Privacy policy

1 Data controller

The responsible party pursuant to Art. 4 para. 7 of the EU General Data Protection Regulation (GDPR) is

Saubermacher Recycling GmbH
Brockmannstraße 39
D-63075 Offenbach am Main
Telephone: +49 (0) 69 86 787 3014
E-mail: office@saubermacher-recycling.com

2 Data processing of people in the corporate/business environment

2.1 Data processing pursuant to Art. 17 GDPR

We process the data of individuals that are provided to us as part of an enquiry by e-mail or to initiate and conclude a contract or business relationship.

2.2 Data processing pursuant to Art. 17 GDPR

In addition, we also process data from persons who are part of a contractual relationship which we have received as part of disclosures from third parties (e.g. managing directors send us data about their employees).

2.3 Data subjects

We process the following data of interested parties: Company, name of contact person and business contact and address details.

We process the following data of customers: Company, title and name of contact persons, business address and contact details, bank details, contract data.

We process the following data of suppliers and business partners: Company, title and name of contact persons, business address and contact details, bank details, contract data.

2.4 Passing on data

We will only pass on personal data to third parties if this is required for the purpose of contact processing and fulfilment or if legal stipulations require us to do so.

2.5 Retention/erasure of data

• Elapsing of contractual obligations: In the event that there are contractual provisions that prescribe for how long personal data must be retained, the data controller shall ensure that these retention periods are adhered to. Once these periods have elapsed, the data shall be deleted or anonymised by the data controller.
• Revocation of consent: In the event that a data subject revokes consent for the processing of personal data, the data controller shall delete the data, provided that there is no other legal basis for processing.
• Elapsing of statutory obligations: In some cases, there may be exceptions that not only permit but obligate a data controller to continue to retain personal data after statutory retention periods elapse or upon revocation of consent. This may be the case if there are legally prescribed retention periods that require retention of personal data for a defined period of time, e.g. retention of tax-related or accounting records. Once these statutory periods have elapsed, the data controller shall ensure that the data are anonymised or deleted.

2.6 Contact via email

When you make contact with us by e-mail, the data you have provided is stored by us on the basis of your consent in order to answer your questions. We erase the data gathered in this context after processing is no longer required, or we restrict the processing if there are legal obligations to preserve records.

2.7 Publication of the names of authors

We are legally obligated to disclose the names of the authors of image data (photographs or videos) whenever image data are published. We delete these personal data automatically as soon as we discontinue use of the image data.

2.8 Legal basis

Legal bases of data processing are

• the initiation and fulfilment of a contract in accordance with Art. 6 Par. 1 b GDPR.
• legal obligations in accordance with Art. 6 para. 1 line c GDPR, (e.g. legally prescribed preserving of records or documentation duties, publication obligations in accordance with the Copyright Act).
• the legitimate interest of our company within the sense or Art. 6 para. 1 line f GDPR (e.g. the use of software)
• Art. 6 para. 1 line a GDPR when obtaining consent (e.g. when processing image data or for advertising purposes).

3 Collection of personal data when making contact via our website

If you have allowed us to contact you via our web form or you have sent us a message, then we store your data that are required to make contact. This includes your name and your e-mail address. We delete the data as soon as storage is no longer required or if you object to the processing.

Legal basis: Art. 6 para. 1 lit. a GDPR

4 Job applications

In the event that you send us your application documents, we process your personal data contained in those documents as well as your CV and your certificates for the purpose of personnel selection and recruitment. If your application is rejected, we will delete your documents 7 months after informing you of the rejection.

Legal basis: Art. 6 par. 1 line b GDPR

If we wish to keep your data on file so that we may contact you at a later point in time, we will contact you with our own request for consent. If you expressly grant your consent, we will store your application documents. If there is no further opportunity for recruitment with us within a period of a year, we will delete all of your application data one year after you have granted your consent.

Legal basis: Art. 6 para. 1 lit. a GDPR

5 Data processing when visiting our website

In the case of purely informational use of the website, we collect only the personal data that your browser transmits to our server (server log files). If you would like to view our website, we at most collect the data that is technically necessary for us to display our website to you and to ensure stability and security:

• IP address
• Date and time of the enquiry
• Time Zone Difference to Coordinated Universal Time (UTC)
• Content of the requirement (concrete page)
• Access Status / HTTP status code
• Website from which the enquiry is made
• Browser
• Operating system and its interface
• Language and version of the browser software.

This data is not merged with personal data sources. We reserve the right to check this data retrospectively if concrete indications of illegitimate use come to our knowledge and to pass on the data – if there has been a hacker attack – to law enforcement authorities. There is no passing on to third parties beyond this.

Legal basis: Art. 6 par. 1 line f GDPR

5.1 Cookies

During the use of our website, cookies will be stored on your computer. Cookies are small text files that are deposited on your hard drive by your browser and through which certain information flows to the party placing the cookie (in this case us or the service provider). Cookies cannot carry out programmes or transmit viruses to your computer.

Through the cookie, you can be identified when revisiting the website, without data that you previously entered needing to be entered again.

The information contained in the cookies is used for example to establish whether you are logged in, or what data you have already entered, or to recognise you as a user when a connection is established between our web server and your browser.

We distinguish between technical cookies, which are used solely to ensure operation of a website, and other cookies, which are saved to your device by us or by third parties for the purpose of statistical analysis, tracking or advertising/marketing.

Legal basis: Art. 6 para. 1 line f GDPR (for technical cookies), Art. 6 para. 1 line a GDPR (for all other cookies)

5.2 Data processing in the USA

We cannot rule out the possibility of your data being transmitted to the USA when your visit our website. If this is the case, we will draw attention to this in a separate location in this privacy policy.

The GDPR sets out ‘suitable guarantees’ for data transmission to a third country or to an international organisation pursuant to Art. 46 GDPR. These are not available for the USA.

Potential risks that cannot currently be excluded for you as a data subject in relation to the aforementioned information are in particular:

• Your personal data may be passed on to other third parties by the respective service provider (e.g. American authorities) beyond the actual purpose of order fulfilment.
• You may not be able to exert your right to access to information from the respective service provider.
• There may be a higher likelihood that incorrect data processing can occur, as the technical and organisational measures for protecting personal data do not correspond quantitatively and qualitatively to the full extent to the GDPR requirements.

With your consent to the processing of (advertising and marketing) cookies, you are explicitly agreeing to data transmission to the USA. You can remove cookies stored on your PC yourself at any time by deleting the temporary internet data.

Legal basis: Art. 6 para. 1 lit. a GDPR

6 Data processing when using the Borlabs Cookie

Our website uses the cookie consent management tool ‘Borlabs Cookie’ from Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, Germany.

The service saves an essential cookie (Borlabs Cookie) to your device, which is used to save your cookie consent. By integrating the Borlabs Cookie on our own server, we guarantee that no data will be passed on to third parties.

For further information, please see the privacy policy of Borlabs at https://de.borlabs.io/datenschutz/.

Legal basis: Art. 6 par. 1 line f GDPR

7 Data usage for Google services

We have concluded a contract with Google Ireland Limited (“Google”), a company registered and operated according to Irish law (register number: 368047) with its head office at Gordon House, Barrow Street, Dublin 4, Ireland. It can happen even so that data from Europe is transmitted to the USA, which we as a company cannot influence.

Use of this service means that personal data are transferred to the USA or that a transfer of personal data to the USA cannot be ruled out! – Please see 5.2 this statement for further information.

7.1 Google Analytics

We have integrated Google Analytics into our website, a web analysis service provided by Google, that allows us to analyse visitor flows and the time that visitors spend on our website.

This website uses the function ‘Activation of IP anonymisation’ (i.e. that Google Analytics has been extended by the code ‘gat._anonymizeIp();’) in order to ensure anonymised collection of IP addresses, so-called IP masking) This means that your IP address will be stored by Google in shortened form within Member States of the European Union or in other states that are contracting parties to the Agreement on the European Economic Area. The full IP address will only be transferred to a Google server in the USA and shortened there in exceptional cases.

According to Google, Google will use the gained information to evaluate your use of the website, to compile reports about website activity and to provide further services to us relating to website usage and Internet usage. The IP address transmitted from your browser as part of Google Analytics is not merged with other Google data. Google may, however, transmit this information to third parties, insofar as this is legally mandatory or third parties are processing this data on behalf of Google. You can disable cookies using the relevant settings in your browser. We would like to point out, however, that in this case you may not be able to use all the functions of the websites to the full extent. Furthermore, you can prevent the collection of the data generated by the cookie relating to your website use (including your anonymised IP address), as well as the processing of this data by Google, by downloading and installing the browser plugin available under the following link (https://tools.google.com/dlpage/gaoptout?hl=de).

Further information on terms of use and data protection is available at
https://www.google.com/analytics/terms/de.html bzw.
https://support.google.com/analytics/answer/6004245?hl=de.

Legal basis: Art. 6 para. 1 lit. a GDPR

7.2 Google Tag Manager

To identify your user behaviour, we use the so-called Google Tag Manager. The Google Tag Manager is a solution with which the marketer can manage website tags through an interface. The tool itself (that implements the tags) is a domain without cookies and does not collect any personal data. The tool triggers other tags, which may in certain circumstances collect data. Google Tag Manager does not access this data. If there has been a deactivation at a domain or cookie level, this remains in place for all tracking tags that were implemented with the Google Tag Manager.

Further information is available here: https://www.google.com/intl/de/tagmanager/faq.html.

If you use the SSL search, the encrypted search function of Google, the search words are usually not sent as part of the URL in the reference URL. There are, however, some exceptions, for example if you use certain less common browsers. You can find further information about SSL search here. Search enquiries or information in the reference URL may also in certain circumstances be viewed by Google Analytics or an Application Programming Interface (API). In addition, advertisers may receive information about the exact search words through which a click on an advertisement was prompted. https://policies.google.com/faq?hl=de

Legal basis: Art. 6 para. 1 lit. a GDPR

8 Data processing when using Adobe Typekit

We use the Adobe Typekit service to design our website. This is a service provided by Adobe Systems Software Ireland Companies, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland, which gives us access to a library of fonts. In order to integrate the fonts that we use, your browser must establish a connection to an Adobe server in the USA and download the font required for our website. This tells Adobe that our website was accessed from your IP address. Further information about Adobe is provided in Adobe’s privacy policy, which is available here: https://www.adobe.com/de/privacy/policy.html

Calling the libraries automatically establishes a connection to the operator of the library. Information on the use of your data by Adobe Fonts can be found at https://typekit.com/ and in the privacy policy: https://www.adobe.com/de/privacy/policies/typekit.html 

Use of this service means that personal data are transferred to the USA or that a transfer of personal data to the USA cannot be ruled out! – Please see 5.2 this statement for further information.

Legal basis: Art. 6 para. 1 lit. a GDPR

9 Data processing when using Akamai CDN

We use the Akamai CDN to enhance the loading speed of the website. The provider of the service is Akamai Technologies, Inc, 145 Broadway Cambridge, MA 02142, USA. Information about your use of our website (e.g. your IP address) is transmitted to Akamai.

Use of this service means that personal data are transferred to the USA or that a transfer of personal data to the USA cannot be ruled out! – Please see 5.2 this statement for further information.

More information can be found in the privacy statement of Akamai at https://www.akamai.com/legal.

Legal basis: Art. 6 para. 1 lit. a GDPR

10 Your rights

You have the following rights with respect to the personal data concerning you:

• Right to access, rectification and erasure
• Right to restriction of the processing
• Right to objection to the processing
• Right to data portability

Please direct your enquiries and concerns by e-mail to datenschutz@saubermacher-recycling.com or use the given contact details.

If you believe that we are contravening German or European data protection law during the processing of data and have therefore infringed your rights, please contact us to clarify any questions.

You also have the right to lodge a compliant with a supervisory authority, such as the Hesse data protection authority which is responsible for us:

the Hesse commissioner for data protection and freedom of information, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany, telephone: +49 611 1408 – 0, E-mail: poststelle@datenschutz.hessen.de, https://datenschutz.hessen.de/

11 Changes to this privacy policy

We reserve the right to make adjustments to our data privacy policy from time to time. We publish all changes to the privacy policy on this page. Please note the current version of our privacy policy.