close
close
close
Thank you for your interest in the Optima Group. We take the protection of your personal data very seriously.
OPTIMA packaging group GmbH
Alfred-Leikam-Straße 25
74523 Schwäbisch Hall
+49 791 506 – 0
+49 791 506 – 9000
info@optima-packaging.com
Hanspeter Preißler
Alfred-Leikam-Straße 25
74523 Schwäbisch Hall
+49 791 506 – 0
+49 791 506 – 9000
datenschutz@optima-packaging.com
Retention period
Unless a more specific retention period has been specified elsewhere in this Privacy Policy, your personal data will be kept by us until the purpose for which it was processed no longer applies. If you exercise your right to be forgotten or withdraw your consent for your data to be processed, your personal data will be deleted unless we have another legally permissible basis for keeping it (e.g., retention periods required under tax or commercial law). In the latter case, the personal data will be deleted once such grounds no longer apply.
Legal basis for data processing on this website
If you have given your consent for your personal data to be processed, we will process your personal data on the basis of Article 6(1)(a) of the General Data Protection Regulation (GDPR), or Article 9(2)(a) GDPR where special categories of personal data within the meaning of Article 9(1) GDPR are processed. If you have expressly consented for your personal data to be passed on to a third country, the processing of your personal data is also based on Article 49(1)(a) GDPR. If you have consented to the storage of cookies or access to information stored on your device (e.g., via device fingerprinting), your personal data processing is also based on Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG). Consent may be withdrawn at any time. If we require your personal data to carry out a contract or to take steps before entering into a contract with you, we will process your personal data on the basis of Article 6(1)(b) GDPR. We will also process your personal data if this is necessary to comply with a legal obligation. In this case, the legal basis for processing is Article 6(1)(c) GDPR.
We may also process your personal data, if necessary, for our legitimate interests, on the basis of Article 6(1)(f) GDPR. The applicable legal basis in each processing activity is explained in the following sections of this Privacy Policy.
Recipients of personal data
Our business operations entail our working with various third parties. In some cases, we need to disclose your personal data to these third parties.
However, we only disclose your personal data to third parties where this is necessary to carry out a contract, where we are legally required to do so (e.g., providing data to tax authorities), where we have a legitimate interest in doing so in accordance with Article 6(1)(f) GDPR, or where another legal basis permits us to disclose your personal data. If we use data processors (service providers to process personal data on our behalf), we only disclose our customers' personal data under a valid processing agreement. If we process personal data with another company, we enter into a joint processing agreement.
HostingOur website is hosted by Platform.SH SAS, 22 Rue de Palestro, 75002 Paris, France. Your personal data is processed in data centers located within the European Union.
We use these external hosting services on the basis of Article 6(1)(f) GDPR. Our legitimate interest is to provide a safe, secure, and efficient website.
We have entered into an order processing agreement with this provider. Data protection law requires this agreement. It ensures that the provider handles your personal data in accordance with our instructions and complies with the GDPR only.
How we collect personal data on this website1. Log files
When you visit our website, your browser automatically sends certain data to our web server for technical reasons. The following information is recorded in server log files:
Processing is carried out on the basis of Article 6(1)(f) GDPR. Our legitimate interest is to ensure our website remains stable and secure.
The period of time in which the log data is kept depends on the type of log:
This data is not combined with data from other sources.
In some cases, we may keep this data for a longer period for security reasons: for example, to investigate misuse or fraud or protect against cyberattacks. If the data is needed as evidence, it will not be deleted until the matter has been fully resolved.
2. Cookies
Our website uses cookies. Cookies are small text files that your browser stores when you visit a website. They do not contain malware and will not damage your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (persistent cookies).
Session cookies are only stored for the duration of your visit and are automatically deleted when you leave the website. Persistent cookies remain on your device either until you delete them or they are automatically deleted by your browser.
Cookies may come from us (first-party cookies) or other companies (third-party cookies). Third-party cookies allow websites to use services provided by third parties (e.g., embedded videos). Other cookies may be used to analyze user behavior or for advertising purposes.
We use cookies that are necessary for electronic communication or to ensure our website functions properly, for example, those used to display a cookie banner. Unless another legal basis is specified, these cookies are used on the basis of Article 6(1)(f) GDPR. Our legitimate interest is to use necessary cookies to ensure the reliable and efficient operation of our services.
If you have consented to the storage of cookies or use of similar technologies, we will process your personal data solely on the basis of your consent (Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG). You may withdraw your consent at any time.
When visiting our website, you can decide whether to accept non-essential cookies. You can also configure your browser to notify you when cookies are used, allow cookies in certain cases only, block cookies in certain situations or block them completely, or automatically delete cookies when you close your browser. Please note that deactivating cookies may affect the functionality of this website.
You can change your cookie settings at any time by clicking "cookie settings" in the bottom right corner of the website.
Consent management with Usercentrics
This website uses Usercentrics' consent management technology to obtain your consent for storage of certain cookies on your device or the use of certain technologies, and to document your consent in compliance with data protection laws. The provider is Usercentrics GmbH, Sendlinger Strasse 7, 80331 Munich, Germany, Website: https://usercentrics.com/de (hereinafter referred to as "Usercentrics"). When you access our website, the following personal data is shared with Usercentrics:
Usercentrics also stores cookies in your browser so it can identify your browser as well as your consent or withdrawal of consent. The data collected in this way will be kept until you ask us to delete it, delete the Usercentrics cookie yourself, or the reason for storing the data no longer applies. Mandatory legal retention requirements remain unaffected.
Usercentrics is used to obtain the legally required consent for the use of certain technologies. The legal basis for this is Art. 6(1)(c) GDPR.
We have entered into an order processing agreement with this provider. Data protection law requires this agreement. It ensures that the provider handles your personal data in accordance with our instructions and complies with the GDPR only.
3. Contact by e-mail or telephone
If you contact us by e-mail using one of the e-mail addresses provided or by telephone, we will store and process your message and any personal data you provide, including your name, address, contact information, and information contained in your message, so that we can respond to your request.
If your request relates to the performance of a contract or is necessary to take steps before entering into a contract (for example, to prepare a quote), we will process your personal data on the basis of Article 6(1)(b) GDPR. In all other cases, processing is based on our legitimate interest in effectively handling inquiries directed to us (Art. 6(1)(f) of the GDPR).
Your personal data will only be processed by the employees responsible for handling your request. This data will not be shared without your consent. It will be used solely for the purpose of processing the conversation and handling your request.
The data you provide through contact requests will be kept by us until you ask us to delete it or the purpose for storing the data no longer applies (e.g., after your request has been processed). Mandatory legal provisions–in particular, retention periods–remain unaffected.
4. Forms
We used certain online forms from Microsoft Forms, which are provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.
The data collected through Microsoft Forms are stored in the Microsoft Cloud and are processed using our Microsoft 365 environment. Depending on the form, we may process your name, contact details (such as your e-mail address and telephone number), the information you provide in the form, details of your request, the date and time the form was submitted, and technical metadata (for example, to ensure system security).
We process this data to collect, organize, and respond to requests, registrations, surveys, and other messages from visitors to our website, as well as support our internal organization and improve communication.
If your request is related to the performance of a contract or is necessary for preliminary contractual measures (e.g., preparing a quote), the processing is based on Article 6(1)(b) of the GDPR. In all other cases, we process your data on the basis of our legitimate interest in handling request efficiently, securely, and in a user-friendly manner (Art. 6 (1)(f) GDPR).
If consent is requested in a specific case (e.g., for voluntary surveys), processing is based on Article 6(1)(a) of the GDPR.
Your personal data will only be processed by the employees responsible for handling your request. We do not pass it on to third parties.
We keep the data you provide through the contact form until you ask us to delete it or it is no longer needed (e.g., once we have finished handling your request). Mandatory legal provisions–in particular, retention periods–remain unaffected.
Microsoft acts as our data processor for Microsoft Forms in accordance with Article 28 GDPR. We have entered into a data processing agreement (DPA) with Microsoft. This ensures that Microsoft processes personal data exclusively according to our instructions and in compliance with the GDPR.
Microsoft also processes personal data as necessary to operate, secure, and maintain the service.
Personal data is generally processed in data centers located with the European Union.
However, we cannot rule out the possibility that personal data may also be processed or accessed from countries outside the European Union (such as the United States) as part of the technical operation, maintenance, or support of the service.
In such cases, the transfer is carried out on the basis of appropriate safeguards in accordance with Article 46 of the GDPR, in particular through the use of EU Standard Contractual Clauses.
In addition, Microsoft is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA that helps ensure compliance with European data protection standards when personal data is processed in the United States. Every DPF-certified company is obliged to uphold these data protection standards. Further information is available from the provider here: https://www.dataprivacyframework.gov/participant/6474
5. Requests for community and social initiatives
As part of our commitment to social responsibility, we offer local clubs and non-profit organizations near our locations the opportunity to submit funding requests for specific projects or purchases using an online form.
If you use our online form to submit a funding request, we will process the personal data you provide. This includes, in particular, the name and contact details of the club or non-profit organization submitting the request and its designated contact persons, details about the project or planned purchase for which funding is requested, the purpose of the funding, any regional connection, and any other information you choose to provide as part of your request. We will also process the date and time your request is submitted and, if applicable, technical metadata to ensure the secure operation and processing of the form.
We will process your personal data to review and respond to your funding request and organize and document our corporate social responsibility activities. We will also process your data to determine whether your request falls within the scope of our social engagement program – both in terms of location and type of project – and whether it is eligible for support.
If the intention of your request is to draw up a funding agreement with us, we will process your personal data on the basis of Article 6(1)(b) GDPR if this is necessary to take steps before entering into that agreement. In all other cases, the processing is based on Article 6(1)(f) of the GDPR. Our legitimate interest is to ensure funding requests are handled in a structured, transparent, and consistent manner as well as effectively manage our community support program.
You must provide the information marked as required so that we can review and process your request. Please note that only fully completed requests will be considered.
Your personal data will be processed by the employees responsible for handling your request. We will only disclose your information to third parties if it is necessary to process your request, you have given your consent, or we are legally required to do so.
Your personal data will only be kept for as long as necessary to review, process, and document your funding request. If funding is approved or another form of collaboration is established, we will store the personal data required for that purpose for as long as we are legally required to do so. In particular, the statutory retention periods under Section 257 of the German Commercial Code (HGB) and Section 147 of the German Fiscal Code (AO) apply. Depending on the type of document, the applicable retention period may be six, eight, or ten years. As a general rule, the retention period begins at the end of the calendar year in which the relevant document was created or the relevant matter was concluded. Once the applicable retention period has expired, the data will be deleted unless there are other legal or contractual grounds for retaining it.
6. HubSpot CRM
We use HubSpot CRM on this website. The provider is HubSpot Inc., 25 First Street, Cambridge, MA 02141, USA (hereinafter referred to as "HubSpot CRM"). If HubSpot is used in a European branch, processing is also carried out by HubSpot Ireland Limited, 2nd Floor, 30 North Wall Quay, Dublin 1, Ireland.
HubSpot CRM enables us to manage existing and prospective customers and their contact information. By using HubSpot CRM, we can track, organize, and analyze customer interactions across multiple communication channels, including e-mail, social media, and telephone. The personal data collected in this way may be analyzed and used to communicate with customers or for marketing purposes, such as sending newsletters.
With HubSpot CRM, we can also track and analyze our contacts' behavior on our website. We use HubSpot CRM pursuant to Article 6(1)(f) of the GDPR. Our legitimate interest is to manage customer relationships and communications as efficiently as possible. If consent has been obtained, processing your personal data will be carried out solely on the basis of Article 6(1)(a) GDPR and Section 25(1) of the TDDDG, provided your consent covers the storage of cookies or access to information stored on your device (e.g., through device fingerprinting) within the meaning of the TDDDG. Consent may be withdrawn at any time.
For further details, please refer to HubSpot's Privacy Policy at: https://legal.HubSpot.com/privacy-policy
We have entered into an order processing agreement with this provider. Data protection law requires this agreement. It ensures that the provider handles your personal data in accordance with our instructions and complies with the GDPR only.
The transfer of data to the USA is based on the European Commission's Standard Contractual Clauses (SCCs).
The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA that helps ensure compliance with European data protection standards when personal data is processed in the United States. Every DPF-certified company is obliged to uphold these data protection standards. Further information is available from the provider here: https://www.dataprivacyframework.gov/participant/5812.
ApplicationsResponsible parties
If you are interested in becoming an employee at our company, you can apply online. As the parent company of the corporate group, Optima packaging Group GmbH provides a centralized applicant tracking system and performs administrative tasks as part of the application process.
In accordance with Article 26 of the GDPR, both Optima packaging Group GmbH and the specific company within the group you are applying to are jointly responsible for processing your personal data as part of the application process.
The companies involved include, in particular:
The companies involved have entered into a joint controller arrangement in accordance with Article 26 GDPR.
Under this arrangement, Optima packaging Group GmbH is responsible for key aspects of the recruitment process, including providing the applicant tracking system, administering the recruitment process, and carrying out an initial screening of applicants.
The company to which you have applied is responsible in particular for evaluating your application and deciding whether to offer you employment.
Regardless of how responsibilities are allocated internally, you may exercise your data protection rights with any of the companies involved.
Scope of processing
We use a job applicant portal that allows you to apply online. You can also use the applicant portal at any time to view, update, and manage your application and the personal data you have provided.
To use the applicant portal, you must first be registered. To do so, create a user account and a personal applicant profile, and enter the requested information into the designated form fields. If you wish, you may also provide additional information and upload supporting documents.
You may also create an applicant profile if you wish to submit an unsolicited application rather than apply for a specific vacancy.
As part of the recruitment process, we process the following categories of personal data:
The information marked as required is necessary for us to process your application. All other information is optional.
Data sharing
You decide whether your personal data may be stored after your actual application process.
If you give your consent, we will retain your application documents in our talent pool for up to 12 months so that we can consider you for future or similar positions. We will process your personal data on the basis of your consent in accordance with Article 6(1)(a) GDPR. You may withdraw your consent at any time.
If you do not give your consent, your personal data will be deleted once the current recruitment process has ended.
Purpose and legal basis for data processing
We will process your personal data to carry out the application process and determine whether to offer you employment. This includes reviewing and evaluating application documents, selecting suitable candidates, and administering the recruitment process.
We will process your personal data on the basis of Article 6(1)(b) in conjunction with Article 88(1) GDPR and Section 26(1) of the German Federal Data Protection Act (BDSG). We rely on this legal basis only when your personal data are needed to make a hiring decision.
If you voluntarily provide additional information or submit additional documents as part of your application that are not required for deciding whether to offer you employment, the processing of this data is based on your consent in accordance with Article 6(1)(a) of the GDPR. You may withdraw your consent at any time with effect for the future.
If you submit an unsolicited application or expressly consent to continued storage of your application documents after the current recruitment process has ended (e.g., so that we can consider you for future positions), we process your personal data on the basis of your consent in accordance with Article 6(1)(a) GDPR.
The recipient of the data
Your personal data and applicant profile may be accessed within the corporate group by the Human Resources department of OPTIMA packaging Group GmbH, the company advertising the position, and the relevant departments involved in the recruitment process.
If required by law, the works council will also have access to your application documents as part of its co-determination rights under Section 99 of the German Works Constitution Act (BetrVG).
In some cases, we engage external recruitment consultants to assist us in identifying, pre-screening, and evaluating suitable candidates. Personal data will not be disclosed to such recruitment consultants unless this is necessary to carry out the respective application process. The recruitment consultants involved are bound by confidentiality and obliged to comply with data protection regulations.
As a general rule, we do not disclose your personal data to other third parties outside the corporate group, unless you have expressly consented to such disclosure or we are required to do so by law, or by an order of a public authority or court.
We use a candidate management system provided by Abacus Umantis AG, Unterstrasse 11, 9001 St. Gallen, Switzerland, which processes personal data on our behalf in accordance with Article 28 GDPR. This candidate management system is hosted in a data center located in Switzerland.
Based on an adequacy decision by the European Commission, Switzerland is recognized as a third country that provides an adequate level of data protection within the meaning of Article 45 GDPR.
In the course of operating, maintaining, and providing technical support for the applicant tracking system, the service provider may gain access to personal data. We have entered into a data processing agreement with Abacus Umantis AG in accordance with Article 28 GDPR and have implemented appropriate technical and organizational measures to ensure that your personal data is processed only in accordance with the applicable data protection requirements.
Transmission of data to a third country
We do not generally transfer personal data to countries outside the European Union (EU) or the European Economic Area (EEA) (third countries).
In some cases, however, the company's international corporate and matrix structure may require that authorized executives or decision-makers based in a third country be granted access to application documents as part of the application process.
In such cases, we ensure that processing is carried out in strict compliance with the provisions of Articles 44 et seq. of the GDPR. In particular, this is done on the basis of an adequacy decision by the European Commission or by entering into the Standard Contractual Clauses (SCCs) adopted by the European Commission, as well as through additional appropriate technical and organizational measures.
Duration of retention
If your application is successful and results in employment with us or one of our affiliated companies, we will, if necessary, include your application documents in our HR management system and your personnel file for the purpose of administering your employment relationship. This processing is based on Article 6(1)(b) in conjunction with Article 88(1) GDPR and Section 26(1) of the German Federal Data Protection Act (BDSG). In this case, your application documents will not be deleted until your employment with us is terminated and an additional three years have passed since the end of that year.
If your application is unsuccessful, we will retain your personal data and documents in our applicant tracking system for 4 months so that we can respond to any questions regarding your application. If your application is unsuccessful, your data will be deleted, taking into account the time period of four months after the end of the application process as stipulated in the GETA.
If you applied, but we are not currently able to offer you a suitable position, we will save your application materials in a talent pool for an additional 12 months so that we can consider you for new positions, as long as you give us your consent.
If you do not want to do this, please select the following option in the file sharing section: "I want my data to be deleted after the current application procedure is completed." In this case, we will delete your data, taking into account the time period of four months after the end of the application process as stipulated in the GETA.
You can retrieve, edit, refresh, or delete the information you saved in the career portal at any time.
You can remove your personal data and documents at any time using the "Delete my profile" button. Please note that, if you do this, you will be withdrawn from all active and incomplete application processes – even from processes that have been confirmed. If you decide to delete your applicant profile, the applicant portal will anonymize all of your personal information and remove it from your profile and all your applications.
Obligation to provide data
You are not required by law or by contract to provide your personal data. However, it is necessary for us to process your application and decide whether to offer you employment. Unfortunately, you cannot participate in the application process without providing this information.
Profiling
We do not use profiling.
1. Google Tag Manager
We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is a service that enables us to easily integrate and manage tracking, analytics, and other technologies on our website. Google Tag Manager does not create user profiles, store cookies, or perform its own analyses. Its sole purpose is to manage and deploy the tools integrated through it. When the Tag Manager is loaded, your IP address may be processed and sent to Google's parent company in the United States for technical reasons.
We use Google Tag Manager based on Article 6(1)(f) of the GDPR. Our legitimate interest is to ensure the efficient, reliable, and user-friendly integration and management of various tools on our website. If we obtain your consent for this purpose, the processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG, to the extent that the consent covers the storage of cookies or access to information on your device (e.g., via device fingerprinting). You may withdraw your consent at any time.
Google is certified under the EU-US Data Privacy Framework (DPF). This framework between the European Union and the United States is intended to ensure that certified U.S. companies maintain a level of protection that meets European data protection standards. You can find further information at: https://www.dataprivacyframework.gov/participant/5780
2. Google Analytics
We use features of the web analytics service Google Analytics on this website. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables us to analyze the user behavior of our website visitors. This provides us with various types of usage data, including page views, time spent on the website, the operating system used, and the user's location. This information is linked to the respective device; we do not link it to a user ID.
Google Analytics can also track mouse and scrolling activity, as well as clicks, among other things. In addition, Google uses various modeling techniques to supplement data and employs machine learning technologies to analyze the information it collects.
Google Analytics also uses technology that allows them to recognize users in order to analyze their behavior (e.g., cookies or device fingerprinting). The information collected by Google concerning how you use our website is generally transmitted to Google's servers in the United States and stored there.
Google Analytics is used based on your consent in accordance with Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG. You may withdraw your consent at any time.
We rely on the European Commission’s Standard Contractual Clauses (SCCs) for transfers of data to the United States. You can find further details at: https://business.safety.google/adscontrollerterms/sccs/
Google is certified under the EU-US Data Privacy Framework (DPF). This framework between the European Union and the United States is intended to ensure that certified U.S. companies maintain a level of protection that meets European data protection standards. You can find further information at: https://www.dataprivacyframework.gov/participant/5780
IP anonymization
Google Analytics' IP anonymization is active on our website. As a result, your IP address is truncated within the European Union or another country in the European Economic Area before being transferred to the United States. The full IP address is transferred to a Google server in the United States and truncated there in exceptional cases only.
On our behalf, Google analyzes the information collected about your use of our website, prepares reports on website activity, and provides other services related to web and Internet usage. The IP address sent by your browser as part of Google Analytics is not combined with any other data held by Google.
Browser plugin
You can prevent Google from collecting and processing your data by downloading and installing the browser plugin available here:https://tools.google.com/dlpage/gaoptout?hl=de
Further information about how Google Analytics handles user data is available in Google's Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=de
Order processing
We have entered into an order processing agreement with this provider. Data protection law requires this agreement. It ensures that the provider handles your personal data in accordance with our instructions and complies with the GDPR only.
3. Google Ads
We use Google Ads on our website. Google Ads is an online ad program from Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads allows us to display ads on the Google search engine as well as on partner websites when users enter specific search terms (keyword targeting). Targeted ads can also be displayed based on user data available to Google, such as location information or interests (audience targeting). We can then evaluate the performance of our advertising campaigns for statistical purposes by analyzing, for example, which search terms triggered the display of our advertisements and how many ad clicks they generated.
The use of Google Ads is based on your consent in accordance with Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG. You may withdraw your consent at any time.
We base the transfer of personal data to the United States on the European Commission’s Standard Contractual Clauses. You can find further information at: https://policies.google.com/privacy/frameworks and https://business.safety.google/controllerterms/
Google is also certified under the EU-US Data Privacy Framework (DPF). This framework between the European Union and the United States is intended to ensure that certified U.S. companies maintain a level of protection essentially equivalent to that provided under European data protection law. You can find further information from the provider here: https://www.dataprivacyframework.gov/participant/5780.
4. Google Ads Remarketing
We use Google Ads Remarketing on our website. Google Ads Remarketing is a service from Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads Remarketing allows us to categorize visitors who have interacted with our online content into specific target groups in order to later show them interest-based ads on the Google Display Network (remarketing or retargeting).
Furthermore, the audiences created through Google Ads remarketing can be linked to Google's cross-device features. Personalized advertising can then be displayed across your devices. For example, advertising based on your previous usage and browsing behavior on a specific device (e.g., a smartphone) may also be displayed on another of your devices (e.g., a tablet or PC).
If you have a Google account, you can opt out of personalized ads by clicking here:https://adssettings.google.com/anonymous?hl=de
Use of this service is based on your consent in accordance with Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG. You may withdraw your consent at any time.
For more information and Google's Privacy Policy, please visit:
https://policies.google.com/technologies/ads?hl
Google is also certified under the EU-US Data Privacy Framework (DPF). This framework between the European Union and the United States is intended to ensure that certified U.S. companies maintain a level of protection that meets European data protection standards. You can find further information at: https://www.dataprivacyframework.gov/participant/5780
5. Google Ads Conversion Tracking
We use Google Ads Conversion Tracking on our website. Google Ads Conversion Tracking is a service from Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Conversion tracking allows both Google and us to determine whether users have performed certain actions on our website. For example, we can analyze which buttons were clicked and how many times, which products were viewed particularly often, or what actions took place after a user clicked on our ads. This data helps us create conversion statistics and evaluate the effectiveness of our advertising campaigns.
However, we only receive aggregated evaluations that do not disclose any information about individual persons. Google uses cookies or similar technologies to recognize users. We do not receive any personal information that would enable you to be identified directly.
Use of this service is based on your consent in accordance with Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG. You may withdraw your consent at any time.
You can further information about Google Ads Conversion Tracking in Google's Privacy Policy at: https://policies.google.com/privacy?hl
Google is also certified under the EU-US Data Privacy Framework (DPF). This framework between the European Union and the United States is intended to ensure that certified U.S. companies maintain a level of protection that meets European data protection standards. You can find further information at: https://www.dataprivacyframework.gov/participant/5780
6. Microsoft Advertising Remarketing
We use Microsoft Advertising on our website. Microsoft Advertising is an online ad program from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.
Microsoft Advertising allows us to display ads on the Bing search engine as well as on partner websites when users enter specific search terms (keyword targeting). Targeted ads can also be displayed based on user data available to Microsoft, such as location information or interests (audience targeting). We can then evaluate the performance of our campaigns by analyzing, for example, which search terms triggered our ads and how many clicks they generated.
We use Microsoft Advertising's Universal Event Tracking (UET) on our website. Pseudonymized data is collected to track the actions users take on our website after clicking on a Microsoft Advertising ad. In this process, UET collects your IP address (anonymized), device identifiers, information about device and browser settings, Microsoft Click ID (stored in a cookie), time spent on the website, which sections of the website were accessed, the ad that brought you to the website, and the keyword you clicked on.
Use of the service is based on your consent in accordance with Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG. You may withdraw your consent at any time.
The transfer of data to the USA is based on the European Commission's Standard Contractual Clauses (SCCs). You can find further details at: https://learn.microsoft.com/compliance/regulatory/offering-eu-model-clauses.
Microsoft is also certified under the EU-US Data Privacy Framework (DPF). This framework between the European Union and the United States is intended to ensure that certified U.S. companies maintain a level of protection that meets European data protection standards. You can find further information at: https://www.dataprivacyframework.gov/participant/6474
We have entered into a data processing agreement (DPA) with Microsoft. This data processing agreement, which is required under data protection law, ensures that Microsoft processes the personal data of visitors to our website only on our instructions and in compliance with the GDPR.
7. Meta Pixel (formerly Facebook Pixel)
We use Meta Pixel's conversion tracking on our website. (formerly Facebook Pixel). The provider of this service is Meta Platforms Ireland Limited, Merrion Road Dublin 4, Dublin, D04 X2K5, Ireland. However, according to Meta, the collected data is also transferred to the United States and other third countries.
This allows the provider to track the behavior of website visitors after they have been redirected to the provider's website by clicking on a Meta ad. This enables us to evaluate the effectiveness of Meta ads for statistical and market research purposes as well as optimize future advertising activities.
As the operator of this website, we receive the collected data only in anonymized form and are therefore unable to identify individual users. However, the data is stored and processed by Meta, which may link it to the relevant Facebook or Instagram user profile and use it for its own advertising purposes in accordance with the Meta Privacy Policy (https://de-de.facebook.com/about/privacy/ ). This enables Meta to facilitate placing advertisements on Facebook or Instagram pages and other advertising channels. As the website operator, we have no control over this use of the data.
Use of this service is based on your consent pursuant to Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG. Consent may be withdrawn at any time.
Where personal data is collected on our website and sent to Meta using the tool described here, we and Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Dublin, D04 X2K5, Ireland, are jointly responsible for this data processing (Art. 26 GDPR). Our joint responsibility extends only to the collection of the data and its transmission to Meta. Any processing carried out by Meta after the data has been transferred is not part of the joint controllership. The obligations we share have been set forth in a joint processing agreement. You can find a copy of the agreement at: https://www.facebook.com/legal/controller_addendum. Under this agreement, we are responsible for providing privacy notices when using the Meta tool and for ensuring that the tool is implemented on our website in compliance with data protection laws. Meta is responsible for the data security of Meta products. You may exercise your rights as a data subject (e.g., the right of access) in relation to data processed by Facebook or Instagram directly with Meta. If you exercise your data subject rights with us, we are required to forward them to Meta.
The transfer of data to the USA is based on the European Commission's Standard Contractual Clauses (SCCs).
You can find further details at: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.
You can find more information about protecting your privacy in Meta's privacy policy: https://de-de.facebook.com/about/privacy/.
You can also disable the "Custom Audiences" remarketing feature in your ad settings at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do so, you need to be logged into Facebook.
If you do not have a Facebook or Instagram account, you can opt out of Meta's interest-based advertising on the European Interactive Digital Advertising Alliance website:
http://www.youronlinechoices.com/de/praferenzmanagement/.
The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA that helps ensure compliance with European data protection standards when personal data is processed in the United States. Every DPF-certified company is obliged to uphold these data protection standards. You can find further information from the provider here: https://www.dataprivacyframework.gov/participant/4452.
8. TikTok Pixel
We have integrated TikTok Pixel into this website. The provider is TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland (hereinafter referred to as "TikTok").
By using TikTok Pixel, we can show interest-based TikTok ads to visitors who have viewed our offers on our website. We can also use the TikTok Pixel to determine how effective our ads are on TikTok. This enables us to evaluate the effectiveness of TikTok ads for statistical and market research purposes and to optimize future advertising activities. Various types of usage data are processed, including the IP address, page views, time spent on the website, the operating system used, the user's referral source, information about the TikTok ad a user clicked on, and triggered events (including timestamps). This data is consolidated into a user ID and assigned to the website visitor's respective device.
Use of this service is based on your consent pursuant to Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG. Consent may be withdrawn at any time.
Data transfers to third countries are based on the European Commission’s standard contractual clauses. You can find further details at: https://www.tiktok.com/legal/page/eea/privacy-policy/en and https://ads.tiktok.com/i18n/official/policy/controller-to-controller
We have entered into an order processing agreement with this provider. Data protection law requires this agreement. It ensures that the provider handles your personal data in accordance with our instructions and complies with the GDPR only.
9. LinkedIn Insight Tag
This website uses the LinkedIn Insight Tag. The service provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
By using LinkedIn Insight Tag, we receive information about our website visitors. If a website visitor is registered with LinkedIn, we can analyze certain professional profile information about them, including their career level, company size, country, location, industry, and job title, and use these insights to better tailor our website to our target audiences. LinkedIn Insight Tag also enables us to measure whether visitors to our website complete a purchase or perform another action (conversion tracking). Conversion tracking can also occur across devices (e.g., from a PC to a tablet). The LinkedIn Insight Tag also provides a retargeting feature that enables us to display targeted advertising to our website visitors beyond our website. According to LinkedIn, the recipients of these advertisements are not identified.
LinkedIn also collects log files, such as URL, referrer URL, IP address, device and browser characteristics, and time of access. IP addresses are truncated or, if they are used to reach LinkedIn members across devices, hashed (pseudonymized). LinkedIn deletes the direct identifiers of its members after seven days. The remaining pseudonymized data is subsequently deleted within 180 days.
As the operator of this website, we cannot associate the data collected by LinkedIn with specific individuals. LinkedIn stores the personal data collected from website visitors on its servers in the United States and uses them for its own advertising purposes. For further details, please refer to LinkedIn's Privacy Policy at: https://www.linkedin.com/legal/privacy-policy#choices-oblig.
The use of the aforementioned service is based on Article 6(1)(a) of the GDPR and Section 25 of the TDDDG. You may withdraw your consent at any time via the cookie settings on our website.
The transfer of data to the USA is based on the European Commission's Standard Contractual Clauses (SCCs). You can find further details at: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.
The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA that helps ensure compliance with European data protection standards when personal data is processed in the United States. Every DPF-certified company is obliged to uphold these data protection standards. You can find further information from the provider here: https://www.dataprivacyframework.gov/participant/5448.
You can opt out of LinkedIn's analysis of your usage behavior and targeted advertising by clicking here: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
LinkedIn members can also manage how their personal data is used for advertising purposes in their account settings. If you don't want LinkedIn to link data collected on our website to your LinkedIn account, you must log out of your LinkedIn account before visiting our website.
We have entered into an order processing agreement with this provider. Data protection law requires this agreement. It ensures that the provider handles your personal data in accordance with our instructions and complies with the GDPR only.
10. LinkedIn Lead Gen Forms
We use LinkedIn Lead Gen Forms (form for lead generation) on our LinkedIn page. The service provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. You can find further information about privacy at LinkedIn here: https://www.linkedin.com/legal/privacy-policy. Please note that LinkedIn also processes personal data for its own purposes. We have no control over this data processing.
These forms allow prospective customers to request information materials, register for events, or express interest in our products and services. When you complete one of these forms, the information you provide is initially processed by LinkedIn. LinkedIn then shares with us selected information from your LinkedIn profile that you have provided.
Type of data processed
The following categories of personal data, in particular, may be processed for this:
The aim of data processing
We use the data shared with us by LinkedIn to process your request, provide the information or materials you requested, and process and document your registration to receive further information about our products, services, or events.
Data transmitted via LinkedIn is processed on the basis of your consent in accordance with Article 6(1)(a) of the GDPR.
You may withdraw your consent at any time, effective for the future. To do so, simply send us an informal message using the contact information provided in this Privacy Policy or via the unsubscribe link included in the relevant email. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Use of HubSpot
We use HubSpot CRM (see Section 5.5) for lead management and e-mail communications. The provider is: HubSpot, Inc., 25 First Street, Cambridge, MA 02141, USA
The data collected via LinkedIn is automatically transferred to HubSpot and stored there.
We have entered into a data processing agreement with HubSpot. Data protection law requires this agreement. It ensures that the provider handles your personal data in accordance with our instructions and complies with the GDPR only.
The transfer of data to the USA is based on the European Commission's Standard Contractual Clauses (SCCs).
The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA that helps ensure compliance with European data protection standards when personal data is processed in the United States. Every DPF-certified company is obliged to uphold these data protection standards. You can find further information from the provider at: https://www.dataprivacyframework.gov/participant/5812.
Double opt-in procedure
We use a double opt-in process for registrations. After submitting your data, you will receive an e-mail asking you to confirm your registration. During this process, your e-mail address, the date and time of your registration and confirmation, and the IP address used at the time of registration and confirmation are stored. This data is used solely to provide evidence of your consent in accordance with Article 7(1) of the GDPR.
Retention period
We will store the data for as long as necessary to fulfill the purposes mentioned above or until you withdraw your consent.
If you would like to receive regular updates about our products, services, and company news, you can subscribe to our newsletter on our website. We need your e-mail address to send the newsletter. To enable us to address you personally, you may voluntarily provide your first and last name.
If you willingly provide information about your title or job description, we will use this information to segment content by topic and better tailor the newsletter to your interests.
Newsletter subscriptions are subject to a double opt-in process. Once you have registered, you will receive an e-mail asking you to confirm your e-mail address. Your address will be added to the newsletter mailing list only after you have confirmed your subscription.
As part of the subscription process, we also process your IP address, the date and time of your registration, and your confirmation of the double opt-in to provide proof of your consent.
Our newsletters contain web beacons (tracking pixels). When a newsletter is opened, this pixel is automatically retrieved from our e-mail service provider's servers. This involves processing technical information (e.g., browser type, device, IP address, time of access) as well as usage data, particularly whether a newsletter was opened and which links were clicked.
We use this data exclusively for statistical analysis and to optimize the content and deliverability of our newsletters (e.g., analysis of open and click-through rates). Specific individuals are not monitored. You can opt out of this analysis at any time by unsubscribing from the newsletter.
The newsletter is sent, and its performance is measured (e.g., through opens and clicks), on the basis of your consent in accordance with Article 6(1)(a) GDPR. Since information is stored on or retrieved from your device (e.g., through tracking pixels), this is carried out in accordance with Section 25(1) of the TDDDG.
We log your registration details (time, IP address, confirmation) based on our legitimate interest in being able to provide proof that consent has been given, in accordance with Article 6(1)(f) of the GDPR.
We use the services of HubSpot Inc., with its European branch located at HubSpot Ireland Limited, 2nd Floor, 30 North Wall Quay, Dublin 1, Ireland, to send and analyze our newsletters.
We have entered into an order processing agreement with this provider. Data protection law requires this agreement. It ensures that the provider handles your personal data in accordance with our instructions and complies with the GDPR only.
HubSpot processes personal data partly on servers located in the USA. The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA that helps ensure compliance with European data protection standards when personal data is processed in the United States. Every DPF-certified company is obliged to uphold these data protection standards. You can find further information from the provider at: https://www.dataprivacyframework.gov/participant/5812.
If the DPF does not apply, data transfer is based on standard contractual clauses pursuant to Article 46 of the GDPR, with additional safeguards.
We process your data as long as your newsletter subscription is active. If you unsubscribe or revoke your consent, your data will be deleted from the newsletter distribution list within a few days, unless we are required by law to retain it.
You may withdraw your consent at any time for future processing by using the unsubscribe link included in every newsletter e-mail or by contacting us directly. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Plugins and tools1. YouTube with enhanced privacy protection
This website embeds video content from YouTube. YouTube is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”).
When you visit a page that includes a YouTube video, a connection is established to YouTube's servers. As part of this process, YouTube receives information on which of our pages you visited. If you are logged into your YouTube account, YouTube can link your browsing activity to your personal profile. You can prevent this by logging out of your YouTube account before visiting our website.
We use YouTube in enhanced privacy mode. According to YouTube, videos played in this mode are not used to personalize your browsing experience on YouTube. Advertisements displayed are not personalized either. No cookies are set in enhanced privacy mode. Instead, so-called local storage elements may be stored in the user's browser. These serve functions similar to cookies so the user can be recognized. You can find further information about enhanced privacy mode at: https://support.google.com/youtube/answer/171780.
Playing a YouTube video may trigger additional data processing operations over which we have no control. As part of the integration of YouTube, additional content may also be loaded from Google's servers, such as scripts or fonts (Google Fonts) required to display the YouTube player. This may also result in the processing of personal data, in particular your IP address.
We use YouTube to present our online content in an appealing way, which constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR. If consent is requested, processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG, to the extent that the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting). Consent that has been given may be withdrawn at any time with future effect.
You can find further information about privacy on YouTube in Google's Privacy Policy here: https://policies.google.com/privacy?.
Google is also certified under the EU-US Data Privacy Framework (DPF). This framework between the European Union and the United States is intended to ensure that certified U.S. companies maintain a level of protection that meets European data protection standards. You can find further information at: https://www.dataprivacyframework.gov/participant/5780.
2. Google Maps
This website uses Google Maps. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. This service allows us to display interactive maps directly on our website, making it easier for users to find the locations we mention.
Google Maps requires your IP address to function. This information is generally transferred to a Google server in the United States and stored there. We have no control over this data transfer.
When using Google Maps, Google may also use Google Fonts to ensure consistent font rendering. This involves your browser loading the necessary web fonts into its cache in order to display text and fonts correctly.
We use Google Maps to present our online content in an appealing way and make it easier to find the locations listed on our website. This represents a legitimate interest as defined in Article 6(1)(f) of the GDPR.
If we obtain your consent, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG, provided your consent covers the storage of cookies or access to information stored on your device (e.g., device fingerprinting). Consent that has been given may be withdrawn at any time with future effect.
The transfer of data to the USA is based on the European Commission's Standard Contractual Clauses (SCCs). You can find further details at: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.
Further information about how user data is handled can be found in Google's Privacy Policy: https://policies.google.com/privacy?.
Google is also certified under the EU-US Data Privacy Framework (DPF). This framework between the European Union and the United States is intended to ensure that certified U.S. companies maintain a level of protection that meets European data protection standards. You can find further information at: https://www.dataprivacyframework.gov/participant/5780.
3. Friendly Captcha
We use Friendly Captcha (hereinafter referred to as "Friendly Captcha") on our website. The provider is Friendly Captcha GmbH, Am Anger 3-5, 82237 Woerthsee, Germany.
Friendly Captcha is used to verify whether data entered on this website (e.g., in a contact form) is being entered by a human or by an automated program. Friendly Captcha analyzes the website visitor's behavior based on various criteria to do so. To perform this analysis, Friendly Captcha processes various types of information, such as your anonymized IP address, the referrer, and the time of your visit. You can find further information at:https://friendlycaptcha.com/legal/privacy-end-users/.
Data is stored and analyzed on the basis of Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in protecting its web content from abusive automated surveillance and spam. If consent has been obtained, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG, given that the consent covers the storage of cookies or access to information stored on the user's device (e.g., device fingerprinting) as defined by the TDDDG. Consent may be withdrawn at any time.
We have entered into an order processing agreement with this provider. Data protection law requires this agreement. It ensures that the provider handles your personal data in accordance with our instructions and complies with the GDPR only.
4. SalesViewer
We use the service SalesViewer on our website. The provider is SalesViewer GmbH, Universitätsstrasse 60, 44789 Bochum, Germany (hereinafter referred to as "SalesViewer").
SalesViewer enables us to determine if our website is visited by companies. For this purpose, the website visitor's IP address is compared with the company IP addresses stored in SalesViewer's corporate database. If a visit can be attributed to a company, information about the visit and user behavior is collected.
Visits from private persons are not included in the analysis: IP addresses that cannot be explicitly assigned to a company are immediately discarded and not stored.
To further protect your privacy, SalesViewer provides an opt-out mechanism. You can find further information at: https://www.salesviewer.com/de/opt-out
Processing is carried out on the basis of Article 6(1)(f) GDPR. Our legitimate interest is to analyze visits to our website by companies in order to better tailor our offerings and content.
If we request such consent, processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG. Consent that has been given may be withdrawn at any time with future effect.
Further information about data processing carried out by SalesViewer is available in the provider's Privacy Policy at: https://www.salesviewer.com/en/platform/data-protection/.
We have entered into an order processing agreement with this provider. Data protection law requires this agreement. It ensures that the provider handles your personal data in accordance with our instructions and complies with the GDPR only.
5. Leadinfo
We use the service Leadinfo on our website. The provider is team.blue GmbH, Bunsenstrasse 19, 40215 Dusseldorf, Germany (hereinafter referred to as "Leadinfo").
Leadinfo enables us to recognize if our website is visited by companies. For this purpose, the website visitor's IP address is compared with the company IP addresses stored in Leadinfo's corporate database. If a visit can be attributed to a company, information about the visit and user behavior is collected.
IP addresses that cannot be explicitly assigned to a company are immediately discarded. Visits from private persons are not included in the analysis.
Processing is carried out on the basis of Article 6(1)(f) GDPR. Our legitimate interest is to analyze visits to our website by companies, as well as their user behavior, in order to better tailor our offerings and content.
If we obtain your consent, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG, provided your consent covers the storage of cookies or access to information stored on your device (e.g., device fingerprinting). Consent that has been given may be withdrawn at any time with future effect.
Further information about data processing carried out by Leadinfo is available in the provider's Privacy Policy at: https://www.leadinfo.com/en/legal/privacy/?.
We have entered into an order processing agreement with this provider. Data protection law requires this agreement. It ensures that the provider handles your personal data in accordance with our instructions and complies with the GDPR only.
Social media buttons and links on the websiteOur website contains buttons with hyperlinks to the social media platforms Instagram, Facebook, YouTube, TikTok, XING, and LinkedIn, where we maintain publicly accessible profiles. You can identify the respective providers by their logos. We use these platforms to communicate with users and inform them about our services and career opportunities.
When you visit our site, no personal data is initially transmitted to these social media platforms. Data will not be transmitted to these sites unless you click the buttons. In this case, the respective provider receives information that you have accessed the relevant page of our website (e.g., the date and time of your visit, your IP address, and the page accessed).
If you are logged in to the social media provider, the data collected through our website may be linked directly to your account with that provider. We recommend that you log out regularly after using a social network, and especially before clicking the button, as this will help prevent the plug-in provider from linking your activity to your profile.
Please note that you use these platforms and their features at your own risk. This applies in particular to using the interactive features these platforms provide, such as sharing, liking, or commenting.
The provider of the respective services or content may process your data for its own additional purposes. However, we have no control over the data collected by third parties and how it is processed by them, so we cannot make any binding statements about the purpose and scope of the processing of your data. For further information about the purpose and scope of the collection and processing of your data, please refer to the privacy notices of the respective providers responsible for data processing. You can also find additional information here regarding data processing and your right to object. For detailed information about the respective processing activities and your options to object (opt out), please refer to the information provided by the respective providers via the links below.
We implement appropriate technical, organizational, and contractual measures to ensure the security of data processing in accordance with the state of the art. These measures ensure compliance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR), and protect the personal data we process against loss, destruction, alteration, unauthorized access, and any other form of misuse.
Such security measures include, in particular, the encrypted transmission of data between your browser and our servers. Please note that SSL/TLS encryption is only active during data transmission over the Internet if the padlock icon is displayed in your browser’s address bar and the web address begins with “https://”.
This SSL (Secure Sockets Layer) encryption protects the data you transmit from unauthorized access by third parties. In the rare event that an encrypted connection is unavailable, you may choose not to transmit certain data over the Internet.
Your rightsWhen we process your personal data, you have the following rights:
Right to information (Art. 15 GDPR): You have the right to request access to the personal data about you that we have processed. This right also includes the right to receive a copy of the respective data.
Right to rectification (Art. 16 GDPR). You have the right to request that inaccurate personal data concerning you be corrected without undue delay. Taking into account the purposes of the processing, you have the right to request that incomplete personal data concerning you be completed.
Right to deletion (Art. 17 GDPR). You have the right to request that your personal data be deleted immediately if any of the reasons listed there apply.
Right to restriction of processing (Art. 18 GDPR). You have the right to request that the processing of your personal data be restricted, provided one of the reasons listed there applies.
Right to data portability (Art. 20 GDPR). You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format. Under certain circumstances, you also have the right to transmit this data to another controller without hindrance.
Right to object (Art. 21 GDPR). You have the right to object at any time to the processing of your data on grounds relating to your particular situation, provided that the data processing is based on a balancing of interests in accordance with Article 6(1)(f) of the GDPR. This also applies to profiling based on this provision within the meaning of Art. 4 No. 4 of the GDPR. If you object, we will no longer process your personal data unless we demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
Withdrawal of Consent (Art. 7(3) GDPR). In accordance with Article 7(3) of the GDPR, you generally have the right to withdraw your consent to personal data processing at any time.
With regard to the right of access and the right to deletion, the restrictions set forth in Sections 34 and 35 of the Federal Data Protection Act (BDSG) apply. Please direct any requests regarding the exercise of rights to datenschutz@optima-packaging.com or to the mailing address listed in Section 1.
Right to file a complaint (Art. 77 GDPR). You have the right to file a complaint with a data protection supervisory authority (Art. 77 of the GDPR). The regulatory authority responsible for our facility in Schwäbisch Hall is:
The State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg, P.O. Box 10 29 32, 70025 Stuttgart, Tel. 0711/61 55 41 – 0, www.baden-wuerttemberg.datenschutz.de. You can also contact the supervisory authority in your country of habitual residence.
Changes to the privacy policyWe reserve the right to amend this Privacy Policy to reflect changes in the legal landscape or changes to the service and data processing. However, this only applies to statements about data protection. If user consent is required, or if provisions of this Privacy Policy form part of the contractual relationship with users, any changes will be made only with the users' consent.
Please regularly check the content in the Privacy Policy.
Privacy Policy last updated: 01/21/2026
Privacy information regarding our social media accountsThis Privacy Policy applies to the following social media accounts:
Data processing by social networks
We have publicly accessible profiles on social media platforms. You can find a list of the specific social media platforms we use below.
Social media platforms such as Facebook and YouTube can generally analyze your user behavior comprehensively when you visit their websites or a website that includes social media content (e.g., like buttons or advertising banners). When you visit our social media pages, various personal data processing may take place. This includes:
If you are logged into your social media account when you visit one of our social media pages, the social media platform may record that visit as activity on your account. However, your personal data may still be collected even if you are not logged into your account or do not have an account on the respective social media platform. For example, your data may be collected by cookies stored on your device or by recording your IP address.
Social media platforms may use this information to create user profiles that reflect your preferences and interests. As a result, you may be shown personalized advertising both on and off the social media platform. If you have an account with the relevant social network, you may see interest-based advertising across all devices on which you are or have been logged in.
Please also note that we are unable to track all data processing activities carried out on social media platforms. Depending on the provider, the operators of the social media platforms may also carry out additional data processing activities. For further information, please refer to the Terms of Use and Privacy Policies of the respective social media platforms.
Legal basis
We maintain our social media presence to ensure a broad online presence. This represents a legitimate interest based on Article 6(1)(f) of the GDPR. The analytics activities initiated by the social networks may be based on different legal bases, which are specified by the respective social network operators (e.g., consent based on Article 6(1)(a) GDPR).
Data controller and exercising your rights
When you visit one of our social media pages (e.g., Facebook), we and the operator of the social media platform are jointly responsible for the data processing activities triggered by your visit. In general, you may exercise your rights (right of access, rectification, erasure, restriction of processing, data portability, and the right to lodge a complaint) both with us and with the operator of the respective social media platform (e.g., Facebook).
Despite our shared responsibility with the social media platform operators, please note that we do not have full control over the data processing activities of these platforms. Our options depend largely on the corporate policy of the respective provider.
Retention period
The data we collect directly through our social media presence will be deleted from our systems as soon as you request that we delete it, revoke your consent to its storage, or the purpose for storing the data no longer applies. Stored cookies remain on your device until you delete them. Mandatory legal requirements, in particular statutory retention periods, remain unaffected.
We have no control over how long your data is stored by social media platform operators for their own purposes. For more details, please contact the social media platform operators directly (e.g., in their privacy policies; see below).
Your rights
You have the right at any time to obtain, free of charge, information about the personal data we store about you, including their origin, recipients, and purpose of the processing. You also have the right to object, the right to data portability, and the right to lodge a complaint with the competent supervisory authority. In addition, you may request the rectification or erasure of your personal data and, in certain circumstances, the restriction of processing.
Social networks in detail
1. Facebook
We have a page on Facebook. This service is provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (hereinafter “Meta”). According to Meta, the data collected is also transferred to the United States and other third countries. We have entered into a joint processing agreement (Controller Addendum) with Meta. This agreement sets out which data processing activities are our responsibility and which are Meta's responsibility when you visit our Facebook page. You can find this agreement here: https://www.facebook.com/legal/terms/page_controller_addendum.
You can adjust your ad settings yourself in your user account. Click here and log into your account: https://www.facebook.com/settings?tab=ads.
The transfer of data to the USA is based on the European Commission's Standard Contractual Clauses (SCCs).
You can find further details at: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.
For further details, please refer to Facebook's Privacy Policy at: https://www.facebook.com/about/privacy/.
The company is certified under the EU-US Data Privacy Framework (DPF). The
DPF is a framework agreement between the European Union and the United States designed to ensure compliance with European data protection standards for data processing in the United States. Every DPF-certified company is obliged to uphold these data protection standards. Further information is available from the provider here: https://www.dataprivacyframework.gov/participant/4452
2. Instagram
We have a profile on Instagram. The provider of this service is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
The transfer of data to the USA is based on the European Commission's Standard Contractual Clauses (SCCs).
You can find more information at: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.
For information on how Instagram processes your personal data, please refer to the company's Privacy Policy: https://privacycenter.instagram.com/policy .
The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and USA designed to ensure compliance with
European data protection standards for data processing in the United States. Every DPF-certified company is obliged to uphold these data protection standards. Further information is available from the provider here: https://www.dataprivacyframework.gov/participant/4452.
3. LinkedIn
We have a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.
If you would like to deactivate the LinkedIn adversiting cookies, please do so here: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
The transfer of data to the USA is based on the European Commission's Standard Contractual Clauses (SCCs). You can find more information at: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.
For details on how LinkedIn processes your personal data, please refer to LinkedIn's Privacy Policy: https://www.linkedin.com/legal/privacy-policy.
The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA that helps ensure compliance with European data protection standards when personal data is processed in the United States. Every DPF-certified company is obliged to uphold these data protection standards. Further information is available from the provider here: https://www.dataprivacyframework.gov/participant/5448.
4. XING
We have a profile on XING. The provider is New Work SE, Am Strandkai 1, 20457 Hamburg, Germany. For details on how XING processes your personal data, please refer to XING's Privacy Policy: https://privacy.xing.com/en/privacy-policy.
5. YouTube
We have a profile on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For details on how YouTube processes your personal data, please refer to YouTube's Privacy Policy: https://policies.google.com/privacy?hl=en.
The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA that helps ensure compliance with European data protection standards when personal data is processed in the United States. Every DPF-certified company is obliged to uphold these data protection standards. Further information is available from the provider here: https://www.dataprivacyframework.gov/participant/5780.
6. TikTok
We have a profile on TikTok. The provider is TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. For details on how TikTok processes your personal data, please refer to TikTok's Privacy Policy: https://www.tiktok.com/legal/page/eea/privacy-policy/en.
Transfers of personal data to countries without an adequate level of data protection are based on the European Commission's Standard Contractual Clauses. You can find more information at: https://www.tiktok.com/legal/privacy-policy?lang=en.
