Data Protection StatementThank you for your interest in our website and data protection declaration.
Data ProtectionWelcome to our website. Below you will find our data protection declaration. Please note that this translation in English is for informational purposes. In the case of any legal questions, the valid version is the original in German language.
Contact details of the person responsible (controller)OPTIMA packaging group GmbH
74523 Schwäbisch Hall
+49 791 506 – 0
+49 791 506 - 9000
Contact data of our data protection officer
74523 Schwäbisch Hall
+49 791 506 – 0
+49 791 506 - 9000
a) Purpose of data collection and processingEvery time a user accesses a page of our website and every time a file stored on the website is called up, access data about this process is stored in a log file. Each data record consists of:
(1) the page from which the file was requested,
(2) the name of the file,
(3) the date and time of the request,
(4) the amount of data transferred,
(5) the access status (file transferred, file not found, etc.),
(6) a description of the type of operating system and web browser used,
(7) the client IP address.
The client IP address is used for the purpose of transmitting the requested data; it will be made anonymous by deleting the last digit block (Ipv4) or the last octet (Ipv6) once the technical requirement no longer applies.
b) Duration of storageThe data is stored each time a user accesses a page of our website and each time our website is accessed and is deleted as soon as it is no longer required for the purpose of collection, which is the case when the visitor leaves our website.
c) Legal basisThe temporary storage of the aforementioned data is carried out on the legal basis of Art. 6 para. 1 letter f of the General Data Protection Regulation (GDPR). The legitimate interest lies in the provision of our website.
d) Possibility of objection and deletionYou may object to this processing.
a) Purpose of data collection and processingAt the time of placing an order, Optima collects name, address(es), bank details, e-mail address, telephone or fax number, client IP address. This information is collected, stored and processed solely for the purpose of establishing or executing the contract, which includes in particular the billing and processing of the contract.
Personal data will only be passed on to third parties if this is necessary for the purpose of the execution of the contract, e.g. when commissioning a mail order company or a payment service provider.
b) Duration of storageThe data will be deleted as soon as they are no longer necessary for the purposes for which they were collected or processed in any other way. Under German law, this period is five years for personal data subject to § 147 AO and ten years for personal data subject to § 257 HGB. The periods begin at the end of the calendar year in which the data was collected.
c) Legal basisThe storage of the data described above is based on Art. 6 para. 1 lit. b and lit. c of the General Data Protection Regulation (GDPR).
d) Possibility of objection and deletionSince there are legally standardised retention periods here and the data must remain stored and processed for contract execution, an objection or deletion is not possible.
a) Purpose of data collection and useYou can register to receive information according to the subjects you are interested in. When you fill out an online form, the information you enter during the registration process is sent to us. This information may include your e-mail address, last name, first name, IP address, and your choice of subject(s). Details of the campaign are also noted. We record the IP address and the time and date when you activate the Double-Opt-In link because this is required in order to be able to send the information by e-mail.
Once we have received your permission, the Inxmail emarketing system processes data using the so-called unique count procedure:
- the date and time when images contained in the mailing are retrieved
- the type of device and software used to display the email when images are retrieved
- the date, time and type of links clicked on in the mailing.
This data is recorded and stored for each person who receives the eMailing. This method enables us to identify who is interested in which subjects and ensure the relevance of future mailings for our readers according to their interests. If you object to this procedure, personalised data will be made anonymous.
b) Duration of storageData will be deleted as soon as they are no longer necessary to achieve the purpose they were collected for and the person has unsubscribed from the mailing list. In accordance with this, the statute of limitations requires us to store information for ten years after dispatch of the last eMail, for the purpose of proof in the event of queries regarding eMailing consents.
c) Legal basisYour data (as described above) will only be stored on the legal basis of “prior consent”. (GDPR Article. 6 para. 1[a] ). The possibility of a ‘withdrawal of consent at any time’ does not affect the legality of the ‘processing of personal data based on consent’ prior to withdrawal.
d) Possibility of objection and deletionYou can withdraw your permission to receive information by e-mail at any time with effect for the future by unsubscribing from the mailing list(s). You can also object to the individual evaluation of your e-mails according to the ‘unique count procedure’ described above. You can do this by sending us an eMail, or by clicking on the appropriate link in the Footer of each eMailing .
a) Purpose of data collection and useYou can contact us by e-mail, fax or telephone. We store the data transmitted to us and provided by you, to process your request or enquiry. These data include: name, address, e-mail address, telephone and/or fax number, date and time of the inquiry and the description of the request, if necessary contract data, if the inquiry takes place in the context of a contract admission or - completion. The data will not be passed on to third parties. The data are used to process your contact request.
b) Duration of storageAs soon as the data is no longer necessary to achieve the purpose, it is deleted, which is the case when the conversation has been completed and the facts have been clarified and there are no contractual or tax retention periods to the contrary. This period is five years for personal data subject to § 147 AO and ten years for personal data subject to § 257 HGB. The periods begin at the end of the calendar year in which the data was collected.
c) Legal basisThe data described above will only be stored on the legal basis of Art. 6 para. 1 lit. a EU Basic Regulation on Data Protection (DSGVO) with prior consent in connection with the request, Art. 6 para. 1 lit. b EU Basic Regulation on Data Protection (DSGVO) in connection with the initiation or fulfilment of a contract or Art. 6 para. 1 lit. f EU Basic Regulation on Data Protection (DSGVO). Processing the contact request and preventing misuse of the contact request is within Optima’s legitimate interests. A withdrawal of consent at any time does not affect the legality of the processing of personal data based on the consent prior to the withdrawal.
d) Possibility of objection and deletionYou may at any time withdraw your consent to data processing and to object to the storage of your data. The data stored for the operation is then deleted. If a contract has been concluded, the clause II.2. above applies.
a) Purpose of data collection and processing
The client IP address is collected for use of the Google Analytics service. This website uses Google Analytics, a web analysis service of Google Inc. "("Google"). Google Analytics uses so-called "cookies", text files which are stored on your end device to enable an analysis of the use of the website. The information generated by the cookie about the use of this website is usually transferred to a Google server in the USA and stored there. However, due to the activation of IP anonymisation on this website, Google will reduce the IP address of the person concerned within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and be shortened there. Google will use this information on our behalf, to evaluate the use of the website, to compile reports on the website activities and to provide us with further services associated with the use of the website and the Internet. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.
b) Duration of storage
As soon as the data are no longer necessary to achieve the purpose, they will be deleted, which is the case when the anonymisation within the European Union has been completed. This takes less than a second.
c) Legal basis
The storage of the data as described above is based on Art. 6 para. 1 letter f of the General Data Protection Regulation (GDPR). The legitimate interest lies in the fact that we are able to analyse the use of the website by all users in its entirety without drawing conclusions about the behaviour of identifiable persons; this enables us to optimise our website and our offers.
d) Possibility of objection and deletion
You can prevent the storage of cookies by changing the settings of your browser software; however, we must point out that if you do this, not all functions of this website may be fully functional. In addition, you can prevent the collection of data generated by the cookie and relating to the use of the website (including the IP address) from Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en.
a) Duration of storageAs soon as the data are no longer necessary to achieve the purpose, they are deleted, which is the case when anonymisation has taken place. For technical reasons, this process takes less than one second.
b) Legal basisThe storage of data described above is based on Art. 6 para. 1f of the General Data Protection Regulation (GDPR) and § 15 para. 3 TMG (German law: Tele-Medien Gesetz). It is a legitimate interest of Optima to analyse the surfing behaviour of non-identifiable users; this enables us to optimise our website and our offers.
You also have the following possibility to opt-out of analysis by Matomo.
You have the right to the following information:
(a) the purposes of the processing;
(b) the categories of personal data being processed;
(c) the recipients or categories of recipients to whom the personal data have been or are disclosed, in particular recipients in third countries or international organisations;
(d) if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration;
(e) the existence of a right of rectification or deletion of your personal data or of a restriction on processing by the controller or of a right of opposition to such processing;
(f) the right of appeal to a supervisory authority;
(g) if the personal data are not collected from the data subject, all available information on the origin of the data;
(h) the existence of automated decision-making, including profiling in accordance with Article 22(1) and (4) of the Basic Regulation on Data Protection (DSGVO) and - at least in these cases - meaningful information on the logic involved and the scope and intended effects of such processing for the data subject.
(i) where personal data are transferred to a third country or an international organisation, the data subject shall have the right to be informed of the appropriate guarantees in accordance with Article 46 of the Basic Regulation on Data Protection (DSGVO) in connection with the transfer.
We will provide you with a copy of the personal data that is the subject of the processing. For all other copies that you request, Optima may charge an appropriate fee based on the administrative costs.
a) if the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
b) if you withdraw your consent to processing (Art. 6 para. 1a or Art. 9 para. 2a of the General Data Protection Regulation), and there is no other legal basis for the processing;
c) if you object to processing pursuant to Art. 21 para. 1 of the General Data Protection Regulation (GDPR) and there are no overriding legitimate grounds for the processing, or if you object to processing pursuant to Art. 21 para. 2 of the General Data Protection Regulation (GDPR);
d) if your personal data have been processed unlawfully;
e) if the deletion of personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which Optima is subject;
f) if the personal data was collected in relation to information society services offered to children under the age of 16 (Art. 8 para. 1 of the General Data Protection Regulation).
(a) if you disagree with the accuracy of your personal data, we will restrict processing until the accuracy of your personal data can be verified;
(b) if the processing is unlawful and you prefer that the use of the personal data be restricted, instead of deleted;
(c) if Optima no longer needs to process the personal data, but you need the data for the purpose of asserting, exercising or defending claims; or
(d) if you have objected to processing pursuant to Art. 21 para. 1 of the General Data Protection Regulation (GDPR), as long as it is not yet clear whether Optima’s legitimate interests outweigh yours.
a) the processing is based on: your consent (Art. 6 para. 1 lit a or Art. 9 para. 2a GDPR); or on a contract (Art. 6 para. 1b GDPR)
(b) processing is carried out by means of automated methods.
The rights and freedoms of other persons must not be affected by this.
When exercising the right to data transferability pursuant to paragraph 1, you have the right to request that the personal data be transferred directly by us to another data controller, insofar as this is technically feasible.
The exercise of the right to data transferability does not affect your right to deletion (as described in Art. 17 of GDPR). The right to transferability shall not apply to processing necessary for the performance of a task in the public interest; or in the exercise of public authority conferred on the controller.
We will stop processing your personal data unless we can prove that the processing is absolutely necessary and worthy of protection, and that this outweighs your interests, rights and freedoms; or that the processing serves to assert, exercise or defend legal claims.
Where your personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purposes of such advertising, including profiling in so far as it is related to such direct marketing. If you object to processing for direct marketing purposes, your personal data will no longer be processed for this purpose.
You may withdraw your consent at any time. However, the collection and processing that has taken place up to this point remains legal.
This does not apply if the decision:
(a) is necessary for the conclusion or performance of a contract between yourself (or your employer) and us,
(b) is admissible by law of the Union or of the Member States to which we are subject, and that law contains appropriate measures to safeguard your rights, freedoms and legitimate interests; or
(c) you have given your express consent.
These decisions may not be based on special categories of personal data (as described in Art. 9 para. 1 GDPR) unless Art. 9 para. 2 a or g of the General Data Protection Regulation (GDPR) applies and appropriate measures have been taken to protect your rights, freedoms and legitimate interests.
In the above-mentioned examples of your rights, we take appropriate measures to protect your rights and freedoms as well as your legitimate interests, including at least the right to obtain the intervention of a person on our side, to state his own position and to challenge the decision.
Any action against us by a processor shall be brought in the courts of the Member State in which we or the processor have a place of business. Alternatively, such actions may also be brought before the courts of the Member State in which the person concerned is resident, unless the controller or processor is a public authority of a Member State acting in the exercise of its public powers.