Data protection information for RKW Group website (www.rkw-group.com)

RKW SE appreciates your interest in our company and thanks you for visiting our website. RKW takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations. We are happy to inform you about the processing of personal data of the users of our website.

RKW SE
Data Protection Officer
Havellandstraße 8
68309 Mannheim
data.protection@rkw-group.com

You can contact us via our contact form. You will be asked for the following data in the contact form: company, first name, last name, street (optional), postcode/city (optional), country, e-mail, telephone (optional). In the contact form, you must also select your subject area and enter your comments (free text field).

If you use our contact form, your above-mentioned data will be processed by us exclusively for the purpose of processing your request or answering your enquiry.

The data you enter in the contact form will remain with us until you request us to delete it or the purpose for storing the data no longer applies (e.g. after we have completed processing your enquiry). Mandatory legal retention periods remain unaffected.

Insofar as you direct enquiries specifically to contactindustrialpackaging@rkw-group.com, the messages are additionally stored in the backend for the purpose of sustainable and effective processing and finally deleted there within a maximum of 31 days after receipt (data older than 30 days are automatically deleted on the first of each month). 

If this is necessary to process your request, for example because your request relates to an RKW group company in a third country, your data or parts thereof may be forwarded to this group company.

The legal basis is your consent, cf. Art. 6 para. lit. a) GDPR. You have the right to revoke your consent at any time. This means that we will no longer process the data based on this consent in the future. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. You can send your revocation at any time free of charge to data.protection@rkw-group.com.

Depending on the context of the request, other legal bases may also come into consideration, for example if your request relates to the conclusion of a specific contract. In this case, Art. 6 para. 1 lit. b) GDPR is the legal basis.

We also use cookies on our website that are not technically essential. This usually happens in the context of the use of analysis and tracking services as well as tools for measuring reach. These are mainly third-party cookies that we use for statistical, marketing and analysis purposes ("Statistics" and "External Media" cookies).

Since these types of cookies are typically not absolutely necessary, they are only used if you have given us your consent to do so. The legal basis is Art. 6 para. 1 lit. a) GDPR (cf. also § 25 para. 1 TTDSG).

When you visit our website for the first time, we ask you whether you agree to the use of these cookies and, if so, which cookies may be used, "Statistics" cookies (cookies for statistical analysis of website use) and "External Media" cookies (cookies that are set when external media are integrated). You can also agree to the use of all cookies ("Accept all") or select the cookies individually in the "Privacy settings"→ "Individual privacy settings (incl. revocation option)" function of the cookie banner displayed. You can also access and change these individual data protection settings at any time in the footer of our website under "Change cookie settings". This is also a simple way for you to exercise your right to withdraw your consent. This is because you have the right to revoke consent you have given to us at any time. This has the consequence that we will no longer continue the data processing based on this consent in the future. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. 

Specifically, we offer the use of the following "Statistics" and "External Media" cookies:

a. YouTube

We have integrated videos on our website for the purpose of optimising our services. For this purpose, we use the service of the provider YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The videos are stored on www.youtube.com, but are played via our website. We use a two-click solution for the integration of YouTube, through which Google only learns of your IP address and your viewing of a video if you have previously pressed the consent button to view a video or have consented to the use of YouTube cookies in the cookie consent tool. If you use the YouTube video function while logged in to Google, Google may associate your use with your Google user account.

Your consent to use YouTube is stored by means of a cookie in your browser (see section Use of cookies and local storage).

We embed YouTube videos from the site youtube-nocookies.com so that no cookies from YouTube are stored in your browser.

The data collected by Google could be transmitted by Google to states outside the EU, in particular the USA. We have no influence on the possible collection and use of your data by Google. You can find more information in Google's privacy policy at www.google.de/intl/de/policies/privacy/.

b. Matomo

On our website we use Matomo (formerly Piwik) for website analysis. Matomo is an open source analytics platform developed by InnoCraft Ltd, 150 Willis St, 6011, Wellington, New Zealand.

We use Matomo "on-premise", i.e. on our own servers. No data collected in connection with Matomo is passed on to third parties, not even to Matomo itself or any subsidiaries or sales companies. The Matomo software is hosted within the RKW hosting at Mittwald in Germany.

The purpose of Matomo is to analyse the user behaviour of visitors to our website. When data is transmitted to our server, your IP address is subsequently shortened and pseudonymised in Matomo in such a way that we cannot identify you - as a visitor to our website - in Matomo.

If you select "Accept all cookies" in the cookie banner or select Matomo individually, cookies will be stored by Matomo in your computer's browser in order to assign your visit to a pseudonymised visitor profile. 

If, on the other hand, you select "Only allow necessary cookies" in the data protection settings (cookie banner), Matomo will not store any cookies in your computer's browser. In order to still be able to assign the usage activities of our website to your visit, consent-free "log file tracking" is carried out or the so-called config_id procedure is used. config_id uses mainly - but not exclusively - log files that you transmit to our servers with every page request and without our intervention (see under 3.1), evaluates this data and calculates a config_id. The calculation algorithm of this config_id changes every 24 hours, so that no conclusions can be drawn about possible earlier or later visits and the activities that took place on our website. The calculation algorithm config_id is calculated in such a way that it is always different when you visit other websites that use Matomo, so that it is not possible to draw conclusions about visits to other websites by you in Matomo. The legal basis for processing the data via the config_id procedure or the consent-free "log files tracking" without cookies is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in analysing user behaviour on our website in order to be able to draw conclusions for improving our offer for users.

Insofar as it is necessary for us to process personal data for the fulfilment of a contract with you or for the implementation of pre-contractual measures, Art. 6 para. 1 lit. b) GDPR is the legal basis for the data processing.

Insofar as it is necessary for us to process personal data in order to fulfil a legal obligation, Art. 6 para. 1 lit. c) GDPR is the legal basis for the data processing.

Insofar as we use service providers who process personal data on our behalf and on our instructions, we conclude a contract for commissioned processing with them in accordance with Art. 28 GDPR.

In some cases, we use external service providers as part of the provision of our website, who may have access to your personal data. We have contractually obligated our service providers to comply with the GDPR. They only receive data to the extent and for the period that is necessary for the provision of the services in each case. 

We use the following recipients based in the EU / EEA:

To present our company to the outside world, we operate a so-called Facebook fan page. For this purpose, we use the technical platform and services of Facebook Ireland Ltd, 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland.

We would like to point out that you use this Facebook fan page and its functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, rating). 

When you visit our Facebook fan page, Facebook collects, among other things, your IP address and other information about you, your Facebook account, your interests, your activities and your usage behaviour. In addition, information is accessed that is stored in the form of cookies on your end device or browser. The information collected by Facebook is used to provide us, as the operator of the Facebook fan page, with statistical information about the use of the fan page.

Facebook provides more information on this at the following link:

• de-de.facebook.com/help/pages/insights

The data collected about you in this context is processed by Facebook Ltd. and may be transferred to countries outside the European Union. Facebook describes in general terms what information it receives and how it is used in its data usage guidelines. There you will also find information on how to contact Facebook and on the setting options for advertisements. 

The data usage guidelines are available at the following link:

• de-de.facebook.com/about/privacy

Facebook's full data policy can be found here:

• de-de.facebook.com/full_data_use_policy

In what way Facebook uses the data from visits to Facebook fan pages for its own purposes, to what extent activities on the fan page are assigned to individual users, how long Facebook stores this data and whether data from a visit to the fan page is passed on to third parties, is not conclusively and clearly stated by Facebook and is not known to us. 

When accessing a Facebook fan page, the IP address assigned to your end device and other log files are transmitted to Facebook. According to Facebook, the IP address is anonymised (for "German" IP addresses). Facebook also stores information about the end devices of its users (e.g. as part of the "registration notification" function); Facebook may still be able to assign IP addresses to individual users.

If you are currently logged in to Facebook as a user, there is a cookie with your Facebook ID on your end device. This enables Facebook to track that you have visited this page and how you have used it.

If you want to avoid this, you should log out of Facebook or deactivate the "stay logged in" function, delete the cookies present on your device and close and restart your browser. In this way, Facebook information through which you can be directly identified will be deleted. This allows you to use our Facebook fan page without revealing your Facebook identifier. When you access interactive features of the page (Like, Comment, Share, Message, etc.), a Facebook login screen will appear. After any login, you will again be recognisable to Facebook as a specific user.

For information on how to manage or delete information about you, please visit the following Facebook support pages:

• de-de.facebook.com/about/privacy

We, as the operator of the Facebook fan page, do not collect and process any further data from your use of our service. 

You can also find more information about Facebook and other social networks and how to protect your data at: www.youngdata.de.

In order to present our company to the outside world, we are also active on the social media platforms YouTube (platform operator: Google Ireland Limited Gordon House, Barrow Street Dublin 4), LinkedIn (platform operator: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland), Instagram (platform operator: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland), Xing (platform operator: New Work SE, Am Strandkai 1, 20457 Hamburg, Germany) and TikTok (platform operator: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland).

We would like to point out that you use these services and their functions at your own risk. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating).

If you visit the platforms and our presence there and view our content on them, the respective platform operator may collect personal data from you. This includes, for example: Your IP address, log files, information about you personally (e.g. age, gender, interests), information about the type and duration of use, information about your account there and information about your activities and usage behavior. In addition, information stored in the form of cookies on your end device or browser may be accessed.

The data collected by the respective platform operators is intended to provide us with statistical information about the use of our content and to show you interesting content customized to you and to advertise our content.

The data collected about you in this context will be processed by the respective platform operator and may be transferred to countries outside the European Union. What information the platform operator receives and how it is used is described in the general data protection information provided by the platform operators. There you will also find information on how to contact the platform operators and on the settings options for advertising.

The way in which the platform operators use your data for their own purposes, the extent to which activities on our website are assigned to individual users, how long this data is stored and whether data is passed on to third parties is determined by the platform operators.

Further information can be found under the following links:

• YouTube:https://policies.google.com/privacy?hl=en
• LinkedIn:https://www.linkedin.com/legal/privacy-policy
• Facebook:https://www.facebook.com/privacy/policy/
• Instagram:https://privacycenter.instagram.com/policy/
• Xing:https://privacy.xing.com/en/privacy-policy
• TikTok:https://www.tiktok.com/legal/page/us/privacy-policy/en

As a data subject, you can exercise the following rights if the legal requirements are met.

• Right to information about processed data according to Art. 15 GDPR: You have the right to request information about your stored personal data from us at reasonable intervals. This information extends to the question of whether RKW SE has stored personal data about you and, among other things, what the data is and for what purposes the data is processed. Upon request, RKW SE will provide you with a copy of the data that is the subject of the processing.
• Right to rectification of inaccurate data pursuant to Art. 16 GDPR: In addition, you have the right to demand that RKW SE correct incorrectly stored data.
• Right to erasure pursuant to Art. 17 GDPR: You have the right to request that RKW SE erases your personal data. We are obliged to delete your personal data if, among other things, it is no longer necessary for the purposes for which it was collected or otherwise processed, if you have withdrawn your consent or if the data was processed unlawfully.
• Right to restriction of processing according to Art. 18 GDPR: Under certain circumstances, you have the right to restrict the processing of your personal data. This includes if you dispute the accuracy of your personal data and we have to verify your objection. In that case, your data may not be further processed by us, with the exception of storage, until the question of accuracy has been clarified.
• Right to data portability pursuant to Art. 20 GDPR: Should you wish to switch to another service provider, you have the right to have us hand over the data you have provided to us on the basis of your consent or on the basis of an existing contractual relationship with you in a common, machine-readable format or - at your choice - transfer it to a third party.
• Right to revoke your consent pursuant to Art. 7 (3) GDPR: If you have given us consent to process data, you can revoke this at any time by the same means by which you gave it. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
• Right to object according to Art. 21 (1) GDPR: You may object to data processing for reasons arising from your particular situation if the data processing is based on our legitimate interests.
• Right to complain to a supervisory authority pursuant to Art. 77 (1) GDPR: You have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or the supervisory authority responsible for RKW SE (Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart).