Privacy Policy

We are pleased that you are visiting our website. Protecting and securing your personal information during your use of our website is very important to us. We would therefore like to inform you here about which of your personal data we collect when you visit our website and for what purposes it is used.

This privacy policy applies to the online services of PET Bottle Recycling, which can be accessed under the domain pfr-nord.de and its various subdomains ("our website").

Who is responsible and how can I contact them?

Controller

for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR)

PFR Nord GmbH
Böternhöfen 13
24594 Hohenwestedt
Germany

Data Protection Officer

Erich Zimmermann
c/o ZiDa-Datensicherheit GmbH
Office: Mannheim
Schwarzwaldstraße 17
68163 Mannheim
Homepage: www.zida-datensicherheit.de
e-mail: e.zimmermann@zida-GmbH.de

What is this about?

This privacy policy fulfills the statutory requirements for transparency in the processing of personal data. Personal data refers to all information relating to an identified or identifiable natural person. This includes information such as your name, age, address, telephone number, date of birth, email address, IP address or user behavior when visiting a website. Information for which we cannot (or only with disproportionate effort) establish a connection to your person, e.g., through anonymization, does not constitute personal data. The processing of personal data (e.g., collection, querying, usage, storage, or transmission) always requires a legal basis and a defined purpose.

Stored personal data is deleted as soon as the purpose of the processing has been achieved and there are no legitimate reasons for further storage. We inform you about the specific retention periods or criteria for storage in the individual processing operations. Regardless, we store your personal data in individual cases for the assertion, exercise or defense of legal claims and if there are statutory retention obligations.

Who receives my data?

We only disclose your personal data processed on our website to third parties if this is necessary to fulfill the purposes and, in individual cases, if the legal basis (e.g. consent or legitimate interest) so permits. Furthermore, we transfer personal data to third parties on a case-by-case basis if this serves the assertion, exercise or defense of legal claims. Possible recipients may include law enforcement authorities, lawyers, auditors, courts, etc.

If we use service providers for the operation of our website who process personal data on our behalf as part of commissioned data processing in accordance with Art. 28 GDPR, these may be recipients of your personal data. You can find more detailed information about the use of processors and web services in the overview of the individual processing operations.

Do you use cookies?

Cookies are small text files that are sent from us to your device’s browser and stored there during your visit to our website. As an alternative to using cookies, information can be stored in your browser’s local storage. Some functions of our website cannot be offered without cookies or local storage ("technically necessary cookies"). Other cookies, on the other hand, enable us to perform various analyses, such as recognizing the browser you used on your next visit and transmitting various information to us ("non-essential cookies"). Cookies help us make our online offer more user-friendly and effective, for example by analyzing your usage of our site or identifying your preferred settings (e.g. country and language settings). Where third parties process information via cookies, they collect it directly via your browser. Cookies do not harm your device, cannot run programs, and do not contain viruses.

We inform you about the specific services for which we use cookies in the individual processing operations. Detailed information about the cookies used can be found in the cookie settings or consent manager on this website.

What rights do I have?

Subject to the legal provisions of the General Data Protection Regulation (GDPR), as a data subject you have the following rights:

Right of access under Art. 15 GDPR to the data stored about you, including informative details about the specifics of processing as well as a copy of your data;

Right to rectification under Art. 16 GDPR of incorrect or incomplete data we have stored about you;

Right to erasure under Art. 17 GDPR of data we have stored about you, provided processing is not required for the exercise of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the assertion, exercise or defense of legal claims;

Right to restriction of processing under Art. 18 GDPR, provided the accuracy of the data is disputed, processing is unlawful, we no longer need the data and you oppose its erasure because you need it for the assertion, exercise, or defense of legal claims, or you have objected to processing under Art. 21 GDPR;

Right to data portability under Art. 20 GDPR, provided you have given us your personal data on the basis of consent under Art. 6(1)(a) GDPR or under a contract under Art. 6(1)(b) GDPR and this data is processed by us via automated means. You will receive your data in a structured, commonly used, and machine-readable format or we will transmit the data directly to another controller where technically feasible.

Right to object under Art. 21 GDPR to the processing of your personal data, provided this is based on Art. 6(1)(e), (f) GDPR and there are grounds related to your particular situation, or the objection is directed against direct marketing. The right to object does not exist if compelling legitimate grounds for the processing are demonstrated or processing is necessary for the establishment, exercise, or defense of legal claims. Where the right to object does not apply for specific processing operations, this is noted there.

Right to withdraw consent under Art. 7(3) GDPR, with effect for the future.

Right to lodge a complaint under Art. 77 GDPR with a supervisory authority if you believe that the processing of your personal data breaches the GDPR. As a rule, you can contact the supervisory authority at your place of habitual residence, your workplace, or the location of our company headquarters.

How is my data processed in detail?

Below, we inform you about the individual processing operations, the scope and purpose of data processing, the legal basis, the obligation to provide your data, and the respective retention period. There is no automated decision-making, including profiling.

Provision of the Website

Nature and scope of processing

When you access and use our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called log file:

IP address of the requesting device

Date and time of access

Name and URL of the retrieved file

Website from which access takes place (referrer URL)

Browser used and, if applicable, the operating system of your device and the name of your access provider

Our website is not hosted by us but by a service provider who processes the above-mentioned data on our behalf in accordance with Art. 28 GDPR.

Purpose and legal basis

Processing is carried out to protect our overriding legitimate interest in displaying our website and ensuring security and stability, based on Art. 6(1)(f) GDPR. Collecting the data and storing it in log files is essential for the operation of the website. A right to object does not exist due to the exception in Art. 21(1) GDPR. If log files must be retained longer by law, processing is based on Art. 6(1)(c) GDPR. There is no legal or contractual requirement to provide your data, but accessing our website is technically impossible without it.

Retention period

The above data is stored for the duration of the website display and beyond that, for technical reasons, for a maximum of 7 days.

Contact form

Nature and scope of processing

We offer you the opportunity to contact us via a form on our website. The information collected via mandatory fields is necessary to process your inquiry. You can also voluntarily provide additional information you consider relevant for processing your inquiry.

When using the contact form, your personal data will not be passed on to third parties.

Purpose and legal basis

The processing of your data via our contact form is conducted for the purposes of communication and handling your inquiry on the basis of your consent according to Art. 6(1)(a) GDPR. If your inquiry relates to an existing contractual relationship with us, processing is for contractual fulfillment on the basis of Art. 6(1)(b) GDPR. There is no legal or contractual requirement to provide your data; however, we cannot process your request without the required information. If you do not wish to provide this data, please contact us through other means.

Retention period

If you use the contact form on the basis of your consent, we store the collected data of each inquiry for three years, starting with the completion of your inquiry or until you revoke your consent.

Presences on social media platforms

We maintain so-called fan pages or channels on the networks listed below to provide you with information and offers within social networks and to give you further ways to contact us and learn about our offers. Below we inform you about which data we or the respective social network processes from you in connection with viewing and using our fan pages/accounts.

Data we process from you

If you contact us via Messenger or Direct Message through the respective social network, we generally process your username through which you are contacting us, and may store further data provided by you if necessary for processing/responding to your request.

The legal basis is Art. 6(1)(f) GDPR (processing is necessary for the legitimate interests of the controller).

(Statistical) usage data we receive from social networks

We receive automatically generated statistics concerning our accounts via Insights functionalities. The statistics contain, among other things, the total number of page views, likes, activities and interactions, reach, video views, and the proportion of male/female followers/fans.

The statistics only contain aggregated, non-personal data. We cannot identify individuals from these statistics.

Which data the social networks process from you

To view the content of our fan pages/accounts, you do not need to be a member of the respective social network, nor is a user account required.

However, please note that social networks, when accessed, collect and store data from website visitors even without a user account (e.g. technical data required to display the website) and use cookies and similar technologies, over which we have no influence. Further details can be found in each social network’s privacy policy (see the respective links above).

If you wish to interact with content on our fan pages/accounts, such as comment, share, or like our posts, or contact us via Messenger, you will need to register in advance with the social network and provide personal data.

We have no influence on data processing by the social networks during your use. To our knowledge, your data is particularly stored and processed by the social networks to provide their services and to analyze usage behavior (using cookies, pixels/web beacons, and similar technologies), for the purpose of showing you interest-based advertising on and off the platform. It cannot be ruled out that your data will be stored outside the EU/EEA and passed on to third parties.

For detailed information about the extent and purposes of personal data processing, retention/deletion, as well as policies regarding the use of cookies and similar technologies when registering and using social networks, please refer to the privacy and cookie policies of each platform. There you will also find information about your rights and options to object.

Facebook Page

When visiting our Facebook page, Facebook (Meta) collects your IP address and other information stored in cookies on your device. This information is used to provide us, as the operator of the Facebook page, with statistical insights into usage of the Facebook page. Further information is provided by Facebook at the following link: https://facebook.com/help/pages/insights.

We cannot draw conclusions about individual users from these statistics. We only use them to better respond to users' interests and to improve and maintain our online presence and its quality.

We collect your data via our fan page only to facilitate possible communication and interaction with us. This typically includes your name, message content, comment content, and any "publicly" provided profile information.

The processing of your personal data for our purposes is based on our legitimate business and communicative interest in providing an information and communication channel according to Art. 6(1)(f) GDPR. If you have given consent to the respective social network operator, processing is based on Art. 6(1)(a), Art. 7 GDPR.

Since the actual data processing is carried out by the operator of the social network, our access to your data is limited. Only the operator of the social network has full access to your data. Therefore, only the operator can directly carry out and implement appropriate actions to fulfill your user rights (requests for information, erasure requests, objection, etc.). Thus, making your claims is most effective directly against the respective operator.

We are jointly responsible with Facebook for the personal content of the fan page. Data subject rights can be asserted with Meta Platforms Ireland Ltd. as well as with us.

The primary responsibility for the processing of Insights data under the GDPR lies with Facebook, and Facebook fulfills all obligations under the GDPR with regard to processing of Insights data. Meta Platforms Ireland Ltd. provides the core content of the Page Insights Supplement to data subjects.

We do not make decisions regarding the processing of Insights data and the duration of storage of cookies on user devices.

For further information, please see Facebook directly (Supplementary Agreement with Facebook): https://www.facebook.com/legal/terms/page_controller_addendum.

Further information, including the exact extent and purposes of your personal data processing, retention/deletion, and policies regarding the use of cookies and similar technologies during registration and use, can be found in Facebook’s privacy/cookie policies: https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0 https://www.facebook.com/policies/cookies

Instagram Page

When you visit our Instagram page, Instagram (Meta) collects your IP address and other information stored in cookies on your device. This information is used to provide us, as the operator of the Instagram page, with statistical insights into usage of the Instagram page. For more information, see (Note: By clicking the following link, you will be taken to the website of Facebook, which is also part of the Meta group. The information provided applies equally to Instagram): https://facebook.com/help/pages/insights.

We cannot draw conclusions about individual users from these statistics. We only use them to better respond to the interests of our users and to continually improve and ensure the quality of our online presence.

We collect your data via our fan page only to facilitate possible communication and interaction with us. This generally includes your name, message content, comment content, and any "publicly" provided profile information.

The processing of your personal data for our above-mentioned purposes is based on our legitimate business and communicative interest in providing an information and communication channel under Art. 6(1)(f) GDPR. If you have given a consent to the respective social network operator, processing extends to Art. 6(1)(a), Art. 7 GDPR.

Since the actual data processing is carried out by the operator of the social network, our ability to access your data is restricted. Only the social network operator has full access to your data. Therefore, only the operator can directly take appropriate measures to fulfill your user rights (information requests, deletion requests, objections, etc.). As such, making these claims is most effective directly to the relevant operator.

We are jointly responsible with Instagram for the personal content of the fan page. Data subject rights can be asserted with Meta Platforms Ireland Ltd. as well as with us.

The primary responsibility for the processing of Insights data within the meaning of the GDPR lies with Instagram, and Instagram fulfills all obligations under the GDPR regarding the processing of Insights data. Meta Platforms Ireland Ltd. provides the main content of the Page Insights Supplement to the data subjects.

We do not make decisions regarding the processing of Insights data and storage duration of cookies on user devices.

Further information can be found directly with Instagram (Supplementary agreement with Facebook): https://www.facebook.com/legal/terms/page_controller_addendum.

Further information, such as the exact extent and purposes of the processing of your personal data, storage periods/deletion, as well as policies on cookies and similar technologies during registration and use, can be found in Instagram's privacy/cookie policies (Note: by clicking the link you’ll be taken to Facebook’s website): https://help.instagram.com/519522125107875/?helpref=uf_share You can also find this information in Instagram’s help section here: https://help.instagram.com/581066165581870

LinkedIn Page

LinkedIn is a social network operated by LinkedIn Inc., based in Sunnyvale, California, USA, which allows the creation of private and professional profiles for individuals and company profiles for organizations. Users can maintain existing contacts and establish new ones within the network. Companies and other organizations can create profiles where they upload photos and company information to present themselves as employers and recruit employees. Other LinkedIn users have access to this information and can write articles and share content with others. The main focus of the network is on professional exchange on specialist topics among people with similar career interests.

When using or visiting the network, LinkedIn automatically collects user and visitor data such as usernames, job titles, and IP addresses during use or visits. This is accomplished using various tracking technologies. LinkedIn, among other things, provides information, offers, and recommendations based on such collected data.

We only collect your data from our company profile to enable possible communication and interaction with us. This usually includes your name, message content, comment content, and any “publicly” provided profile information.

The processing of your personal data for our above-mentioned purposes is based on our legitimate business and communicative interest in providing an information and communication channel under Art. 6(1)(f) GDPR. If, as a user, you have given consent to the data processing by the social network operator, the legal basis for processing also includes Art. 6(1)(a), Art. 7 GDPR.

Since the data processing is actually carried out by the social network operator, our possibilities to access your data are limited. Only the social network operator is authorized to have full access to your data. Therefore, only the operator can implement and execute measures to fulfill your user rights (data access, deletion, objection, etc.). As such, asserting these rights is most effective directly with the relevant operator.

We are jointly responsible with LinkedIn for the personal content of our company profile. Data subject rights may be asserted with LinkedIn Inc. as well as with us.

We make no decisions regarding the data collected via tracking technologies on LinkedIn’s site.

Further details about LinkedIn can be found at: https://about.linkedin.com.

Further information regarding LinkedIn’s privacy can be found at: https://www.linkedin.com/legal/privacy-policy.

Details regarding storage periods/deletion as well as policies regarding cookies and similar technologies during registration and use can be found at: https://de.linkedin.com/legal/cookie-policy?trk=homepage-basic_footer-cookie-policy.

YouTube Video

Nature and scope of processing

We have integrated YouTube Videos on our website. YouTube Video is a component of the YouTube, LLC video platform, where users can upload content, share it online, and receive detailed statistics.

YouTube Video enables us to embed content from the platform directly on our website.

YouTube Video uses cookies and other browser technologies to analyze user behavior, recognize users, and create user profiles. This information is used, among other things, to analyze the activity of played content and create reports. If a user is registered with YouTube, LLC, YouTube Video can associate played videos with their profile.

When you access this content, you connect to servers operated by YouTube, LLC, Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland, where your IP address and possibly browser data such as your User-Agent are transferred.

Purpose and legal basis

The use of the service is based on your consent in accordance with Art. 6(1)(a) GDPR and § 25(1) TDDDG (German Telecommunications Digital Services Data Protection Act).

We intend to transfer personal data to third countries outside the European Economic Area, especially the USA. Transfers to the USA are made according to Art. 45(1) GDPR based on the adequacy decision of the European Commission. The US companies involved and/or their US sub-contractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).

If there is no adequacy decision by the European Commission (including for US companies not certified under EU-U.S. DPF), we have agreed with the recipients on other appropriate safeguards according to Art. 44 ff. GDPR. These are—unless otherwise noted—the EU Standard Contractual Clauses according to Implementing Decision (EU) 2021/914 of June 4, 2021. You can view a copy of these Standard Contractual Clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.

In addition, we obtain your consent according to Art. 49(1) sentence 1 (a) GDPR before any such third country transfer, which you give via the consent manager (or through other forms, registrations, etc.). We would like to point out that cross-border transfers may entail specific, unknown risks (e.g., processing by law enforcement authorities of the third country, the scope and consequences of which are unknown to us, beyond our control, and potentially not known to you).

Retention period

The specific retention period of processed data is determined by YouTube, LLC and cannot be influenced by us. For more details, refer to the YouTube Video privacy policy: https://policies.google.com/privacy.