Data protection

Packservice data protection

1. Data protection at a glance

General information

The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is all data that can be used to identify you personally. Please refer to our privacy policy provided below for detailed information about the topic of data protection.

Data collection on our website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. Please refer to this website’s legal notice for their contact details.

How do we collect your data?

On the one hand, your data is collected through you communicating it to us. This can be data that you enter in a contact form, for example.

Other data is automatically collected by our IT systems when you visit the website. This is mainly technical data (e.g. information about your Internet browser, operating system or the page view time). This data is collected automatically as soon as you access our website.

What do we use your data for?

Some of the data is collected to ensure faultless provision of the website. Other data may be used to analyse your user behaviour.

What rights do you have with regard to your data?

You have the right at any time to receive free information about the origin, recipient(s) and purpose of your stored personal data. You also have the right to request that this data be rectified, blocked or erased. Please do not hesitate to contact us at any time on the address provided in the legal notice regarding this matter and if you have any other questions relating to the topic of data protection. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

You also have the right to request, under certain circumstances, that processing of your personal data be restricted. For details concerning this matter, please refer to the “Right to restriction of processing” section of the privacy policy.

Third-party (analysis) tools

When you visit our website, your surfing behaviour can be statistically evaluated. This is primarily done using cookies and what are known as “analysis programs”. Your surfing behaviour is generally analysed anonymously; your surfing behaviour cannot be traced back to you. You may object to this analysis or prevent it by not using certain tools. You will find detailed information on this matter below in the privacy policy.

You can object to this analysis. We will inform you about the ways you can object in this privacy policy.

2. General and mandatory information

Data protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data as confidential and according to the statutory data protection regulations and this privacy policy.

A variety of personal data is collected when you use this website. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that online data transmission (e.g. in the case of email communication) may be vulnerable to security breaches. Data cannot be completely protected against access by third parties.

Information about the controller

The controller for data processing on this website is:

Packservice PS Marketing GmbH
Mannheimer Strasse 16–18
76131 Karlsruhe
Germany

Phone: +49 (0)721 9 61 66-0
Email: info@packservice.de

The controller is the natural or legal person that takes decisions about the purposes and means of personal data processing (e.g. names, email addresses, etc.), either alone or jointly with others.

Revocation of your consent to data processing

Many data processing activities can only be carried out with your express consent. You may revoke consent that was previously granted at any time. It is sufficient if you informally notify us by email to this effect. The lawfulness of data processing carried out until such time that you revoke your consent remains unaffected by said revocation.

Right to object to data collection in special situations and to direct marketing (Art. 21 of the GDPR)

If data processing is carried out based on Art. 6 (1), lit. e or f of the GDPR, you have the right at any time to object to the processing of your personal data on grounds relating to your particular situation; this also applies to profiling based on these provisions. Please refer to this privacy policy for the respective legal basis on which processing is based. If you file an objection, we shall no longer process your personal data in question unless we can demonstrate compelling and legitimate grounds for processing which outweigh your interests, rights and freedoms, or if processing serves to assert, exercise or defend legal claims (objection according to Art. 21 (1) of the GDPR).

If your personal data is processed for the purpose of carrying out direct marketing, you have the right at any time to object to processing of the personal data concerning you for the purposes of such marketing; this also applies to profiling if it is in conjunction with such direct marketing. If you object, your personal data shall no longer be used for direct marketing purposes (objection according to Art. 21 (2) of the GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of the GDPR being violated, the data subject has the right to lodge a complaint with a supervisory authority, particularly in the member state of their habitual residence, their workplace or the place of the suspected violation. The right to lodge a complaint shall be without prejudice to other administrative or judicial remedies.

Right to data portability

You have the right to have data that we automatically process based on your consent or to perform a contract handed over to yourself or a third party in a commonly used, machine-readable format. If you request that your data be directly transferred to another controller, this shall only be done to the extent technically feasible.

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons, and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator. You can recognise an encrypted connection due to the fact that the browser’s address bar changes from “http://” to “https://” and due to the padlock icon in your browser bar.

If SSL or TLS encryption is activated, the data you send to us cannot be read by third parties.

Access, blocking, erasure and rectification

In the context of the applicable legal provisions, you have the right, at any time, to free information about the personal data saved about you, its origin, the recipient(s) and the purpose of data processing, as well as a right to rectify, block or erase the same if necessary. Please do not hesitate to contact us at any time on the address provided in the legal notice regarding this matter and if you have any other questions relating to the topic of personal data.

Right to restriction of processing

You have the right to request that processing of your personal data be restricted. You can contact us at any time regarding this matter on the address provided in the legal notice. The right to restriction of processing exists in the following cases:

• If you dispute the accuracy of the personal data we have saved about you, we generally need time to verify this. For the duration of the verification process, you have the right to request that processing of your personal data be restricted.
• If your personal data has been or is being processed unlawfully, you can request restriction of data processing activities instead of your data being erased.
• If we no longer need your personal data, but you require it to exercise, defend or assert legal claims, you have the right to request that processing of your personal data be restricted instead of your data being erased.
• If you have objected according to Art. 21 (1) of the GDPR, your interests and our interests must be balanced. As long as it has not yet been established whose interests take precedence, you have the right to request that processing of your personal data be restricted.

If you have restricted processing of your personal data, such data may – with the exception of storage – only be processed with your consent, for the establishment, exercise or defence of legal claims, for the protection of rights of another natural or legal person, or for reasons of important public interest of the European Union or of a member state.

Objection to promotional emails

We hereby object to contact details published in accordance with the requirement to provide a legal notice being used to send us advertising and information material that has not been expressly requested. The website operators expressly reserve the right to take legal action against anyone who sends us unsolicited advertising material, such as spam emails.

3. Data protection officer

Data protection officer prescribed by law

We have appointed a data protection officer for our company:

xDSB Datenschutz

Email: datenschutzanfragen@xdsb.de. Also contactable using the postal address by adding “FAO Data Protection Officer”

4. Data collection on our website

Cookies

Our website sometimes uses what are known as “cookies”. Cookies do not damage your computer in any way and do not contain any viruses. We use cookies to make our site more user-friendly, more effective and more secure. Cookies are small text files that are stored on your computer and saved by your browser.

The cookies we most commonly use are what are known as “session cookies”. They are automatically deleted after you have left our site. Other cookies remain stored on your terminal device until you delete them. These cookies allow us to recognise your browser the next time you visit our site.

You can make settings in your browser so that you are informed about cookies being set and only accept cookies on a case-by-case basis for certain situations or categorically prevent the setting of the same, as well as activate automatic deletion of cookies when you close your browser. The functionality of this website may be restricted if cookies are deactivated.

Cookies, which are necessary for the implementation of the electronic communication process or for the provision of certain desirable functions (e.g. shopping basket function), are stored based on Art. 6 (1), lit. f of the GDPR. The website operator has a legitimate interest in storing cookies to provide their services in a technically error-free and optimised manner. Insofar as other cookies (e.g. cookies for analysing your surfing behaviour) are stored, they are dealt with separately in this privacy policy.

Server log files

The website provider automatically collects and saves information in what are known as “server log files”, which your browser automatically transmits to us. This information includes:

• The browser type and browser version
• The operating system used
• The referrer URL
• The host name of the accessing computer
• The time of the server enquiry
• The IP address

This data shall not be combined with other sources of data.

This data is collected based on Art. 6 (1), lit. f of the GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of their website; the server log files must be recorded for this purpose.

Contact form

If you send us enquiries using the contact form, your information from the enquiry form including the contact details you specified there shall be saved by us for the purpose of processing the enquiry and in the event of any follow-up questions. We shall not disclose this data to others without your consent.

The data entered in the contact form is therefore processed exclusively based on your consent (Art. 6 (1), lit. a of the GDPR). You may revoke this consent at any time. It is sufficient if you informally notify us by email to this effect. The lawfulness of data processing activities carried out until such time that you revoke your consent remains unaffected by said revocation.

We shall store the data you enter in the contact form until you request that we erase the same, you revoke your consent to storage or the purpose of data storage no longer applies (e.g. once processing of your enquiry is complete). Mandatory statutory provisions – particularly storage periods – remain unaffected.

Email, phone or fax enquiries

If you contact us by email, phone or fax, we shall save and process your enquiry including all personal data resulting from the same (name, enquiry) for the purpose of processing your request. We shall not disclose this data to others without your consent.

This data is processed based on Art. 6 (1), lit. b of the GDPR if your enquiry is related to the performance of a contract or is required for the implementation of pre-contractual measures. In all other cases, processing is based on your consent (Art. 6 (1), lit. a of the GDPR) and/or our legitimate interests (Art. 6 (1), lit. f of the GDPR), since we have a legitimate interest in effectively processing the enquiries sent to us.

We shall store the data you send to us through contact enquiries until you request that we erase the same, you revoke your consent to storage or the purpose of data storage no longer applies (e.g. once processing of your enquiry is complete). Mandatory statutory provisions – particularly statutory storage periods – remain unaffected.

5. Analysis tools and marketing

Google Analytics

This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited, based at Gordon House, 4 Barrow Street, Dublin D04 E5W5, Ireland.

Google Analytics uses what are known as “cookies”. These are text files that are stored on your computer and enable analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to and stored on a Google server in the USA.

The storage of Google Analytics cookies and the use of this analysis tool are based on Art. 6 (1), lit. f of the GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both their website and their marketing.

IP anonymisation

We have activated the IP anonymisation function on this website. Google shall therefore truncate your IP address beforehand within member states of the European Union or other states which are parties to the Agreement on the European Economic Area prior to transmitting the same to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google shall use this information for the purpose of evaluating your use of this website, compiling reports on website activities and providing the website operator with other services relating to website and Internet use. The IP address transmitted by your browser in the context of Google Analytics is not associated with any other data held by Google.

Browser plugin

You can prevent the storage of cookies by changing the relevant setting in your browser software; however, please note that if you do so, you may not be able to use all the functions of this website in full. Furthermore, you can prevent Google’s collection and processing of the data generated by the cookie and related to your use of the website (including your IP address) by downloading and installing the browser plugin available at: https://tools.google.com/dlpage/gaoptout?hl=en-GB.

Objection to data collection

You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie that prevents your data from being collected on future visits to this website is set: Disable Google Analytics.

You will find more information about how Google Analytics handles user data in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en-GB.

Contract processing

We have concluded a processing contract with Google and fully implement the stringent requirements set down by the German data protection authorities when using Google Analytics.

Duration of storage

Data stored by Google at user and event level that is linked to cookies, user IDs (e.g. user ID) or marketing IDs (e.g. DoubleClick cookies, Android marketing ID) shall be anonymised or erased after 14 months. For details, please click on the following link: https://support.google.com/analytics/answer/7667196?hl=en-GB

1&1 IONOS web analytics

This website uses analysis services provided by 1&1 IONOS. The provider is 1&1 IONOS SE, based at Elgendorfer Strasse 57, 56410 Montabaur, Germany. In the context of the 1&1 analyses, visitor numbers and behaviour (e.g. number of page views, duration of a website visit, bounce rates), visitor sources (i.e. what pages visitors come from), visitor locations and technical data (browser and operating system versions) can be analysed. For this purpose, 1&1 stores the following data in particular:

• The referrer (website visited previously)
• The requested web page or file
• The browser type and browser version
• The operating system used
• The device type used
• The time of access
• The IP address in anonymised form (used only to determine the access location)

According to 1&1, data collection is completely anonymous, so it cannot be traced back to individual persons. Cookies are not stored by 1&1 IONOS.

This data is stored and analysed based on Art. 6 (1), lit. f of the GDPR. The website operator has a legitimate interest in statistically analysing user behaviour in order to optimise both their website and their marketing. For more information about data collection and processing by 1&1 IONOS, please click on the links below:

https://www.ionos.co.uk/help/online-marketing/
https://www.ionos.co.uk/help/data-protection/data-processing-of-website-visitors-of-your-11-ionos-product/siteanalytics/
https://www.ionos.co.uk/terms-gtc/terms-privacy/

6. Plugins and tools

Google Maps

This site uses the Google Maps map service via an API. The provider is Google Ireland Limited, based at Gordon House, 4 Barrow Street, Dublin D04 E5W5, Ireland.

Your IP address needs to be stored to use the functions of Google Maps. This information is generally transmitted to and stored on a Google server in the USA. The provider of this site has no influence over such data transfer.

We have a legitimate interest in using Google Maps for the purpose of presenting our website in an appealing manner and making the places mentioned on our site easy to find. This is a legitimate interest under the terms of Art. 6 (1), lit. f of the GDPR.

You will find more information about how Google Analytics handles user data in Google’s privacy policy: https://policies.google.com/privacy?hl=en-GB.

Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter referred to as “reCAPTCHA”) on our website. The provider is Google Ireland Limited, based at Gordon House, 4 Barrow Street, Dublin D04 E5W5, Ireland (hereinafter referred to as “Google”).

The purpose of reCAPTCHA is to check whether data is input on our website (e.g. in a contact form) by a person or by an automated program. For this purpose, reCAPTCHA analyses the website visitor’s behaviour using a variety of features. This analysis process starts automatically as soon as the visitor lands on the website. For analysis purposes, reCAPTCHA evaluates various pieces of information (e.g. IP address, length of time the website visitor stays on the website or mouse movements made by the user). The data collected in the context of the analysis is forwarded to Google.

The reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place.

Data processing is carried out based on Art. 6 (1), lit. f of the GDPR. The website operator has a legitimate interest in protecting their website from abusive automated spying and from spam.

Please click on the following links for more information about Google reCAPTCHA and Google’s privacy policy: https://policies.google.com/privacy?hl=en-GB and https://www.google.com/recaptcha/intro/android.html.

7. Own services

Applications

We offer you the opportunity to apply to us (e.g. by email, post or using the online application form). Below, we provide you with information regarding the scope, purpose and use of your personal data collected during the application process. We warrant that your data shall be collected, processed and used in accordance with applicable data protection law and all other statutory provisions and that your data shall be treated strictly confidentially.

Scope and purpose of data collection

If you send us an application, we shall process your associated personal data (e.g. contact and communication data, application documents, notes taken during job interviews, etc.) insofar as doing so is necessary to make a decision on whether to establish an employment relationship. The legal basis for this is § 26 of the new German Federal Data Protection Act (BDSG-neu) (initiation of an employment relationship), Art. 6 (1), lit. b of the GDPR (general contract initiation) and – if you have given your consent – Art. 6 (1), lit. a of the GDPR. Consent can be revoked at any time. Your personal data shall only be disclosed within our company to those persons who are involved in processing your application.

If the application is successful, the data you submitted shall be stored in our data processing systems based on § 26 of the new German Federal Data Protection Act and Art. 6 (1), lit. b of the GDPR for the purpose of implementing the employment relationship.

Data storage period

If we are unable to make you a job offer, or if you reject a job offer, withdraw your application, revoke your consent to data processing or request that we erase the data, the data you transmitted, including any remaining physical application documents, shall be stored for a maximum of six months after completion of the application process (storage period) so as to trace the details of the application process in the event of discrepancies (Art. 6 (1), lit. f of the GDPR).

YOU MAY OBJECT TO SUCH STORAGE IF YOU HAVE LEGITIMATE INTERESTS THAT TAKE PRECEDENCE OVER OURS.

Once the storage period has elapsed, the data shall be erased unless there is a statutory storage obligation or other legal grounds for further storage. If it is evident that your data shall need to be stored after the storage period has elapsed (e.g. due to a threatened or pending legal dispute), erasure shall only take place when the data has become irrelevant. Other statutory storage obligations shall remain unaffected.