The companies in the Pöppelmann Group comply with data protection laws. We will use any personal data which are collected by us only for internal purposes, and they will be transmitted and/or saved only in accordance with the current data protection provisions. We will neither sell the collected data nor transmit them for any other purpose to third parties under any circumstances.
However, we can ensure the protection of data only for the use of our website: www.poeppelmann.com. The following explanations do not apply to websites or content of external providers to which we have linked or refer.
This Data Protection Statement informs you about the nature, scope and purpose of the collection and use of personal data by the Pöppelmann Group on this website.
1. Non-personal data collected when visiting the website
The Pöppelmann Group collects and saves information on the web server for statistical analysis using log files, which are transmitted to us by your browser when you visit our website. These are: Browser type and version, operating system used, visitor's IP address, date and time of retrieval, the webpages visited, data volume transmitted, the report of successful retrieval and the requesting provider. The IP address is used by us solely to defend ourselves against attacks and to optimise our website, and will be deleted after seven days.
If you, as a user, visit the webpages of Pöppelmann GmbH & Co. KG, one or more cookies will be saved on your computer. A cookie is a small file containing a given sequence of characters, which can be used to unambiguously identify your browser. With the help of cookies, we can improve the convenience and quality of our services, e.g. by saving user settings. Cookies are stored as small text files on your computer and are saved by your browser. ‘Session cookies’ will be automatically deleted at the end of your visit. Cookies will not damage your computer and do not contain any viruses.
You can use our website even without cookies. You can disable the saving of cookies in your browser or change the settings of your browser so as to receive a notification before the browser saves a cookie. You can delete the cookies at any time from the hard drive of your computer through the data protection function of your browser. In this case, however, the functions and user-friendliness of our website may be restricted.
3. Handling personal data
Personal data are information by means of which a person is identifiable, in other words, particulars that can be traced back to a given person. This includes name, email address or telephone number.
Personal data will be collected, used and forwarded by the Pöppelmann Group only as far as permitted by law or if you, as a user, have agreed specifically to the collection of the data. When contacting the Pöppelmann Group (e.g. through the contact form or by email), your particulars will be saved to process your enquiry and to answer any further queries. No further data will be gathered. You can withdraw your consent to the saving of personal data by us at any time by sending us an email, fax or letter. Please send your objection in relation to any company of the Pöppelmann Group to:
Pöppelmann GmbH & Co. KG
Plastic tool design and engineering
Bakumer Straße 73
Fax: +49 (0) 44 42 / 982-112
We generally save your data for the duration of the statutory retention periods.
4. Website services, tracking and retargeting
Herein we explain the website services, tracking and retargeting tools we use. These are tools which we use to measure our reach or the use of our website as well as for advertising purposes. The legal basis for the processing is your consent pursuant to point (a) of Article 6(1) GDPR, provided that you have granted us this consent when visiting our website.
4.1 Luware RTC Launcher
We use the Luware RTC Launcher by Luware AG to enable you to contact us spontaneously. The legal foundation for the processing of the data is point (f) of Article 6(1) GDPR. To enable contact with us and integrate the service, a connection is established with the Luware servers in Switzerland. The Commission has determined that the level of data protection in Switzerland is adequate. Your IP address is communicated to Luware through a connection with the server in Switzerland.
4.2 Google services
We use various services of Google Inc. (hereinafter: ‘Google’), which are described individually below. Google has submitted to the Privacy Shield Framework established by the European Union and the USA and has self-certified. Accordingly, Google undertakes to comply with the standards and provisions of European data protection laws. For more information, please visit: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
4.2.1 Google Analytics
You can also prevent capture by Google Analytics and thus withdraw your consent by clicking the link below. An opt-out cookie is placed to permanently prevent the future recording of your data when you visit this website: Click here to object to the processing of your data by Google Analytics.
4.2.2 Google Dynamic Remarketing
Google Dynamic Remarketing allows us to display our advertisements to you after your visit to our website during your further use of the internet. This is done by means of the cookies saved in your browser, which are used by Google to record and analyse your usage behaviour when visiting various websites. Google is able to identify your previous visit to our website. Google has stated that they do not merge the data collected as part of the Remarketing tool with any of your personal data which may be saved by Google. According to Google, pseudonymisation is used as part of the Remarketing tool.
4.2.3 Google Maps
4.2.4 Google Fonts
4.3. LinkedIn services
We use various services of the LinkedIn Ireland Unlimited Company (hereinafter referred to as ‘LinkedIn’). LinkedIn has submitted to the Privacy Shield Framework established by the European Union and the USA and has self-certified. Accordingly, LinkedIn undertakes to comply with the standards and provisions of the European data protection laws. For further information, please visit: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active.
For further information on data protection at LinkedIn, please see here.
We use the following LinkedIn services:
LinkedIn Ads / LinkedIn Marketing Solutions for processing information about your user behaviour for advertising purposes in order to show you targeted advertisements.
Outbrain allows us to inform you about any further content on our website as well as third-party websites that may be of interest to you. The recommendations for further reading are compiled based on the content previously read by you. The content shown by Outbrain is controlled and delivered automatically by Outbrain as far as content and method are concerned. Outbrain's recommendations for further reading based on the information transmitted by the cookies are displayed only in a pseudonymised form, i.e. by means of a generated string of characters attributed to you. No other personal data will be saved. Outbrain records the following data:
- source device
- browser type
- anonymised IP address of the user.
To anonymise the IP address, the last octet of the IP address is removed.
In addition to Outbrain, we use ‘Outbrain Amplify’ and ‘Outbrain Pixel’ for the marketing and optimisation of our website. These tools enable us to analyse your user behaviour and to improve our range of services.
We use various tools from Facebook Ireland Ltd. (hereinafter "Facebook"), including Instagram, to display interest-based advertisements to you by delivering them to Facebook audiences and to inform you about our educational offerings. Our data processing in connection with our Facebook and Instagram presence is carried out in accordance with Art. 6 para. 1f DSGVO (German Data Protection Act) due to our legitimate interest in public relations and communication. To integrate the Facebook tools, a connection is established with the Facebook server so that Facebook can assign the visit to our site to your account. These servers can also be located outside the European Union. You can prevent this by logging out of Facebook before visiting our website. However, even after you log out, your IP address will still be transmitted to Facebook and Facebook may be able to obtain further identifiers from you. Facebook has submitted to and certified itself under the Privacy Shield Agreement concluded between the European Union and the USA. This means that Facebook is committed to complying with the standards and regulations of European data protection law. You can find further information in the following linked entry: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.
We have concluded an agreement with Facebook Ltd. on joint responsibility for data protection in accordance with Art. 26 DSGVO. This agreement, the so-called "Page Insights Supplement" or "Page Insights Controller Addendum" can be found here: https://de-de.facebook.com/legal/terms/page_controller_addendum.
4.5.3 Facebook Custom Audience
This service allows us to deliver targeted and interest-based advertising to visitors of our website as part of the visit to Facebook or other websites that also use Facebook Custom Audience.
This website uses Mouseflow, a web analysis tool of Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark, to record randomly selected, individual visits (only with an anonymised IP address). This creates a log of the mouse activities, mouse clicks and keyboard interactions with the intention to randomly reproduce individual visits to this website as ‘session replays’, to analyse them in the form of ‘heat maps’ and to derive potential improvements for this website from those activities. The data recorded by Mouseflow are not personal and will not be disclosed to third parties. The recorded data are stored and processed within the EU. If you do not want Mouseflow to record your data, you can object to it on all websites that use Mouseflow here: https://mouseflow.com/opt-out/.
5. Right of access and other rights of the data subject
You have the right to obtain confirmation from the Pöppelmann Group as to whether personal data concerning you are being processed, and, where that is the case, you have a right of access to the personal data and the specific information listed in detail in Article 15 GDPR.
You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you and to have incomplete personal data completed by the Pöppelmann Group (Article 16 GDPR).
You have the right to obtain from the Pöppelmann Group the erasure of personal data concerning you without undue delay where one of the grounds specified in Article 17 GDPR applies, e.g. if the personal data are no longer necessary in relation to the intended purposes (right to erasure).
You have the right to obtain from the Pöppelmann Group a restriction of processing where one of the grounds specified in Article 18 GDPR applies, e.g. if the data subject has objected to processing pending verification by the controller. In addition, you have the right to data portability in instances covered by Article 20 GDPR.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the General Data Protection Regulation (Article 77 GDPR). You can exercise this right with a supervisory authority in the member state of your habitual residence, place of work or place of the alleged infringement. In Lower Saxony, the competent supervisory authority is: The Landesbeauftragte für den Datenschutz Niedersachsen [State Data Protection Commissioner for Lower Saxony] (contact details at: https://www.lfd.niedersachsen.de/wir_ueber_uns/impressum/impressum-56113.html).
If data are processed based on point (e) (data processing in the exercise of official authority or for the performance of a task carried out in the public interest) or point (f) (data processing for the purposes of legitimate interests) of Article 6(1) GDPR, you have the right to object to the processing on grounds relating to your particular situation at any time. In this case, we will no longer process the data unless compelling legitimate grounds for processing are demonstrated, which override the interests, rights and freedoms of the data subject, or if the processing serves for the establishment, exercise or defence of legal claims. If possible, please direct your objection to: email@example.com.
We use the newsletter to inform you about us and our range of offers. If you would like to receive the newsletter offered on the website, we need a valid email address for the double opt-in process as well as information which allows us to verify that you are the owner of the email address given or that the owner of the email address consents to receive the newsletter. The legal basis for sending the newsletter is your consent, which you agreed to during registration. No further data will be gathered. These data will be used only for sending the newsletter and will not be disclosed to third parties. When you register for the newsletter, we will store your IP address for a period of seven days as well as the date of registration. This storage serves only as proof in the event that a third party abuses an email address and registers for the newsletter without the knowledge of the owner of the email address. You can withdraw your consent to the storage of these data and your email address or to the use of the email address for the sending of newsletters at any time. You can withdraw your consent via a link in the newsletters themselves or in your profile section.
7. Right to information, correcting and deleting personal data
You have the right to receive non-paid information about the data we have saved about you, about its origin and recipient and about the purpose of its saving at any time. Furthermore, the user is entitled to amend incorrect data as well as to block and delete personal data, provided this is not in contradiction of statutory archiving obligations. Information on the stored data can be obtained from the data protection officer for the Pöppelmann Group, Mr Peter Suhren (firstname.lastname@example.org)
8. Right to access, rectification and erasure of personal data
You have the right to obtain information free of charge from us at any time about the data stored by us concerning you, their origin and recipients as well as the purposes of the storage. In addition, users are entitled to have inaccurate data rectified, or to have their personal data blocked and erased in the absence of a contracting statutory duty of retention. The Pöppelmann Group Data Protection Officer, Peter Suhren (email@example.com), will provide information about the stored data.
9. Data Protection Officer
If you would like further explanations beyond the above or have any other questions regarding the processing of your personal data, please do not hesitate to contact us. To this end, please contact the Data Protection Officer of the Pöppelmann Group:
FIRST PRIVACY GmbH
10.Data protection information in accordance with Art. 13 and 21 DSGVO
The Pöppelmann Group is responsible for the collection and processing of data.
Pöppelmann GmbH & Co. KG
Plastic tool design and engineering
Bakumer Straße 73
Fax: +49 (0) 44 42 / 982-112
We are also jointly responsible for data processing:
Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland ("Facebook").
We generally only collect the data as required by law or as necessary to conclude or fulfil a contract or that have been made available to us voluntarily and based on consent. The provision of any other information is voluntary. Not providing such data does not entail any negative consequences. However, by not providing data, subsequent communication may be more complicated or delayed in individual instances.
Data processing for the fulfilment of a contract:
We process the collected data pursuant to point (b) of Article 6(1) GDPR for the fulfilment of a contract, or pursuant to point (f) of Article 6(1) GDPR for purposes of the legitimate interests of processing the contract if you are a contact person of one of our business partners. This includes related activities as part of customer support. If necessary, the personal data will be forwarded to the companies involved in processing the contract, e.g. banks to process the payments. The data necessary to fulfil the contract will be deleted after the relevant purpose has been served and only held available for any enquiries. The data will not be deleted if any receivables are still outstanding upon termination of the contract that still have to be collected. If statutory retention obligations apply, the data concerned will be archived for the term of such retention obligations.
Data processing to pursue legitimate interests:
In the absence of consent or of any other evident legal basis for data processing we will process your data only to pursue legitimate interests and only if the prerequisites of point (f) of Article 6(1) GDPR apply, in other words if our legitimate interests in the data processing, or those of a third party, override your interests or fundamental rights and freedoms in an individual case. The data will be deleted if the legitimate interest no longer exists, but will be retained for the term of any applicable statutory retention obligations at least.
You have the right to object to the data processing. For further information, please see the following section ‘Rights of the data subject’.
Data processing based on consent:
If you have consented to be informed by us by telephone or email about our company’s products and services, your data will be processed based on point (a) of 6(1) GDPR. You can withdraw your consent at any time; however, this will not in any way affect the lawfulness of the processing made before the withdrawal. If you withdraw your consent, we will cease processing the data.
Data processing for direct marketing:
We process your data to the permissible extent for direct marketing purposes, especially for sending our advertising, such as product information or invitations to events. The processing is based on point (f) of Article 6(1) GDPR and is in pursuit of our legitimate interest to inform you about new products, events and services. Each customer has an independent right to object to this processing; if this right is exercised, we will cease to process the data for direct marketing purposes. If data were stored exclusively for direct marketing purposes, the data will be erased after the objection.
Data processing to comply with legal obligations:
If so required, we process your data to comply with any legal obligations, e.g. vis-à-vis tax authorities. The data processing is based in this case on point (c) of Article 6(1) GDPR. A legal obligation is derived from section 147 of the German Abgabenordnung [Tax Code - AO]. The data will be deleted after expiry of the period stipulated by law, unless there is a legitimate interest in continued storage.
Recipient of data:
We will transmit your data to third parties (e.g. lawyers to pursue payments in arrear) if the data protection laws provide for an authority for such transmission (e.g. by reference to one of the aforementioned case groups). Furthermore, your data may be forwarded to external service providers (e.g. IT service providers, companies which erase or archive data, providers of printing services or cloud providers), which assist us in the processing of data as part of processing carried out on behalf of a controller and, in so doing, are strictly governed by instructions.
As a rule, no data processing takes place outside the EU or the EEA. If such processing does occur, it will take place only in countries in regard to which the EU has issued an adequacy decision and based on standard data protection clauses adopted by the EU pursuant to point (c) of Article 46(2) GDPR. Upon request, we will gladly allow you to view the contract or provide you with a copy thereof. We will neither sell your data to third parties nor market them otherwise.
Contact details of the Data Protection Officer:
FIRST PRIVACY GmbH
Konsul-Smidt-Straße 88, 28217 Bremen
Telephone: +49 (0) 421 69 66 32-0
Rights of data subjects:
Data subjects have the right to obtain information from the controller about the personal data concerning them and to obtain rectification or erasure of inaccurate data provided that any of the reasons stated in Article 17 GDPR apply, e.g. if the data are no longer necessary in relation to the intended purposes. Data subjects also have the right to obtain a restriction of the processing of their data if any of the conditions stated in Article 18 GDPR applies as well as the right to data portability if any of the conditions stated in Article 20 GDPR apply. If data are processed based on point (e) (data processing in the exercise of official authority or for the performance of a task carried out in the public interest) or point (f) (data processing for the purposes of legitimate interests) of Article 6(1) GDPR, data subjects have the right to object at any time to the processing, based on grounds relating to his or her particular situation. In this case, we will no longer process the data unless compelling legitimate grounds for processing are demonstrated, which override the interests, rights and freedoms of the data subject, or if the processing serves for the establishment, exercise or defence of legal claims.
Right to lodge a complaint with a supervisory authority:
All data subjects have the right to lodge a complaint with a supervisory authority if they consider that the processing of data concerning them infringes data protection laws. The right to lodge a complaint may be exercised in the member state of the data subject's habitual residence, place of work or the place of the alleged infringement. In Lower Saxony, the supervisory authority is the Landesbeauftragte für den Datenschutz Niedersachsen [Data Protection Commissioner of the Federal State of Lower Saxony], Prinzenstraße 5, 30159 Hannover.
Information about the right to object pursuant to Article 21 GDPR
If data are processed based on point (f) (data processing for the purposes of legitimate interests) of Article 6(1) GDPR, you have the right to object to the processing on grounds relating to your particular situation at any time. In this case, we will no longer process the data unless compelling legitimate grounds for processing are demonstrated, which override the interests, rights and freedoms of the data subject, or if the processing serves for the establishment, exercise or defence of legal claims. If possible, please direct your objection to: firstname.lastname@example.org.
Information about the right to object to direct marketing
We process your data for direct marketing purposes. You have an independent right to object to this processing; if this right is exercised, we will cease to process the data for direct marketing purposes. If possible, please direct your objection to: email@example.com