Data protection declaration
Duty to provide information according to Art. 13/14 GDPR
The following information is intended to inform you when we collect which data on this website and how we use it.
We respect your privacy and are committed to data protection and freedom of information. The processing of personal data is always carried out in accordance with applicable data protection law and exclusively for the purpose of the proper fulfilment of tasks.
In order to inform you about data processing and your rights and to fulfil our duty to provide information (Art. 13 and 14 GDPR), we inform you below about the processing of personal data when using our website and when contacting us (via the contact form, by e-mail, telephone or post).
We have implemented numerous technical and organisational measures to ensure that the personal data processed via this website is protected as comprehensively as possible. Despite our care, security gaps can occur in Internet-based data transmission, meaning that absolute protection cannot be guaranteed. For this reason, you are of course free to transmit personal data to us by alternative means, for example by telephone or post.
Children and persons under the age of 18 should not transmit any personal data to us without the consent of their parents or legal guardians. We do not request personal data from children, do not collect it and do not pass it on to third parties.
Basic principles
This privacy policy uses terms from the General Data Protection Regulation that are explained for better understanding.
According to Art. 4 No. 1 GDPR, personal data is any information relating to an identified or identifiable natural person. This includes, for example, information such as your first and last name, your address, your telephone number, your email address, but also your IP address. Data for which no reference to your person can be established, such as anonymised data, is not personal data.
Pursuant to Art. 4 No. 2 GDPR, processing is any operation which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Controller responsible for the processing is the natural or legal person or public authority which alone or jointly with others determines the purposes and means of the processing of personal data.
Personal data may only be processed if there is a legal basis or if you have consented to the processing. Processed personal data must be deleted as soon as the purpose of the processing has been achieved and there are no statutory retention periods to be complied with.
Controller responsible for the processing
Responsible for the processing of personal data pursuant to Art. 4 No. 7 GDPR is:
ATP Service & Consulting GmbH
Industriestraße 12-14
15366 Hoppegarten
Germany
datenschutz(at)atp-recycling.de
According to Art. 37 GDPR, we are not obliged to appoint a data protection officer. The data protection supervisory authority responsible for us is:
Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg
Stahnsdorfer Damm 77
14532 Kleinmachnow
Germany
poststelle(at)lda.brandenburg.de
Purposes and legal grounds for processing data – when visiting our website in general
We automatically collect and store on our server log files information such as browser type, operating system, IP address or time of server request, which your browser transmits to us when you call up our site. This data cannot be assigned to specific persons by us. This data is processed in accordance with Art. 6 Para. 1 lit. f DSGVO on the basis of our legitimate interest in improving the stability and functionality of our homepage. This data is not used in any other way or passed on to third parties. However, we do reserve the right to analyze log files at a later date if there are reasons to suspect unlawful usage.
Our web pages also use so-called “cookies” in several places. They serve to make our offer more user-friendly, effective and secure. Most of the cookies we use, so-called “session cookies”, do not contain any personal data and are automatically deleted at the end of your visit.
Cookies are text files that are downloaded and stored on a computer system through a web browser. The use of cookies optimizes the information and offerings on our website for the user’s benefit. Cookies enable us to recognize the people using our website. The reason we seek to recognize users is so that we can make it easier for them to use our website. A person who uses a website that saves cookies, for example, does not have to repeatedly log in every time he/she visits the site, as the website and the cookie saved on the user’s computer take care of it for him/her.
The data subject can at any time stop cookies being saved by our website by activating the corresponding settings in his/her web browser and, in doing so, permanently object to cookies being saved. Furthermore, cookies that have already been saved can be deleted at any time using the web browser or other software programs. This is a function available in all common web browsers. If the data subject deactivates his/her web browser’s cookie-saving function, it may in some cases no longer be possible to use the complete functionality of our website.
Purposes and legal grounds for processing data – when when contacting us
When you contact us (e.g. using our contact form or by e-mail), we collect personal data. This data is stored and used exclusively for the purposes of answering your inquiry and for the associated technological administration. Our legitimate interest in responding to your inquiry forms the legal grounds for processing this data, in accordance with GDPR art. 6(1)(f). If you contact us for the purpose of entering into a contract, there are additional legal grounds for processing provided in GDPR art. 6(1)(b). Your data will be erased once your inquiry has been conclusively resolved. This is the case if it can be assumed that the relevant matter has been completely resolved and if there are no statutory retention periods barring us from erasing the data.
Recipients or categories of recipients
Website provider:
IONOS SE
Elgendorfer Str. 57
56410 Montabaur
Germany
datenschutz@ionos.de
Support & maintenance of the website:
ATP Service & Consulting GmbH
Industriestraße 12-14
15366 Hoppegarten
Germany
datenschutz(at)atp-recycling.de
Miscellaneous:
Google (see also detailed information under “Gstatic”, “Google Fonts”)
Transfer to non-EU/EEA country
Google Inc.
Deletion dates
The controller processes and stores the data subject’s personal data only for the period of time required to achieve the purpose for which it is stored or only if the controller is required to store data on account of legislation or regulations that are passed by European Union legislators and regulators, or other legislators, and the controller is subject to this legislation or these regulations.
Should there no longer be any reason to store the data or if a retention period prescribed by a European Union directive or regulation or by other relevant law expires, the personal data will be restricted from processing or deleted as a matter of routine and in accordance with statutory regulations.
Notice of right to object when consent is selected as legal grounds
You have the right at any time to withdraw any consent given to the processing of your data. If you withdraw your consent, we will immediately delete the data concerned, provided there are no other legal grounds to support further processing. If you withdraw your consent, it will not affect the legality of the processing operations conducted until the time of the withdrawal.
Notice about profiling and ccoring
Profiling and scoring does not take place.
Rights of the data subject
Right of access, Art. 15 GDPR: The right of access provides the data subject with a comprehensive insight into the data concerning him/her and some other important criteria, such as the purposes of processing or the duration of storage. The exceptions to this right set out in Section 34 BDSG apply. In the case of a request for information that is not made in writing, we ask for your understanding that we may then require proof from you that you are the person you claim to be.
Right to rectification, Art. 16 GDPR: The right to rectification includes the possibility for the data subject to have incorrect personal data concerning him/her corrected.
Right to erasure, Art. 17 GDPR: The right to erasure includes the possibility for the data subject to have data erased by the controller. However, this is only possible if the personal data in question is no longer necessary, is being processed unlawfully or consent has been withdrawn. The exceptions to this right set out in § 35 BDSG apply.
Right to restriction of processing, Art. 18 GDPR: The right to restriction of processing includes the possibility for the data subject to prevent further processing of the personal data concerning them for the time being. A restriction occurs above all in the examination phase of other rights exercised by the data subject.
Right to object to the collection, processing and/or use, Art. 21 GDPR: The right to object includes the possibility for data subjects to object to the further processing of their personal data in a particular situation, insofar as this is justified by the performance of public tasks or public and private interests. The exceptions to this right set out in Section 36 BDSG apply.
Right to data portability, Art. 20 GDPR: The right to data portability includes the possibility for the data subject to receive the personal data concerning him/her from the controller in a commonly used, machine-readable format in order to have it forwarded to another controller if necessary. According to Art. 20 para. 3 sentence 2 GDPR, however, this right is not available if the data processing serves the fulfilment of public tasks.
Right to withdraw consent, Art. 7 para. 3 GDPR: If the processing of personal data is based on consent, the data subject may withdraw this consent at any time for the corresponding purpose without giving reasons for the future. The lawfulness of the processing based on the consent given remains unaffected until the revocation is received.
Right to lodge a complaint, Art. 77 GDPR: You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data by us. The data protection supervisory authority responsible for us is:
Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg
Stahnsdorfer Damm 77
14532 Kleinmachnow
Germany
poststelle(at)lda.brandenburg.de
Data protection provisions for the use of Google Fonts
The controller has integrated Google Fonts into this website. Google provides free fonts that can be used when designing websites.
So that fonts can be displayed consistently, this website uses web fonts that are provided by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”). When visiting a page on our website, the data subject’s browser loads the required web fonts into its cache so that it can display text and fonts correctly.
For this purpose, the browser used by the data subject must establish a connection with Google’s servers. This process informs Google of the corresponding page being visited from the data subject’s IP address. We use Google web fonts in the interest of presenting our online offering consistently and appealingly. This represents a legitimate interest as provided in GDPR art. 6(1)(f). If the data subject’s browser does not support web fonts, the data subject’s computer will use a default font.
Google LLC., based in the United States, has been certified for the purposes of the U.S.-EU “Privacy Shield” data protection framework, which ensures compliance with the level of privacy required in the EU.
You can find more information about Google Fonts at https://developers.google.com/fonts/faq and in Google’s privacy policy at https://www.google.com/policies/privacy/.
Data protection provisions for the use of social-media-plugins (YoutTube)
We expressly draw your attention to the fact that the social networks store the data of their users (e.g. personal information, IP address, etc.) in accordance with their data usage guidelines and use it for business purposes. We have no influence on the collection of data and its further use by the social networks. It is not possible for us to recognise to what extent, where and for how long the data is stored, to what extent the networks comply with existing deletion obligations, which analyses and links are made with the data and to whom the data is passed on. We therefore ask you to carefully check which personal data you make available to the social networks through the use of our site. If you do not want the social networks to receive personal data through your communication via our site, you should contact us by other means.
Components of YouTube (Google) are integrated into this website. YouTube is an online video portal that enables video publishers to upload video clips free of charge and enables other users to watch, rate, and comment on them, also free of charge. YouTube allows any type of video to be published, for which reason full film and television broadcasts as well as music videos, trailers, and user-made videos are available over the online portal.
The company operating YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, United States. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, United States.
Every time an individual page is visited on this website, the latter being operated by the controller and featuring an integrated YouTube component (YouTube video), the relevant YouTube component automatically causes the web browser on the data subject’s information technology system to download a rendering of the corresponding YouTube component from YouTube. More information about YouTube is available at https://www.youtube.com/yt/about/. This technological process involves YouTube and Google receiving knowledge of the particular sub-site on our website that the data subject is visiting.
If the data subject is simultaneously logged in to YouTube, YouTube will identify the specific sub-site on our website that the data subject is visiting if he or she visits a sub-site containing a YouTube video. This information is collected and matched with the data subject’s YouTube account by YouTube and Google.
The YouTube component always informs YouTube and Google of the data subject visiting our website if the data subject is simultaneously logged in to YouTube at the time of visiting our website, irrespective of whether the data subject clicks on a YouTube video. If the data subject does not want this information to be transferred to YouTube and Google in the described manner, he or she can prevent it being transferred by logging out of his or her YouTube account before visiting our website. The Privacy Policy published by YouTube, available at https://www.google.de/intl/en/policies/privacy/, provides information about the collection, processing, and usage of personal data by YouTube and Google.
Data protection provisions for the use of WP Statistics
We use the analytics plugin WP Statistics on our website. This plugin was developed by Veronalabs {5460 W Main St, Verona, NY 13478, United States). This plugin provides us with simple statistics on how you as a user use our website. WP Statistics does not set any cookies and the data collected is only used to compile anonymised statistics on the use of our website. WP Statistics also anonymises your IP address. You as a person cannot be identified. WP Statistics collects visitor data (so-called Visitos’Data) when your web browser connects to our web server. This data is stored in our database on our server. This includes, for example
- the address {URL) of the website accessed
- Browser and browser version
- the operating system used
- the address {URL) of the previously visited page (referrer URL)
- the host name and IP address of the device from which access is made
- Date and time
- Country/city information
- Number of visitors coming from a search engine
- Duration of the website visit
- Clicks on the website
The data will not be passed on or sold. All data is stored locally on our web server. The data is stored on our web server until it is no longer required for the above-mentioned purposes.
You have the right to information, correction or deletion and restriction of the processing of your personal data at any time. You can also withdraw your consent to the processing of data at any time. The use of WP Statistics requires your consent, which we have obtained with our cookie pop-up. According to Art. 6 para. 1 lit. a GDPR (consent), this consent constitutes the legal basis for the processing of personal data, as may occur when it is collected by web analytics tools. In addition to consent, we have a legitimate interest in analysing the behaviour of website visitors in order to improve our website technically and economically. With the help of WP Statistics, we recognise errors on the website, can identify attacks and improve efficiency. The legal basis for this is Art. 6 para. 1 lit. f GDPR (legitimate interests). Nevertheless, we only use WP Statistics if you have given your consent.
We would like to point out that, in the opinion of the European Court of Justice, there is currently no adequate level of protection for data transfers to the USA. Data processing is essentially carried out by WP Statistics. This may result in data not being processed and stored in anonymised form. Furthermore, US government authorities may be able to access individual data. It is also possible that this data may be linked to data from other possible WP Statistics services with which you have a user account.
Further information on the handling of the transferred data can be found in the WP Analytics privacy policy at https://wg-statistics.com/privacy.
Data protection provisions for the use of Gstatic
A web service from Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter: Gstatic) is loaded on our website. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to Gstatic. The legal basis for the data processing is Art. 6(1)(f) GDPR. The legitimate interest is the correct functioning of the website. Gstatic has certified itself under the EU-US Privacy Shield Agreement (see https://www.privacyshield.gov/list). The data will be deleted as soon as the purpose of collection has been fulfilled.
Further information about the handling of the transferred data can be found in the privacy policy of Gstatic: https://policies.google.com/privacy. You can prevent Gstatic from collecting and processing your data by deactivating the execution of script code in your browser or installing a script blocker in your browser (you can find it e.g. at www.noscript.net or www.ghostery.com).