Data protection Companies of the Pöppelmann Group observe the laws on data protection. Should we collect personal data, we will only use them for internal purposes and we will only forward and/or save them in accordance with current provisions on data protection. Under no circumstances shall the data collected be sold or passed on to third parties for any other reason. However, we can only ensure data protection for the use of our website www.poeppelmann.com. The following explanations are not valid for web pages or contents of external providers we link or refer to. This data protection statement informs you about the type, extent, and purpose of personal data collection and usage by the Pöppelmann Group on this website. 1. Non-personal data collected when the website is visited By way of log files, the Pöppelmann Group uses their web server to automatically collect and save data transmitted to us by your browser when you access our website. This data is used for statistical analyses. The transmitted data includes: browser type and version, operating system used, visitor's IP address, date and time when you access our website, the pages you visited, the data volume transferred, notification about successful access to the website and the requesting provider. The IP address will only be used by us to prevent attacks and to optimise our website and will be erased after seven days. 2. Cookies Whenever you as the User access the website of Pöppelmann GmbH & Co. KG, one or more cookies will be saved on your machine. A cookie is a small file that contains a specific string of characters and can be used, for instance, to uniquely identify your browser. Using cookies helps us improve the experience and quality of our service by, e.g., saving user settings. Cookies are stored on your machine as small text files and saved by your browser. "Session cookies" are automatically erased after every visit. Cookies cause no damage to your machine and contain no viruses. You can also make use of our website without any cookies. You can configure your browser to disable the saving of cookies, to restrict it to certain websites, or to notify you before saving a cookie. You can use your browser's data protection (privacy) feature to erase cookies from your computer's hard drive at any time. This may, however, limit the functionality and user-friendliness of our website. 3. Handling personal data Personal data is information used to identify a person, in other words, details that can be traced back to a specific person. This includes names, e-mail addresses or phone numbers. The Pöppelmann Group only collects, uses and discloses personal data insofar as this is permitted by law or you as a User have specifically consented to the collection of such data. When you contact the Pöppelmann Group (e.g. using the contact form or e-mail), your details will be stored for the purpose of processing your enquiry and for the event that follow-up questions arise. We will not collect any other data. You may revoke your consent to the storage of your personal data by us at any time by e-mail, fax or post. Please address your objection to cover all companies in the Pöppelmann Group to: Pöppelmann GmbH & Co. KG Kunststoffwerk-Werkzeugbau, Bakumer Str. 73, 49393 Lohne, Germany; fax: +49 (0)44 42 982 112, E-mail: datenschutz@poeppelmann.com. In principle, we store your data for the duration of the statutory retention periods. 4. Website services, tracking and retargeting In the following section, we will provide you with an explanation of the website services, tracking and retargeting tools we use. These are tools that we use, for example, to measure the coverage or use of our site, and for advertising purposes. Your consent pursuant to Art. 6 (1) (a) of the EU General Data Protection Regulation (GDPR) forms the legal basis for the processing, provided that you have given us this consent when visiting our website. You can revoke this consent for the future at any time by clicking on this link, then clicking on "Select cookies" and unchecking "Performance and tracking cookies". 4.1. Luware RTC Launcher We use the Luware RTC Launcher from Luware AG to offer you the opportunity to contact us whenever you need. The legal basis for this processing is Art. 6 (1) (f) of the GDPR. To enable the User to contact us and in order to integrate the service, a connection is established with Luware's servers in Switzerland. Based on the Commission's decision, Switzerland has an adequate level of data protection. When connecting to the server in Switzerland, Luware will be provided with your IP address. You can find further information on data protection on Luware's homepage at https://www.luware.com/privacy. 4.2. Google services We use various services of Google Inc. (hereinafter "Google"), which are described individually below. Google has committed itself to the Privacy Shield agreement concluded between the European Union and the United States, and has obtained certification. By doing so, Google commits to comply with the standards and regulations of European data protection law. You can find further information in the article linked below: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. You will find further information on how Google handles data protection at the following link: http://www.google.de/intl/en/policies/privacy. 4.2.1. Google Analytics The Pöppelmann Group website uses Google Analytics – a web analysis service provided by Google for the statistical analysis of user access. Google Analytics uses so-called "cookies", which are text files saved on your computer that enable your use of the website to be analysed. The information generated by the cookie on your use of the website is generally transmitted to a Google server in the USA and stored there. In the event that IP anonymisation is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and abbreviated there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address provided by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by configuring your browser software accordingly; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible. You may also prevent Google from collecting data generated by the cookie related to your use of the website (incl. your IP address) as well as the processing of this data by Google by downloading and installing the browser plug-in available via the following link (https://tools.google.com/dlpage/gaoptout?hl=en). You can additionally prevent this information to be collected by Google Analytics and thus revoke your consent by clicking on the link below. An opt-out cookie will be added, which will permanently stop your data from being collected during your future visits to this website: Click here to object to the processing of your data by Google Analytics. Deactivating Google Analytics Further information concerning the terms and conditions of use and data protection can be found at: https://www.google.com/analytics/terms/gb.html. Please note that this website contains a Google Analytics code, supplemented by "gat._anonymizeIp();" to ensure anonymised collection of IP addresses (IP masking). 4.2.2. Google Dynamic Remarketing Google Dynamic Remarketing enables us to show you our advertisements when you use the internet again after visiting our website. This is done by means of cookies stored in your browser, through which your usage behaviour is recorded and evaluated by Google when you visit various websites. In this way, Google can detect that you visited our website previously. According to Google, the data collected in the course of remarketing will not be merged with any personal data concerning you that may have been stored by Google. Google states, in particular, that pseudonymisation is used in remarketing. We use Google Dynamic Remarketing for marketing and optimisation purposes, in particular to serve ads that may be relevant and interesting to you, to improve campaign performance reports and to achieve a fair calculation of advertising costs. 4.2.3. Google Maps On our website, we use Google Maps – an online map service provided by Google. This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently. When you visit our website, Google is informed that you have accessed the corresponding sub-page of our website. Your IP address is transmitted in the process. This takes place regardless of whether you are logged in with a Google user account or whether you do not have a user account. If you are logged in to Google, your data, such as your visit to our site, can be assigned to your account. To avoid this, you can log out of Google before using our website. 4.2.4. Google Fonts We use various fonts from the Google Fonts platform to design our web pages. Google servers are accessed in order to integrate these fonts, whereby your IP address is transmitted to these Google servers. The servers may be located in the USA or other servers outside the European Union. Google states that it does not use your IP address to track your activities, but only to statistically evaluate the use of fonts. Google does not draw conclusions about individual visitors. Art. 6 (1) (f) of the GDPR forms the legal basis for the processing. You can find more information on data protection with regard to Google fonts used here on the Google website. 4.3. LinkedIn services We use various services of LinkedIn Ireland Unlimited Company (hereinafter "LinkedIn"). LinkedIn has committed itself to the Privacy Shield agreement concluded between the European Union and the United States, and has obtained certification. By doing so, LinkedIn commits to comply with the standards and regulations of European data protection law. You can find further information here: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active. You will find further information on how LinkedIn handles data protection here. The LinkedIn services use cookies, among other things. We use the LinkedIn services for marketing and optimisation purposes, and in particular to analyse the use of our website and to be able to continuously improve individual functions and offers along with the user experience. When you access our site, a connection is established with the LinkedIn servers. These servers may also be located outside the European Union. If you have an account with LinkedIn, it may associate your visit to our site with your LinkedIn account. You can prevent this by logging out of LinkedIn beforehand. We use the following LinkedIn services: LinkedIn Ads / LinkedIn Marketing Solutions to process information about your usage behaviour for advertising purposes with the aim of serving you targeted advertisements. LinkedIn analytics to process information about your usage behaviour on our website in order to measure the coverage of our website. 4.4. Outbrain On our website, we use various tools from Outbrain UK Ltd. (hereinafter referred to as: "Outbrain"). Outbrain uses cookies that help analyse how you use our website. Outbrain enables us to refer you to further content on our website that you may also find interesting, but also to third-party websites. For example, the recommended readings are determined on the basis of the content you have read so far. The content displayed by Outbrain is automatically controlled and delivered by Outbrain in terms of content and technology. The display of recommended readings by Outbrain on the basis of the information transmitted by the cookies only takes place in pseudonymised form, i.e. by means of a generated character string that is assigned to you. Personal data is not stored for any other purpose. Outbrain collects the following data: device source, browser type, anonymised IP address of the User. To anonymise the IP address, the last octet of the IP address is stripped. In addition to Outbrain, we use "Outbrain Amplify" and "Outbrain Pixel" within our website for marketing and optimisation purposes. These tools allow us to analyse your usage behaviour and improve our website. Further information about Outbrain can be found here: http://www.outbrain.com/en/legal/privacy. 4.5. Facebook We use various tools from Facebook Ireland Ltd. (hereinafter "Facebook") to show you interest-based advertising served to Facebook audiences. To integrate the Facebook tools, a connection is established with the Facebook server so that Facebook can assign your visit on our site to your Facebook account. These servers may also be located outside the European Union. You can prevent this from happening by logging out of Facebook before visiting our website. However, even after you have logged out, your IP address will still be transmitted to Facebook and Facebook may be able to obtain further identifying information from you. Facebook has committed itself to the Privacy Shield agreement concluded between the European Union and the United States, and has obtained certification. By doing so, Facebook commits to comply with the standards and regulations of European data protection law. You can find further information in the article linked below: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active. You will find further information on how Facebook handles data protection here: https://www.facebook.com/about/privacy. 4.5.1. Facebook Custom Audience This service allows us to deliver targeted and interest-based advertising to visitors to our website when they visit Facebook or other websites that also use Facebook Custom Audience. 4.6. Mouseflow This website uses Mouseflow – a web analytics tool of Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark – to collect randomly selected individual visits (using anonymised IP addresses only). It creates a log of mouse movements, mouse clicks and keyboard interaction, with the intention of randomly replaying individual visits to this website (so-called session replays) and evaluating them in the form of so-called heatmaps in order to derive potential improvements for this website. The data collected by Mouseflow is not personal, i.e. it cannot be traced back to the individual visitor, and will not be disclosed to third parties. The data collected is stored and processed within the EU. If you do not want to be tracked by Mouseflow, you may object to it for all websites that use Mouseflow, by clicking on the following link: https://mouseflow.de/opt-out/. 5. Right to information and other rights of the data subject You have the right to ask the Pöppelmann Group for confirmation of whether your personal data is processed by them; if this is the case, you have the right to request information about this personal data and all specific details stipulated in Art. 15 of the GDPR. You have the right to demand the immediate correction or completion by the Pöppelmann Group in the event that the personal information stored is incorrect or incomplete (Art. 16 of the GDPR). You have the right to demand that the Pöppelmann Group immediately erases your personal data if one of the reasons specified in Art. 17 of the GDPR applies, e.g. if the data is no longer needed for the purposes pursued (right to erasure). You have the right to demand the restriction of processing by the Pöppelmann Group if one of the requirements stipulated in Art. 18 of the GDPR is applicable, e.g. if the data subject has objected to the processing, the restriction applies for the duration of the review by the data controller. You also have the right to data portability in cases stipulated in Art. 20 of the GDPR. Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you are of the opinion that the processing of your personal data is contrary to the GDPR (Art. 77 of the GDPR). You may exercise this right with a supervisory authority in your place of residence, place of work or the place of the alleged infringement. In Lower Saxony, the responsible supervisory authority is: The Lower Saxony State Commissioner for Data Protection (contact details at: https://www.lfd.niedersachsen.de/wir_ueber_uns/impressum/impressum-56113.html). If data is collected based on Art. 6 (1) (e) (data processing is necessary for the performance of a task carried out in the public interest) or (f) (data processing is necessary for the purposes of the legitimate interests), you have the right to object to the processing at any time based on reasons arising from your particular situation. We shall then no longer process personal data unless there are demonstrably compelling, legitimate reasons for the processing that prevail over the interests, rights and freedoms of the data subject or the processing is required for the purpose of enforcing, exercising or defending legal claims. Please send this objection to: datenschutz@poeppelmann.com. 6. Newsletter Our newsletter is intended to provide you with information about ourselves and our range of products and services. If you want to receive our newsletter, we need a valid e-mail address from you for the double opt-in process as well as information allowing us to verify that you are the owner of the specified e-mail address, and/or that the owner of the e-mail address agrees to receiving the newsletter. The legal basis for sending you the newsletter is the consent you gave us when registering. We will not collect any other data. This data will only be used for sending the newsletter and will not be forwarded to third parties. By registering for our newsletter, we save your IP address for the duration of 7 days and the date of registration. This saved data only serves as evidence in the event that a third party misuses an e-mail address and subscribes to the newsletter without the knowledge of the authorised person. You can withdraw your consent to our saving of this data, your e-mail address, and its use for sending the newsletter at any time. This withdrawal can be made via a link in the newsletter itself or on your profile. 7. WhatsApp Broadcast We use WhatsApp Broadcast provided by the company WhatsApp Inc., 1601 Willow Road Menlo Park, California 94025 in order to inform you of the latest news from the TEKU division. In this case, the encrypted communication is transmitted to the servers of WhatsApp Inc. in the USA. Once you have registered your consent to the service by sending the message "Start" to our telephone number, information from the Pöppelmann TEKU division will be sent directly to your smartphone. Your telephone number will only be used for this purpose and stored for the duration of message receipt. Should you no longer wish to receive the messages, send the message "Stop" (without quotation marks) to the same number. Messages to you will then be paused. If you do not resume the receipt of messages within six months by sending "Start", all data stored in this context will be erased. If you wish to unsubscribe immediately from the service, please send us the message "Alle Daten entfernen" (Erase all data). You will no longer receive any more messages and your personal data will be erased from our system. 8. Right to information, rectification and erasure of personal data You have the right at any time to receive information free of charge about the data we have stored concerning you, its origin and recipients, as well as the purpose of the storage. Furthermore, users have the right to have incorrect data rectified, and to have their personal data blocked and erased, insofar as this does not conflict with any legally required retention obligation. Information on the stored data can be obtained from the Data Protection Officer of the Pöppelmann Group, Mr Peter Suhren (office@first-privacy.com). 9. Data Protection Officer Should you have any questions beyond the details mentioned above about the processing of your personal data, please do not hesitate to contact us. Please contact the Data Protection Officer of the Pöppelmann Group: Mr Peter Suhren, FIRST PRIVACY GmbH, Konsul-Smidt-Straße 88, 28217 Bremen, Germany – E-mail: office@first-privacy.com 10. Data protection information according to Art. 13 and 21 of the GDPR The entity responsible (controller) for data collection and processing is the Pöppelmann Group. Pöppelmann GmbH & Co. KG Kunststoffwerk-Werkzeugbau, Bakumer Str. 73, 49393 Lohne, Germany; fax: +49 (0)44 42 982 112, E-mail: datenschutz@poeppelmann.com Voluntary details In principle, we only collect data that is required by law or necessary for the conclusion or execution of a contract or has been provided to us voluntarily and with consent. Specifying further details is voluntary. There are no negative consequences for the non-provision of this data. Nevertheless, non-provision may in individual cases complicate or delay communication. Data processing for contract fulfilment: We process the collected data according to Art. 6 (1) (b) of the GDPR for the purpose of fulfilling the contract or according to Art. 6 (1) (f) of the GDPR with the interest of processing the contract if you are a business partner or contact person of one of our business partners. This also includes the accompanying customer care. If necessary, personal data is transmitted to the companies involved in the execution of this contract, e.g. payment service providers, credit institutions for payment processing. The data required for contract fulfilment will be erased after the purpose has been achieved and will only be kept available for any further enquiries. The data will not be erased after contract termination if claims are still open and need to be collected. In the event of legal retention periods, the data concerned will be archived for the duration of such a period. Data processing for the protection of legitimate interests: We only process your data for the protection of legitimate interests if there is no corresponding consent and no other legal basis for data processing, and only if the requirements of Art. 6 (1) (f) of the GDPR are met, in other words if our interests or those of a third party in the data processing override your interests or fundamental rights and freedoms. The data will be erased once the legitimate interest ceases to exist, but at least for the duration of any statutory retention requirements. You have the right to object to the data processing. For more information, please see the following point "Rights of the data subject". Data processing based on consent: If you have given your consent to be informed by us about the company's products and services via telephone or e-mail, the corresponding processing is carried out on the basis of Art. 6 (1) (a) of the GDPR. Your consent may be revoked at any time without prejudice to the lawfulness of all previous processing. If consent is revoked, we will discontinue the corresponding data processing. Data processing for direct advertising: As far as is permissible, we process your data for the purpose of direct advertising, in particular for sending our advertising, such as product or event information. Data processing is carried out based on Art. 6 (1) (f) of the GDPR and in the interests of informing you about new products, events and services. Every customer has the right to object to this processing; exercising this right will lead to the termination of processing for the purpose of direct advertising. If data is only stored for direct advertising, it will be erased once an objection is made. Data processing for the fulfilment of legal obligations: If necessary, we process your data in order to comply with any legally required obligations, e.g. vis-à-vis tax authorities. Data processing is carried out in accordance with Art. 6 (1) (c) of the GDPR. The legal obligation arises, among other things, from Sect. 147 of the German General Fiscal Code. The data will be erased upon expiry of the legally applicable period, provided there is no legitimate interest in further storage. Data recipient: We only transfer your data to third parties (e.g. lawyers for the enforcement of outstanding claims) if we have the right to do so under data protection law (e.g. according to the case groups mentioned above). Your data may also be forwarded by us to external providers (such as IT service providers, companies that destroy or archive data, print service providers, cloud providers) which support us in data processing as part of order processing under our strict instruction. In principle, no data processing takes place outside of the EU or EEA. If such data transmission does take place, it is only carried out in countries in respect of which an EU adequacy decision has been issued on the basis of an EU standard contract as per Art. 46 (2) (c) of the GDPR. Upon your request, we will gladly grant you access to the contract or provide you with a copy. We will not sell or otherwise market your personal information to third parties. Data Protection Officer contact details: Mr Peter Suhren, FIRST PRIVACY GmbH, Konsul-Smidt-Straße 88, 28217 Bremen, Germany office@first-privacy.com. Rights of the data subject: Data subjects have the right to information from the data controller regarding the personal data concerning them, as well as the right to have inaccurate information rectified, and erasure thereof if one of the reasons stipulated in Art. 17 of the GDPR exists, e.g. if the data is no longer required for the purposes pursued. There is also the right to restrict processing if one of the requirements specified in Art. 18 of the GDPR is met and, in the case of Art. 20 of the GDPR, the right to data portability. If data collection is based on Art. 6 (1) (e) (data processing is necessary for the performance of a task carried out in the public interest) or (f) (data processing is necessary for the purposes of the legitimate interests), the data subject has the right to object to the processing at any time for reasons arising from their particular situation. We shall then no longer process personal data unless there are demonstrably compelling, legitimate reasons for the processing that prevail over the interests, rights and freedoms of the data subject or the processing is required for the purpose of enforcing, exercising or defending legal claims. Right to lodge a complaint with a supervisory authority: Every data subject has the right to lodge a complaint with a supervisory authority if they believe that the processing of their personal data is contrary to the data protection provisions. In particular, a complaint may be lodged with a supervisory authority in the data subject's place of residence or in the place of the alleged infringement. In Lower Saxony, the applicable supervisory authority is the State Commissioner for Data Protection, Prinzenstr. 5, 30159 Hanover. Note on the right of objection as per Art. 21 of the GDPR: If data is collected based on Art. 6 (1) (f) (data processing is necessary for the purposes of the legitimate interests), you have the right to object to the processing at any time on grounds relating to your particular situation. We shall then no longer process personal data unless there are demonstrably compelling, legitimate reasons for the processing that prevail over the interests, rights and freedoms of the data subject or the processing is required for the purpose of enforcing, exercising or defending legal claims. Please send this objection to: datenschutz@poeppelmann.com. Note on the right to object to direct advertising: We process your data for the purpose of direct advertising. You have the right to object to this processing, which will lead to its termination for direct marketing purposes. Please send this objection to: marketing@poeppelmann.com