Privacy Policy
1. Data protection at a glance
General information
The information below provides you with an overview of what happens to your personal data when you visit our website. Personal data refers to all data that can be used to identify you personally. In-depth information regarding data protection can be found in our Privacy Policy, as detailed below.
Data collection on our website
Who is responsible for data collection on this website?
Data processing on this website is performed by the website operator. The operator's contact details are shown under Company Details on this website.
How do we collect your data?
One of the ways in which we collect your data is when you provide it to us. This may, for example, be data that you enter in a contact form.
Other data is automatically recorded by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system or time of site visit). This data is collected automatically as soon as you visit our website.
What do we use your data for?
Some data is collected to ensure error-free functioning of the website. Other data may be used to analyse your user behaviour.
What rights do you have regarding your data?
You have the right to request information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request rectification, blocking or erasure of this data. You can contact us at any time regarding this and other questions on the subject of data protection at the address shown in the Company Details. You also have the right to object to the relevant supervisory authority.
Furthermore, you have the right, under certain circumstances, to request that the processing of your personal data be restricted. You can find details of this in the Privacy Policy under "Right to restriction of processing".
Analytics tools and tools from third party providers
When you visit our website, your surfing behaviour may be statistically analysed. This is done primarily by means of cookies and analytics programs. Your surfing behaviour is generally analysed anonymously; surfing behaviour cannot be traced back to you. You can object to this analysis or prevent it by not using specific tools. You can find detailed information about this in the Privacy Policy section below.
You can object to this analysis. We will inform you of the ways that you can do this in this Privacy Policy.
2. General and mandatory information
Data protection
The operators of these web pages take protection of your personal data very seriously. We handle your personal data confidentially and according to legal data protection requirements and this Privacy Policy.
Various personal data is collected when you use this website. Personal data refers to data that can be used to identify you personally. This Privacy Policy explains which data we collect and what we use it for. It also explains how and for what purpose this is done.
It should be noted that security gaps can occur during data transfer over the internet (e.g. through email communication). Complete protection of data against access by third parties is not possible.
Responsible body
The responsible body for data processing on this website is:
eurapack GmbH
Von-Drais-Str. 69
77855 Achern
Germany
Phone: +49 7841 2019-0
Email:
The responsible body is the natural person or legal entity, who or which solely, or together with others, determines the purposes and means of processing of personal data (e.g. names, email addresses, etc.).
Statutory data protection officer
We have appointed a data protection officer for our company.
Sonja Flüder
Data Protection Auditor DSA-TÜV
Information Security Officer
Munker Privacy Consulting GmbH
Zugspitzstraße 3 a
82399 Raisting, Germany
Phone: +49 7841 2019-0
Email:
Revocation of your consent to data processing
Many data processing processes are only possible with your express consent. You can revoke previously given consent at any time. An informal email message is sufficient for this. The legality of the data processing which has taken place up to the moment of revocation shall remain unaffected by this.
Right to object to data collection in particular cases and right to object to direct marketing (Article 21 GDPR)
If data is processed on the basis of GDPR Article 6, Section 1, point e or f, you have the right to object to at any time to processing of personal data concerning you, on grounds relating to your particular situation; this also applies to profiling based on these provisions. The specific legal basis for each type of processing can be found in this Privacy Policy. If you object, we will no longer process the personal data concerned, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims (objection according to GDPR Article 21, Section 1).
Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, your personal data shall no longer be processed for such purposes (objection according to GDPR Article 21, Section 2).
Right to object to the relevant supervisory authority
In cases of infringement of GDPR provisions, the affected party has the right to object to a supervisory authority, in particular in the Member State of their habitual residence, at their workplace or at the location of the alleged infringement. The right to object shall apply without prejudice to other administrative or judicial redress.
Right to data portability
You have the right to request that data, which we automatically process subject to your consent or in order to fulfil a contract, be passed on to yourself or a third party in an established machine readable format. If you request direct transfer of data to another responsible party, this shall only take place provided that it is technically feasible.
SSL or TLS encryption
This site uses SSL or TLS encryption for security purposes and for protection during the transfer of confidential content, such as orders or enquiries which you send to us as the site operator. An encrypted connection is indicated by the address line of the browser changing from "http://" to "https://" and by the padlock symbol in your browser bar.
When SSL or TLS encryption is activated, the data that you send to us cannot be read by third parties.
Information, blocking, erasure and rectification
Within the framework of the applicable legal provisions, you have the right to request information about the origin, recipient and purpose of your stored personal data, free of charge at any time, and if applicable a right to rectification, blocking or erasure of this data. You can contact us at any time regarding this and other questions on the subject of personal data at the address shown in the Company Details.
Right to restriction of processing
You have the right to request that the processing of your personal data be restricted. You can contact us at any time regarding this at the address shown in the Company Details. The right to restriction of processing applies in the following cases:
- If you contest the correctness of your personal data stored by us, we usually need time to check this. You have the right to request that the processing of your personal data be restricted for the duration of this checking process.
- If your personal data was or is being gathered illegally, you can request restriction of data processing instead of erasure.
- If we no longer need your personal data, but you require it for the exercise, defence or establishment of legal claims, you have the right to request restriction of processing of your personal data instead of erasure.
- If you have submitted an objection according to GDPR Article 21, Section 1, a process of weighing up your interests and ours must take place. Insofar as it is not yet clear, whose interests shall prevail, you have the right to request that the processing of your personal data be restricted.
If you have restricted the processing of your personal data, this data – with the exception of its storage – may only be processed with your consent, or for the establishment, exercise or defence of legal claims, or to protect the rights of other natural persons or legal entities, or for reasons of important public interest to the European Union or a Member State.
3. Data collection on our website
Cookies
The web pages use cookies to some extent. Cookies do not harm your computer and contain no viruses. The purpose of cookies is to make our website more user friendly, effective and secure. Cookies are small text files which are stored on your computer and saved by your browser.
Most of the cookies that we use are the type known as "session cookies". These are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognise your browser the next time you visit.
You can adjust the settings in your browser to inform you when cookies are placed and only allow cookies in individual cases, exclude acceptance of cookies for particular cases or in general, and activate automatic deletion of cookies on closing the browser. If you deactivate cookies, this may restrict the functionality of this website.
Cookies that are necessary in order to perform the electronic communication process, or in order to provide specific functions that you require (e.g. shopping cart function), are stored on the basis of GDPR Article 6, Section 1, point f. The website operator has a legitimate interest in storing cookies for the technically error-free and optimised provision of its services. Insofar as other cookies are stored (e.g. cookies to analyse your surfing behaviour), these are treated separately in this Privacy Policy.
Server log files
The site provider automatically collects and stores information in files known as server log files, which your browser automatically sends to us. These are:
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
This data is not linked with other data sources.
This data is collected on the basis of GDPR Article 6, Section 1, point f. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website – the server log files must be recorded for this purpose.
Contact form
If you send us enquiries via the contact form, your details from the contact form including the contact data provided there by you will be stored by us for the purposes of processing the enquiry and in case of follow-up questions. We do not pass on this data without your consent.
The processing of the data entered in the contact form is therefore solely based on your consent (GDPR Article 6, Section 1, point a). You can revoke this consent at any time. An informal email message is sufficient for this. The legality of the data processing operations which have taken place up to the moment of revocation remains unaffected by the revocation.
We retain the data entered by you in the contact form until you request us to erase it, revoke your consent to its storage, or the purpose of the data storage no longer applies (e.g. following completed processing of your enquiry). Mandatory statutory provisions – in particular retention periods – shall remain unaffected by this.
Enquiry by email, phone or fax
If you contact us by email, phone or fax, your enquiry including all personal data arising from this (name, enquiry) shall be stored and processed by us for the purposes of dealing with your issue. We do not pass on this data without your consent.
This data is processed on the basis of GDPR Article 6, Section 1, point b, insofar as your enquiry relates to the fulfilment of a contract or is required for the implementation of pre-contractual measures. In all other cases, processing is based on your consent (GDPR Article 6, Section 1, point a) and/or our legitimate interests (GDPR Article 6, Section 1, point f), as we have a legitimate interest in the effective processing of the enquiries addressed to us.
We retain the data sent by you to us via contact enquiries until you request us to erase it, revoke your consent to its storage, or the purpose of the data storage no longer applies (e.g. following completed processing of your issue). Mandatory statutory provisions – in particular statutory retention periods – shall remain unaffected by this.
4. Analysis tools and marketing
Google Analytics
This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Republic of Ireland.
Google Analytics uses "cookies". These are text files stored on your computer which allow analysis of your use of the website. The information generated by the cookie about your use of this website is usually sent to a Google server in the USA and stored there.
Storage by Google Analytics cookies and the use of this tool is based on GDPR Article 6, Section 1, point f. The website operator has a legitimate interest in the analysis of user behaviour, in order to optimise its web presence and its marketing.
IP anonymisation
We have activated the IP anonymisation function on this website. This means that, within the European Union Member States or in other States party to the Agreement on the European Economic Area, your IP address shall be shortened prior to being sent to the USA. Only in exceptional cases is the full IP address sent to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, compile reports about the website activities and provide further services linked to website use and internet use for the website operator. The IP address sent from your browser as part of Google Analytics is not linked to other Google data.
Browser plug-in
You can prevent storage of cookies by adjusting a setting in your browser software. However, please note that if you do this you may not be able to fully use all the functions on this website. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address), and from processing this data, by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Objection to data collection
You can prevent the collection of your data by Google Analytics by clicking the following link. This sets an opt out cookie, which prevents collection of your data on future visits to this website: Deactivate Google Analytics.
You can find more information about the handling of user data by Google Analytics in Google's 'Safeguarding your data' section: https://support.google.com/analytics/answer/6004245?hl=de.
Order processing
We have concluded an order processing contract with Google and fully implement the strict requirements of the German data protection authorities regarding the use of Google Analytics.
Storage duration
Data at user and event level stored by Google which is associated with cookies, user identifiers (e.g. User-ID) or advertising identifiers (e.g. DoubleClick cookies, Android's Advertising ID) is anonymised and/or erased after 14 months. Details about this can be found under the following link:
https://support.google.com/analytics/answer/7667196?hl=de
Hotjar
We use Hotjar in order to better understand our users’ needs and
to optimize this service and experience. Hotjar is a technology service
that helps us better understand our users’ experience (e.g. how much
time they spend on which pages, which links they choose to click, what
users do and don’t like, etc.) and this enables us to build and maintain
our service with user feedback. Hotjar uses cookies and other
technologies to collect data on our users’ behavior and their devices.
This includes a device's IP address (processed during your session and
stored in a de-identified form), device screen size, device type (unique
device identifiers), browser information, geographic location (country
only), and the preferred language used to display our website. Hotjar
stores this information on our behalf in a pseudonymized user profile.
Hotjar is contractually forbidden to sell any of the data collected on
our behalf.
For further details, please see the ‘about Hotjar’ section of Hotjar’s support site.
5. Plug-ins and tools
YouTube with extended data protection
Our website uses plug-ins of the YouTube website. The operator of the site is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Republic of Ireland.
We use YouTube in privacy-enhanced mode. According to YouTube, this mode has the effect of ensuring that YouTube stores no information about visitors to this website before they view the video. However, the transfer of data to YouTube partners is not necessarily excluded by the privacy-enhanced mode. YouTube connects to the Google DoubleClick network – regardless of whether you view a video.
As soon as you start a YouTube video on our website, a connection is made to the YouTube servers. When this happens, the YouTube server is informed which of our pages you have visited. When you are logged into your YouTube account, you allow YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.
Furthermore, YouTube can store various cookies on your device after starting a video. YouTube can obtain information about visitors to our website with the aid of these cookies. This information is used, among other things, to collect video statistics, improve user friendliness and prevent attempted fraud. The cookies remain on your device until you delete them.
Other data processing operations over which we have no influence may be triggered after the start of a YouTube video.
The use of YouTube is in the interest of attractive presentation of our online presence. This constitutes a legitimate interest as per GDPR Article 6, Section 1 point f.
Further information on YouTube's data protection can be found in its Privacy Policy: https://policies.google.com/privacy?hl=de.
Google Maps
This site uses the map service Google Maps via an API. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Republic of Ireland.
To use the Google Maps functions, it is necessary to store your IP address. This information is usually sent to a Google server in the USA and stored there. The provider of this site has no influence over this data transfer.
The use of Google Maps is in the interest of attractive presentation of our online presence and to make it easy to find the locations specified by us on the website. This constitutes a legitimate interest as per GDPR Article 6, Section 1 point f.
You can find more information about the handling of user data in Google's Privacy Policy: https://policies.google.com/privacy?hl=de.
6. Our social media presence
Data processing by social networks
We maintain publicly accessible profiles on social networks. The individual social networks that we use are listed further below. Social networks such as Facebook, Google+, etc., can usually analyse your user behaviour extensively if you visit their website or a website with integral social media content (e.g. like buttons or advertising banners). Numerous processing operations relevant to data protection are triggered when you visit our social media presences. Specifically, if you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. Your personal data can, however, in some cases also be collected when you are not logged in or have no account with the social media portal in question. In this case, the data is collected via cookies, for example, which are stored on your device or through recording of your IP address. The operators of the social media portals use data gathered in this way to help them create user profiles in which your preferences and interests are stored. This enables you to be shown interest based advertising both within and outside the social media presence in question. If you have an account with the particular social network, the interest based advertising can be shown on all devices that you are logged into or have been logged into. Please also note that we cannot track all processing operations on the social media portals. Depending on the provider, further processing operations may therefore be performed by the operators of the social media portals. Details of these can be found in the conditions of use and privacy policies of the individual social media portals.
Legal basis
Our social media presences are intended to ensure that our internet presence is as comprehensive as possible. This constitutes a legitimate interest as per GDPR Article 6, Section 1 point f. The analytics processes initiated by the social networks may have different legal bases, which must be specified by the social network operators (e.g. consent as per GDPR Article 6, Section 1, point a).
Responsible party and assertion of rights
When you visit our social media presences (e.g. Facebook), we are responsible, together with the operator of the social media platform, for the data processing operations triggered by this visit. You can assert your rights (information, rectification, erasure, restriction of processing, data portability and objection), as a basic principle, vis-à-vis us and the operator of the specific social media portal (e.g. Facebook). Please note that, notwithstanding the shared responsibility, we do not have full influence over the data processing operations of the social media portals. Our options depend significantly on the company policy of the individual provider.
Storage duration
The data collected by us via the social media presence is erased from our systems as soon as the purpose for storing it no longer applies, you ask us to erase it, revoke your consent to its storage, or the purpose of the data storage no longer applies. Stored cookies remain on your device until you delete them. Mandatory statutory provisions – in particular retention periods – shall remain unaffected by this. We have no influence on the storage duration of your data which is stored by the operators of social media networks for their own purposes. For details of this, please obtain information directly from the social media network operators (e.g. their Privacy Policy, see below).
Individual social networks
We have a profile on XING. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. Details on their handling of your personal data can be found in XING's Privacy Policy: https://privacy.xing.com/en/privacy-policy.
We have a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Republic of Ireland. LinkedIn uses advertising cookies.
To deactivate LinkedIn advertising cookies, please use the following link:
https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
Data transfer to the USA is supported by the standard contractual clauses of the EU Commission.
Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.
Details on their handling of your personal data can be found in LinkedIn's
Privacy Policy: https://www.linkedin.com/legal/privacy-policy.
YouTube
We have a profile on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow
Street, Dublin 4, Republic of Ireland. Details on their handling of your personal data can be found in YouTube's
Privacy Policy: https://policies.google.com/privacy?hl=de.