected by this processing.

 

Users can delete cookies themselves at any time via their browser. The validity of cookies is defined separately in each case in our cookie banner and the table above.

 

If you do not want cookies on your devices, we ask you to disable the storage of cookies in the settings of your browser and to block the use of cookies. The most common browsers also offer the possibility to delete already stored cookies and data from websites. If you decide against the permission of cookies, we point out that this may impair functions of our online offers.

 

13. Use of technically unnecessary cookies

Within our online offer, we do not use any third-party tools that are not technically necessary.

 

14. Contact

Within our online offer, it is possible to contact us via the e-mail addresses provided or by telephone. In this case, the transmitted data of the contacting person will be stored.

 

The processing of the data provided and retrieved serves us to process the contact. This is also our necessary legitimate interest.

 

The other processing carried out in the context of contacting us serves to prevent misuse of the contacting options and to ensure the security of our systems.

 

The legal basis for the processing of the data transmitted in the course of contacting us is therefore Art. 6 para. 1 lit. f) DS-GVO. If the contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b) DS-GVO.

 

All persons who have contacted us via the aforementioned channels are affected by these processing operations.

 

The data will be deleted as soon as the respective conversation with the user has ended and no other legally recognized legal basis (in particular legal obligations to keep or archive data) permits further processing. The conversation is terminated when the circumstances indicate that the matter in question has been conclusively clarified.

 

15. Applications

The execution of the selection process after receipt of your application and, if applicable, the employment relationship established as a result requires that we process some of your data. In the following, we will inform you which of your data we process in which way and for which purpose.

 

As part of the selection process, we process the following categories of data from you:

• Master data (e.g.: name, gender, date of birth),
• Contact details (e.g.: address, e-mail address, telephone number),
• Application documents (e.g.: certificates, resume, photo),
• Data on professional development and acquired knowledge (e.g.: education and training, work experience, additional qualifications),
• In the case of online applications, usage and inventory data (e.g..: IP address, name of the retrieved file, date and time of retrieval, amount of data transferred, notification of successful retrieval, web browser).
• If applicants send data from special categories of data (such as severe disability, pregnancy or trade union membership) without being requested to do so, this data will be processed.

 

These data are processed exclusively for the following purposes:

• Initiation and establishment of an employment relationship,
• Making reports and declarations based on legal obligation or otherwise permitted by law,
• Fulfillment of our obligations arising from tax and social security law,
• Safeguarding and enforcing our legitimate interests,
• Investigation of criminal acts, as far as this is necessary,
• Control and organization within the company.

 

Legal bases for the processing of your data are thereby:

• 6 para. 1 p.1 lit. b) DS-GVO in conjunction with. § 26 para. 1 BDSG,
• 6 para. 1 p.1 lit. c) DS-GVO in conjunction with. § 26 BDSG,
• 6 para. 1 p.1 lit. f) DS-GVO, if applicable in conjunction with. § 26 para. 1, p. 2 BDSG,
• 9 para. 2 lit. b) DS-GVO in conjunction with. § Section 26 (3) BDSG, insofar as special categories of data are processed.

 

Your applicant data will be stored for four months after completion of the application process and if no employment relationship is established. If your applicant data is included in an applicant pool with your consent pursuant to Art. 6 (1) sentence 1 a) DS-GVO, it will be stored for a maximum of twelve months after inclusion in the applicant pool.

 

If an employment relationship is established, the Privacy Policy for Employees applies from the time the employment contract is signed.

 

16. Marketing

If you have given your consent in accordance with Art. 6 (1) sentence 1 a) DS-GVO, we process data for marketing purposes. This includes only the data for which consent has been given in each case. Only persons who have given their consent are affected by this. In this context, no transfer of data to third countries is planned. The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.

 

17. Compliance with legal regulations

We also process your data to fulfill other legal obligations that we have in connection with your use of our services. These include, in particular, retention periods under commercial, trade or tax law.

The legal basis for this processing is therefore Art. 6 para. 1 p.1 lit. c) DS-GVO in conjunction with commercial, trade or tax law, insofar as we are obliged to record and store your data.

 

18. Law Enforcement

Furthermore, we may process your data for the purpose of asserting our rights and enforcing our legal claims. We also process your data in order to be able to defend ourselves against legal claims. Finally, we process your data insofar as this is necessary for the defense against or prosecution of criminal offenses. The legal basis for this is Art. 6 para. 1 p.1 lit. f) DS-GVO, insofar as we assert legal claims or defend ourselves in legal disputes or we prevent or investigate criminal acts.

 

19. Data security

In accordance with Art. 32 DS-GVO, we use appropriate technical and organizational security measures to protect data against manipulation, unauthorized processing and accidental loss of any kind. In particular, our site is SSL / TLS encrypted. In addition, we use data protection-friendly default settings and overall data protection-friendly software. We keep ourselves technically up to date and improve our services at regular intervals in order to continue to maintain the security of data in our services.

 

20. Links

Some sections of our websites contain links to third-party websites. These websites are subject to their own privacy policies. We are not responsible for their operation, including their data handling practices. If you send information to or through such third-party sites, you should review the privacy statements of those sites before sending them any information that can be identified to you.

 

21. Changes

We reserve the right to change this privacy policy at any time due to legitimate interests, in particular in the event of changes to the legal situation. Any changes will be announced by publishing the amended privacy policy on our websites. Unless otherwise specified, such changes will take effect immediately. Therefore, please check this privacy policy regularly to view the most current version.

 

Last updated January 2022