General Data Protection Regulation
1. Information on the collection of personal data
(1) Below, we provide information on the collection of personal data during your use of our website.
“Personal data” means all data that can be related to you personally, e.g. name, address, email addresses and user behaviour.
(2) The controller as per Article 4, Paragraph 7 of the GDPR is:
Steinbeis Papier GmbH, Stadtstraße 20, 25348 Glückstadt, Germany; firstname.lastname@example.org; Phone +49 4124 911 0
(3) Name and address of the data protection officer:
Mr Jörg Hagen, Jhcon Datenschutzberatung, Veilchenweg 6a, 30989 Gehrden, Germany; email@example.com
2. Your rights
(1) You have the following rights vis-à-vis us with respect to the personal data concerning you:
- Right of access
- Right to rectification or erasure
- Right to restriction of processing
- Right to object to processing
- Right to data portability
A right to lodge a complaint with the competent data protection supervisory authority exists at all times. To do so, please contact the data protection centre of the Federal State of Schleswig-Holstein: Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein, Holstenstraße 98, 24103 Kiel, firstname.lastname@example.org
3. Collection of personal data when visiting our website
(1) During purely informational use of the website, i.e. if you do not log in in order to use the website, register or send us information in another way, we collect no personal data, with the exception of the data that your browser sends to our server. If you would like to view our website, we collect the following data, which are necessary for technical reasons in order for us to display our website and ensure stability and security (the legal basis is Article 6, Paragraph 1, f) of the GDPR):
- IP address
- Date and time of the query
- Time zone difference from Greenwich Mean Time (GMT)
- Content of your request (specific page)
- Access status / HTTP status code
- Data volume transferred
- Website from which the request originates
- Operating system and its interface
- Language and version of the browser software
(2) If you contact us by email or a contact form, we store the data you provide (your email address and, if applicable, your name and telephone) in order to answer your questions. We delete the data created in this connection after storage is no longer required, or, if legal retention requirements exist, we restrict the processing.
(3) If we make use of service providers for individual functions of our content or would like to use your data for advertising purposes, we will inform you in detail of the respective operations below. We will also identify the specified criteria of the storage duration.
(4) In addition to the above-named data, cookies are stored on your computer during your use of our website. Cookies are small text files that are stored on your hard drive in a manner associated with the browser you use and through which certain information is provided to the entity that sets the cookie (in this case, us). Cookies cannot execute programs or transfer viruses to your computer. They serve to make the Internet content user-friendlier and more effective overall.
(1) This website uses the following types of cookies, the scope and function of which are explained below:
Transient cookies (in this regard, see (2))
Persistent cookies (in this regard, see (3))
(2) Transient cookies are deleted automatically when you close the browser. These include session cookies in particular. These save a so-called session ID with which the various queries of your browser can be associated during the same session. They allow your computer to be recognised if you return to our website. The session cookies are deleted when you log out or close the browser.
(3) Persistent cookies are automatically deleted after a pre-configured amount of time, which can differ by cookie. You can delete the cookies at any time in your browser’s security settings.
(d) You can configure your browser settings as you wish and refuse to accept third-party cookies or all cookies, for example. Please note that you may not be able to use all the functions of this website.
(4) Technically necessary cookies are used in the legitimate interest of Steinbeis Papier GmbH on an easily legible and easy-to-use website according to Article 6, Paragraph 1, f) of the GDPR. For the use of all other cookies which are not necessary, you will be asked for your consent via our cookie consent management system (cookie settings) within the scope of informed consent according to Article 1, Paragraph 1, a) of the GDPR.
(6) You can generally configure your browser settings as you like and, for instance, reject the acceptance of third-party cookies or all cookies. Please note that in such a case, you may not be able to use all the functions of this website.
5. Use of other services
(1) Besides purely informational use of our website, we offer various services that you can use if you are interested. To do so, you normally must provide further personal data, which we use in order to provide the respective service and to which the above-named data processing principles apply.
(2) In some cases, we make use of external service providers for processing. We have selected and engaged them carefully; they are bound by our instructions and are audited regularly.
(3) Insofar as our service providers or partners are domiciled in a country outside the European Economic Area (EEA), we inform you of the consequences of this fact in the description of the offer.
(1) In our blog, where we publish various contributions on topics related to our activities, you can submit public comments. Your comment is published with the username you provide along with your message. We recommend using a pseudonym instead of your real name. The username and email address are required information; all other information is optional. When you submit a comment, we continue to store your IP address, which we delete (after one week). This storage is necessary to allow us to defend against liability claims in the event of possible publication of unlawful content. We need your email address in order to contact you in case a third party objects to your comment as unlawful. The legal basis is Article 6, Paragraph 1, b) and f) of the GDPR. The comments are not reviewed before publication. We reserve the right to delete comments if third parties object to them as unlawful.
(2) When writing your comment, you can check a box for our email service. This informs you when other users comment your message. We use the so-called double opt-in procedure for this service, i.e. you receive an email in which you must confirm that you are the owner of this email address and want to receive the messages. You can unsubscribe from the messages at any time by clicking the link contained in the email. We store your personal data, including your email address, time you registered for the service and IP address until you unsubscribe from the notice service.
(1) With your consent, you can subscribe to our newsletter, which we use to inform you about our current offers of interest. The goods and services advertised are identified in the declaration of consent.
(2) We use a so-called double opt-in procedure for registration for our newsletter. This means that, after receiving your registration, we send an email to the email address provided in which we ask you for confirmation that you want to have the newsletter sent. If you do not confirm your registration, your information is locked and deleted automatically after one month. Furthermore, we store the IP addresses you use and the times of registration and confirmation. The purpose of the process is to verify your registration and, if necessary, to facilitate investigation of possible misuse of your personal data.
(3) The only required information for sending the newsletter is your email address. After your confirmation, we store your email address for the purpose of sending the newsletter. The legal basis is Article 6, Paragraph 1, a) of the GDPR.
(4) You can withdraw your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare your withdrawal by clicking the link provided in each newsletter email or by emailing email@example.com.
8. Use of Google Analytics
(1) We use Google Analytics to analyse the use of our website and to frequently improve it. Using the statistics collected, we can improve our offer for you as the user and design it to be more interesting. In such exceptional cases in which your personal data is transferred to the USA, the EU has standard agreements in place (https://privacy.google.com/businesses/processorterms/). The legal basis for the use of Google Analytics is Article 6, Paragraph 1, a) of the GDPR.
(2) Google Analytics is a Web analysis service from Google Inc. (Google). Google Analytics utilises so-called cookies, text files which are stored on your computer and enable us to analyse how you use our website. The information collected by the cookie about your use of this website are normally transferred to a Google server in the USA and stored there. By activating the IP anonymisation option on this website, your IP address will be shortened in advance by Google within the member states of the European Union or in other contractual states of the Agreement on the European Economic Area. Only in exceptional cases will the IP address be transferred in full to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to generate reports about the website activities and to provide additional services for the website operator associated with the use of the website and the use of the Internet.
(3) Within the scope of Google Analytics, the IP address identified by your browser will not be associated with other data from Google.
(4) You can prevent the storage of cookies by changing the respective settings in your browser software; however, please note that you will not necessarily be able to use all the functions of this website in their entirety in such a case. Furthermore, you can prevent the collection of data by the cookie and data relating to your use of the website (incl. your IP address) from Google and the processing of this data by Google by withdrawing consent to the use of such cookies in the cookie settings.
9. Integration of YouTube videos
(1) We have integrated YouTube videos into our online content. These are stored at www.YouTube.com and can be played directly from our website. They are all integrated in “extended data protection mode”, i.e. no data about you as a user are transferred to YouTube if you do not play videos. The data listed under Clause 9. (2) of this statement are not transferred until you play the videos. We have no influence on this data transfer. The legal basis for the use of YouTube is your consent according to Article 6, Paragraph 1, a) of the GDPR.
(2) As a result of the visit to the website, YouTube is informed that you have retrieved the corresponding subpage of our website. Furthermore, the data under Clause 9. (3) of this statement are sent. This occurs regardless of whether YouTube provides a user account through which you are logged in or no user account exists. If you are logged into Google, your data are associated directly with your account. If you do not want YouTube to associate them with your profile, you must log out before clicking the button. YouTube stores your data as user profiles and uses them for purposes of advertising, market research and/or targeted presentation of its website. Such analysis is performed (even for users who are not logged in) especially for the purpose of targeted advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise it, you must contact YouTube.
Google also processes your personal data in the USA. In cases in which your personal data is transferred to the USA, the EU has standard agreements in place (privacy.google.com/businesses/processorterms/).
10. Use of our Facebook page
For the use of Facebook and Instagram, we as a joint controller with Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland; firstname.lastname@example.org; Fax: +1 650 543 5340, are responsible according to Article 26 of the GDPR as well as Facebook Page Insights Controller Addendum (https://www.facebook.com/legal/terms/page_controller_addendum).
Facebook Ireland Ltd. processes (personal) data during the use of Facebook products – incl. the visit to our Facebook or Instagram page – and also from persons who are not registered with any Facebook service. Which (personal) data these are in detail, how and for what purposes and on which legal basis these are processed is described by Facebook in its data guidelines (https://help.instagram.com/519522125107875?helpref=page_content), which are valid for all Facebook products. Information about contact opportunities to Facebook as well as the setting options for ads, cookies, etc. can be found here. These data are potentially transferred to countries outside the European Union.
More detailed information about the cookies which Facebook uses when a Facebook account exists, Facebook products (incl. the website and apps) are used or other websites and apps are visited which Facebook products use (incl. “Like” buttons or other Facebook technologies) is provided by Facebook in their cookie guidelines (https://www.facebook.com/policies/cookies/). Information about how you can manage existing information about yourself can also be found at this link: https://www.facebook.com/policies/cookies/
When visiting our Facebook or Instagram page, Facebook captures your IP address and other information. Together with additional information which Facebook receives from cookies, Facebook, and as an operator of the Facebook page, provides statistical information about the use of this Facebook page (so-called Page Insights). This is summarised data which identify how the user has interacted with the page. These Page Insights can be based on personal data which have been collected by Facebook in connection with a visit or an interaction from a user or with our Facebook page and its content. Facebook provides more detailed information about this here: https://www.facebook.com/about/privacy.
With the help of Page Insights, we can perform an anonymous analysis of reach, page visits, dwell time with video posts, actions (likes, comments, shares) as well as age, gender and location (as provided by the user in their respective Facebook profile). To achieve this, settings can be made for the analysis of the reach, or the respective filters in terms of the selection of the time frame, the viewing of a certain post and the demographic grouping (e.g. female, 20–30 years old). These data are anonymised, aggregated and abstracted. These settings enable us to therefore make conclusions on individuals. The analysis serves to optimally design our page for the purpose of public relations. The legal basis for this processing of data is Article 6, Paragraph 1, a) and f) of the GDPR.
Additionally, we as a provider of an information service do not collect and process data from the use of the pages.
You have the right to make a complaint, independent of your rights towards us, with the Irish Data Protection Commission (responsible for Facebook Ireland Ltd.) according to Article 77 of the GDPR).
For concrete questions concerning the protection of your data, please contact our data protection officer or the data protection officer of Facebook Ireland Ltd. (www.facebook.com/privacy/explanation).
11. External links
To provide you with optimal information, links are located on our site that refer to sites of third parties. Insofar as this is not obvious, we notify you that they are external links. The website operator has no influence on the content and presentation of these sites of other providers and thus refers to their data protection statements. Therefore, the guarantees of this Data Protection Statement obviously do not apply there.
12. Objection to or withdrawal from processing of your data
(1) If you have granted consent to the processing of your data, you can withdraw it at any time. Such withdrawal affects the permissibility of the processing of your personal data after you have declared it to us.
(2) Insofar as we base the processing of your personal data on the consideration of interests, you can object to the processing. This is especially the case if the processing is not necessary for the performance of a contract, which we describe in each case in the following description of the function. If you exercise the right to object, we ask that you describe the reasons why we should not process your personal data as we have. In the event of your legitimate objection, we review the situation and will either cease/adjust the data processing or identify our compelling grounds that are deserving of protection on the basis of which we will continue the processing.
(3) You can of course object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us of your objection to advertising via:
Withdrawal by email: email@example.com
Withdrawal by post: Attn. Mr Ulrich Middelberg, Steinbeis Papier GmbH, Stadtstraße 20, 25348 Glückstadt, Germany
As of 28 November 2020