Privacy Policy

Information on Privacy Policy

In the following, you shall find information about the processing of your personal data when you are using our website.

 

Responsible entity

The company Brohl Wellpappe GmbH & Co. KG (Nikolaus-Otto-Straße 3, 56727 Mayen) shall be responsible for these web pages. Please refer to our site notice for any further information on our company and the authorized representatives. 

Which data are processed? 

Legal basis of data processin

In order to be able to offer you our website and the related services, we shall process personal data on the basis of the following legal regulations:

  • consent (art. 6 sec. 1 letter a) GDPR)
  • to the performance of contracts (art. 6 sec. 1 letter b) GDPR)
  • on the basis of the weighing of interests (art. 6 sec. 1 letter f) GDPR)
  • for the compliance with a legal obligation (art. 6 sec. 1 letter c) GDPR).

In the context of the respective processing, we shall refer to the relevant terminology, so that you shall be able to categorize on which basis we process the personal data.

If any personal data are processed on the basis of consent declared by you, you shall be entitled to revoke such consent anytime towards us with effect for the future.

If we process data on the basis of a weighing of interests, you shall be entitled as the affected party to object the processing of the personal data, in due consideration of the specifications of art. 21 GDPR.

Access data

When you visit our website, personal data shall be processed in order to show the contents of the website on your terminal device.

The IP address of the terminal that you use must be processed in order to display the pages in your browser. In addition, further information about the browser of your terminal shall be necessary.

We shall also be obliged by data protection laws to guarantee the confidentiality and integrity of the personal data processed by our IT systems.

For this purpose and on the grounds of these interests, the following data shall be recorded on the basis of a weighing of interests:

  • IP address of the accessing computer (for a maximum of 7 days)
    operating system of the accessing computer
    browser version of the accessing computer
    name of the recalled file
    date and time of the recall
    transferred amount of data
    referencing URL

After 7 days at the latest, the IP address shall be deleted from all the systems which have been used in relation to the operation of these web pages. We shall then not be able to make any reference to a person from the remaining data.

The data shall also be used in order to detect and remove errors on the web pages.

Google Analytics

This website uses functions of the web analytics service Google Analytics, offered by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses so-called "cookies". These are text files that are stored on your computer and allow for the analysis of your use of the website. The information created by the cookie about your use of this website shall usually be transferred to one of Google's servers in the USA and shall be stored there.It is possible that your data shall also be transferred to the USA in this context. In order to guarantee an appropriate data protection level, Google is Privacy Shield Certified; click here: https://www.privacyshield.gov/list, and enter the search keyword "google". The storage of cookies by Google Analytics and the application of this analysis tool shall be handled on the basis of your consent pursuant to art. 6 sec. 1 letter a GDPR; you can revoke your consent anytime.

Revocation of your consent

You can revoke your consent to the data collection by Google Analytics on our website anytime without any reasoning. You have the following possibilities: 
By clicking on the following link, an opt-out cookie shall be set preventing the collection of your data during any future visits on this website: 
deactivate Google Analytics. For more information on the handling of user data by Google Analytics, please refer to Google's data protection declaration: https://support.google.com/analytics/answer/6004245?hl=de. 

IP anonymization

On this website, we have activated the function IP anonymization. By this function, Google shall abbreviate your IP address within member states of the European Union or within other member states of the Agreement of the European Economic Area, before transferring it to the USA. Only in exceptional cases, the full IP address shall be tranferred to one of Google's servers in the USA and shall be abbreviated there.On behalf of the operator of this website, Google shall use this information in order to evaluate your use of the website, to compile reports on the website activities, and to provide further services to the website operator in connection with the use of the website and of the internet.The IP address transferred by your browser for the purposes of Google Analytics shall not be brought together with other data of Google. 

Browser Plugin

You can prevent the storage of the cookies by a respective option of your browser software; however, please be notified that in this case, you might not be able to use all the functions of this website to their full extent. Besides, you can prevent the transfer of the data created by the cookie and referring to your use of the website (incl. your IP address) to Google, as well as the processing of these data by Google, by downloading and installing the browser plugin available under the following link: tools.google.com/dlpage/gaoptout;

Order processing

We have concluded an order processing agreement with Google, and we shall completely adhere to the strict regulations of the German data protection agencies concerning the use of Google Analytics.

Demographics of Google Analytics

This website uses the function "demographics" of Google Analytics. With this function, reports can be compiled containing statements with respect to the age, sex, and interests of the website visitors. These data stem from interest-related advertisements of Google, as well as from visitor data of third party providers. These data cannot be attributed to any particular person. You can deactivate this function anytime in the display options of your Google account, or generally prohibit the collection of your data by Google Analytics, as described in the section "objection to data collection".

Storage duration: data on user and event level stored by Google and connected with cookies, user IDs, or advertising IDs (e.g., double-click cookies, Android advertising ID), shall be anonymized or deleted after 14 months. For any details, please click on the following link: https://support.google.com/analytics/answer/7667196?hl=de

 

Google Ads Remarketing

Our website uses Google Ads Remarketing. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. 

Provided you have given us your consent, this tool enables the advertising target groups created with Google Ads Remarketing to be linked with the cross-device functions of Google Ads and Google Marketing Platform. The legal basis is your consent pursuant to Art. 6 (1) p. 1 lit. a GDPR, § 25 para. 1 TTDSG. This means, interest-related, personalised advertising messages that have been adapted to you depending on your previous usage and surfing behaviour on one end device (e.g. mobile phone) can also be displayed on another of your end devices (e.g. tablet or PC).

If you have given your consent, Google will link your web and app browsing history to your Google account for this purpose. In this way, the same personalised advertising messages can be displayed on every end device on which you log in with your Google account.

To support this feature, Google Analytics collects authenticated IDs of users that are temporarily linked to our Google Analytics data to define and create audiences for cross-device ad targeting.

You can permanently opt out of cross-device remarketing/targeting by disabling personalised advertising in your Google Account; follow this link: adssettings.google.com/   

Since a transfer of personal data by Google to affiliates and sub-processors to countries outside the EU and EEA is possible, further appropriate safeguards are required to ensure the level of data protection under the GDPR. For the U.S., there is an adequacy decision of the EU Commission pursuant to Art. 45 (1) GDPR regarding companies with certification under the EU-U.S. Data Privacy Framework. Google LLC is certified under the EU-U.S. Data Privacy Framework and is therefore committed to compliance with adequate data protection standards, which can be verified via the following link: https://www.dataprivacyframework.gov/s/participant-search 

For potential transfers to other countries outside the EU and the EEA, for which no adequacy decision of the EU Commission exists, we have concluded standard contractual clauses with the provider in accordance with Art. 46 (2) lit. c GDPR. These oblige the recipient of the data in the country outside the EU to process the data in accordance with the level of protection in Europe.

Further information and the data protection provisions can be found in Google's data protection declaration at: www.google.com/policies/technologies/ads/. 

 

Google Fonts

We use "Google Fonts" on our website, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as: "Google"). Google Fonts enables us to use external fonts. For this purpose, the required Google Fonts are loaded into your browser cache by your web browser when you access our website. This is necessary so that your browser can also display a visually improved representation of our texts. If your browser does not support this function, a standard font will be used by your computer for display. The integration of these Google Fonts is done by a server call, usually a Google server in the U.S. This transmits to the server which page of our website you have visited. Also, the IP address of the browser of the end device of the visitor is stored by Google.

We use Google Fonts for optimization purposes, in particular to improve the use of our website for you and to make its design more user-friendly. Processing is carried out in accordance with Art. 6 para. 1 lit. a GDPR on the legal basis of your given consent. This consent can be revoked at any time with effect for the future.[A1] 

 

Since a transfer of personal data by Google to affiliates and sub-processors to countries outside the EU and EEA is possible, further appropriate safeguards are required to ensure the level of data protection under the GDPR. For the U.S., there is an adequacy decision of the EU Commission pursuant to Art. 45 (1) GDPR regarding companies with certification under the EU-U.S. Data Privacy Framework. Google LLC is certified under the EU-U.S. Data Privacy Framework and is therefore committed to compliance with adequate data protection standards, which can be verified via the following link: https://www.dataprivacyframework.gov/s/participant-search 

For potential transfers to other countries outside the EU and the EEA, for which no adequacy decision of the EU Commission exists, we have concluded standard contractual clauses with the provider in accordance with Art. 46 (2) lit. c GDPR. These oblige the recipient of the data in the country outside the EU to process the data in accordance with the level of protection in Europe.

 

Further information on data protection can be found in Google's privacy policy: https://policies.google.com/privacy?hl=en&gl=en.

Further information on Google Fonts can be found at https://fonts.google.com/

 

Google Tag Manager

On our website, we use "Google Tag Manager", a service of Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter "Google"). Google Tag Manager enables us as a marketer to administer website tags on a surface. The tool Google Tag Manager, which implements the tags, is a cookieless domain and does not collect any personal data itself. Google Tag Manager serves for the tracking of other tags, which for their part might collect data. Google Tag Manager does not access these data. If a deactivation has been made on domain or cookie level, this deactivation shall persist for all tracking tags that have been implemented with Google Tag Manager. For more detailed information on data processing within Google Tag Manager, please refer to Google's FAQ: https://www.google.com/intl/de/tagmanager/faq.html.

Google Marketing Platform (formerly DoubleClick)

This website uses DoubleClick of the Google Marketing Platform, a service of Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland ("Google"). DoubleClick uses cookies to serve ads that are relevant to you. This involves assigning a pseudonymous identification number (ID) to your browser or device to help us verify which ads have been displayed on your browser and which ads have been viewed. This can improve campaign performance or, for example, prevent you from seeing the same ad more than once. Google may also use cookie IDs to track conversions related to ad requests. For example, when a user sees a campaign manager ad and later visits the advertiser's website using the same browser and makes a purchase. According to Google, the cookies do not contain any personal information. If you have given us your consent, the data will be processed in accordance with Art. 6 para. 1 lit. a GDPR.

Due to the technology used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of DoubleClick, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will find out and save your IP address.

Since a transfer of personal data to the U.S. takes place, further appropriate safeguards are required to ensure the level of data protection under the GDPR. To guarantee this, Google uses standard contractual clauses in accordance with Art. 46 Para. 2 lit. c GDPR. These oblige the recipient of the data in the U.S. to process the data according to the level of protection in Europe. In cases in which this cannot be guaranteed even by this contractual extension, we endeavour to obtain additional regulations and commitments from the recipient in the U.S.

For more information about the Google Marketing Platform, please visit https://marketingplatform.google.com/about/ and for general information about Google's privacy policy, please visit https://www.google.de/intl/de/policies/privacy

 

YouTube videos

On our web pages, we have incorporated videos via the provider YouTube. For technical reasons, the servers of the providers are called because of the integration of the videos. This may also result in the transfer of data to the USA, because the provider has its head office there. The data processing shall be handled on the basis of a weighing of interests; our interest is the direct display of videos within our web pages. With respect to the involved use of data from your browser or your terminal, please be referred to the respective data protection information of the provider, because they shall be responsible for the related data processing. The data protection information of YouTube can be found here: https://policies.google.com/privacy?hl=de&gl=de . By being Privacy Shield Certified, the provider shall guarantee the adherence to an adequate level of data protection.

Data protection declaration of the company's Facebook page

We have an online presence on the social network Facebook, in order to be able to reach our customers, potential clients, and users active on that site, and to inform them about our services.

We cannot exclude that data of these users shall be processed outside of the area of the European Union. We hereby point out that US providers that are Privacy Shield Certified shall be obliged to adhere to the data protection standards of the EU.

We would also like to point out that the users' data shall usually be processed for purposes of market research and advertising. For example, user profiles are created on the basis of the users' behavior and the users' interests resulting there from. The user profiles can be used, e,g., for the placement of allegedly interest-related advertisements within and outside of the platforms. Usually, cookies shall be stored on the users' terminals, which then store the user behavior of the visitors. Besides, these profiles may also contain data independent from the devices used by the users (for example, this may be possible if the affected user is a member of the platform and has logged in).

The users' personal data shall be processed pursuant to art. 6 sec. 1 letter f GDPR, on the basis of our legitimate interest in effective information of the users and communication with the users. If the users are asked for their consent to the data processing described above by the respective platform providers, the legal basis of the processing shall be art. 6 sec. 1 letter a, and art. 7 GDPR.

Any further and more detailed description of the processing and of the possibilities to object to it, can be found under the following links with respect to the information of the provider of the social media platform.

Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland), on the basis of an agreement on the common processing of personal data:

data protection declaration: https://www.facebook.com/about/privacy/

opt-out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com

Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.

If you have any queries for information or want to enforce your user rights, the most effective way shall be to contact the provider of the social media platform. Only the provider has comprehensive access to the users' data and shall be able to take measures or to provide information. Should you need any help here, please contact us anytime.

 

Purposes of the processing of personal data

The above indicated data shall be processed by us for the operation of our website and for the fulfillment of contractual obligations towards our customers, as well as for the preservation of our legitimate interests. In the case of your queries outside of an active customer relationship, the data shall be processed for purposes of sales and distribution and advertising. You can object to the use of your personal data for advertising purposes anytime.

Voluntary information

Insofar as you provide us with data, e.g., by filling in forms voluntarily, and these shall not be necessary for the fulfillment of our contractual obligations, we shall process these data in the legitimate assumption that the processing and usage of these data is in your interest.

Recipient / transfer of data

Any data that you provide us with shall principally not be transferred to any third party. In particular, your data shall not be transferred to third parties for their advertising purposes. However, we sometimes commission service providers for the operation of this website or for other products or services offered by us. It may happen that a service provider shall have knowledge of personal data. We select our service providers very diligently, in particular with respect to data protection and data security, and we take all the measures required by data protection rules for a permissible data processing.

Data processing outside of the European Union

Insofar as any personal data are processed outside of the European Union, you can find the relevant information above.

Data protection officer

We have appointed a data protection officer. You can contact him as follows:

PROLIANCE GmbH 
www.datenschutzexperte.de 
Leopoldstr. 21 
80802 München 
datenschutzbeauftragter@datenschutzexperte.de 

Your rights as affected party

You shall have the right to be informed about your respective personal data. You can contact us anytime for information. In the case of any information query that is not in writing, please understand that we may require you to provide us with evidence showing that you are the person that you pretend to be. Besides, you shall have the right to have the data corrected or deleted, or to require a limitation of their processing insofar as you shall be legally entitled. Finally, you shall have a right of objection to the processing in the framework of the legal regulations. In the framework of data protection regulations, there shall also be a right of data transferability.

Cancellation of data

We shall principally delete any personal data when further storage shall not be required any longer. Such requirement may especially persist if the data are still necessary in order to fulfill contractual obligations, to examine warranty claims and claims under guarantee, and to grant or repel such claims. In the case of any legal duties to preserve records, cancellation shall only be possible upon expiry of the respective duty to preserve records.

Right of complaint before a supervisory authority

You shall have the right to complain about the processing of personal data by us before a supervisory authority for data protection.

Modification of this data protection information

We shall review this information on data protection in the case of modifications of this website or of other events requiring such review. The currently valid version can always be found on this website.

 

REVOKE COOKIE DECISION

Of course, you have the option to revoke your decision regarding the use of cookies at any time. Simply click on the following button: