Data Protection Declaration

General information

When you visit our web site and access individual page contents, you entrust your data to us. The following Data Protection Declaration is intended to give you a simple overview of which data we collect and record, the purposes for which we collect the data, and what we do with the recorded data.

On the following pages we inform you about the collection of personal data during the use of this web site. Personal data includes all data that can be related to you personally, e.g. name, address, E-mail addresses and user behaviour.

Panther Packaging GmbH & Co. KG takes the protection of your personal data very seriously, and we adhere strictly to the rules of the data protection laws. The following Declaration gives you an overview of how we implement this protection.


A Responsible Body within the meaning of the General Data Protection Regulation (GDPR)

Name / company name: Panther Packaging GmbH & Co. KG

Hereinafter “Panther Packaging”

Street, building number: Altonaer Straße
Postcode, town, country: 25436 Tornesch, Germany

Commercial Register No.: HRA 968 EL / Register Court: Pinneberg County Court

Managing Directors : Axel Hilmer, Carin Hilmer-Brenzinger, Oliver Winkler and Dr. Frank Hibinger
Telephone Number: 04122 501-0
E-mail address: info(at)panther-packaging.de

The Responsible Body is the natural person or legal entity who/that takes decisions, alone or together with others, about the purposes and means of processing of personal data (e.g. names, E-mail addresses etc.).

Data Protection Officer

Name: Elke Petersen
Street, building number: Altonaer Straße
Postcode, town, country: 25436 Tornesch, Germany
Telephone Number 04122 501-0
E-mail address: datenschutz(at)panther-packaging.de

Data collection on our web site

Every time our web site is accessed, we and/or the web space provider automatically collect and transmit data. This information, also called server log files, are of a general nature and do not allow any conclusions about you as a person.

These server log files contain essentially the following details:

» Browser type and browser version
» The operating system being used
» The Referrer URL (the page from which you accessed our offering)
» The host name of the accessing computer
» The time of day of the server request
» File names and file sizes (e.g. of graphics)
» The IP address

This data is not combined with other data sources.

Without this data it would be partially technically impossible to deliver and display web page contents and to guarantee faultless provision of the web site. To this extent the collection of data is a mandatory necessity. The legal basis for the temporary data storage is Article 6 Para. 1 letter f of the General Data Protection Regulation (GDPR).

We process users’ personal data only in compliance with the relevant data protection provisions. This means that users’ data is processed only when statutory permission exists. I.e. especially when data processing is necessary to supply our contractual services (e.g. processing orders/requests) and for online services, or is prescribed by statute, a user’s consent is available, and also based on our justified interests (i.e. in the interests of the analysis, optimisation, economic operation and safety/security of our online offering within the meaning of Article 6 Para. 1 letter f of the GDPR, especially for reach measurement, preparing profiles for advertising and marketing purposes, and to collect access data and deployment of the services of third party providers).

Furthermore, we use the anonymous information for statistical purposes. It helps us to optimise the offering and the technology. We also reserve the right to monitor the log files retrospectively if unlawful use of our offering is suspected.

We draw attention to the fact that the legal bases for the permission are Article 6 Para. 1 letter a and Article 7 of the GDPR, the legal basis for processing to fulfil our services and carry out (pre-)contractual measures is Article 6 Para. 1 letter b of the GDPR, the legal basis for processing to fulfil our legal obligations is Article 6 Para. 1 letter c of the GDPR, and the legal basis for processing to safeguard our legitimate interests is Article 6 Para. 1 letter f of the GDPR.

Handling personal data, registration with our web page/site / contact forms

Personal data will be collected if you register with our web site/page, e.g. to use the Specifications Boxx, or you contact us via online form functions (contact form, packaging enquiry, information material). These data include, among other things, the company name, forename and surname, address, telephone number and E-mail address as contact and communications data.

We process the data in the context of your contacting us to execute the contact enquiry and to handle it, and we process stored data (e.g. users’ names, addresses and contact data) and contract data (e.g. services used, names of contact persons) to fulfil our contractual duties and service performances pursuant to Article 6 Para. 1 letter b of the GDPR.

If you allow us to receive data via our job application form (name, address, E-mail address, telephone number and the associated job application documents such as CV, covering letter, additional information), you thereby agree to electronic processing for the job application process by Panther Packaging and/or by the Panther Group. When the user’s permission is available, the legal basis for processing is Article 6 Para. 1 letter a of the GDPR. If the processing is for purposes of an employment relationship, an additional legal basis is Article 88 Para. 1 of the GDPR in conjunction with Section 26 Para. 1 of the BDSG (German Federal Data Protection Act) (new).

We use these documents exclusively in the context of the job application process. After completing the job application process, the data will be deleted again unless mandatory statutory preservation periods prescribe other procedures.

If you contact us by E-mail, we store the information you give/data you provide to reply to your enquiry and to raise possible follow-up questions.
The data you have communicated remains with us until you request deletion, revoke your consent to storage, or the purpose of the data storage ceases to exist (e.g. after the processing of your enquiry has been completed). Mandatory statutory provisions – especially preservation periods – remain unaffected.

If the Specifications Boxx is used, registration enables access to services and contents that are available only to registered users. If necessary, registered users are able at any time to modify or delete the data stated in the context of registration. Of course, on request we will inform you which personal data were collected and stored. Moreover, we will correct or delete the data on request, provided the request is not opposed by statutory preservation periods. Please use the contact data in this Data Protection Declaration for any enquiries and to request correction or deletion of data. 
You have a fundamental right to ask for data that we process automatically on the basis of your consent or to fulfil an enquiry to be handed over to you or to a third party in a current machine-readable format. You are also entitled to data transferability.

Many data processing procedures are possible only with your express permission. You can at any time revoke a consent you have already given. An informal E-mail message to us is sufficient for this purpose. The legitimacy of the data processing that has taken place until revocation is unaffected by the revocation.

Your rights

On request, you have the right to receive information about the personal data we stored about you. Users are also entitled to the correction of incorrect data, restriction of processing and the deletion of your personal data, to assert your rights to data portability insofar as relevant, and to file a complaint with the responsible supervisory authority if unlawful data processing is suspected. You can also revoke the consent, basically with effect for the future.

You can contact our Data Protection Officer (see above) at any time in this connection and in relation to any other queries on the subject of personal data.

In the event of breaches of the data protection law, the affected person is entitled to a right of appeal to the competent supervisory authority. The competent supervisory authority in data protection law questions is the State Data Protection Officer of the German federal state in which our company has its registered place of business. A list of Data Protection Officers and their contact data can be found at the following link:  https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

Encrypted data transfer

To safeguard the security of your data during transfer, we work using encryption processes (e.g. TLS [Transport Layer Security]) via HTTPS (Hypertext Transfer Protocol) reflecting the current state of the art.

For security reasons and to protect the transmission of confidential contents, e.g. contact enquiries that you sent to us as the site/page operator, this page/site uses SSL and/or TLS encryption. You can recognise an encrypted connection by the fact that the http:// in the browser’s address line changes to , and by the lock symbol in your browser line.

When SSL or TLS encryption is activated, third parties cannot read the data you transfer to us.

Inclusion of third party services and contents

Our offering occasionally includes services and performances from other providers. Examples include functions to safeguard against spam (Google reCAPTCHA), YouTube videos and graphics/images from other web sites/pages. Communication of the IP address is absolutely essential to allow this data to be accessed and displayed in the user’s browser. Thus the providers (hereinafter called “third party providers”) become aware of the respective user’s IP address.

Although we endeavour to use exclusively third-party providers that need the IP address only to enable the delivery of contents, we have no influence over whether the IP address may possibly be stored. In that case this process is intended for statistical purposes, among other things. Insofar as we know that the IP address is being stored, we inform our users of this.

Data is handed over to third parties only within the framework of statutory provisions. We pass on user’s data to third parties only if this is necessary for contractual purposes, e.g. based on Article 6 Para. 1 letter b of the GDPR, or on the basis of justified interests in the effective, economic operation of our business pursuant to Article 6 Para. 1 letter f of the GDPR.

Cookies

This web site/page uses so-called cookies. These are text files originating from the server and stored on your computer. They contain information about the browser, the IP address, operating system and Internet connection. We do not forward this data to third parties, or link it to personal data without your permission.

Cookies fulfil two main tasks. They help us to make it easier for you to navigate through our offering, and they enable the web page to be displayed correctly. Most of the cookies we use are so-called “session cookies” and are automatically deleted after your visit ends. Other cookies remain on your terminal device until you delete them. These cookies enable us to recognise your browser when you next visit us.

You can adjust your browser in such a way that you are informed about the setting of cookies, that you exclude the acceptance of cookies for specified cases or in general, and that you activate the automatic deletion of cookies when the browser is closed.

You have the option to access our offering even without cookies. The corresponding browser settings must be modified in order to achieve this. Please obtain information from your browser’s help function about how cookies are deactivated. However, we draw attention to the fact that this may impair some of this web page/site’s functions and may restrict the convenience of its use. The pages 
http://www.aboutads.info/choices/ (USA) and http://www.youronlinechoices.com/uk/your-ad-choices/ Europe) will allow you to manage online advertising cookies.

The legal basis for processing personal data using cookies is Article 6 Para. 1 letter f of the GDPR.

Use of Google Analytics

This web site uses functions of the Google Analytics web analysis service. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses “cookies” (as described above) to evaluate your use of the web page/site, to compile reports about web site/page activities and to determine and analyse other services vis-à-vis the web site/page operator connected with the use of the web site/page and Internet. As a rule, the information generated by cookies is transferred to a Google server in the USA and stored there.

We have activated the IP anonymising function on this web site. As a result, Google will truncate your IP address within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before transmission to the USA. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there.

The IP address communicated by your browser in the context of Google Analytics will not be combined with other data from/by Google. You can prevent cookies being stored by a corresponding setting of your browser’s software. In that case, however, we advise you that you may possibly not be able to use all of this web site’s functions to their full extent.

Furthermore, you can prevent collection to Google of the data generated by the cookies and related to your use of the web site/page (including your IP address) and processing of these data by Google by downloading and installing the browser plug-in available at the following link:  https://tools.google.com/dlpage/gaoptout?hl=de 

The legal basis for the use of Google Analytics is Article 6 Para. 1 letter f of the GDPR.

Objection to data collection by Google Analytics

There is an additional option to object against data collection by Google Analytics by clicking on the following link. A so-called opt-out cookie is set (opt-out cookies are cookies created by web sites/pages in the browser file to block the same web site/page when creating further cookies in the future), and this prevents collection of your data during future visits to this web site: deactivate Google Analytics.

If no objection is made to recording and processing of the data by Google Analytics, it is safeguarded by an order data processing contract.

You can find detailed information about conditions of use and data protection via the following links:
http://www.google.com/analytics/terms/de.html 
https://www.google.de/intl/de/policies/ 
https://support.google.com/analytics/answer/6004245?hl=de

Demographic characteristics in Google Analytics

his web site uses the Google Analytics “demographic characteristics” function. This enables the preparation of reports containing information about the page/site visitor’s age, sex/gender and interests. This data originates from Google’s interest-related advertising and from third party providers’ visitor data. This data cannot be assigned to any specific person. You can deactivate this function at any time via the advertisements settings in your Google account, or generally prohibit collection of your data by Google Analytics as explained in the section “Objection to data collection” (see above).

Google Analytics Remarketing

Our web sites use Google Analytics Remarketing functions in conjunction with the multi-device functions of Google AdWords and Google DoubleClick. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

This function enables advertising target groups created using Google Analytics Remarketing to be linked to the multi-device functions of Google AdWords and Google DoubleClick. In this way, personalised interest-related advertising messages that were adapted to you depending on your previous usage and surfing behaviour on one terminal device (e.g. a mobile phone) can also be displayed on another of your terminal devices (e.g. a tablet or PC).

If you issued the corresponding consent, Google links your web and app browser operation to your Google account for this purpose. In this way, the same personalised advertising messages can be sent to each terminal device on which you sign in with your Google account.

To support this function, Google Analytics collects Google authenticated user IDs that are temporarily linked to our Google Analytics data in order to define and create target groups for multi-device advertising publicity.

You can permanently object to multi-device remarketing/targeting by deactivating your personalised advertising in your Google account; to do this, please follow this link: https://www.google.com/settings/ads/onweb/.

Compilation of the collected data in your Google account takes place exclusively based on your consent that you can issue or revoke vis-à-vis Google (Article 6 Para. 1 letter a of the GDPR). For data collection processes that are not amalgamated in your Google account (e.g. because you do not have a Google account or have objected to the amalgamation), data collection is based on Article 6 Para. 1 letter f of the GDPR. The justified interest arises from the fact that the web site operator has an interest in the anonymised analysis of web site visitors for advertising purposes.

You can find further information and data protection provisions in Google’s data protection declaration at: https://www.google.com/policies/technologies/ads/.

Google AdWords and Google Conversion-Tracking

This web site uses Google AdWords. AdWords is an online advertising program belonging to Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”).

In the context of Google AdWords, we use what is called Conversion Tracking. If you click on an advertisement inserted by Google, a Conversion-Tracking cookie is set. Cookies are small text files placed on the user’s computer by the Internet browser (see also the “cookies” description). These cookies lose their validity after 30 days and their purpose is not to identify the user personally. If the user visits certain pages of this web site and the cookie has not yet expired, we and Google can recognise that the user clicked on the advertisement and was redirected to this page.

Each Google AdWords customer is given a different cookie. These cookies cannot be tracked / traced via AdWords customers’ web sites. The purpose of the information obtained by using conversion cookies is to prepare conversion statistics for AdWords customers who have decided to use Conversion Tracking. Customers obtain the total number of users who clicked on their advertisement and were redirected to a site/page carrying a Conversion Tracking tag. However, they do not obtain any information with which users can be personally identified. If you do not want to take part in Tracking, you can object to this use by simply deactivating the Google Conversion Tracking cookie via your Internet browser’s user settings. You will then not be included in the conversion tracking statistics.

The storage of “Conversion Cookies” is based on Article 6 Para. 1 letter f of the GDPR. The web site operator has a legitimate interest in analysing user behaviour to optimise both its web offering and its advertising. Accordingly, the legal basis for using Google AdWords and Google Conversion Tracking is Article 6 Para. 1 letter f of the GDPR. You can find more information about Google AdWords and Google Conversion-Tracking in Google’s data protection provisions: https://www.google.de/policies/privacy/.

This is another case in which you can set your browser in such a way that you are informed about the setting of cookies and can allow cookies only in an individual case, can exclude the acceptance of cookies for specific cases or generally, and can activate automatic deletion of cookies when the browser is closed. This web site’s functionality may be restricted if cookies are deactivated.

Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on our web sites. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

The purpose of reCAPTCHA is to check whether data is being entered on our web sites (e.g. in a contact form) by a human being or by an automated program. To do this, reCAPTCHA analyses the web site visitor’s behaviour based on various characteristic features. This analysis begins automatically as soon as the web site visitor enters the web site. To perform the analysis, reCAPTCHA assesses various information (e.g. IP address, the web site visitor’s residence time on the web site, or mouse movements carried out by the user). The data collected during the analysis are forwarded to Google.

reCAPTCHA analyses run entirely in background. Web site visitors are not informed that an analysis is taking place.

Data processing takes place based on Article 6 Para. 1 letter f of the GDPR. The web site operator has a legitimate interest in protecting his web offerings against improper automated spying and against spam.

You can find more information about Google reCAPTCHA and Google’s Data Protection Declaration via the following links: https://www.google.com/intl/de/policies/privacy/ und https://www.google.com/recaptcha/intro/android.html.

Plugins and Tools

YouTube

Our web site uses plugins from the YouTube page operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

When you visit one of our pages equipped with a YouTube plugin, a connection to YouTube’s servers is established. In this process, information about which of our pages you visited is reported to the YouTube server.

If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.

The use of YouTube takes place in the interest of an attractive presentation of our online offerings. This constitutes a justified interest within the meaning of Article 6 Para. 1 letter f of the GDPR.

You can find more information about the handling of user data in YouTube’s data protection declaration at: https://www.google.de/intl/de/policies/privacy.

Vimeo

Our web site uses Vimeo video portal plugins. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.

When you visit one of our sites that carries a Vimeo plugin, a connection to the Vimeo servers is established. At the same time, the Vimeo server is informed which of our pages you visited. Vimeo also obtains your IP address. This happens even if you are not logged on to Vimeo or don’t have an account with Vimeo. The information collected by Vimeo is transmitted to the Vimeo servers in the USA.

If you are logged on to your Vimeo account, you enable Vimeo to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your Vimeo account.

The legal basis for processing your data is Article 6 Para. 1 letter f of the GDPR. You can find more information about handling user data in Vimeo’s data protection declaration at: https://vimeo.com/privacy.

Google Web Fonts

This page uses so-called Web Fonts provided by Google to represent typefaces uniformly. When a page is accessed, your browser loads the required Web Fonts into your browser cache to enable texts and typefaces to be displayed correctly.

The browser you use needs to establish a connection to Google’s servers for this purpose. As a result of this, Google obtains knowledge of the fact that our web site was accessed via your IP address. Google Web Fonts are used in the interest of a uniform, attractive presentation of our online offerings. This represents a justified interest within the meaning of Article 6 Para. 1 letter f of the GDPR.

If your browser does not support Web Fonts, your computer will use a standard font.

You can find more information about Google Web Fonts at https://developers.google.com/fonts/faq and in Google’s data protection declaration: https://www.google.com/policies/privacy/.

Objection to advertising mails

The use of contact data published in the context of the Imprint obligation and within this Data Protection Declaration to send advertising and information materials that were not expressly requested is hereby repudiated. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, e.g. through spam E-mails.

Deletion of data

The data we store will be deleted as soon as it is no longer needed for its intended purpose, and no statutory preservation obligations stand in the way of deletion. Insofar as user data is not deleted because it is needed for other, statutory permissible purposes, its processing will be restricted. I.e. the data will be blocked and not processed for other purposes. This applies, for example, to user data that must be preserved for commercial or tax law reasons.

Right to object

You can object to the future processing of your personal data in accordance with the statutory provisions at any time. In particular, objection can take place against processing for direct advertising purposes.

Modification of our Data Protection Declaration

We reserve the right to amend the Data Protection Declaration in order to adapt it to changed legal situations or if there are changes in the service or data processing. However, this applies only with regard to declarations about data processing. Insofar as user consents are required, or elements of the data protection declaration contain rulings about the contractual relationship with users, changes will take place only with the users’ consent.

We ask you to inform yourself regularly about the content of the Data Protection Declaration.

The new Data Protection Declaration takes effect when you next visit our offering. If we make significant changes in the collection, use and/or disclosure of the personal data you make available to us, we will make you aware of this fact by a clear, easily visible notice on the web site.