DATA PROTECTION DECLARATION

This data protection declaration (Version: GDPR 1.0 from 2018-05-23) was produced by:
Deutsche Datenschutzkanzlei Datenschutz-Office Munich –
www.deutsche-datenschutzkanzlei.de

 

Data protection
We, IWK Verpackungstechnik GmbH, are responsible for this online offering and, as the provider of a teleservice, must inform you at the beginning of your visit to our online offering, about the type, scope and purpose of the collection and use of personal data in a precise, transparent, understandable and easily accessible way, in clear and simple language. The contents of the information must be retrievable for you at all times. We are therefore obliged to inform you of which personal data will be collected or used. Any information relating to an identified or identifiable natural person is described as personal data.

We place great value on the security of your data and compliance with the data protection regulations. The collection, processing and use of personal data is subject to the regulations of the European and national laws currently in force

We would like to show you in the following data protection declaration how we handle your personal data and how you can make contact with us:

IWK Verpackungstechnik GmbH
Lorenzstrasse 6
76297 Stutensee
Germany

Telephone: +49 7244 968 0
Email: info@iwk.de

Commercial register-No.: HRB 10 27 76
Managing director: Maria Perrella, Svend Weidemann

 

Our data protection officer
If you have questions, you can contact our data protection officer as follows:
Alissa Lenz, Deutsche Datenschutzkanzlei – Datenschutzkanzlei Lenz GmbH & Co. KG
Bahnhofstraße 50, 87435 Kempten, Germany
E-Mail: alissa.lenz@deutsche-datenschutzkanzlei.de

A. General

For the sake of easier reading, no gender-specific distinction is made in our data protection declaration. The terms used apply, in the context of equal treatment, to both genders.

The meaning of the terminology used, for example ‘personal data’ or its ‘processing’ can be taken from Article 4 of the EU-General Data Protection Regulation (GDPR).

The users’ personal data processed in the context of this online offering, include inventory data (e.g. customer’s name and address), contract data (e.g. services used, name of person responsible, payment information), usage data (e.g. Websites of our online offering visited, interest in our products) and content data (e.g. input into the contact form).

‘User’ includes all categories of persons affected by the data processing. These include, for example, our business partners, customers, interested parties and other visitors to our online offering.


B. Specific

Data protection declaration
We guarantee that we only collect, process, store and use your incoming data in connection with the processing of your request, as well as for internal purposes and providing the services that you have requested or to make content available.

Basis of data processing
We process the user’s personal data only in compliance with the relevant data protection regulations. The user’s data are only processed when the following statutory permission exists: 

  • in order to deliver our contractual performance (e.g. Processing orders) and online services
  • processing is required by law
  • your consent is given
  • on the basis of our legitimate interests (i.e. interest in the analysis, optimization, and economic operation and security of our online offering in the sense of Art. 6 para. 1 lit. f. GDPR, in particular range measurement, production of profiles for advertising and marketing purposes, as well as the collection of access data and the use of services from third party providers)

We would like to show you where the main legal grounds are regulated in the GDPR:

Consent

Art. 6 para. 1 lit. a. and Art. 7 GDPR

Processing to deliver our contractual performance and carrying out contractual measures

Art. 6 para. 1 lit. b. GDPR

Processing to fulfil our legal obligations

Art. 6 para. 1 lit. c. GDPR

Processing to safeguard our legitimate interests

Art. 6 para. 1 lit. f. GDPR

 

Data transfer to third parties
Data is only passed to third parties within the framework of the legal provisions. We only pass user’s data to third parties when this is, for example, necessary for contractual purposes or based on our legitimate interest in the economic and the effective operation of our business.

In the event that we use subcontractors to provide our services, we take suitable legal precautions, as well as appropriate technical and organizational measures, to provide protection for personal data in accordance with the relevant legal provisions.

Data transfers to third countries or an international organization
Third countries are countries in which the GDPR is not a directly applicable law. This basically includes all countries outside the EU, respectively, the European Economic Area.

No data is transferred to a third country or an international organization without your consent or without a statutory basis.

Length of storage of your personal data
We adhere to the principles of data economy and data avoidance. This means the data you make available to us is only retained as long as it is needed to fulfil the previously named purposes or as laid down by the manifold storage periods provided for by the legislator. If the relevant purpose no longer exists, or after expiry of the appropriate period, your data is routinely blocked, or erased, in accordance with the statutory provisions

We have developed a company-internal concept to guarantee this procedure.

Making contact
If you make contact with us by email, you consent to electronic communication. Personal data will be collected in the context of contacting us. Which data is collected in the case of a contact form, can be seen on the respective contact form. Your data are transmitted with SSL encryption. The statements which you make will be stored exclusively for the purpose of processing your inquiry and for possible follow-up questions.

We would like to tell you the legal grounds:

Processing to fulfil our performance and carry out contractual measures

Art. 6 para. 1 lit. b. GDPR

Processing to safeguard our legitimate interests

Art. 6 para. 1 lit. f. GDPR

We use software to maintain our customer data (CRM system) or comparable software on the basis of our legitimate interests (processing users’ enquiries efficiently and quickly)

For this, we have concluded an order processing contract which the provider, in which the provider is obliged to process user data only in accordance with our instructions and in compliance with the EU level of data protection.

We would like to advise you that emails can be read or changed, unnoticed and without authorization, during transmission. We would also like to bring to your attention that we use software to filter unwanted emails (spam filter). Emails can be rejected by the spam filter if they are wrongly identified as spam due to the presence of certain characteristics.

What rights do you have?
a. Right to information
You have the right to obtain information about your stored data without charge. On request, we will tell you in writing, in accordance with current law, what personal data about you we have stored. This also includes the origin and recipient of your data as well as the purpose of the data processing.

b. Right to rectification
You have the right to have your data which is stored by us, corrected, if it is incorrect. You can demand a limitation to the processing of your personal data, e.g. if the accuracy of your personal data is contested.

c. Right to blocking
Furthermore, you can have your data blocked. So that a blocking of your data can be taken into account at any time, the data must be held in a lock file for control purposes.

d. Right to erasure
You can also demand the erasure of your personal data, so long as no legal storage obligation exists. If such an obligation exists, we will block your data on request. If appropriate statutory requirements are present, we will also erase your personal data without a request from yourself.

e. Right to data transferability
You are entitled to demand that the personal data transferred to us is made available in a format which enables it to be transferred to another location.

f. Right to complain to a supervisory authority
You have the option of approaching a data protection supervisory authority with a complaint.

g. Right to object
You have the option to object at any time to the use of your data for internal purposes with future effect. For this, it is sufficient to send an appropriate email to alissa.lenz@deutsche-datenschutzkanzlei.de
However, such an objection does not affect the legality of processing procedures which we have already carried out. This does not affect data processing in respect of other legal bases, for example, such as contract initiation (see above).

Protection of your personal data
We take state of the art contractual, organizational and technical security measures to ensure compliance with the provisions of the data protection laws and therefore, to protect the data which we process against accidental or deliberate manipulation, loss, destruction or access by unauthorized persons.

In particular, our security measures include the encrypted transfer of data between your browser and our server. 256-bit-SSL (AES 256) encryption technology is used for this. This includes our IP address.

Thereby your personal data is protected in the context of the following points (extract):
a.)   Ensuring the confidentiality of your personal data
To ensure the confidentiality of the personal data which we store, we have taken various measures to control access.

b.)   Ensure the integrity of your personal data
To ensure the integrity of the personal data which we store, we have taken various measures to control transfer and input.

c.)   Ensure availability of your personal data
To ensure the availability of the personal data which we store, we have taken various measures to control orders and availability.

The security measures employed are continually improved in accordance with technical development. Despite these precautions, because of the insecure nature of the internet, we are unable to guarantee the security of your data transfers to our online offering. For this reason, all data transfers from you to our online offering, are made at your own risk.

Protection of minors
Persons who are under 16, are not allowed to provide us with their personal information without the express consent of the person having parental responsibility. These data will be processed in accordance with our data protection declaration.

Cookies
We use cookies. Cookies are small text files which are stored locally in the internet browser’s cache. Cookies enable the internet browser to be recognized. The files are used to help the browser navigate through the internet offering and use all functions to their full extent.

Our internet offering uses: Browser cookies/flash cookies

Control of cookies by the user
Browser cookies: All browsers can be set so that cookies are only accepted upon request. Also, per set-up, cookies can only be accepted for sites which are currently being visited. All browsers offer functions which make the selective deletion of cookies possible. The acceptance of cookies can also be deactivated generally, however in that case, limitations in the online offering’s user friendliness must be accepted.

Flash cookies: Flash cookies are (locally) stored Flash Player settings. However, these are not browser cookies which are managed through the relevant browser settings but are managed separately through the Flash Player settings manager. External link: www.macromedia.com/support/documentation/de/flashplayer/help/settings_manager03.html

Amendments to our data protection policy
We reserve the right to adapt our data protection declaration on occasions, so that it always meets the current legal requirements or to implement changes in our services in the data protection declaration. This could apply e.g. to the introduction of new services. The new data protection declaration would then apply to your return visit

Brand protection
Each firm or trade mark named here is the property of the respective firm. The naming of brands and names is purely for informative purposes.

C. Specific provisions for Russia

The following applies to users who are residents of the Russian Federation:

The services of our online offer listed above, are not intended for citizens of the Russian Federation who are resident in Russia.

If you are a Russian citizen resident in Russia, you are expressly informed that all personal data that you make available to us over our internet offering, is exclusively at your own risk and on your own responsibility. You further agree that you will not hold us responsible for a possible breach of Russian Federation law.