Privacy Policy

Strauss Verpackungsmaschinen GmbH, Felix-Wankel-Straße 22-24, 21614 Buxtehude in Germany takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal rules of the relevant data protection laws, in particular the EU General Data Protection Regulation (GDPR) as well as this privacy policy. This privacy policy covers the use of our digital services, including our social media profiles on PCs, smartphones, tablets and all other Internet-enabled mobile devices. The digital services may contain links to other third party service provider websites that are not covered by this privacy statement.

1. Controller

The data controller for the processing of your personal data is

Strauss Verpackungsmaschinen GmbH
represented by the managing director Jörn Strauß and Magdalena Strauß
Felix-Wankel-Straße 22-24
21614 Buxtehude
Germany
E-mail: info@strauss-pack.com.

If you have any questions about our privacy policy, please write to us at the above postal address, with the addition "data protection" or at the e-mail address provided.

2. Purposes and legal basis of data processing

2.1 Data processing for the provision of contractual services

We process personal data in order to process the contractual relationships and to be able to submit contractual offers tailored to your requirements. The collection of the data takes place in particular for the conclusion and/or for the performance of a contract.

For all forms, we only collect the personal data that is absolutely necessary for the processing of the contractual relationships or for your request for information. You can send us requests for contractual services via our website and our contact data stored there. Insofar as personal data is transmitted to us by you in this way or in any other way in the case of corresponding requests, we process your data for the purpose of responding to your request, the performance of the order/contract and for invoicing. For this purpose, we need your name, address data and e-mail address. Without this data, we cannot perform the contract. If you also provide us with your telephone/mobile number, we will use this information for the contract-related clarification of queries. If you provide further data, we will also use this data for the aforementioned purposes, but this data is not required for the conclusion of the contract.

In the case of suppliers/service providers, we process the provided personal data to order and claim services and to pay for the services provided. For this purpose, we require the name, address data and account data. Depending on the service/contract, we may also require additional data, which we will then explain on a case-by-case basis. If you provide further data, we will also use it for the aforementioned purposes, but this is not required for the conclusion of the contract.

The basis for data processing is Art. 6 para. 1 s.1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

​​​​​​​​​​​​​​2.2 Data processing for communication with you

In addition to the contractual data, we process your communication data (names of contact persons, address, telephone number, fax number, e-mail address) in order to be able to contact you and communicate with you within the contractual relationship. Personal data that you provide to us by e-mail or via the contact form on this website will only be processed for correspondence with you or only for the purpose for which you provided us with the data.

If you enter data in the input mask provided for this purpose in the contact form, this data is transmitted to us and processed by us. For communication via the contact form on our website, we need at least your:

• Name,
• E-mail address,
• ​​​​​​​Company

Once the message is sent, the following additional data is also stored:

• IP address and
• ​​​​​Date and time of sending.

Provided that you are interested in our services, the basis for the data processing is Art. 6 para. 1 p. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures. Furthermore, we have an interest in processing and, if applicable, answering your enquiry and the processing of your data for this purpose is based on Art. 6 para. 1 p. 1 lit. f GDPR, which permits the processing of data to protect the legitimate interests of the controller, unless the interests or fundamental rights and freedoms of the data subject outweigh these interests. In other cases the processing is based on consent (Art. 6 para. 1 p. 1 lit. a) GDPR) if this has been obtained in this regard.

​​​​​​​​​​​​​​2.3 Cookies

We may use so-called cookies to provide website-specific services. Cookies are small text files that are stored on a visitors' computer and contain data about the respective user in order to provide access to various functionalities.

Websites may use both session cookies and persistent cookies. A session cookie is temporarily stored on the computer used while navigating through the website. A session cookie is deleted as soon as the Internet browser is closed or as soon as the session has expired after a certain time. A persistent cookie remains on the computer until it is deleted.

We may work with third parties on some of our offers and therefore cookies from partner companies may also be stored when you visit such a website (third-party cookies). We may inform you in advance about the use of such cookies and the scope of the data stored or retrieved in each case. You may receive additional information about the cookies used in each case via the cookie tool we use and the explanations provided there.

We may use cookies that are necessary to enable us to provide the services owed by us or to ensure the functionality of our services. The legal basis for the use of these cookies is § 25 para. 2 no. 2 TTDSG. Any processing of personal data carried out in this context is then based on Art. 6 para. 1 p. 1 lit. b GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures, or on Art. 6 para. 1 p. 1 lit. f GDPR, which permits data processing to safeguard the legitimate interests of the controller, unless the interests or the fundamental rights and freedoms of the data subject override the interest of the controller in the data processing. Our interest then lies in ensuring the provision of the functions of our services.

For the use of other, non-essential cookies, we may obtain your consent. The cookies are then used on the basis of the consent pursuant to § 25 para. 1 TTDSG, and any processing of personal data carried out in this context pursuant to Art. 6 para. 1 p. 1 lit. a GDPR. You can revoke your consent. The lawfulness of the data processing already carried out on the basis of consent remains unaffected by the revocation.

2.4 ​​​​​​​Cookiebot

This website uses Cookiebot from Cybot A/S, Havnegade 39, 1058 Kopenhagen, Denmark, which sets technically necessary cookies to store the cookie preference of your browser. Cookiebot does not process any personal data. The Cookie stores the chosen preference that was selected when you entered the website via the browser you are using. If you wish to revoke these settings for the specific browser, simply delete the cookies in your browser. When you re-enter/reload the website, you will then be asked again for your cookie preference. For more information about Cookiebot privacy, please visit https://www.cookiebot.com/de/privacy-policy/.

​​​​​​​​​​​​​​2.5 Google Fonts

On some of our websites, we use so-called web fonts provided by Google (Google Fonts) for the consistent display of fonts. In the interest of effective protection and conscious handling of your sensitive personal data, these services are only used via a local integration. The fonts are only retrieved from our server. In this regard, no connection to Google's servers is established. A transmission, processing or storage of your data by Google does not take place in this case.

​​​​​​​​​​​​​​2.6 OpenStreetMap

We use a map part of the open source mapping tool "OpenStreetMap" (OSM) on our website. The operator is the Openstreetmap Foundation, 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, United Kingdom.

To use the functions of OpenStreetMap, it is necessary to store your IP address. This information is usually transferred to a server of OpenStreetMap and stored there. The provider of this website has no influence on this data transmission. The use of OpenStreetMap is in the interest of an appealing presentation of our online offers and an easy location of the places indicated by us on the website. The data processing then takes place on the basis of your consent pursuant to Art. 6 para. 1 p. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. An informal communication to us is sufficient for this purpose. The legality of the data processing operations already carried out remains unaffected by the revocation.

More information on the handling of user data can be found on the OpenStreetMap privacy policy website and here: http://wiki.openstreetmap.org/wiki/Legal_FAQ.

​​​​​​​2.7 Data processing in the context of our Facebook corporate website and Instagram

We operate a company page (fan page) on the social network facebook.com ("Facebook") and a page/profile on the social network Instagram ("Instagram") of the company Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. For the operation of the aforementioned pages, we are jointly responsible with Meta Platforms Ireland Limited ("Meta") within the meaning of Art. 4 No. 7 GDPR. Linked here are Facebook's terms of use and policies (https://www.facebook.com/legal/terms) as well as the responsibility agreement

(https://www.facebook.com/legal/terms/page_controller_addendum) pursuant to Art. 26 GDPR.

The type and scope of the personal data processed and the information provided, if any, the associated purposes of the data processing, its lawfulness as well as information on the exercise of data subject rights can be found in the privacy notices of Facebook as well as further information provided by Meta on the processing of "Insights data" (see above).

Meta provides us with so-called page insights for our site. Page Insights (e.g. https://www.facebook.com/business/a/page/page-insights) are summarized data that provide us with information about how people interact with our site. The generation and provision of these page insights is the responsibility of Facebook, we have no influence on it. This also applies to the data processing, which is carried out exclusively for the purposes of Meta Platforms Ireland Limited. Meta also assumes all obligations under the GDPR with regard to the processing of Insights data (including Articles 12 and 13 GDPR, Articles 15 to 22 GDPR and Articles 32 to 34 GDPR).

The purpose of the data processing of the provided data by us is the statistical evaluation of the use of our company pages. This enables us, for example, to determine preferred visiting and posting times and to use them to optimize our posts and our company pages. In addition, we process personal data made publicly available there (e.g. clear names in the user profile) as well as data directly related to activities on our company pages (e.g. contributions, posts, likes, marks), also for the purpose of communication.

The basis for data processing is Art. 6 para. 1 p. 1 lit. b GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures, insofar as the data are processed in accordance with the Facebook or Instagram terms of use, otherwise, insofar as there is a data protection responsibility on our part, Art. 6 para. 1 p. 1 lit. f GDPR, which permits the processing of data for the protection of the legitimate interests of the controller, insofar as the interests or fundamental rights and freedoms of the data subject are not overridden. Our interest lies in providing content and communicating with users of the social networks and improving the reach and effectiveness of our posts.

Please assert your rights to information, correction, deletion, restriction of processing and data transferability of your stored Insights data vis-à-vis Facebook, as Facebook has assumed the corresponding obligations:

Meta Platforms Ireland Limited
4 Grand Canal Square
Dublin 2, Ireland
Privacy Policy: https://www.facebook.com/about/privacy/.

​​​​​​​​​​​​​​2.8 Data processing in the context of our LinkedIn company page

We have a company page on the social network linkedin.com of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn") and are provided with so-called page analytics by LinkedIn. We are jointly responsible with LinkedIn for this operation of the LinkedIn company page within the meaning of Art. 26 GDPR.

The type and scope of the information processed or provided by LinkedIn, the associated purposes of the data processing by LinkedIn, its lawfulness as well as information on the exercise of data subject rights can be found in LinkedIn's data privacy policy at the URL https://www.linkedin.com/legal/privacy-policy and in the joint responsibility agreement, which can be found at the URL https://legal.linkedin.com/pages-joint-controller-addendum. Page analytics involves aggregated data that allows us to understand how people interact with our pages. The generation and provision of these page analytics is the responsibility of LinkedIn, over which we have no control. LinkedIn assumes all obligations under the GDPR with regard to the processing of insights data (including Articles 12 and 13 GDPR, Articles 15 to 22 GDPR and Articles 32 to 34 GDPR).

The purpose of the data processing by us of the data provided by LinkedIn is the statistical evaluation of the use of our company page. This enables us, for example, to determine preferred visiting and posting times and to use this data to optimise our posts and our company page. In addition, we process personal data made publicly available on LinkedIn (e.g. clear names in the user profile) as well as data directly related to activities on our company page (e.g. contributions, posts, likes, marks), also for the purpose of communication.

The basis for the above data processing is Art. 6 para. 1 p. 1 lit. a GDPR. Insofar as a corresponding consent has been given to LinkedIn, this consent can be revoked at any time with effect for the future. Insofar as consent has been granted to us in this regard, this consent can be revoked at any time with effect for the future. Otherwise, the basis for our data processing is Art. 6 para. 1 p. 1 lit. f GDPR, which permits the processing of data to protect the legitimate interests of the controller, provided that the interests or fundamental rights and freedoms of the data subject are not overridden. Our interest is to provide content and communication with LinkedIn users and to improve the reach and effectiveness of our posts.

The rights of access, rectification, deletion, restriction of processing and data portability of stored insights data can be asserted against LinkedIn, as LinkedIn has assumed the corresponding obligations:

LinkedIn Ireland Unlimited Company
Wilton Place
Dublin 2
Ireland
Privacy policy https://www.linkedin.com/legal/privacy-policy.

​​​​​​​2.9 Online presence in other social networks

We have set up online presences in various social networks to communicate with you, interested parties and customers and to inform them about our services and current offers. In addition to our interaction with you, the social networks process data from visitors to their websites for the purpose of market research and advertising, i.e. that from the respective visit or usage behaviour and the preferences and interests of a visitor derived from this, a user profile may be created by the respective operator of the social network.

Such user profiles can be used, among other things, to display advertisements within the respective social network and possibly on other websites, which are individually adapted to the respective user profile. Cookies (see above) may be stored on the visitors' devices, with the help of which data on usage behaviour can be collected. The collection of this data can, especially in the case of logged-in members of the respective social network, also be realized across several browsers and/or end devices used by a user. Even if a visitor does not have a profile with the respective social network, it cannot be ruled out that personal data on this visitor will be stored when visiting the respective website.

Requests for information regarding the data stored in social networks via our online presence or the use of other relevant rights of data subjects can be addressed to the provider of the respective service. Only the providers of the social networks have access to the respective data stored there and can provide the corresponding information, etc. With regard to the purpose and scope of data processing by the various social networks, we refer additionally to their respective data protection notices and the respective contact options:

YouTube
Google Ireland Limited ("Google")
Gordon House, Barrow Street
Dublin 4
Ireland
Privacy policy: https://policies.google.com/privacy?hl=de.

The processing of data in the context of our online presence in social networks is done, insofar as we are responsible under data protection law, on the basis of our legitimate interest in effective information and direct communication with interested parties. The basis for data processing is Art. 6 para. 1 p. 1 lit. f GDPR. Our interest is to provide content and communicate with users of the respective social networks and to improve the reach and effectiveness of our posts.

​​​​​​​2.10 YouTube

We may use plugins from the website YouTube. The operator of the pages is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

As soon as you start a YouTube video within our service, a connection to YouTube's servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile.

Furthermore, YouTube can save various cookies on your end device after starting a video. With help of these cookies, YouTube can obtain information about users of our website. This information is used, among other things, to collect video statistics, improve the user experience and prevent fraud attempts.

Further data processing operations may be triggered after the start of a YouTube video, over which we have no control. Among other things, a connection to the Google Marketing Platform network may be established and personal data may be processed in the USA. You can find further information about data protection at YouTube in their privacy policy at: https://policies.google.com/privacy?hl=en. For use or activation of the Youtube functionality, we may request consent.

Important in context of data processing in the USA.: According to the European Court of Justice, the data protection standard in the USA is inadequate and there is a risk that personal data will be processed by USA authorities, for control and monitoring purposes, and possibly without any means of redress.

If cookies are set by YouTube, the processing of personal data is based on your consent pursuant to Art. 6 para. 1 p. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. The legality of the data processing already carried out remains unaffected by the revocation.

If you have consented to our use of YouTube and the associated data processing, the data processing and, if applicable, the storage of YouTube cookies is based on this consent pursuant to Art. 6 para. 1 p. 1 lit. a GDPR in conjunction with Art. 49 para. 1 p. 1 lit. a GDPR and § 25 para. 1 TTDSG. Data subjects may revoke their consent at any time with effect for the future. The legality of the data processing already carried out on the basis of the consent remains unaffected by the revocation.

​​​​​​​​​​​​​​2.11 Data processing for job applications

Via our websites and our contact data provided there, applications for jobs in our company can be sent to us. Insofar as personal data is transmitted to us in this way or in any other way when applications are submitted, we process this data for the purpose of reviewing, processing and responding to the application and, if necessary, for preparing the employment relationship.

The basis for data processing is either Art. 88 para. 1 GDPR, § 26 para. 1 BDSG which permits the processing of data for the decision on the employment, for the establishment as well as for the performance of employment relationships or - if the data subject has given consent - Art. 6 para. 1 p. 1 lit. a GDPR. You may revoke your consent at any time with effect for the future. An informal communication by e-mail to us is sufficient for this purpose. The lawfulness of the data processing operations already carried out remains unaffected by the revocation.

​​​​​​​​​​​​​​2.12 Data processing to protect legitimate interests

We may also process your data if it is necessary to protect the legitimate interests of us or of third parties. This may be the case in particular to ensure IT security and IT operation, in particular also for of support enquiries, to be able to understand and prove facts in the event of legal disputes and to statistically evaluate the use of our website. The basis for the data processing is then Art. 6 para. 1 p. 1 lit. f GDPR.

​​​​​​​​​​​​​​2.13 Other data processing based on your consent

It may also happen that we ask for your consent to process personal data. Any granting of consent and the relevant data processing is voluntary and you will not suffer any disadvantages if you do not consent.

The data processing is then carried out on the basis of your consent in accordance with Art. 6 para. 1 s. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. An informal notification to us is sufficient for this purpose. The legality of the data processing operations already carried out remains unaffected by the revocation.

2.14 ​​​​​​​Log files

Each time our websites are accessed, usage data is transmitted by the respective Internet browser and stored in log files, the so-called server log files. The stored data records contain the following data:

• the page from which the page was requested (so-called referrer URL)
• the name and URL of the requested page
• the date and time of the request
• the description of the type, language and version of the web browser used
• the shortened IP address of the requesting computer
• the amount of data transferred
• the operating system used
• the message whether the call was successful (access status/http status code)
• the GMT time zone difference

These data cannot be assigned to specific persons. This data will not be merged with other data sources. We reserve the right to subsequently check this data if we become aware of concrete indications of illegal use.

The data processing is based on Art. 6 para. 1 lit. f GDPR, which permits the processing of data to safeguard the legitimate interests of the data controller, provided that the interests or fundamental rights and freedoms of the data subject do not prevail. We have an interest in the prosecution, prevention and punishment of illegal use of our offer.

​​​​​​​​​​​​​​2.15 Data processing for the fulfilment of legal obligations

In addition, we process your data to fulfil legal obligations (e.g. regulatory requirements, commercial and tax storage and proof obligations).

The basis for data processing is Art. 6 para. 1 lit. c GDPR, which permits processing to fulfil a legal obligation.

3. Recipients of the personal data

Your personal data will only be passed on or otherwise transferred to third parties if this is necessary for the purpose of performing the contractual relationship, or if prior consent has been given, or if there is any other legal basis for the transfer.

Your data will be forwarded to the relevant department and the relevant employees within our company in order to answer your enquiries, for communication purposes or to carry out the order or to fulfil contractual obligations.

Insofar as it is necessary for the purpose of performing the contract, data is passed on to third party companies, possibly in a foreign country, which have been contracted to support the performance of the contract. The basis for this is Art. 6 para. 1 p. 1 lit. b GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures. If we ask for a consent for this transfer, Art. 6 para 1 lit a GDPR is the legal basis. You can revoke a given consent at any time with effect for the future.

Insofar as we use third party services for the implementation and handling of processing operations, the provisions and terms of the General Data Protection Regulation are complied with. Service providers that support us in providing our services to you are hosting providers, email service providers, IT service providers, marketing service providers, repair service providers, distribution partners and service providers for file shredding.

In addition, data may be passed on to third parties commissioned to provide consulting services, such as consulting firms or law firms, tax consultants, auditors or other similar consulting service providers. These are usually not acting as order processors, but they are subject to statutory or contractually agreed confidentiality obligations.

4. Duration of data storage

In principle, we delete your data as soon as it is no longer required for the above-mentioned purposes, unless temporary storage is still necessary. We store your data on the basis of legal proof and storage obligations, which result among other things from the German Commercial Code and the German Tax Code, according to which the storage periods are up to ten full years. In addition, we keep your data for the period during which claims can be asserted against our company (statutory limitation period of three or up to thirty years).

5. Data Security

Your personal data will be transmitted securely by us through encryption. We use the coding system SSL (Secure Socket Layer). You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. Furthermore, we secure our websites and other systems by technical and organizational measures against loss, destruction, access, alteration or distribution of your data by unauthorized persons.

6. Rights of the data subject

Within the framework of the applicable legal provisions, data subjects have the right at any time to free information about their personal data stored by us, its origin and recipients and the purpose of the data processing and, if applicable, a right to correction or deletion of this data.

For this purpose, as well as for further questions on the subject of personal data, you can contact us at any time using the contact details given in section 1.

You may also have a right to restrict the processing of your data and a right to receive the data you have provided in a structured, common and machine-readable format.

If you have given us consent to process personal data for specific purposes, you may withdraw your consent at any time with effect for the future. If we process your data to protect legitimate interests, you may object to this processing on grounds relating to your particular situation. If we cannot substantiate compelling legitimate reasons for further processing that outweigh your interests, rights and freedoms, or if we process the data in question from you for the purpose of direct marketing, we will then no longer process your data.

In addition, data subjects have the possibility of contacting a data protection supervisory authority (right of complaint).