Data protection

We are pleased that you are visiting our website. The protection and security of your personal information when using our website is very important to us. We would therefore like to inform you here about which of your personal data we collect when you visit our website and for what purposes it is used.

This Privacy Policy applies to the online presence of Pro-Pac Ostendorf Plastic Thermoformfolien und Verpackungen GmbH & Co. KG, which is accessible under the domain www.pro-pac.de as well as the various subdomains (“our website”).


Who is responsible and how can you contact us?

Data Controller

for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR)

Pro-Pac Ostendorf Plastic Thermoformfolien und Verpackungen GmbH & Co. KG
Rudolf-Diesel-Straße 25-27 
49377 Vechta
Phone +49.4441.973030
info@pro-pac.de

Data Protection Officer

AGAD Service GmbH
Waldring 43-47
44789 Bochum
datenschutz@pro-pac.de


What is this about?

This Privacy Policy fulfills the legal requirements for transparency in the processing of personal data. Personal data is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, email address, IP address, or user behavior when visiting a website. Information that cannot be linked to your person (or only with disproportionate effort), for example through anonymization, does not constitute personal data.

The processing of personal data (e.g., collection, retrieval, use, storage, or disclosure) always requires a legal basis and a defined purpose.

Stored personal data will be deleted as soon as the purpose of the processing has been achieved and there are no legitimate grounds for further retention. We inform you about the specific storage periods or criteria for storage in the individual processing operations. Irrespective of this, we store your personal data in individual cases for the assertion, exercise, or defense of legal claims and where statutory retention obligations apply.


Who receives my data?

We only transfer your personal data processed on our website to third parties if this is necessary to fulfill the purposes and is covered by a legal basis (e.g., consent or protection of legitimate interests) in the individual case. In addition, we may transfer personal data to third parties if this serves the assertion, exercise, or defense of legal claims. Possible recipients may include law enforcement authorities, lawyers, auditors, courts, etc.

If we use service providers for the operation of our website who process personal data on our behalf within the framework of commissioned processing pursuant to Art. 28 GDPR, they may also be recipients of your personal data. More detailed information on the use of processors and web services can be found in the overview of the individual processing operations.


Do you use cookies?

Cookies are small text files that are sent to your browser by us when you visit our website and stored on your device. As an alternative to cookies, information may also be stored in your browser’s local storage. Some functions of our website cannot be offered without the use of cookies or local storage (technically necessary cookies). Other cookies enable us to carry out various analyses so that we can, for example, recognize the browser you use when you visit our website again and transmit various information to us (non-essential cookies).

With the help of cookies, we can make our website more user-friendly and effective for you, for example by tracking your use of our website and determining your preferred settings (e.g., country and language settings). If third parties process information via cookies, they collect the information directly via your browser. Cookies do not cause any damage to your device. They cannot execute programs or contain viruses.

We provide information about the respective services for which we use cookies in the individual processing operations. Detailed information on the cookies used can be found in the cookie settings or in the consent manager of this website.


What rights do I have?

Under the conditions of the statutory provisions of the General Data Protection Regulation (GDPR), you as the data subject have the following rights:

  • Access pursuant to Art. 15 GDPR to the data stored about you in the form of meaningful information about the details of the processing and a copy of your data;
  • Rectification pursuant to Art. 16 GDPR of inaccurate or incomplete data stored by us;
  • Erasure pursuant to Art. 17 GDPR of the data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the assertion, exercise, or defense of legal claims;
  • Restriction of processing pursuant to Art. 18 GDPR if the accuracy of the data is contested, the processing is unlawful, we no longer need the data and you refuse its deletion because you need it for the assertion, exercise, or defense of legal claims, or you have objected to processing pursuant to Art. 21 GDPR;
  • Data portability pursuant to Art. 20 GDPR, provided that you have provided us with personal data on the basis of consent pursuant to Art. 6(1)(a) GDPR or on the basis of a contract pursuant to Art. 6(1)(b) GDPR and this has been processed by us using automated procedures. You will receive your data in a structured, commonly used, and machine-readable format, or we will transmit the data directly to another controller where technically feasible;
  • Ojection pursuant to Art. 21 GDPR to the processing of your personal data if this is carried out on the basis of Art. 6(1)(e) or (f) GDPR and there are reasons arising from your particular situation, or if the objection is directed against direct marketing. The right to object does not exist if compelling legitimate grounds for processing are demonstrated or if the processing serves the assertion, exercise, or defense of legal claims. If the right to object does not exist for individual processing operations, this is indicated there;
  • Withdrawal of consent pursuant to Art. 7(3) GDPR with effect for the future;
  • Complaint pursuant to Art. 77 GDPR to a supervisory authority if you believe that the processing of your personal data violates the GDPR. As a rule, you can contact the supervisory authority at your habitual residence, your place of work, or our company headquarters.

How is my data processed in detail?

Below we inform you about the individual processing operations, the scope and purpose of data processing, the legal basis, the obligation to provide your data, and the respective storage period. Automated decision-making in individual cases, including profiling, does not take place.

Provision of the Website

Type and scope of processing
When accessing and using our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called log file:

  • IP address of the requesting computer
  • Date and time of access
  • Name and URL of the retrieved file
  • Website from which access is made (referrer URL)
  • Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider

Our website is not hosted by ourselves but by a service provider who processes the aforementioned data on our behalf in accordance with Art. 28 GDPR.

Purpose and legal basis
The processing is carried out to safeguard our overriding legitimate interest in displaying our website and ensuring its security and stability on the basis of Art. 6(1)(f) GDPR. The collection of data and storage in log files is absolutely necessary for the operation of the website. There is no right to object to the processing due to the exception pursuant to Art. 21(1) GDPR. If further storage of log files is required by law, the processing is carried out on the basis of Art. 6(1)(c) GDPR. There is no legal or contractual obligation to provide the data; however, accessing our website without providing the data is technically impossible.

Storage period
The aforementioned data is stored for the duration of the display of the website and, for technical reasons, for a maximum of [7 days] thereafter.

Contact Form for Applicants

Type and scope of processing
We collect and process the personal data of applicants. The corresponding data processing may also take place electronically, for example if applicants submit application documents by email or via a web form available on our website. On our website, we offer you the opportunity to submit applications for advertised positions by email.

Your data will only be stored beyond the current application procedure in an applicant database if you have given us your separate consent to do so.

Purpose and legal basis
The processing of your data in connection with your application is carried out for the purpose of handling your application and deciding on the establishment of an employment relationship on the basis of Section 26 of the German Federal Data Protection Act (BDSG). In the event that your application documents are forwarded to third parties, in particular to companies affiliated with us, or your data is stored beyond the current application procedure, the processing of your data is carried out on the basis of Art. 6(1)(a) GDPR. There is no legal or contractual obligation to provide your data; however, processing your application is not possible without providing the information.

Storage period
We store the collected data for a period of six months from the date the position is filled.

Cookie Info Script

Type and scope of processing
We have integrated Cookie Info Script on our website. Cookie Info Script is a consent solution provided by Cookie Info Script, Barnerstr. 29, 22765 Hamburg, Germany, which enables consent for the storage of cookies to be obtained and documented. Cookie Info Script uses cookies or other web technologies to recognize users and store the consent given or withdrawn.

Purpose and legal basis
The service is used on the basis of the legal obligation to obtain consent for the use of cookies in accordance with Art. 6(1)(c) GDPR.

Storage period
The specific storage period of the processed data is not determined by us but by Cookie Info Script. Further information can be found in Cookie Info Script’s privacy policy at: https://cookieinfoscript.com/legal.html.

Social Media Presence

We maintain fan pages, accounts, or channels on the social media platforms listed below (“Social Media Pages”) in order to provide information and offers within social networks and to offer additional ways to contact us and learn about our services.

In the following, we inform you about the processing of personal data in connection with accessing and using our Social Media Pages.
 
If you contact us via messenger services or direct messages through a social media platform, we generally process your username and any additional information you provide, insofar as this is necessary to process and respond to your request.
 
The legal basis for this processing is Art. 6(1)(f) GDPR (German: DSGVO) (legitimate interests), as the processing is necessary to communicate with users and respond to enquiries. We receive automatically generated statistics regarding our Social Media Pages via the insights or analytics functionalities provided by the social media platforms. These statistics include, in particular, information on page views, likes, page activities, interactions with posts, reach, video views, and demographic information such as the proportion of male and female followers. The statistics provided to us are aggregated and do not allow any conclusions to be drawn about individual users. We are not able to identify you on the basis of this data.
 
You can view the content of our Social Media Pages without being registered or logged in to the respective social media platform. In this case, no user account is required. However, please note that the social media platforms may collect and process data from visitors even if they do not have a user account or are not logged in (e.g. technical data required to display the website). In addition, social media platforms use cookies and similar technologies, over which we have no influence. Further information can be found in the privacy policies of the respective social media platforms (see the links provided above).
 
If you wish to interact with our Social Media Pages, for example by commenting on, sharing, or liking content, or if you wish to contact us via messenger functions, registration with the respective social media platform and the provision of personal data are required. We have no influence over the processing of personal data carried out by the social media platforms. To the best of our knowledge, personal data are processed by the platforms in particular for the provision of their services and for the analysis of user behaviour, including through the use of cookies, pixels/web beacons, and similar technologies. Based on this analysis, interest-based advertising may be displayed both within and outside the respective social media platform.
 
It cannot be ruled out that personal data may be stored and processed outside the EU/EEA and may be disclosed to third parties by the social media platforms. Further information on the scope, purposes, and legal bases of the processing of your personal data, storage periods, deletion, and the use of cookies and similar technologies can be found in the privacy policies and cookie policies of the respective social media platforms. These policies also contain information about your rights as a data subject and your options to object to data processing.

Instagram-Page
We operate an Instagram page / account. When you visit our Instagram presence, Meta Platforms Ireland Ltd. (Instagram) processes personal data, in particular your IP address and information stored on your device in the form of cookies. This processing serves, among other things, to provide us with anonymized statistical information (“Insights”) on the use of our Instagram page. The Insights data made available to us does not allow us to draw conclusions about individual users. We use this data solely to analyse the use of our Instagram presence and to improve our online offering. Further information is available at: https://www.facebook.com/help/pages/insights (Note: By clicking the link, you will be redirected to the website of the social network Facebook, which is also part of the Meta group. The information provided via the link applies equally to the social network Instagram.)

We process personal data that you provide via our Instagram page (e.g. name, publicly available profile information, messages, and comments) exclusively for the purpose of communication and interaction with you.

The processing of personal data is based on our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR (German: DSGVO). If you have given consent to Instagram, processing is additionally based on Art. 6 para. 1 lit. a and Art. 7 GDPR (German: DSGVO).

Instagram is primarily responsible for the processing of personal data. Our access to this data is limited. The assertion of data subject rights (e.g. access, rectification, deletion, objection) is therefore most effective when addressed directly to Instagram. Data subject rights may also be asserted against us, as we and Meta Platforms Ireland Ltd. act as joint controllers within the meaning of Art. 26 GDPR (German: DSGVO).

Instagram assumes primary responsibility under the GDPR (German: DSGVO) for the processing of Insights data and determines the storage duration of cookies. We have no influence on this processing.

Data transfer to third countries: Personal data may be transferred to countries outside the European Union, in particular the United States. Meta relies on appropriate safeguards pursuant to Art. 44 et seq. GDPR (German DSGVO), such as adequacy decisions or standard contractual clauses.

Storage duration: We process and store personal data only for as long as this is necessary for the respective purposes or as required by statutory retention obligations. The storage duration of cookies and Insights data is determined by Instagram.

Further information on joint controllership can be found in the Page Controller Addendum: https://www.facebook.com/legal/terms/page_controller_addendum

Further information on the scope, purposes, storage duration, and the use of cookies and similar technologies can be found in Instagram’s Privacy Policy:
https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect

This information is also available in the help section of the Instagram website via the following link: https://help.instagram.com/581066165581870.