Data Protection Declaration of TIPPER TIE TECHNOPACK GmbH

Throughout Europe, the terms of the EU General Data Protection Regulation (hereinafter: GDPR) apply. We would like to inform you about how our company processes personal data according to this regulation (see articles 13 and 14, GDPR). Should you have any questions about or comments on this data protection declaration, you can at any time contact us at the email address given under No. 2 or 3. 

Contents:

1. Overview
   1. Scope of validity
   2. Data controller
   3. Data protection officer
2. Details of data processing
   1. General information on data processing
   2. Accessing the website
   3. Job application
   4. Contact form
   5. User registration and login
   6. Product orders
   7. Tracking
   8. Social media plugins
3. Rights of data subjects   
   1. Rights to object
   2. Right to inform
   3. Right to rectification
   4. Right to erasure („right to be forgotten“)
   5. Right to restriction of processing
   6. Right to data portability
   7. Right to revoke consent
   8. Right to complaint
4. Glossary

1. Overview
   

   In this section of the data protection declaration, you can find information on the scope of validity, the responsibility for data processing, and the data protection officer.

   1. Scope of validity
      

      Data processing by TIPPER TIE TECHNOPACK GmbH can be divided into two main categories:

      -           All data required for the processing a contract with TIPPER TIE TECHNOPACK GmbH is processed in contract handling. If we involve external service providers, e.g. logistics companies or payment service companies, in the processing of a contract, we transfer your data to them to the extent necessary.

      -             When you access the website of TIPPER TIE TECHNOPACK GmbH, various pieces of information are exchanged between your terminal device and our server.  This can include personal data. The data collected in this way is used among other things to optimize our website or to display advertising in the browser on your device.

      This data protection declaration is valid for the following offerings:

      -           Our online offering, accessible at www.tippertie.com;

      -           Whenever reference is made to this data protection declaration in one of our offerings (e.g. websites, subdomains, mobile apps, web services or links to third-party sites). This is irrespective of the path or manner in which you access or use them.

      Collectively, all these offerings are also called “services”.

   2. Data controller
      

      The data controller – i.e. the entity that decides on the purposes and means of processing personal data in connection with the services – is

      TIPPER TIE TECHNOPACK GmbH
      Wilhelm-Bergner-Str. 9a
      21509 Glinde
      Phone:  +49 40 72 77 04 0
      Email: infoDE@tippertie.com

   3. Data protection officer
      

      You can contact our data protection officer
      - via regular post at the above mentioned address for the attention of the data protection officer, or
      - via email at privacy@jbtc.com.

2. Details of data processing
   

   In this section of the data processing declaration, we inform you in depth about the processing of personal data within the scope of our services. To provide a better overview, we have structured this information according to certain functionalities of our services. During normal use of our services, various functionalities and therefore various types of processing can occur in sequence or simultaneously.

   1. General information on data processing

      The following applies to all the processing described below, unless otherwise stated:

      1. No obligation to provide data
         

         There is no obligation, either contractual or statutory, to provide personal data. You are not obliged to provide data.

      2. Consequences of non-provision
         

         In the case of required data (data marked as mandatory in input masks), if you do not provide this data, you will not be able to use the corresponding service. In other areas, non-provision may have the result that we cannot provide our services in the same form and quality.

      3. Consent
         

         In various cases, you have the option of giving us your consent to further processing (possibly of some of your data) in connection with the processing described below. If you declare your consent, we will inform you separately about all modalities as well as the scope of your consent, plus the purposes of the processing.

      4. Transfer of personal data to third countries
         

         When we transfer data to third countries, i.e. countries outside the European Union, we strictly observe the statutory admissibility requirements for this.

         The admissibility requirements are specified in Art. 44 -49, GDPR.

      5. Hosting at external service providers
         

         To a large extent, our data processing also involves so-called hosting service providers. They provide us with storage space and processing capacities in their computer centers, and on our instruction they also process personal data on our behalf. These service providers process data either exclusively in the EU, or observing an adequate level of data protection which we have guaranteed with the EU standard data protection terms.

      6. Transfer to state authorities
         

         We transfer personal data to state authorities (including criminal investigation authorities) when this is necessary for compliance with a legal obligation which we are subject to (legal basis: Art. 6, Section 1 c), GDPR) or if it is necessary for the purposes of enforcing, exercising, or defending legal rights (legal basis: Art. 6, Section 1 f), GDPR).

      7. Storage period
         

         We do not store your data any longer than necessary for the specific processing purpose. We regularly delete data which is no longer necessary for ful-filling contractual or statutory obligations, unless it is still necessary to store it temporarily. This can be e.g. for the following reasons:

         • Storage obligations under commercial and fiscal law
         • Retention of evidence for legal disputes within the framework of statutes of limitation

         We can also continue to store your data if you have expressly given your consent to this.

      8. Recipient categories
         

         Apart from the recipient categories explicitly listed below, we also transfer personal data to the following recipient categories: shipping and delivery service providers, phone and fax companies.

      9. Data categories
         
         • Account data: login/user name and password
         • Personal master data: title, form of address/gender, first name, surname
         • Address data: street, house number, if applicable address supplements, zip code, town/city, country
         • Contact data: phone number(s), fax number(s), email address(es)
         • Login data: information about the service you have used to log in; time and technical information about the login, confirmation and logout; data provided by you during login
         • Order data: products ordered, prices, payment and delivery information
         • Payment data: account details, credit card details, data on other payment services such as Paypal
         • Access data: date and time you visit our service; the site used by the accessing system to access our site; site accessed during use of our site; session IDs; plus the following information about the computer system used to access the site: internet protocol address (IP address), browser type and version, device type, operating system, and similar technical information
         • Job application data: CV, references, work samples, certificates, images
   2. Accessing the website
      

      Here we describe how we process your personal data when you access our services. We would like to point out in particular that it is unavoidable that we transfer access data to external content providers (see b.) because of the way data is transferred technically in the internet.

      a. Information on processing
      Data category	Purpose	Legal basis	If applicable, legitimate interest	Storage period
      Access data	Establishment of connection, representation of the contents of the service, detection of attacks on our website based on unusual activities, error diagnosis	Art. 6 Section 1 f) GDPR	Correct functioning of the services, data security and security of business processes, prevention of misuse, protection against damage caused by attacks in computer systems	7 days

      
      
      

      b. Recipient of the personal data
      Recipient category	Relevant data	Legal basis of transfer	If applicable, legitimate interest
      External content providers who provide content (e.g. images, videos, embedded postings from social networks, advertising banners, fonts, update information) which is necessary for display of the service	Access data	Art. 6, Section 1 f), GDPR	Correct functioning of the services, (accelerated) representation of the contents
      Hosting service providers based in the USA	Access data	EU-US Privacy Shield

      
      
      

      c. External contents that transfer to external providers in third countries
      Name of the service	Functionality	Data transfer to third country?	If applicable, adequacy decision (Art. 45 GDPR)	If applicable, appropriate safeguards (Art. 46 GDPR)
      Google Fonts	Fonts	Yes		EU-U.S. Privacy Shield https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
      Google Maps	Inclusion in contact form	Yes		EU-U.S. Privacy Shield https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

      
      
      
   3. Job application
      

      Within an ongoing job application process, we process your personal data as follows:

      a. Information on processing
      Data category	Purpose	Legal basis	If applicable, legitimate interest	Storage period
      Address data, contact information	Identification, contact, communication prior to entering into a contract	Art. 6 Section 1 b) GDPR		6 months
      Master personal data	Identification, contact, age verification	Art. 6 Section 1 b) GDPR		6 months
      Job application data	Applicant selection	Art. 6 Section 1 b) GDPR		6 months

      
      
      

      b. Recipients of personal data
      Recipient category	Relevant data	Legal basis of transfer	If applicable, legitimate interest
      Affiliated company	All under a.	Processing by external processors according to. Art. 28 GDPR

      
      
      
   4. Contact form
      

      Here we describe what happens with your personal data when you use our contact form:

      a. Information on processing
      Data category	Purpose	Legal basis	If applicable, legitimate interest	Storage period
      Contact information (mandatory)	Inquiries from customers and interested parties	Art. 6 Section 1 Point f) GDPR	Processing inquiries	The period needed for processing the inquiry
      Master personal data	Personalization of inquiry processing	Art. 6 Section 1 Point f) GDPR	Personalization of inquiry processing; delivery options in case of e.g. replacement delivery, information material …	The period needed for processing the inquiry
      Address information	Postal dispatch	Art. 6 Section 1 Point f) GDPR	Delivery option in case of e.g. replacement delivery, information material ...	The period needed for pro-cessing the inquiry
      Free text (mandatory box)	Information on the subject	Art. 6 Section 1 Point f) GDPR	Processing inquiries	The period needed for processing the inquiry

      
      
      

      b. Recipients of personal data
      Recipient category	Relevant data	Legal basis of transfer	If applicable, legitimate interest
      -

      
      
      
   5. User registration and login
      

      To register an account and for subsequent logins, we process personal data as follows:

      a. Information on processing
      Data category	Purpose	Legal basis	If applicable, legitimate interest	Storage period
      Contact Information	Identification, contact, communication prior to entering into a contract	Art. 6 Abs. 1 b) DSGVO		Until the user deletes the account
      Master personal data	Identification, contact, age verification	Art. 6 Section 1 b) GDPR		Until the user deletes the account
      Address data	Ability to deliver mail	Art. 6 Section 1 b) GDPR		Until the user deletes the account
      Account data	To enable login	Art. 6 Section 1 b) GDPR		Until the user deletes the account
      Login data	Time of login and logout	Art. 6 Section 1 f) GDPR	Verification of account use	7 days

      
      
      

      b. Recipients of personal data
      Recipient category	Relevant data	Legal basis of transfer	If applicable, legitimate interest
      -

      
      
      
   6. Product orders
      

      In the following, we describe how your personal data is processed when you order products from our range:

      a. Information on processing
      Data category	Purpose	Legal basis	If applicable, legitimate interest	Storage period
      Personal master data	Product ordering	Art. 6 Section 1 Point b) GDPR	Ordering and paying for the product (invoice information)	For the duration of the order processing and/or 10 years in the case of invoices
      Contact information	Product orders	Art. 6 Section 1 Point b) GDPR	Ordering and paying for the product (invoice information)	For the duration of the order processing and/or 10 years in the case of invoices
      Order data	Product orders	Art. 6 Section 1 Point b) GDPR	Order (invoice information)	For the duration of the order processing and/or 10 years in the case of invoices
      Payment data	Product orders	Art. 6 Section 1 Point b) GDPR	Payment for the product (invoice information))	For the duration of the order processing and/or 10 years in the case of invoices
      Address information	Product orders	Art. 6 Section 1 Point b) GDPR	Delivery of the product (invoice information)	For the duration of the order processing and/or 10 years in the case of invoices

      
      
      

      b. Recipient of the personal data
      Recipient category	Relevant data	Legal basis of transfer	If applicable, legitimate interest
      Distributors	All under a.	Processing by external processors according to. Art. 28 GDPR
      Distributor (outside the EU)	All under a.	EU standard contractual terms / EU-US Privacy Shield

      
      
      
   7. Tracking
      

      In this section, we describe how your personal data is processed using tracking technologies for analysis and optimization of our services and for adver-tising purposes.

      The description of the tracking process also includes information on how you can prevent or object to the data processing. Please note that the opt-out, or rejection of data processing, is usually stored by cookies. If you use our services with a new terminal device or a different web browser or if you have deleted cookies from your browser, you need to opt out again.

      The tracking procedures described here only process personal data in pseudonymized form. The data is not linked to a concrete, identified natural person, i.e. the data is not linked to any information about the person behind the pseudonym.

      1. Tracking for analysis and optimization of our services and their use as well as to measure the success of advertising campaigns and to optimize how advertising is displayed
         1. Purposes of the processing

            The analysis of user behavior by means of tracking helps us to check the effectiveness of our services. It also helps us optimize them and adapt them to users’ needs as well as rectify any errors. What’s more, it enables the compilation of statistics about the use of our services (reach, intensity of use, surfing behavior of users) based on uniform, standard methods. This provides values that can be compared across the market.

            Tracking to measure the success of advertising campaigns allows us to optimize our advertising in the future. It also enables marketers and advertising agencies to optimize their adverts. The purpose of tracking to improve how advertising is displayed is to show users advertising tailored to their interests. This increases advertising success and therefore advertising revenue.

         2. Legal basis of the processing

            Legitimate interest according to Art. 6 Section 1 f) GDPR
            
            

         3. The individual tracking methods used
            

            Name of the service	Functionality	Opt-out	Data transfer to a third country?	If applicable adequacy decision (Art. 45 GDPR)	If applicable appropriate safeguards (Art. 46 GDPR)
            Google Analytics	Web analysis	tools.google.com/dlpage/gaoptout?hl=de	No
            Act On Beacon	Advertising success tracking		Yes		EU-US Privacy Shield https://www.privacyshield.gov/participant?id=a2zt0000000KzMNAA0&status=Active

            
            
            general Opt-In/Opt-Out for Tracking: Opt In/Opt Out
            

            If you wish to opt out of behavioral advertising, you can go to the website http://www.youronlinechoices.com/de, click there on “Your ad choices” and follow the instructions to completely or partially prevent the use of data for behavioral advertising by the listed service providers. You will still see advertising, however it will not be tailored to your interests.

   8. Social media plugins
      

      We do not use any social media plugins.

3. Rights of data subjects
   
   1. Right to object
      

      If we process your personal data for direct marketing purposes, you have to right to object at any time to the processing of personal data con-cerning you for such marketing with effect for the future. This also applies to profiling in as far as it is connected to such direct marketing.

      Furthermore, you have the right, for reasons which result from your specific situation, to object to the processing of your personal data according to Art. 6 Section 1 Points e) or f) GDPR at any time with effect for the future. This also applies to profiling according to these provisions. 

      You can exercise your right to object free of charge.

      You can contact us using the contact details given in I.2.

   2. Right to information
      

      You have the right to information about whether we process your personal data, what this data is, where applicable, and further information according to Art. 15 GDPR.

   3. Right to rectification

      You have the right to obtain from us without delay the rectification of inaccurate personal data about you (Art. 16 GDPR). Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

   4. Right to erasure (“right to be forgotten”)
      

      You have the right to obtain from us the erasure of personal data concerning you without delay if one of the reasons stated in Art. 17 Section 1 GDPR applies and the processing is not necessary for one of the purposes specified in Art. 17 Section 3 GDPR..

   5. Right to restriction of processing
      

      You have the right to obtain restriction of processing your personal data when one of the conditions specified in Art. 18 Section 1 Points a) to d) GDPR applies.

   6. Right to data portability
      

      You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format. Furthermore, you have the right to transmit this data to another party without hindrance from us. You also have the right to have the personal data transmitted directly from us, where this is technically feasible. This applies when the data processing is based on your consent or on a contract and the data processing is automated. Therefore, this does not apply when the data is only kept on paper.

   7. Right to revoke consent
      

      If processing is based on your consent, you have the right to revoke your consent at any time. This does not affect the legality of the processing which took place based on your consent up to the time of your revocation.

   8. Right to complaint
      

      You have the right to lodge a complaint with a supervisory authority

4. Glossary
   

   External processor: A natural or legal person, authority, institution or other party that processes personal data on behalf of the data controller.

   Browser: A computer program for website display (e.g. Chrome, Firefox, Safari).

   Cookies: A small text file stored locally on a user’s computer when he visits a website. This file stores data about the user’s behavior. If the user accesses the browser and visits the website again, the cookie sends the web server information about the user’s surfing behavior, based on the stored data.

   This information can be about the settings the user has made on a website, but also information about the user the website has collected fully auto-matically. Subsequently, the same web server can read these locally stored text files. Most browsers automatically accept cookies. You can manage cookies in your browser functions (usually under Options or Settings). There you can disable cookies, make them subject to your consent in each case, or otherwise restrict them. You can also delete cookies at any time.

   Third countries: Countries which are not subject to the EU Data Protection Directives (countries outside the EEA).

   Personal data: All information relating to an identified or identifiable natural person. An identifiable natural person is a natural person who can be identified directly or indirectly, in particular by means of allocation to an ID such as a name, to an identity number, to location data, to an online name, or to one or more special characteristics which express the physical, physiological, genetic, psychological, economic, cultural, or social identity of this natural person.

   Pixel: Pixels are also known as clear gifs, tracking pixels, web beacons, or web bugs.  They are small, transparent graphical images in html e-mails or on websites. When a document is opened, the small image is downloaded by a server and registered there. This enables the server operator to see whether and when an email was opened or a website visited. Usually, this function is achieved with a small program (Javascript). It means that certain types of information on your computer system can be recognized and transferred, e.g. the contents of cookies, the time and date you accessed a site, and a description of the site where the clear gif is.

   Profiling: Any type of automated personal data processing that uses the data to analyze certain personal aspects relating to a natural person. This is done in particular to analyze or predict aspects such as the natural person’s work, economic situation, health, personal preferences, interests, reliability, location, or change of location.

   Services: Our offerings to which this data protection declaration applies (see Scope of validity).

   Tracking: Collection and analysis of data about the behavior of users of our site.

   Tracking-technologies: Tracking can be achieved using the logfiles stored on our web servers, or using data logging from your terminal device by means of pixels, cookies, and similar tracking technologies.

   Processing: Any process performed with or without the help of automation or any such series of processes in connection with personal data such as the collection, logging, organization, sorting, storage, modification or alteration, reading, requesting, use, disclosure by means of transfer, dissemination, or any other form of provision, comparison or linking, restriction, deletion, or destruction.