General Data Protection Regulation
1. Information on the collection of personal data
(1) Below, we provide information on the collection of personal data during your use of our website.
“Personal data” means all data that can be related to you personally, e.g. name, address, email addresses and user behaviour.
(2) The controller as per Article 4, Paragraph 7 of the GDPR is:
Steinbeis Papier GmbH, Stadtstraße 20, 25348 Glückstadt, Germany; firstname.lastname@example.org; Phone +49 4124 911 0
(3) Name and address of the data protection officer:
Mr Jörg Hagen, Jhcon Datenschutzberatung, Königstraße 50a, 30175 Hanover, Germany; email@example.com
2. Your rights
(1) You have the following rights vis-à-vis us with respect to the personal data concerning you:
- Right of access
- Right to rectification or erasure
- Right to restriction of processing
- Right to object to processing
- Right to data portability
A right to lodge a complaint with the competent data protection supervisory authority exists at all times. To do so, please contact the data protection centre of the Federal State of Schleswig-Holstein: Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein, Holstenstraße 98, 24103 Kiel, firstname.lastname@example.org
3. Collection of personal data when visiting our website
(1) During purely informational use of the website, i.e. if you do not log in in order to use the website, register or send us information in another way, we collect no personal data, with the exception of the data that your browser sends to our server. If you would like to view our website, we collect the following data, which are necessary for technical reasons in order for us to display our website and ensure stability and security (the legal basis is Article 6, Paragraph 1, f) of the GDPR):
- IP address
- Date and time of the query
- Time zone difference from Greenwich Mean Time (GMT)
- Content of your request (specific page)
- Access status / HTTP status code
- Data volume transferred
- Website from which the request originates
- Operating system and its interface
- Language and version of the browser software
(2) If you contact us by email or a contact form, we store the data you provide (your email address and, if applicable, your name and telephone) in order to answer your questions. We delete the data created in this connection after storage is no longer required, or, if legal retention requirements exist, we restrict the processing.
(3) If we make use of service providers for individual functions of our content or would like to use your data for advertising purposes, we will inform you in detail of the respective operations below. We will also identify the specified criteria of the storage duration.
(4) In addition to the above-named data, cookies are stored on your computer during your use of our website. Cookies are small text files that are stored on your hard drive in a manner associated with the browser you use and through which certain information is provided to the entity that sets the cookie (in this case, us). Cookies cannot execute programs or transfer viruses to your computer. They serve to make the Internet content user-friendlier and more effective overall.
(1) This website uses the following types of cookies, the scope and function of which are explained below:
Transient cookies (in this regard, see (2))
Persistent cookies (in this regard, see (3))
(2) Transient cookies are deleted automatically when you close the browser. These include session cookies in particular. These save a so-called session ID with which the various queries of your browser can be associated during the same session. They allow your computer to be recognised if you return to our website. The session cookies are deleted when you log out or close the browser.
(3) Persistent cookies are automatically deleted after a pre-configured amount of time, which can differ by cookie. You can delete the cookies at any time in your browser’s security settings.
(d) You can configure your browser settings as you wish and refuse to accept third-party cookies or all cookies, for example. Please note that you may not be able to use all the functions of this website.
(4) Technically necessary cookies are used in the legitimate interest of Steinbeis Papier GmbH on an easily legible and easy-to-use website according to Article 6, Paragraph 1, f) of the GDPR. For the use of all other cookies which are not necessary, you will be asked for your consent via our cookie consent management system (cookie settings) within the scope of informed consent according to Article 1, Paragraph 1, a) of the GDPR.
(6) You can generally configure your browser settings as you like and, for instance, reject the acceptance of third-party cookies or all cookies. Please note that in such a case, you may not be able to use all the functions of this website.
5. Use of other services
(1) Besides purely informational use of our website, we offer various services that you can use if you are interested. To do so, you normally must provide further personal data, which we use in order to provide the respective service and to which the above-named data processing principles apply.
(2) In some cases, we make use of external service providers for processing. We have selected and engaged them carefully; they are bound by our instructions and are audited regularly.
(3) Insofar as our service providers or partners are domiciled in a country outside the European Economic Area (EEA), we inform you of the consequences of this fact in the description of the offer.
(1) In our blog, where we publish various contributions on topics related to our activities, you can submit public comments. Your comment is published with the username you provide along with your message. We recommend using a pseudonym instead of your real name. The username and email address are required information; all other information is optional. When you submit a comment, we continue to store your IP address, which we delete (after one week). This storage is necessary to allow us to defend against liability claims in the event of possible publication of unlawful content. We need your email address in order to contact you in case a third party objects to your comment as unlawful. The legal basis is Article 6, Paragraph 1, b) and f) of the GDPR. The comments are not reviewed before publication. We reserve the right to delete comments if third parties object to them as unlawful.
(2) When writing your comment, you can check a box for our email service. This informs you when other users comment your message. We use the so-called double opt-in procedure for this service, i.e. you receive an email in which you must confirm that you are the owner of this email address and want to receive the messages. You can unsubscribe from the messages at any time by clicking the link contained in the email. We store your personal data, including your email address, time you registered for the service and IP address until you unsubscribe from the notice service.
(1) With your consent, you can subscribe to our newsletter, which we use to inform you about our current offers of interest. The goods and services advertised are identified in the declaration of consent.
(2) We use a so-called double opt-in procedure for registration for our newsletter. This means that, after receiving your registration, we send an email to the email address provided in which we ask you for confirmation that you want to have the newsletter sent. If you do not confirm your registration, your information is locked and deleted automatically after one month. Furthermore, we store the IP addresses you use and the times of registration and confirmation. The purpose of the process is to verify your registration and, if necessary, to facilitate investigation of possible misuse of your personal data.
(3) The only required information for sending the newsletter is your email address. After your confirmation, we store your email address for the purpose of sending the newsletter. The legal basis is Article 6, Paragraph 1, a) of the GDPR.
(4) You can withdraw your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare your withdrawal by clicking the link provided in each newsletter email or by emailing email@example.com.
8. Use of Google Analytics
(1) We use Google Analytics to analyse the use of our website and to frequently improve it. Using the statistics collected, we can improve our offer for you as the user and design it to be more interesting. In such exceptional cases in which your personal data is transferred to the USA, the EU has standard agreements in place (https://privacy.google.com/businesses/processorterms/). The legal basis for the use of Google Analytics is Article 6, Paragraph 1, a) of the GDPR.
(2) Google Analytics is a Web analysis service from Google Inc. (Google). Google Analytics utilises so-called cookies, text files which are stored on your computer and enable us to analyse how you use our website. The information collected by the cookie about your use of this website are normally transferred to a Google server in the USA and stored there. By activating the IP anonymisation option on this website, your IP address will be shortened in advance by Google within the member states of the European Union or in other contractual states of the Agreement on the European Economic Area. Only in exceptional cases will the IP address be transferred in full to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to generate reports about the website activities and to provide additional services for the website operator associated with the use of the website and the use of the Internet.
(3) Within the scope of Google Analytics, the IP address identified by your browser will not be associated with other data from Google.
(4) You can prevent the storage of cookies by changing the respective settings in your browser software; however, please note that you will not necessarily be able to use all the functions of this website in their entirety in such a case. Furthermore, you can prevent the collection of data by the cookie and data relating to your use of the website (incl. your IP address) from Google and the processing of this data by Google by withdrawing consent to the use of such cookies in the cookie settings.
9. Integration of YouTube videos
(1) We have integrated YouTube videos into our online content. These are stored at www.YouTube.com and can be played directly from our website. They are all integrated in “extended data protection mode”, i.e. no data about you as a user are transferred to YouTube if you do not play videos. The data listed under Clause 9. (2) of this statement are not transferred until you play the videos. We have no influence on this data transfer. The legal basis for the use of YouTube is your consent according to Article 6, Paragraph 1, a) of the GDPR.
(2) As a result of the visit to the website, YouTube is informed that you have retrieved the corresponding subpage of our website. Furthermore, the data under Clause 9. (3) of this statement are sent. This occurs regardless of whether YouTube provides a user account through which you are logged in or no user account exists. If you are logged into Google, your data are associated directly with your account. If you do not want YouTube to associate them with your profile, you must log out before clicking the button. YouTube stores your data as user profiles and uses them for purposes of advertising, market research and/or targeted presentation of its website. Such analysis is performed (even for users who are not logged in) especially for the purpose of targeted advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise it, you must contact YouTube.
Google also processes your personal data in the USA. In cases in which your personal data is transferred to the USA, the EU has standard agreements in place (privacy.google.com/businesses/processorterms/).
10. Use of our Meta products
We, together with Meta Platforms Ireland Limited (Facebook Ireland Limited) – hereinafter referred to as Meta – 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, www.facebook.com/help/contact/540977946302970, are responsible for the use of our Facebook and Instagram pages as joint controllers within the meaning of Art. 26 GDPR and the Facebook Page Insights Controller Addendum (https://www.facebook.com/legal/terms/page_controller_addendum).
Detailed information on the cookies that Meta uses in conjunction with Meta accounts, when Meta products are used (including the website and apps) and when other websites are visited or apps used that utilise Meta products (including the Like button or other Facebook technologies) can be found in the Meta Cookies Policy (https://www.facebook.com/policies/cookies/). Information on how you can control the way data relating to you is used can also be found on the same page: https://www.facebook.com/policies/cookies/
When you visit our Facebook or Instagram page, Meta collects data about your IP address, among other things. Meta, as the operator of Meta products and services, combines this data with additional information that it obtains through cookies to make available to us statistical information on how each product or service is used (so-called Page Insights). These combined data make it possible to understand how users interact with our Facebook and Instagram pages. The Page Insights may be based on personal data that Meta collected in the context of a visit or interaction by users with our Meta products and their content. Meta provides more detailed information on this at: www.facebook.com/about/privacy.
The Page Insights help us perform an anonymous analysis of the reach of our pages, the number of page views, the amount of time spent watching video clips, and user behaviour (likes, comments, sharing articles, videos, etc.). In addition, the Page Insights make it possible to break down the data in accordance with user age, gender and location (as entered in the respective Facebook (Meta) profiles. With regard to the analysis of the reach of our pages, certain settings and/or filters can be used to select specific periods of time, articles viewed and demographic groups (e.g. female, 20–30 years old). These data are anonymised, aggregated and made abstract. This means that the settings and filters do not enable us to associate the data with specific individuals. The analysis is used to optimise our pages in terms of their public relations effectiveness. The legal basis for this data processing is Art. 6 1(a) and (f) GDPR.
Beyond what is described above, we as a provider of the information service do not collect or process any other data relating to the use of the pages.
Along with your rights with respect to us, you also have the right to lodge a complaint with the Irish Data Protection Commission (responsible for Meta Platforms Ireland Limited (Facebook Ireland Limited)) – Art. 77 GDPR).
If you have any specific questions regarding the protection of your data, please contact our Data Protection Officer or the data protection officer at Meta Platforms Ireland Limited. https://www.facebook.com/help/contact/540977946302970
11. External links
To provide you with optimal information, links are located on our site that refer to sites of third parties. Insofar as this is not obvious, we notify you that they are external links. The website operator has no influence on the content and presentation of these sites of other providers and thus refers to their data protection statements. Therefore, the guarantees of this Data Protection Statement obviously do not apply there.
12. Live chat
With your consent, we utilise on the userlike.com website a live chat system from our service provider Userlike UG (limited liability company), Probsteigasse 44-46, D-50670 Cologne, Germany. You can use the live chat feature like a contact form in order to talk to our employees in near real-time. Personal data is collected when the chat feature is launched.
- Date and time of your visit
- Your browser type and version
- Your IP address
- The operating system you use
- The URL of the website you visited prior to your visit to the Userlike website
- The volume of the data you send
- Your first and last name
- Your e-mail address
Depending on the nature of your conversation with our employees, additional personal data may be collected after you enter it during the chat. The type of data collected here mainly depends on the nature of your request/query or the problem you describe to us.
Userlike also stores the content of the live chat in order to avoid inconveniencing you at a later time by having to ask you to describe previous requests/queries. This history storage also helps us continuously evaluate the quality of our live chat feature. If you do not wish to have your chat history stored, you can inform us to this effect using the contact details shown below. We will then immediately delete all of your stored live chats.
13. Objection to or withdrawal from processing of your data
(1) If you have granted consent to the processing of your data, you can withdraw it at any time. Such withdrawal affects the permissibility of the processing of your personal data after you have declared it to us.
(2) Insofar as we base the processing of your personal data on the consideration of interests, you can object to the processing. This is especially the case if the processing is not necessary for the performance of a contract, which we describe in each case in the following description of the function. If you exercise the right to object, we ask that you describe the reasons why we should not process your personal data as we have. In the event of your legitimate objection, we review the situation and will either cease/adjust the data processing or identify our compelling grounds that are deserving of protection on the basis of which we will continue the processing.
(3) You can of course object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us of your objection to advertising via:
Withdrawal by email: firstname.lastname@example.org
Withdrawal by post: Attn. Mr Ulrich Middelberg, Steinbeis Papier GmbH, Stadtstraße 20, 25348 Glückstadt, Germany
As of 28 November 2020