PRIVACY POLICY

The POLOPLAST America, Inc. Privacy Policy

1. General information

We (the POLOPLAST Group, consisting of POLOPLAST GmbH & Co KG and our subsidiaries) take the protection of your personal data very seriously. We treat your personal data in the strictest confidence and in accordance with the statutory provisions (in particular the Austrian Data Protection Act, the EU General Data Protection Regulation (“GDPR”) and the Telecommunications Act, as well as this Privacy Policy.

Controller 
The controller for data processing in relation to this website is:

POLOPLAST GmbH & Co KG, Poloplaststraße 1, 4060 Leonding
Telephone: +43 (0) 732/3886 – 0
Fax: +43 (0) 732/3886 – 9
E-Mail: datenschutz.at@poloplast.com

When you use this website, we collect various types of personal data. Personal data is information that allows you to be identified personally (e.g., name, email address, IP address). This Privacy Policy explains what information we collect, how we use this information and which purpose this fulfils.

Please also refer to our “General Privacy Policy for Business Partners” and our “Privacy Policy for Participants at Events”.

Purposes of data processing 
On this website, we process the relevant personal data for statistical analyses and for the purpose of the operation, security and optimization of the website as well as for information and marketing purposes.

If you contact us by email, telephone or fax, we will process your personal information for the purpose of processing your request.

When you send a link from our online product catalogue to a friend, we explicitly ask you to confirm that you have the right to disclose your friend’s contact information on our website. Your friend’s or colleague’s email address will be used to send that person information on your behalf and will not be recorded or used by us or by any third party for any other purpose.

We offer our customers and business partners the opportunity to inform themselves about our products via the POLOPLAST APP. You can download our APP to your mobile device from the Google Play Store or Apple App Store.

In order to provide the best possible service, our APP requires the permissions described below:

– Camera: If desired, this is used to scan the QR codes of our products or to take photographs. By using the camera as a scanner, it is possible to obtain information from the product catalogue on our website. For this purpose, only the stored product number will be transferred to our website.
– Storage space: This is required in order to save photographs.
– Telephone: This allows you to place a direct call to one of our sales consultants by clicking on the respective linked telephone number.

In order to fulfil its purpose, the POLOPLAST APP does not access the contact data of the app user saved on the mobile device. Furthermore, the POLOPLAST APP does not access any other data on your mobile device. Only the IP address and other server log files relating to the mobile device are processed on an anonymous basis as detailed under Section 2. below.

If you would like to receive our newsletter, we require your email address along with information that allows us to ascertain that you are the owner of the email address provided and that you give your express consent to receiving the newsletter. Additional data is not collected or, respectively, is only gathered on a voluntary basis. We use this data exclusively for the delivery of the requested information and only pass the information on to the processor for the purpose of delivering the newsletter. No data is passed on to third parties.

The processing of the data is carried out exclusively on the basis of your consent (Art. 6 (1) (a) GDPR). You can withdraw your previously granted consent to the storage of the data, the email address and the use thereof for the purpose of delivering the newsletter at any time, for example by using the “unsubscribe” link in the newsletter. The lawfulness of any previously completed data processing operations remains unaffected by the revocation.

We will store the data deposited with us for the purpose of receiving the newsletter until your cancellation of the subscription of the newsletter and the data will be erased once we receive your cancellation. Data that we have stored for other purposes (such as email addresses for business transactions) shall remain unaffected.

The processing of this personal data is necessary to achieve the above-mentioned purposes, including the fulfilment of contractual obligations or pre-contractual activities. Beyond the absolutely necessary data required for this purpose, no further personal data will be processed.

The newsletter is delivered by “RapidMail”, a newsletter delivery platform of the German service provider rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg, Germany. The email addresses of our newsletter subscribers as well as their further data described within the scope of this Privacy Policy are stored on the RapidMail servers in Germany. RapidMail uses this information on our behalf for the delivery of the newsletter and for statistical purposes in relation to the newsletter. Furthermore, according to information available to us, RapidMail may use this data in order to optimise or improve its own services, e.g. for technical optimisation of the dispatch process and to improve the appearance of the newsletter, and for economic purposes, to determine which countries the recipients come from. However, RapidMail does not use the data of our newsletter recipients to contact them directly or to pass the data on to third parties.

We trust in the reliability as well as the IT and data security of RapidMail.

The reading behaviour in relation to the newsletter is measured and evaluated in terms of technical information (browser, IP addresses, access times). This information is used to improve the technical performance of services based on the technical specifications or the target audience and their reading habits, based on their locations (which can be determined using the IP address) or access times.

The statistical analyses also consider whether the newsletters are opened, when they are opened, and which links are clicked. Technically, it is possible to assign this information to individual newsletter recipients. However, it is neither our goal nor that of RapidMail to monitor individual users. Rather, the evaluations serve to identify the reading habits of our users and to adapt our content accordingly, or to send different content in line with the interests of our users.

In certain cases, we direct the newsletter subscribers to RapidMail’s website. For instance, our newsletter contains a link which allows the newsletter recipients to access the newsletter online (e.g. if it cannot be properly displayed in the email application). Furthermore, subscribers also have the opportunity to correct their data, such as the email address, at a later date. Likewise, the privacy policy of RapidMail is only available on their website.

In this context, it is our duty to point out that RapidMail’s website uses cookies and thus personal data is processed by RapidMail, their partners and their commissioned service providers (for example, Google Analytics). We have no influence over this data collection. Further information can be found in the privacy policy issued by RapidMail.

Legal basis
Data processing is carried out on the basis of Article 6 (1) (a) (consent granted) or Article 6 (1) (b) (contract fulfilment) or Article 6 (1) (f) (legitimate interest in the optimised provision of our services) of the General Data Protection Regulation (GDPR).

Storage duration
We store the data as long as there are statutory or contractual retention requirements, or the data may be required to assert, exercise or defend legal claims. Otherwise, we will delete your data as far as it is no longer necessary to fulfil the purpose of storage.

Withdrawing your consent to data processing
Many data processing operations are only possible provided that we have your explicit consent. You may withdraw any previously granted consent at any time. A simple message by e-mail to us is sufficient for this purpose. The lawfulness of any data processing completed prior to the withdrawal remains unaffected by the withdrawal.

Right to data portability
You have the right to request the transmission, to yourself or to a third party, of data which we process automatically on the basis of your consent or in relation to the initiation, fulfilment or post-processing of a contract, in a structured, commonly used and machine-readable format. If you request the direct transfer of the data to another controller, this will only be carried out in cases where it is technically feasible.

Rights of the data subjects
RIGHT OF ACCESS (ART. 15 GDPR)
The data subject affected by the processing of personal data has the right, at any time and free of charge, to receive information from the controller about the personal data that is stored concerning herself or himself, and to receive a copy of this information. If the right to access is exercised in an excessive manner by the data subject, e.g. by addressing an inordinate volume of information requests to the controller, POLOPLAST may charge an administration fee in line with local custom to cover the administrative costs of providing information to the person concerned.

RIGHT TO RECTIFICATION OR ERASURE (ART. 17 GDPR)
The data subject has the right to require the controller to rectify such personal data concerning him / her that are untrue.
The data subject has the right to require the controller to erase the personal data concerning him / her immediately, provided that they are not required for the purposes for which they were collected or otherwise processed and provided that no legal reason prevents the erasure. If the cancellation is requested by the data subject, POLOPLAST will check the aforementioned legal requirements and will inform the data subject accordingly.

RIGHT TO RESTRICTION OF PROCESSING (ART. 18 GDPR)
The data subject shall have the right to obtain a restriction of processing from the controller.

RIGHT TO DATA PORTABILITY (ART. 20 GDPR)
The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and shall further have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided.

RIGHT TO OBJECT (ART. 21 GDPR)
In instances where POLOPLAST processes personal data which are required due to legitimate interests, the data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to the processing of personal data concerning him or her. Where POLOPLAST processes personal data for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing.

RIGHT TO WITHDRAW CONSENT (ART. 7 (3) GDPR)
Data subjects shall have the right to withdraw their previously granted consent to data processing at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent granted prior to the withdrawal.

Right to lodge a complaint with the competent supervisory authority
In the case of infringements of the data protection regulations, the data subject has the right to lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde, Wickenburggasse 8, 1080 Vienna, tel.: +43 1 531 15 – 202525, email: dsb@dsb.gv.at).

For questions about data protection and about asserting the rights mentioned above, please contact datenschutz.at@poloplast.com (Austria) or datenschutz.de@poloplast.com (Germany).

2. Data collection on our website

Cookies
Some Internet sites use so-called cookies. Cookies do not harm your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your end device through your browser.

Most of the cookies we use are so-called “session cookies”. These are deleted automatically when you terminate your visit. Some cookies remain stored on your end device until you delete them. They enable us to recognise your browser when you next visit our website.

You can configure your browser so that it informs you about the setting of cookies and you only allow cookies in individual cases, or you can exclude cookies in specific cases or as a general rule, and you can ensure that cookies are automatically deleted when you close the browser. If you disable cookies, the functionality of this website may be limited.

Cookies that are required to carry out the electronic communication process or to provide certain functions desired by you (e.g., shopping cart function) are stored on the basis of Article 6 (1) (f) GDPR. The website operator has a legitimate interest in the storage of cookies for the technically faultless and optimized provision of its services. Insofar as other cookies (such as cookies for analysing your surfing behaviour) are stored, they will be treated separately in this Privacy Policy.

Server log files
The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

– browser type and browser version
– operating system used
– referrer URL
– host name of accessing computer
– time of server inquiry
– IP address

This data is not merged with other data sources.

The basis for the data processing is Art. 6 (1) (f) GDPR, which allows the processing of data for the performance of a contract or for pre-contractual measures.

3. Analysis tools

Google Analytics
This website uses functions of the web analytics service Google Analytics. The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and that allow an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

Google Analytics cookies are stored on the basis of Article 6 (1) (f) GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimize both its website and its advertising.

IP anonymization
We have activated the function IP anonymization on this website. As a result, your IP address will be truncated by Google within member states of the European Union or other parties to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and Internet usage to the website operator. The IP address provided by your browser as part of Google Analytics will not be merged with other Google data.

Browser plugin
You can prevent the storage of cookies by configuring your browser software accordingly; please note, however, that in this case you may not be able to use all the functions of this website to their full extent. In addition, you can prevent the capture of data generated by the cookie and related to your use of the website (incl. your IP address) for Google and the processing of these data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

Opposition to data collection
You can prevent the collection of your data by Google Analytics by clicking on the link provided below. An opt-out cookie will be set, which prevents the collection of your data on future visits to this website: Disable Google Analytics.

For more information on how Google Analytics handles user data, please refer to the Google Privacy Policy.

You can configure your browser so that it informs you about the setting of cookies and you only allow cookies in individual cases, or you can exclude cookies in specific cases or as a general rule, and you can ensure that cookies are automatically deleted when you close the browser. If you disable cookies, the functionality of this website will be limited.

You can object to the collection and use of your data for the future by clicking on this link to set an opt-out cookie in your browser.
If you delete the cookies on your computer, you will need to set the opt-out cookie again.

4. Plugins

Google Maps
This site uses the mapping service Google Maps via an API. The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

To use the features of Google Maps, it is necessary to save your IP address. This information is usually transmitted to and stored on a Google server in the United States. The provider of this site has no influence on this data transfer.

The use of Google Maps is in the interest of providing an attractive presentation of our online offers and to make it easier to locate the places we have indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6 (1) (f) GDPR.

For more information on how Google handles user data, please refer to the Google Privacy Policy.

YouTube
Our website uses plugins from the Google-powered YouTube page. The site operator is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

When you visit one of our YouTube plug-in-enabled sites, you will be connected to the servers of YouTube. The YouTube server will be informed which of our pages you have visited.

If you are logged in to your YouTube account, YouTube allows you to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account.

For more information on how YouTube handle user data, please refer to the YouTube Privacy Policy.

Right to lodge a complaint with the competent supervisory authority
In the case of infringements of the data protection regulations, the data subject has the right to lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde, Wickenburggasse 8, 1080 Vienna, tel.: +43 1 531 15 – 202525, email: dsb@dsb.gv.at).

For questions about data protection and about asserting the rights mentioned above, please contact datenschutz.at@poloplast.com (Austria) or datenschutz.de@poloplast.com (Germany).