Privacy Policy

Newsletter

1. Data protection at a glance

General information
The following information provides a basic overview of what happens with your personal data when you visit this website. Personal data is all data which can be used to personally identify you. You can find detailed information on the topic of data protection in our Privacy Policy which you can find below this text.
Data collection on this website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find these contact details in the section entitled “Information on the data controller” in this Privacy Policy.
How do we collect your data?
Firstly, your data is collected because you share it with us. This may, for example, be data that you enter into a contact form.
Other data is collected automatically or after you provide your consent when you visit the website by our IT systems. This is primarily technical data (e.g. internet browser, operating system or website page access time). The collection of this data takes place automatically as soon as you visit this website.
What do we use your data for?
Some of the data is collected to ensure the error-free provision of the website. Other data may be used to analyse your user behaviour.
What rights do you have with regard to your data?
You have the right of access to information free of charge at any time regarding the origin, recipients and purposes of processing of your stored personal data. You also have the right to request the rectification or erasure of this data. If you have provided consent to data processing, you may withdraw this consent with future effect at any time. You also have the right to require the restriction of processing of your personal data under certain circumstances. Furthermore, you have the right to lodge a complaint with the responsible supervisory authority.
You can contact us at any time regarding this and any other questions on the topic of data protection.
Analysis tools and third-party provider tools
Your surfing behaviour can be statistically evaluated when you visit this website. This primarily takes place using analysis programmes.
You can find detailed information on these analysis programmes in the following Privacy Policy.
 

2. Hosting

External hosting
This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster's servers. This information is primarily IP addresses, contact requests, metadata and communication data, contract data, contact details, names, instances of website access and other data generated via a website.
The hoster is used for the purpose of contract performance with our potential and existing customers (Article 6 (1) b) GDPR) and in the interest of the provision of a secure, fast and efficient version of our website by a professional provider (Article 6 (1) f) GDPR).
Our hoster will only process your data to the extent that this is necessary for the fulfilment of its service obligations and will follow our instructions with regard to this data.
We use the following hoster:
Mittwald CM Service GmbH & Co. KG
Königsberger Strasse 4-6
32339 Espelkamp
Conclusion of a contract for order processing
In order to ensure processing in compliance with data protection regulations, we have concluded a contract for order processing with our hoster.
 

3. General information and mandatory information

Data protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection provisions, as well as this Privacy Policy.
Various personal data is collected when you visit this website. Personal data includes any data with which you could be personally identified. This Privacy Policy explains what data we collect and what we use it for. It also explains how and for what purposes of processing this takes place.
We refer you to the fact that data transmission online (e.g. communication by email) may be associated with security issues. Full protection of the data against access by third parties is not possible.
Information about the controller
The controller responsible for data processing on this website is:
kunststoffland NRW e.V.
Grafenberger Allee 277-287
40237 Düsseldorf
Telephone: +49 211 210940-00
Email: info@kunststoffland-nrw.de
The controller is the natural or legal entity that makes decisions alone or together with others on the purposes and means of processing personal data (e.g. names, email addresses etc.).
Retention period
Insofar as no more specific retention period is set out in this Privacy Policy, your personal data is stored by us until the purpose of data processing no longer applies. If you make a legitimate request for erasure or withdraw your consent to data processing, your data will be deleted unless we have any other legally permissible reasons for the storage of your personal data (e.g. tax or commercial retention periods); in the latter case, the erasure takes place after these reasons have ceased to apply.
Information on data transmission to the USA and other third countries
We use, for example, tools by companies based in the USA or other third countries which are not secure from a data protection law perspective. When these tools are active, your personal data can be transmitted to these third countries and processed there. We note that a level of data protection comparable with the EU cannot be guaranteed in these countries. For example, US companies are obligated to hand over personal data to security authorities without you, as a data subject, being able to take legal action against this. Therefore, it cannot be ruled out that US authorities (e.g. intelligence services) may process, evaluate and permanently store your data which is located on US servers for monitoring purposes. We have no influence over these processing activities.
Withdrawal of your consent to data processing
Many data processing operations are only possible with your express consent. You may withdraw consent which has already been granted at any time. The lawfulness of data processing which has taken place up to the point in time of the withdrawal remains unaffected by the withdrawal.
Right to object to data collection in special cases and to direct advertising (Article 21 GDPR)
IN THE EVENT THE DATA PROCESSING IS BASED ON ARTICLE 6 (1) E) OR F) GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS RESULTING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED IS SPECIFIED IN THIS PRIVACY POLICY. IF YOU RAISE AN OBJECTION, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA IN QUESTION UNLESS WE CAN PROVE LEGITIMATE COMPELLING REASONS FOR THE PROCESSING WHICH OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR THE PROCESSING SERVES THE ASSERTION, EXERCISE OR DEFENCE OF LEGAL CLAIMS (RIGHT TO OBJECT PURSUANT TO ARTICLE 21 (1) GDPR).
IN THE EVENT YOUR PERSONAL DATA IS PROCESSED TO CARRY OUT DIRECT ADVERTISING, YOU HAVE THE RIGHT TO RAISE AN OBJECTION TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSES OF SUCH ADVERTISING AT ANY TIME; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS CONNECTED TO SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL THEN NO LONGER BE USED FOR THE PURPOSES OF DIRECT ADVERTISING (OBJECTION PURSUANT TO ARTICLE 21 (2) GDPR).
Right to lodge a complaint with the responsible supervisory authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their ordinary place of residence, their place of work or the location of the alleged violation. The right to lodge a complaint remains without prejudice to other administrative or judicial remedies.
Right to data portability
You have the right to have data which we process in an automated manner on the basis of your consent or in performance of a contract provided to you or a third party in a commonly-used, machine-readable format. Insofar as you require the direct transmission of the data to another controller, this shall only take place insofar as it is technically feasible.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, for example orders or enquiries that you send to us as the website operator, this website uses SSL or TLS encryption. You can recognise an encrypted connection because the address bar of the browser switches from “http://” to “https://” and by the padlock symbol in your browser bar.
If SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.
Information, erasure and rectification
Within the framework of the valid statutory provisions, you have the right of access free of charge at all times to information about your stored personal data, its origin and recipients and the purpose of data processing and, where applicable, the right to the rectification or erasure of this data. You can contact us at any time regarding this and any other questions on the topic of personal data.
Right to the restriction of processing
You have the right to demand the restriction of processing of your personal data. You can contact us at any time regarding this. The right to the restriction of processing exists in the following cases:

  • In the event you dispute the correctness of your personal data stored by us, we generally require time to review this. For the duration of the review period, you have the right to the restriction of processing of your personal data.
  • If the processing of your personal data took place/is taking place unlawfully, instead of erasure you may require the restriction of the processing.
  • If we no longer require your personal data but you require it for the exercise, defence or assertion of legal claims, you have the right to require the restriction of processing of your personal data instead of the erasure.
  • If you have objected pursuant to Article 21 (1) GDPR, your interests and our interests must be weighed up. Until it is established which interests outweigh the other interests, you have the right to the restriction of processing of your personal data.

If you have restricted the processing of your personal data, this data, except its storage, may only be processed with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of a significant public interest of the European Union or a Member State.
Objection to advertising emails
We hereby prohibit the use of contact details published as part of the obligation to provide a legal notice to transmit advertising material and information material that is not expressly requested. The operators of the website expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, for example via spam emails.
 

4. Data collection on this website

Cookies
Our website uses cookies. Cookies are small text files and do not cause any damage to your device. They are either stored temporarily on your device for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically erased after the end of your visit. Permanent cookies remain stored on your device until you delete them or automatic erasure is carried out by your browser.
In some cases, cookies can also be stored on your device by third-party companies when you visit our website (third-party cookies). These cookies enable us or you to use certain services provided by the third-party company (e.g. cookies to process payment services).
Cookies have various functions. Numerous cookies are technically necessary as certain website functions would not work without them (e.g. the shopping basket function or displaying videos). Other cookies serve to evaluate user behaviour or display advertising.
Cookies that are necessary to carry out the electronic communication process (essential cookies) or for the provision of certain functions you wish to use (functional cookies, e.g. for the shopping basket function) or for website optimisation (e.g. cookies to measure the web audience) are stored on the basis of Article 6 (1) f) GDPR insofar as no other legal basis is specified. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimised provision of its services. Insofar as consent to the storage of cookies has been requested, the storage of the respective cookies takes place exclusively on the basis of this consent (Article 6 (1) a) GDPR); the consent may be withdrawn at any time.
You can change your browser settings such that you are informed when cookies are set and only enable cookies in individual cases, exclude the acceptance of cookies for specific cases or in general, and activate the automatic erasure of cookies when the browser is closed. The functionality of this website may be restricted if cookies are deactivated.
Insofar as cookies are used by third-party companies or for analysis purposes, we will inform you about this separately in this Privacy Policy and, where applicable, ask for your consent.
Cookie consent with Usercentrics
This website uses cookie consent technology by Usercentrics to collect your consent for the storage of certain cookies on your device or for the use of certain technologies and to document this in compliance with data protection provisions. The provider of this technology is Usercentrics GmbH, Rosental 4, 80331 Munich, website: usercentrics.com (hereinafter “Usercentrics”).
When you visit our website, the following personal data is transmitted to Usercentrics:

  • Your consent and/or the withdrawal of your consent
  • Your IP address
  • Information about your browser
  • Information about your device
  • Time of your website visit

Furthermore, Usercentrics stores a cookie in your browser in order to be able to assign the consent which has been provided or the withdrawal thereof to you. The data recorded in this manner is stored until you ask us for the erasure thereof, delete the Usercentrics cookie yourself or the purpose of data storage no longer applies. Mandatory statutory retention obligations remain unaffected.
Usercentrics is used to collect consent which is required by law for the use of certain technologies. The legal basis for this is Article 6 (1) c) GDPR.
Contract for order processing
We have concluded a contract for order processing with Usercentrics. This is a contract required under data protection law to ensure that Usercentrics only processes the personal data of visitors to our website in accordance with our instructions and in compliance with GDPR.
Server log files
The provider of the website automatically collects and stores information in server log files, which your browser automatically transmits to us. This information is:

  • Browser type and browser version
  • Operating system being used
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP address

This data will not be merged with other data sources.
The collection of this data takes place on the basis of Article 6 (1) f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website and the server log files need to be recorded for this purpose.
Contact form
If you send us enquiries using the contact form, your details from the enquiry form, including the contact details you provide there, will be stored by us for the purposes of processing the enquiry and to enable us to respond to further questions. We do not pass on this data without your consent.
The processing of this data takes place on the basis of Article 6 (1) b) GDPR insofar as your enquiry is associated with the performance of a contract or is required for the performance of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries sent to us (Article 6 (1) f) GDPR) or your consent (Article 6 (1) a) GDPR) insofar as this was requested.
The data you enter via the contact form is stored by us until you ask us for the erasure thereof, withdraw your consent to the storage or the purpose of the data storage no longer applies (e.g. after your enquiry has been processed in full). Mandatory statutory provisions, in particular retention periods, remain unaffected.
Enquiry by email, telephone or fax
If you contact us by email, telephone or fax, your enquiry, including all the personal data arising from this (name, enquiry), will be stored and processed by us for the purpose of processing your case. We do not pass on this data without your consent.
The processing of this data takes place on the basis of Article 6 (1) b) GDPR insofar as your enquiry is associated with the performance of a contract or is required for the performance of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries sent to us (Article 6 (1) f) GDPR) or your consent (Article 6 (1) a) GDPR) insofar as this was requested.
The data you send to us via contact enquiries is stored by us until you ask us for the erasure thereof, withdraw your consent to the storage or the purpose of the data storage no longer applies (e.g. after your case has been processed in full). Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.
 

5. Analysis tools and advertising

Google Tag Manager
We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is a tool that we use to help integrate tracking or statistics tools and other technologies on our website. Google Tag Manager does not create any user profiles, store any cookies or carry out any independent analyses. It merely serves to administrate and present the tools integrated via it. However, Google Tag Manager records your IP address, which may also be transmitted to the parent company of Google in the United States.
Use of Google Tag Manager takes place on the basis of Article 6 (1) f) GDPR. The website operator has a legitimate interest in the rapid and uncomplicated integration and administration of various tools on its website. Insofar as the corresponding consent has been requested, the processing takes place exclusively on the basis of Article 6 (1) a) GDPR; the consent may be withdrawn at any time.
Google Analytics
This website uses functions by the web analysis service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyse the behaviour of the website visitors. In connection with this, the website operator receives various usage data, e.g. website access instances, dwell time, operating systems being used and the origin of the user. This data is collated by Google, potentially in a profile, that is assigned to the respective user or its device.
Google Analytics uses technologies that enable the recognition of the user for the purposes of analysing user behaviour (e.g. cookies or device fingerprinting). The information collected by Google regarding the use of this website is generally transmitted to a Google server in the USA and stored there.
The use of this analysis tool takes place on the basis of Article 6 (1) f) GDPR. The website operator has a legitimate interest in the analysis of user behaviour in order to optimise both its website and its advertising. Insofar as the corresponding consent has been requested (e.g. consent to the storage of cookies), the processing takes place exclusively on the basis of Article 6 (1) a) GDPR; the consent may be withdrawn at any time.
Data transmission to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: privacy.google.com/businesses/controllerterms/mccs/.
IP anonymisation
We have activated the IP anonymisation function on this website. This means that your IP address will be truncated by Google within the European Union or in the European Economic Area prior to transmission to the United States. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, compile reports regarding website activity, and provide other services to the website operator related to website and internet usage. The IP address provided by your browser within the framework of Google Analytics will not be combined with other data from Google.
Browser plugin
You can prevent Google from collecting as well as processing your data by downloading and installing the browser plug-in which is available via the following link: https://tools.google.com/dlpage/gaoptout?hl=en-GB.
For more information about how Google Analytics handles user data, see Google's Privacy Policy: support.google.com/analytics/answer/6004245.
Commissioned processing
We have entered into a contract with Google for the outsourcing of our data processing and we implement the strict requirements of the German data protection supervisory authorities in full when using Google Analytics.
Demographics with Google Analytics
This website uses the “demographics” function of Google Analytics to enable it to display suitable advertising to the website visitors within the Google advertising network. This allows reports to be generated containing statements about the age, gender and interests of website visitors. This data comes from interest-based advertising from Google and visitor data from third-party providers. This data cannot be attributed to any specific individual. You can disable this feature at any time by adjusting the advertising settings in your Google account or you can generally prevent the collection of your data by Google Analytics as described in the “Objection to data collection” section.
Retention period
Data stored at Google on the user and event level which is linked to cookies, user IDs or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) will be anonymised after 26 months or deleted. For details, please refer to the following link: https://support.google.com/analytics/answer/7667196?hl=en-GB
 

6. Newsletter

CleverReach
This website uses CleverReach to send newsletters. The provider is CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany (hereinafter: “CleverReach”). CleverReach is a service for the organisation and analysis of newsletter distribution. The data you provide (e.g. your email address) for the purpose of newsletter subscription will be stored on CleverReach servers in Germany or Ireland.
Sending our newsletters with CleverReach enables us to analyse the behaviour of newsletter recipients. Amongst other things, we can analyse how many recipients open the email containing the newsletter and how often various links inside the newsletter are clicked on. Using conversion tracking, we can also analyse whether a predefined action (e.g. the purchase of a product on this website) takes place after the link in the newsletter has been clicked on. For more information on how data is analysed by CleverReach, please see: https://www.cleverreach.com/en/features/reporting-tracking/.
The data will be processed on the basis of your consent (Article 6 (1) a) GDPR). You can withdraw your consent at any time by unsubscribing from the newsletter. The lawfulness of the data processing operations which have already been carried out remains unaffected by the withdrawal.
If you do not wish your use of the newsletter to be analysed by CleverReach, you have to unsubscribe from the newsletter. We provide a link to do this in every newsletter we send.
The data provided to us when registering for the newsletter will be stored by us or by the newsletter service provider until such time as you cancel your newsletter subscription and this data will be deleted from the newsletter distribution list after this. Data stored by us for other purposes shall remain unaffected by this.
After you have unsubscribed from the newsletter distribution list, your email address may be saved in a blacklist either with us or the newsletter service provider to prevent the sending of emails in the future. The data from the blacklist is used solely for this purpose and is not combined with other data. This serves both your interest and our interest in complying with the legal requirements for sending newsletters (legitimate interest in accordance with Art. 6 (1) f) GDPR). The storage in the blacklist is not limited in terms of time. You may object to the storage if your interests outweigh our legitimate interest.
For more information, see CleverReach's Privacy Policy at: https://www.cleverreach.com/en/privacy-policy/.
Conclusion of a contract for order processing
We have entered into an agreement with the provider of CleverReach for the outsourcing of our data processing and fully implement the strict requirements of the German data protection supervisory authorities when using CleverReach.
 

7. Plugins and tools

YouTube with extended data protection
This website integrates videos from YouTube. The provider of this is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
We use YouTube in the extended data protection mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. The disclosure of data to YouTube partners is, however, not mandatorily excluded by the extended data protection mode. Therefore, YouTube will establish a connection to the Google DoubleClick network regardless of whether you are viewing a video or not.
A connection will be established with the YouTube servers as soon as you start watching a YouTube video on this website. The YouTube server is then informed which of our pages you have visited. If you are logged into your YouTube account, this enables YouTube to directly associate your surfing habits with your personal profile. You can prevent this by logging out of your YouTube account.
In addition, YouTube can save various cookies on your device after you have started a video or use comparable recognition technologies (e.g. device fingerprinting). In this manner, YouTube can receive information about visitors to this website. Such information is used, for example, to capture video statistics, to improve user-friendliness and to prevent attempted fraud.
In some cases, starting a YouTube video may trigger further data processing operations over which we have no control.
YouTube is used in the interest of making our website appear more attractive. This represents a legitimate interest within the meaning of Article 6 (1) f) GDPR. Insofar as the corresponding consent has been requested, the processing takes place exclusively on the basis of Article 6 (1) a) GDPR; the consent may be withdrawn at any time.
For more information about data protection at YouTube, please see their Privacy Policy: https://policies.google.com/privacy?hl=en-GB.
Vimeo without tracking (Do-Not-Track)
This website uses plugins by the video portal Vimeo. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.
If you visit one of our pages featuring a Vimeo video, a connection to the Vimeo servers is established. In connection with this, the Vimeo server is informed about which of our pages you have visited. Vimeo also obtains your IP address. However, we have set up Vimeo such that Vimeo will not track your user activities and will not set any cookies.
Vimeo is used in the interest of making our web services more visually appealing. This represents a legitimate interest within the meaning of Article 6 (1) f) GDPR. Insofar as the corresponding consent has been requested, the processing takes place exclusively on the basis of Article 6 (1) a) GDPR; the consent may be withdrawn at any time.
The data transfer to the USA is based on the standard contractual clauses of the EU Commission and, according to Vimeo, on “legitimate business interests”. You can find details here: https://vimeo.com/privacy.
You can find more information on the handling of user data in the Vimeo Privacy Policy at: https://vimeo.com/privacy.
 

8. eCommerce and payment service providers

Processing of data (customer and contract data)
We collect, process and use personal data only insofar as it is necessary to justify, design or modify legal relationships (master data). This takes place on the basis of Article 6 (1) b) GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures. We only collect, process and use personal data concerning the use of this website (usage data) to the extent required to enable users to access our service or to invoice users for this.
The customer data which is collected will be deleted after completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.
Data transmission when entering into a contract for services and digital content
We only transmit personal data to third parties where this is required to fulfil the terms of the contract with us, for example, to banks entrusted to process payments.
Data will not be transmitted for any other purpose or only if you have given your express consent for this. Your data will not be disclosed to third parties, for example for advertising purposes, without your express consent.
The basis for data processing is Article 6 (1) b) GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.