Data Privacy Statement

Thank you for visiting our website and for your interest in our company and our products.
The German data protection declaration is legally valid for us. Any further translations are translated with the best of our knowledge.

We take the protection of your private data seriously and want you to feel safe when visiting our website. Below we inform you how we collect personal data when users visit our website. In compliance with applicable data protection regulations, we inform you which personal data we collect

• when you visit our website
• when you submit an online application
• when you register for our newsletter
• in forms

as well as the purposes for which we use this data and how we use it, in order to optimise our services to you.

A. GENERAL

1. Controller / data protection officer
(1) The controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is
August Faller GmbH & Co. KG
Hauptverwaltung
Freiburger Strasse 25
79183 Waldkirch, Germany

Representative of the person responsible: Chief Executive Officer (CEO)-  Dagmar Schmidt

hereinafter referred to as “Faller”, “we” or “us”. Further information about the provider can be found in our legal notice (Impressum).

(2) You can contact the company data protection officer by writing to: datenschutz@faller-packaging.com or via our postal address adding “Datenschutzbeauftragter” (data protection officer).

2. Types of data processed, categories of data subjects
2.1 Type of data processed

• Basic data (e.g. customer master data, such as names and addresses)
• Contact data (e.g. e-mail addresses, telephone numbers)
• Usage data (e.g. websites visited, interest in content, access times)
• Metadata /communication data (e.g. device information, IP addresses), see Section 4.

2.2 Categories of data subjects
Visitors and users of the website and online offers
(In the following, data subjects are collectively referred to as “users”)

3. Purpose of processing
We use your personal data

• To provide the website and the online offer, its features and its content
• To create and manage your personal customer account
• To identify you as a user
• To answer contact requests and communicate with users
• For security measures
• For web analysis and range measurement
• For direct marketing purposes, e.g. in the form of an e-mail newsletter or postal advertising.

4. Provision of the website and log files
(1) If you only use the website for information purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser automatically transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and ensure stability and security (the legal basis for this is provided by Art. 6 (1) sentence 1 letter f) GDPR):

• IP address
• Date and time of the request
• Time zone difference relative to Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status/HTTP status code
• Volume of data transferred
• Website from which the request originates
• Browser
• Operating system and interface
• Language and version of the browser software

(2) Users’ IP addresses are deleted or anonymised after the session has ended. If anonymised, IP addresses are changed in such a way that individual details about personal or factual circumstances cannot be associated with a specific or identifiable natural person, or can only be so associated with a disproportionate investment of time, cost and labour.

5. Cookies
(1) In addition to the log files referred to above, cookies are stored on your computer when you use our website. Cookies are small text files stored on the hard drive of your computer by your browser, which allow certain information to be passed to the location that sets the cookie (in this case us). Cookies cannot execute programs or transmit viruses to your computer. They serve to make the website more user-friendly and effective overall.

(2) Use of cookies:
a) This website uses the following types of cookies, whose scope and functions are explained below:

• Session cookies (see b)
• Persistent cookies (see c).

b) Session cookies store a “session ID”, whereby various requests from your browser can be assigned to the shared session. Session cookies are deleted when you log out or close your browser. If you restart your browser and go back to the site, the site will not recognise you. You will need to log in again (if a login is required) or you will need to reset templates and preferences if the site offers these features. A new session cookie will then be generated that stores your information and remains active until you leave the site and close your browser.

c) Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete the cookies in your browser’s security settings at any time.

(3) For what purposes do we use cookies?
We use cookies to personalise content and ads, provide social media features and analyse traffic to our website. We also share information about your use of our website with our social media partners, advertisers and analysts. Our partners may combine this information with other information that you have provided to them or that they have collected as part of your use of the services. We use analysis cookies only with your consent. We request your express consent the first time you visit.

Overview:

a) Technically necessary cookies
Technically necessary cookies allow use of our website by enabling basic functions such as page navigation and access to secure areas of the website. Visits to our website will not work properly without these cookies.
Storage duration: Session cookies are deleted when you close your browser.

b) Performance (e.g. user’s browser) and preferences
When you visit our website, cookies are used to recognise the browser, for example, and thereby improve performance (e.g. to load content faster). When you visit our website, the country and language identified by the site or chosen by you are stored in cookies to save you having to re-select them during subsequent visits. A check is made beforehand to see whether your browser supports cookies and this information is stored in another cookie. You are then shown country and language-related, localised contact information, which will also be saved. The legal basis for this is provided by Art. 6 (1) sentence 1 letter f) GDPR.
Storage duration: Session cookies are deleted when you close your browser.

c) Analysis cookies (statistics)
We use third-party analytics cookies to understand how visitors use our site. This helps us to improve the quality and content of our site. The aggregated statistical information includes data such as the total number of visitors. For example, we learn how often and in which order individual pages have been accessed and how much time visitors spend on average looking at our pages. We also find out whether users visited our website at an earlier point in time. The legal basis for this is your consent pursuant to Art. 6 (1) sentence 1 letter a) GDPR. For further information see Section 10 (Web analytics services).
Storage duration: Persistent cookies are kept, but automatically deleted after 2 years if the website was not visited again.

d) Advertising cookies (marketing)
These allow us to assess and optimise our marketing activities. The legal basis for this is provided by Art. 6 (1) sentence 1 letter f) GDPR.
Storage duration: Persistent cookies are kept, but automatically deleted after 2 years if the website was not visited again.

(4) Control over cookies
You can configure your browser settings the way you want and, for example, control or reject acceptance of third-party cookies or all cookies according to your preferences. You can delete existing cookies via the browser settings. We would point out that in that case you might not be able to use all the features of this website.

This US company is certified under the EU-US Data Privacy Framework. There is hereby an adequacy decision pursuant to Art. 45 GDPR, so that a transfer of personal data may also take place without further guarantees or additional measures.

6. Product and service information
(1) In the case of marketing, i.e. electronic transmission of product and service information via e-mail, invitations to trade fairs and events or white papers (hereinafter “product and service information”), we ask interested parties for their express approval of and consent to this Data Protection Statement.

(2) We use the “double opt-in” procedure. This means that, after you have registered, we will send an e-mail to the e-mail address you provided when you registered, in which we ask you to confirm that you wish to receive product and service information by e-mail. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. We also store your addresses and dates of registration and confirmation. The purpose of the procedure is to have proof of your registration and, if necessary, clarify any possible misuse of your personal data.

(3) Following your confirmation, we will store your e-mail address for the purpose of sending you product and service information. The legal basis is provided by Art. 6 (1) sentence 1 letter a) GDPR.

(4) You can revoke and cancel your consent to receive product and service information at any time. To cancel, click on the link provided in every e-mail or send us a message using the contact details provided in the legal notice (Impressum).

7. Contact form and e-mail contact
(1) Our website contains various contact forms which can be used to contact us electronically. First, there is a general contact form which you can access by selecting “Contact”.  You can also use your own contact form to send us queries as part of an online application (see Section 9). When a user chooses this option, the data entered in the input screen will be transmitted to us and stored. The corresponding data immediately becomes visible in the input screen.
The following data will also be stored at the time of sending:

• The user’s IP address
• Date and time the form was sent

(2) Your consent to the processing of the data will always be requested, with reference to this Data Protection Statement. Alternatively, you can contact us via the e-mail addresses provided. In this case, the user’s personal data transmitted with the e-mail will be stored. The data will be used exclusively for the purposes of dealing with the inquiry.

(3) The legal basis for processing the data is provided by Art. 6 (1) sentence 1 letter a) GDPR, where the user has given their consent. The legal basis for processing data transmitted in the course of sending an e-mail is provided by Art. 6 (1) sentence 1 letter f) GDPR. If the purpose of the e-mail contact is to conclude a contract, the additional legal basis for processing is provided by Art. 6 (1) letter b) GDPR. If the contact request or e-mail contact serves to initiate an employment relationship, particularly as part of an online application, the legal basis is provided by Section 26 of the German Federal Data Protection Act (BDSG).

(4) We will process personal data from the input screen solely for the purposes of establishing contact. Where contact is established via e-mail, this also constitutes the necessary legitimate interest in the processing of the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

(5) The data will be deleted as soon as they are no longer needed to achieve the purpose for which they were collected. For personal data obtained from the input screen of the contact form and personal data sent by e-mail, this takes place when the respective conversation with the user has ended. The conversation ends when it is apparent from the circumstances that the matter in question has been conclusively resolved. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

8. Automated decision-making
In establishing and maintaining business relations, we generally refrain from fully automated decision-making pursuant to Art. 22 GDPR.

9. Profiling
In order to be able to provide you with targeted information and advice on products, we or service providers acting on our behalf may use web analysis tools, especially tracking technology. These allow communications and marketing to be tailored according to need. In this regard, we refer you to Section 12 Web analytics services.

B. DATA PROCESSING BY THIRD PARTIES

10. Web analytics services
Faller uses Google Analytics 4 and Pardot. The legal basis for this is the consent given to us pursuant to Art. 6 (1) sentence 1 letter a) GDPR. We request your express consent the first time you visit.

a) Google Analytics 4

On our websites, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited (https://www.google.de/intl/de/about/) (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter "Google"). In this context, pseudonymised usage profiles are created and cookies (see point "Cookies") are used. The information generated by the cookie about your use of this website, such as

• Browser type/version,
• operating system used,
• Referrer URL (the previously visited page),
• host name of the accessing computer (IP address),
• time of the server request,
• are transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services associated with the use of the website and the Internet for the purposes of market research and the design of these Internet pages in line with requirements. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymised so that an allocation is not possible (IP masking).

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

These processing operations will only be carried out if you have given your express consent in accordance with Art. 6 (1) lit. a DS-GVO.

Furthermore, you can prevent the collection of the data generated by the cookie and related to your use of the website (incl. your IP address) as well as the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).

As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent the collection by Google Analytics by clicking on the following link: Deactivate Google Analytics. An opt-out cookie will be set, which prevents the future collection of your data when visiting this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.

Further information on data protection in connection with Google Analytics can be found, for example, in the Google Analytics help (https://support.google.com/analytics/answer/6004245?hl=de).

(7) This website uses Google Tag Manager as part of Google Analytics 4. Tags are small pieces of code on our website that are used, among other things, to measure traffic and visitor behaviour, determine the impact of online advertising and social channels, carry out remarketing and targeting, and test and optimise the website. Google Tag Manager is a solution that allows Busch to manage website tags via a single interface. The Tag Manager tool itself (which implements the tags) is a cookie-free domain. The tool triggers other tags that may themselves collect data. Google Tag Manager does not access these data. If deactivation has been carried out at the domain or cookie level, it will persist for all tracking tags implemented with Google Tag Manager.

(8) For further information about Google Tag Manager, visit www.google.de/tagmanager/use-policy.html

b) Pardot

(1) We use the Pardot Marketing Automation System (“Pardot MAS”) of Pardot LLC, 950 E. Paces Ferry Rd. Suite 3300 Atlanta, GA 30326, USA (“Pardot”) on our websites. Pardot is a special software for recording and evaluating the use of a website by website visitors. Insofar as Pardot LLC processes personal data, the processing is carried out exclusively on our behalf and in accordance with our instructions. We have concluded a separate agreement with Pardot LLC to ensure that Pardot LLC complies with the EU Data Protection Directive.

(2) When you visit our website, Pardot MAS records your click path and creates an individual user profile using a pseudonym. Cookies are used for this purpose, which enable your browser to be recognised. In agreeing to the use of cookies the first time you use our website, by confirming the cookie acceptance banner or by continuing to use our website, you also agree to the use of Pardot cookies.

(3) You can revoke your consent at any time with effect for the future. To do so, please contact us using the contact details mentioned in Section 1 of this Data Protection Statement. You can also disable the creation of pseudonymised user profiles at any time by configuring your Internet browser so that cookies from the domain “pardot.com” are not accepted. However, this may limit the functionality of our website and make it less user-friendly.
 

c) Content Delivery Network
A Content Delivery Network (CDN) is a network of regionally distributed servers connected via the Internet. Through this network, content, especially very large files, can be delivered quickly even during large load peaks. jQuery creates a copy of our website on their servers. So our website can be delivered as fast as possible. That is, the data transmission to your browser is shortened by a CDN.

(1) CloudFlare.:
Provider is CloudFlare, Inc. 665 3rd St. #200, San Francisco, CA 94107, USA.
CloudFlare offers a globally distributed content delivery network with DNS. Technically, the transfer of information between your browser and our website is routed through CloudFlare's network. CloudFlare is thus able to analyze the data traffic between users and our websites, for example, to detect and prevent attacks on our services. In addition, CloudFlare may store cookies on your computer for optimization and analysis.
We have concluded a corresponding agreement with Cloudflare on the basis of the DS-GVO for order processing or according to EU standard contractual clauses. Cloudflare collects statistical data about visits to this website.
The transfer of your personal data to the USA is based on the standard contractual clauses.
For more information about CloudFlare, please visit: www.cloudflare.com/privacypolicy/.

(2) jQuery CDN:
jQuery or StackPath has servers distributed in different countries and thus your data may be stored in America as well as in the European Economic Area. StackPath retains personal data processed on our behalf for as long as necessary to provide services offered, as necessary to comply with legal obligations, resolve disputes, and enforce agreements.
More information about StackPath's privacy practices can be found at www.stackpath.com/legal/privacy-statement and about jQuery at openjsf.org/wp-content/uploads/sites/84/2019/11/OpenJS-Foundation-Privacy-Policy-2019-11-15.pdf.

In order to deliver our website or all of our individual subpages (web pages) to you quickly and smoothly on different devices, we use services from jQuery CDN of the company jQuery Foundation. jQuery is distributed via the Content Delivery Network (CDN) of the American software company StackPath (LCC 2012 McKinney Ave. Suite 1100, Dallas, TX 75201, USA). Through this service, personal data of you is stored, managed and processed. In this Privacy Policy, we go into more detail about what data is processed from you through the use of jQuery CDN.

(3) BootstrapCDN:
In order to deliver all of our individual web pages (sub-pages of our website) to you quickly and securely on all devices, we use the Content Delivery Network (CDN) BootstrapCDN, an open source service provided by jsdelivr.com of the Polish software company ProspectOne, Królewska 65A/1, 30-081, Kraków, Poland. A Content Delivery Network (CDN) is a network of regionally distributed servers connected via the Internet. Through this network, content, especially very large files, can be delivered quickly even during large peak loads.
BootstrapCDN works in such a way that so-called JavaScript libraries are delivered to your browser. If your browser now downloads a file from BootstrapCDN, your IP address is transmitted during the connection to the Bootstrap CDN server. Thus, personal data may also be sent and stored.

(4) If you have consented to Content Delivery Network systems being used, the legal basis for the processing of personal data is Art. 6 (1) lit. a DS-GVO. In addition, we have a legitimate interest in using them to optimize our online offering and make it more secure. The corresponding legal basis for this is Art. 6 para. 1 lit. f DS-GVO. The personal data will be retained for as long as they are required to fulfill the purpose of processing. The data will be deleted as soon as they are no longer required to achieve the purpose.

(5)Google Maps
This website uses the mapping software Google Maps from Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). By using this website, you consent to the collection, processing and use of data that may be automatically collected by Google and its agents. Google Maps Terms of Use. Additional information can be found in Google's privacy policy. Google Maps downloads Google fonts in order to display the map correctly. The Google fonts are also loaded from a Google server. Further information on these Google Fonts can be found at https://developers.google.com/fonts/faq.
Please note that, due to the Cloud Act, American intelligence services could possibly gain access to personal data that is inevitably exchanged with Google due to the Internet Protocol when this tool is integrated.

(6)Google Maps Form
We offer an input form with which you can display the position of an address on the map, e.g. for route planning. The underlying map software is provided by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Only when you submit the form will your input, including your IP address and the address of the page on which the form is located, be transmitted to Google. By using the form, you consent to the collection, processing and use of data by Google and its agents. Terms of use of Google Maps. Privacy policy of Google.
Please note that, due to the Cloud Act, American intelligence agencies may have access to personal data that is inevitably exchanged with Google when this tool is integrated due to the Internet Protocol.

This US company is certified under the EU-US Data Privacy Framework. There is hereby an adequacy decision pursuant to Art. 45 GDPR, so that a transfer of personal data may also take place without further guarantees or additional measures.

11. Our activities in social networks
To allow us to communicate with you on social networks and inform you about our services, we run our own pages on these social networks. If you visit one of our social media pages, we and the provider of the social media network are joint controllers (Art. 26 GDPR) regarding to the processing operations triggered thereby, which concern personal data.

We are not the original provider of these pages, but only use them within the scope of the options offered to us by the respective providers
We would therefore like to point out as a precautionary measure that your data may also be processed outside of the European Union or the European Economic Area. Use of these networks may therefore involve data protection risks for you since the protection of your rights may be difficult, e.g. your rights to information, erasure, objection, etc. Processing on social networks frequently takes place directly for advertising purposes or for the analysis of user behaviour by network providers, and we have no control over this. If the provider creates user profiles, cookies are often used or user behaviour may be assigned directly to your own member profile on the respective social network (if you are logged in).

The processing operations of personal data described are carried out in accordance with Art. 6 (1) lit. f) GDPR on the basis of our legitimate interests and the legitimate interests of the respective provider in order to communicate with you in a timely manner or to inform you about our services. If you have to grant your consent to the respective providers to process your data as a user, the legal basis for this processing is Art. 6 (1) lit. a) GDPR in conjunction with Art. 7 GDPR.

Since we have no access to these providers’ databases, we would like to point out that you would be best placed to exercise your rights (e.g. to information, rectification, erasure, etc.) directly with the respective provider. More information on the processing of your data on social networks and your options for exercising your right to object or your right of revocation (opt out) is listed below for each of the social network providers we use:

• (1) Facebook
  (Joint) Data controller responsible for data processing in Europe:
  Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
  Privacy Notice (Data Policy):
  www.facebook.com/about/privacy
• (2) Instagram
  (Joint) Data controller responsible for data processing in Europe:
  Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
  Privacy Notice (Data Policy):
  http://instagram.com/legal/privacy/
  Opt-out and advertising settings:
  www.instagram.com/accounts/privacy_and_security/
• (3) LinkedIn
  (Joint) Data controller responsible for data processing in Europe:
  LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
  Privacy Notice:
  www.linkedin.com/legal/privacy-policy
• (4) XING (New Work SE)
  (Joint) Data controller responsible for data processing in Germany:
  New Work SE, Dammtorstrasse 29–32, 20354 Hamburg, Germany
  Privacy Notice:
  https://privacy.xing.com/de/datenschutzerklaerung
  Requests for information for XING members:
  www.xing.com/settings/privacy/data/disclosure
• (5) YouTube
  (Joint) Controller responsible for data processing in Europe:
  Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
  Privacy Notice:
  policies.google.com/privacy

12. Integration of YouTube and Vimeo videos and components
Use of YouTube

(1) We have included YouTube videos in our online offering which are stored at www.youtube.com and can be played directly from our website. By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data referred to in Section 4 of this statement will be transmitted. This takes place regardless of whether YouTube provides a user account that you are logged into, or whether no user account exists. When you are logged into Google, your information will be directly associated with your account. If you do not want your profile to be associated with YouTube, you must log out before activating the button. YouTube stores your data as user profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such evaluation takes place in particular (even in the case of users who are not logged in) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, in which case you must contact YouTube to exercise this right.

(2) Further information on the purpose and scope of the collection and processing of data by You Tube is available in its data protection statement. There you can also find further information on your associated rights and setting options for protecting your privacy: policies.google.com/privacy . Google also processes your personal data in the United States and has committed to the EU-US Privacy Shield, www.privacyshield.gov/welcome.

This US company is certified under the EU-US Data Privacy Framework. There is hereby an adequacy decision pursuant to Art. 45 GDPR, so that a transfer of personal data may also take place without further guarantees or additional measures.

(3) For the integration of the YouTube plugin, we use the 2-click solution based on our legitimate interest (Art. 6 para. 1 lit. f) GDPR) in integrating social media buttons for the purpose of visibility and communication with interested parties, while ensuring the legality of the integration. Personal data is only processed using the social media buttons with your express consent in accordance with Art. 6 para. 1 lit. a) GDPR using the 2-click solution
 

13. Vimeo (Videos)
Plugins from the Vimeo video portal of Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA are integrated on our website. When you access a page on our website that contains such a plugin, your browser establishes a direct connection to the Vimeo servers. The content of the plugin is transmitted by Vimeo directly to your browser and integrated into the page. Through this integration, Vimeo receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Vimeo account or are not currently logged in to Vimeo. This information (including your IP address) is transmitted directly from your browser to a Vimeo server in the USA and stored there.
 

If you are logged in to Vimeo, Vimeo can directly associate your visit to our website with your Vimeo account. If you interact with the plugins (e.g. by clicking the start button of a video), this information is also transmitted directly to a Vimeo server and stored there.
If you do not want Vimeo to assign the data collected via our website directly to your Vimeo account, you must log out of Vimeo before visiting our website.

The Google Analytics tracking tool is automatically integrated into Vimeo videos that are embedded on our website. This is Vimeo's own tracking tool, to which we have no access and which cannot be influenced by our website. Google Analytics uses so-called "cookies" for tracking purposes. These are text files that are stored on your computer and enable your use of the website to be analysed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.
These processing operations are only carried out with your express consent in accordance with Art. 6 para. 1 lit. a) GDPR.
You can view Vimeo's privacy policy at: https://vimeo.com/privacy.


14. Loomly
We use the Loomly social media management platform from Loomly Inc. based in Los Angeles, California, USA. This is used to schedule social media posts and to obtain information about the use of our social media channels. The transfer of personal data to the USA cannot be ruled out. For data transfers to the USA, Loomly ensures an adequate level of data protection via the EU standard contractual clauses. A copy of the relevant EU standard contractual clauses will be provided on request. Please contact datenschutz@faller-packaging.com for this. The data is processed on the basis of our legitimate interest in the provision of our social media presence in accordance with Art. 6 para. 1 f) GDPR.

 

C. RIGHTS OF DATA SUBJECTS

15. Your rights
If personal data about you is processed, you are a data subject within the meaning of the GDPR and you have the following rights in relation to us as the controller:

a) Rights under Art. 15 et seq. GDPR

(1) The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed; if this is the case, he or she shall have the right to information about such personal data and to the information specified in Art. 15 GDPR. Subject to certain conditions, you have the right to rectification pursuant to Article 16 GDPR, the right to restriction of processing pursuant to Article 18 GDPR and the right to erasure (“right to be forgotten”) pursuant to Article 17 GDPR. In addition, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format (right to data portability) pursuant to Article 20 GDPR, where processing is carried out by automated means and is based on consent pursuant to Art. 6 (1) letter a) or Art. 9 (2) letter a) or on a contract pursuant to Art. 6 (1) letter b) GDPR. The right to information and the right to erasure are subject to the restrictions under Sections 34 and 35 BDSG.

(2) You may revoke your consent to the processing of personal data at any time. This also applies to the withdrawal of declarations of consent that were given to us before the GDPR came into force, i.e. before 25 May 2018. Please note that the withdrawal is only valid for the future. Data processed prior to the withdrawal is not affected.

b) Right to lodge a complaint

Without prejudice to any other legal remedy, you have the right to address a complaint to us or to a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement (Article 77 GDPR in conjunction with Section 19 BDSG).

c) Right to object

In addition to the aforementioned rights, you have the right to object pursuant to Article 21 GDPR as follows:

(1) Right to object in relation to a specific case
You have the right to object at any time, on grounds relating to your particular situation, to processing of your personal data which is based on Art. 6 (1) (e) GDPR (data processing in the public interest) and Art. 6 (1) (f) GDPR (data processing for the purposes of legitimate interests); this includes profiling based on those provisions within the meaning of Art. 4 (4) GDPR.
If you object, we will no longer process your personal data, unless we are able to demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or show that the processing serves for the establishment, exercise or defence of legal claims.

(2) Right to object to the processing of data for marketing purposes
In certain cases we process your personal data for direct marketing purposes. You have the right to object at any time to the processing of your personal data for such marketing; this also includes profiling where related to such direct marketing. If you object to processing for direct marketing purposes, we will no longer process your personal data for such purposes.

The objection may be submitted, without any requirements as to form, to the office indicated in Section 1 of this Data Protection Statement.

16. Supervisory authority
The supervisory authority responsible for Faller at its registered office in Waldkirch can be contacted as follows:
The State Commissioner for Data Protection and Freedom of Information (Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit)
Postal address:
Postfach 10 29 32, 70025 Stuttgart
Tel.: 0711/615541-0
FAX NUMBER: 0711/615541-15
E-mail: poststelle@lfdi.bwl.de

D. FINAL PROVISIONS
17. Security
(1) We have taken technical and organisational security measures to protect your personal data from loss, destruction, manipulation and unauthorised access. All our employees and all third parties involved in data processing are obliged to comply with the Federal Data Protection Act (Bundesdatenschutzgesetz) and to ensure the confidential handling of personal data.

(2) Where personal data are collected and processed using contact forms, the information shall be transmitted in encrypted form in order to prevent misuse of the data by third parties. Our security measures are continually reviewed in line with technological developments.

18. Changes to our data protection requirements
We reserve the right to change our security and data protection measures if this becomes necessary due to technical developments. In such cases, we will also update our Data Protection Statement accordingly. The latest version of our Data Protection Statement therefore applies.

19. General Terms & Conditions
This Data Protection Statement supplements our General Terms and Conditions, which can be found on the August Faller website, with regard to data protection issues.