Data Protection Statement

Thank you for your interest in our website and data protection declaration. 

Data Protection

Welcome to our website. Below you will find our data protection declaration. Please note that this translation in English is for informational purposes. In the case of any legal questions, the valid version is the original in German language.

Contact details of the person responsible (controller)

OPTIMA packaging group GmbH
Steinbeisweg 20
74523 Schwäbisch Hall
 
+49 791 506 – 0
+49 791 506 - 9000
info@optima-packaging.com


Contact data of our data protection officer

Hanspeter Preißler
Steinbeisweg 20
74523 Schwäbisch Hall
+49 791 506 – 0
+49 791 506 - 9000
datenschutz@optima-packaging.com

a) Purpose of data collection and processing 

Every time a user accesses a page of our website and every time a file stored on the website is called up, access data about this process is stored in a log file. Each data record consists of:

(1) the page from which the file was requested,
(2) the name of the file,
(3) the date and time of the request,
(4) the amount of data transferred,
(5) the access status (file transferred, file not found, etc.),
(6) a description of the type of operating system and web browser used,
(7) the client IP address.

The client IP address is used for the purpose of transmitting the requested data; it will be made anonymous by deleting the last digit block (Ipv4) or the last octet (Ipv6) once the technical requirement no longer applies. 

b) Duration of storage

The data is stored each time a user accesses a page of our website and each time our website is accessed and is deleted as soon as it is no longer required for the purpose of collection, which is the case when the visitor leaves our website.

c) Legal basis

The temporary storage of the aforementioned data is carried out on the legal basis of Art. 6 para. 1 letter f of the General Data Protection Regulation (GDPR). The legitimate interest lies in the provision of our website.

d) Possibility of objection and deletion

You may object to this processing.
 

a) Purpose of data collection and processing

At the time of placing an order, Optima collects name, address(es), bank details, e-mail address, telephone or fax number, client IP address. This information is collected, stored and processed solely for the purpose of establishing or executing the contract, which includes in particular the billing and processing of the contract. 

Personal data will only be passed on to third parties if this is necessary for the purpose of the execution of the contract, e.g. when commissioning a mail order company or a payment service provider. 

b) Duration of storage

The data will be deleted as soon as they are no longer necessary for the purposes for which they were collected or processed in any other way. Under German law, this period is five years for personal data subject to § 147 AO and ten years for personal data subject to § 257 HGB. The periods begin at the end of the calendar year in which the data was collected.

c) Legal basis

The storage of the data described above is based on Art. 6 para. 1 lit. b and lit. c of the General Data Protection Regulation (GDPR).

d) Possibility of objection and deletion

Since there are legally standardised retention periods here and the data must remain stored and processed for contract execution, an objection or deletion is not possible.
 

a) Purpose of data collection and use

You can register to receive information according to the subjects you are interested in. When you fill out an online form, the information you enter during the registration process is sent to us. This information may include your e-mail address, last name, first name, IP address, and your choice of subject(s). Details of the campaign are also noted. We record the IP address and the time and date when you activate the Double-Opt-In link because this is required in order to be able to send the information by e-mail.
 
Once we have received your permission, the Inxmail emarketing system processes data using the so-called unique count procedure:
  • the date and time when images contained in the mailing are retrieved
  • the type of device and software used to display the email when images are retrieved
  • the date, time and type of links clicked on in the mailing.
 
This data is recorded and stored for each person who receives the eMailing. This method enables us to identify who is interested in which subjects and ensure the relevance of future mailings for our readers according to their interests. If you object to this procedure, personalised data will be made anonymous.

b) Duration of storage

Data will be deleted as soon as they are no longer necessary to achieve the purpose they were collected for and the person has unsubscribed from the mailing list. In accordance with this, the statute of limitations requires us to store information for ten years after dispatch of the last eMail, for the purpose of proof in the event of queries regarding eMailing consents.

c) Legal basis

Your  data (as described above) will only be stored on the legal basis of “prior consent”. (GDPR Article. 6 para. 1[a] ). The possibility of a ‘withdrawal of consent at any time’ does not affect the legality of the ‘processing of personal data based on consent’ prior to withdrawal.

d) Possibility of objection and deletion

You can withdraw your permission to receive information by e-mail at any time with effect for the future by unsubscribing from the mailing list(s). You can also object to the individual evaluation of your e-mails according to the ‘unique count procedure’ described above. You can do this by sending us an eMail, or by clicking on the appropriate link in the Footer of each eMailing .

a) Purpose of data collection and use

You can contact us by e-mail, fax or telephone. We store the data transmitted to us and provided by you, to process your request or enquiry. These data include: name, address, e-mail address, telephone and/or fax number, date and time of the inquiry and the description of the request, if necessary contract data, if the inquiry takes place in the context of a contract admission or - completion. The data will not be passed on to third parties. The data are used to process your contact request.

b) Duration of storage

As soon as the data is no longer necessary to achieve the purpose, it is deleted, which is the case when the conversation has been completed and the facts have been clarified and there are no contractual or tax retention periods to the contrary. This period is five years for personal data subject to § 147 AO and ten years for personal data subject to § 257 HGB. The periods begin at the end of the calendar year in which the data was collected.

c) Legal basis

The data described above will only be stored on the legal basis of Art. 6 para. 1 lit. a EU Basic Regulation on Data Protection (DSGVO) with prior consent in connection with the request, Art. 6 para. 1 lit. b EU Basic Regulation on Data Protection (DSGVO) in connection with the initiation or fulfilment of a contract or Art. 6 para. 1 lit. f EU Basic Regulation on Data Protection (DSGVO). Processing the contact request and preventing misuse of the contact request is within Optima’s legitimate interests. A withdrawal of consent at any time does not affect the legality of the processing of personal data based on the consent prior to the withdrawal.

d) Possibility of objection and deletion

You may at any time withdraw your consent to data processing and to object to the storage of your data. The data stored for the operation is then deleted. If a contract has been concluded, the clause II.2. above applies.

 

a) Purpose of data collection and processing 

The client IP address is collected for use of the Google Analytics service. This website uses Google Analytics, a web analysis service of Google Inc. "("Google"). Google Analytics uses so-called "cookies", text files which are stored on your end device to enable an analysis of the use of the website. The information generated by the cookie about the use of this website is usually transferred to a Google server in the USA and stored there. However, due to the activation of IP anonymisation on this website, Google will reduce the IP address of the person concerned within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and be shortened there. Google will use this information on our behalf, to evaluate the use of the website, to compile reports on the website activities and to provide us with further services associated with the use of the website and the Internet. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data. 

b) Duration of storage

As soon as the data are no longer necessary to achieve the purpose, they will be deleted, which is the case when the anonymisation within the European Union has been completed. This takes less than a second.

c) Legal basis

The storage of the data as described above is based on Art. 6 para. 1 letter f of the General Data Protection Regulation (GDPR). The legitimate interest lies in the fact that we are able to analyse the use of the website by all users in its entirety without drawing conclusions about the behaviour of identifiable persons; this enables us to optimise our website and our offers.

d) Possibility of objection and deletion

You can prevent the storage of cookies by changing the settings of your browser software; however, we must point out that if you do this, not all functions of this website may be fully functional. In addition, you can prevent the collection of data generated by the cookie and relating to the use of the website (including the IP address) from Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en.
 

We use the analysis service Matomo. Matomo uses cookies - small files that are placed in the browser of your device - to send information to our server, which can be used to evaluate the interests of visitors and to generate statistics about traffic on the website. Matomo only records IP addresses completely for a short time, shortens them by the last number block (IPv4) or the last octet (IPv6) before they are processed further, so that data subjects remain anonymous. 

a) Duration of storage

As soon as the data are no longer necessary to achieve the purpose, they are deleted, which is the case when anonymisation has taken place. For technical reasons, this process takes less than one second.

b) Legal basis

The storage of data described above is based on Art. 6 para. 1f of the General Data Protection Regulation (GDPR) and § 15 para. 3 TMG (German law: Tele-Medien Gesetz). It is a legitimate interest of Optima to analyse the surfing behaviour of non-identifiable users; this enables us to optimise our website and our offers.

c) Possibility of objection and deletion

Your website browser can provide you with instructions on how to block the use of cookies.
You also have the following possibility to opt-out of analysis by Matomo. 


If you choose to opt-out, Matomo will install a cookie in your browser that prohibits Matomo from tracking your usage behaviour. Data will then neither be used nor stored. If you opt-out of tracking, this is recorded using a cookie:  if all cookies are deleted, this may include the ‘opt-out cookie’ as well, so it may be necessary to repeat the process of setting the ‘opt-out cookie’. If the use of cookies is blocked in the user's browser, Matomo will not collect any data.

 

a) Purpose of data collection and use

We do not collect any personal data through buttons on social networks. For the sake of completeness, however, we will explain the technical background. We only use deactivated buttons of the social networks of Facebook, Linkedin, Xing and Youtube. This means that no data is transmitted to these networks. By clicking on the buttons, you choose to activate them and thus establish a connection to the servers of these social networks and thus to transmit data to them: the terms of this transfer are covered by the agreement between you and the social network concerned. Activating the button leads to access to social network content. The type, purpose and scope of data collection and its use can be found in the data protection statements of the corresponding social networks. 

After a second click on the button the visitor can send their recommendation to the social networks. If you would like to recommend several pages, then consent is required on each page. If you want the social network to have permanent access to your data, you can permanently activate the buttons. For this purpose, the appropriate check mark can be placed under a gear icon with the result that the selected button is always directly active. 

b) Duration of storage

The duration of the storage depends on the specifications of the social networks.

c) Legal basis

The operators of the social networks can inform you about the legal basis. 

d) Possibility of objection and deletion

You can also change your consent to the social network and deactivate the buttons via the gear icon which you used to activate the social media buttons.
 

The right to information in accordance with Art. 15 of the General Data Protection Regulation (GDPR).
You have the right to the following information:

(a) the purposes of the processing;

(b) the categories of personal data being processed;

(c) the recipients or categories of recipients to whom the personal data have been or are disclosed, in particular recipients in third countries or international organisations;

(d) if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration;

(e) the existence of a right of rectification or deletion of your personal data or of a restriction on processing by the controller or of a right of opposition to such processing;

(f) the right of appeal to a supervisory authority;

(g) if the personal data are not collected from the data subject, all available information on the origin of the data;

(h) the existence of automated decision-making, including profiling in accordance with Article 22(1) and (4) of the Basic Regulation on Data Protection (DSGVO) and - at least in these cases - meaningful information on the logic involved and the scope and intended effects of such processing for the data subject.

(i) where personal data are transferred to a third country or an international organisation, the data subject shall have the right to be informed of the appropriate guarantees in accordance with Article 46 of the Basic Regulation on Data Protection (DSGVO) in connection with the transfer.

We will provide you with a copy of the personal data that is the subject of the processing. For all other copies that you request, Optima may charge an appropriate fee based on the administrative costs.
You have the right to ask us to rectify any inaccurate personal data without delay. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data, including by means of a supplementary declaration.
You have the right to ask us to delete your personal data immediately and we are obliged to delete your personal data immediately if one of the following reasons applies:

a) if the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;

b) if you withdraw your consent to processing (Art. 6 para. 1a or Art. 9 para. 2a of the General Data Protection Regulation), and there is no other legal basis for the processing;

c) if you object to processing pursuant to Art. 21 para. 1 of the General Data Protection Regulation (GDPR) and there are no overriding legitimate grounds for the processing, or if you object to processing pursuant to Art. 21 para. 2 of the General Data Protection Regulation (GDPR);

d) if your personal data have been processed unlawfully;

e) if the deletion of personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which Optima is subject;

f) if the personal data was collected in relation to information society services offered to children under the age of 16 (Art. 8 para. 1 of the General Data Protection Regulation).
You have the right to require Optima to restrict processing if one of the following conditions is met:

(a) if you disagree with the accuracy of your personal data, we will restrict processing until  the accuracy of your personal data can be verified;

(b) if the processing is unlawful and you prefer that the use of the personal data be restricted, instead of deleted;

(c) if Optima no longer needs to process the personal data, but you need the data for the purpose of asserting, exercising or defending claims; or

(d) if you have objected to processing pursuant to Art. 21 para. 1 of the General Data Protection Regulation (GDPR), as long as it is not yet clear whether Optima’s legitimate interests outweigh yours.
 
If you have informed Optima about: corrections to your personal data in accordance with Art. 16 of the General Data Protection Regulation (GDPR); a deletion in accordance with Art. 17 (1) of the General Data Protection Regulation (GDPR); or a restriction on processing in accordance with Art. 18, and if Optima has informed all recipients to whom your personal data have been disclosed of your request (unless this was impossible or disproportionate), then you have the right to be informed of the recipients by Optima.
You have the right to receive the personal data that you have provided to Optima in a structured, current and machine-readable format and have the right to transmit this data to another controller without our interference, provided that:

a) the processing is based on: your consent (Art. 6 para. 1 lit a or Art. 9 para. 2a GDPR); or on a contract (Art. 6 para. 1b GDPR)

and

(b) processing is carried out by means of automated methods.
The rights and freedoms of other persons must not be affected by this.
When exercising the right to data transferability pursuant to paragraph 1, you have the right to request that the personal data be transferred directly by us to another data controller, insofar as this is technically feasible.

The exercise of the right to data transferability does not affect your right to deletion (as described in Art. 17 of GDPR). The right to transferability shall not apply to processing necessary for the performance of a task in the public interest; or in the exercise of public authority conferred on the controller.
 
You have the right to object at any time to the processing of your personal data on the basis of Article 6(1) (e) or (f) of GDPR for reasons arising from your particular situation; this also applies to profiling based on these provisions.

We will stop processing your personal data unless we can prove that the processing is absolutely necessary and worthy of protection, and that this outweighs your interests, rights and freedoms; or that the processing serves to assert, exercise or defend legal claims.

Where your personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purposes of such advertising, including profiling in so far as it is related to such direct marketing. If you object to processing for direct marketing purposes, your personal data will no longer be processed for this purpose.

You may withdraw your consent at any time. However, the collection and processing that has taken place up to this point remains legal.
You shall not be subject to a decision based exclusively on automated processing - including profiling - which has legal effect against you or significantly impacts you in a negative manner.

This does not apply if the decision:

(a) is necessary for the conclusion or performance of a contract between yourself (or your employer) and us,

(b) is admissible by law of the Union or of the Member States to which we are subject, and that law contains appropriate measures to safeguard your rights, freedoms and legitimate interests; or

(c) you have given your express consent.
These decisions may not be based on special categories of personal data (as described in Art. 9 para. 1 GDPR) unless Art. 9 para. 2 a or g of the General Data Protection Regulation (GDPR) applies and appropriate measures have been taken to protect your rights, freedoms and legitimate interests.
In the above-mentioned examples of your rights, we take appropriate measures to protect your rights and freedoms as well as your legitimate interests, including at least the right to obtain the intervention of a person on our side, to state his own position and to challenge the decision.
If you consider that the processing of your personal data is contrary to the General Data Protection Regulation (GDPR) you have the right of appeal to a supervisory authority in the Member State of his place of residence, his place of employment or the place where the suspected infringement occurred.

The supervisory authority with whom the complaint has been lodged will inform you of the status and results of your complaint, including the possibility of a judicial remedy under Article 78 of the General Data Protection Regulation (GDPR).
Without prejudice to any available administrative or extra-judicial remedy, including the right of appeal to a supervisory authority: if you consider that your rights have been infringed as a result of processing of your personal data in breach of the General Data Protection Regulation (GDPR) you have the right to an effective judicial remedy under Article 77 of the General Data Protection Regulation (GDPR).

Any action against us by a processor shall be brought in the courts of the Member State in which we or the processor have a place of business. Alternatively, such actions may also be brought before the courts of the Member State in which the person concerned is resident, unless the controller or processor is a public authority of a Member State acting in the exercise of its public powers.
The data protection statement was updated and published on May 15th, 2018.