Privacy Policy

(Information on data protection regarding our data processing in accordance with Articles 12, 13, 14 and 21 of the European General Data Protection Regulation (GDPR))

Thank you for visiting our website and for your interest in our company. The protection of your personal data is important to us. Below we inform you in accordance with Art. 12, 13, 14 and 21 of the European General Data Protection Regulation (GDPR) about the handling of your personal data when using our website www.uconcs.com.

I. Controller

Controller for the processing of your personal data within the meaning of Art. (4)(7) GDPR is

UCON Container System GmbH
Gustav-Rivinius-Platz 2
77756 Hausach
Germany
Phone: +49 7831 77234
Email: info@uconcs.com

A “controller” within the meaning of the GDPR is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

II. Data Protection Officer

Our external Data Protection Officer is available at any time to answer any questions you may have and to act as your contact person on the subject of data protection. His contact details are

Robert Schmock
Institut für Datenschutz und Datensicherheit
Dresdener Straße 58a
01156 Dresden
GermanyPhone: +49 176 34 61 27 69
Email: r.schmock@ifdds.de

III. Personal data

Personal data means information about the personal or factual circumstances of a specific or identifiable natural person. Your personal data, therefore, includes all the data that contains information about your personal or factual circumstances and allows your identification, such as your name, your address, your telephone number or your email address.

IV. Use of our website: Purposes and legal bases of the data processing

IV.1. Informational use of the website

You can visit our website without providing any personal data. If you only use our website for information purposes, i.e. if you do not register, place an order or otherwise provide us with information about yourself, we do not process any personal data, with the exception of the data that your browser transmits to enable you to visit the website and information that is transmitted to us as part of the cookies used.

IV.1.a) Technical provision of the website

IV.1.a.i) Log files/provision of website

For the purpose of the technical provision of the website, our system (i.e. the web server) automatically collects information from your browser each time you access the website.

The temporary storage of your IP address by our system is necessary to enable delivery of the website to your computer. For this purpose, the user’s IP address must be stored for at least the duration of the session.

The IP address is stored in the log files in order to ensure the functionality of our website. We also use this data to optimise the website and to ensure the security of our information technology systems (e.g. attack detection).

The following information is collected, for example:

IP address;

Browser type/version (e.g. Firefox 59.0.2 (64 bit));

Browser language (e.g. German);

Operating system used (e.g. Windows 10);

Internal resolution of the browser window;

Website from which our website was accessed;

Websites visited from our website;

Pages visited on our website;

Message indicating whether the call was successful;

Amount of data transferred;

Screen resolution;

Javascript activation;

Java on / off;

Cookies on / off;

Colour depth;

Date and time of access

The previous website from which you came to us.

We also use cookies to make certain technical functions of our website available for you to use. Some functions of our website cannot be offered without the use of cookies. You can find more information about cookies in the consent management below.

We process your personal data for the technical provision of our website on the basis of the following legal basis:

for the technical provision of our website in accordance with Section 25 (2)(2) TTDSG, as the processing of the above-mentioned data is absolutely necessary so that we can enable the use of our website expressly requested by you (i.e. also with or without cookies);

for the performance of a contract or for the implementation of pre-contractual measures pursuant to Art. 6(1)(b) GDPR, insofar as you visit our website to find out about our company and our products/services; and

to protect our legitimate interests in accordance with Art. 6(1)(f) GDPR in order to make the website technically available to you. Our legitimate interest is to be able to provide you with an attractive, technically functioning and user-friendly website and to take measures to protect our website from cyber risks and to prevent our website from posing cyber risks to third parties.

IV.1.a.ii) Consent management

On our website, we use the Borlabs Consent Manager from Borlabs of Borlabs GmbH, Hamburger Str. 11, 22083 Hamburg, Germany. With the help of the Consent Manager, we obtain your consent to certain data processing requiring consent (e.g. analysis, tracking, etc.). By using the Consent Manager, we can inform you about the individual cookies and tools we use. You can use the Consent Manager to choose which cookies and tools you want to categorically allow or reject. This enables you to make an informed decision about the transfer of your data and allows us to use cookies and tools in a transparent and documented manner that complies with data protection regulations.

The Consent Manager processes your personal data in order to record your decision on the authorisation of cookies and tools and to save it for a subsequent visit to our website. This includes the corresponding cookie with your (consent) decision as well as other usage data, e.g. IP address, domain name, time of the request, server data (including data transmission types, server status, etc.), country, browser and operating system.

Further information on the Consent Manager can be found at: https://de.borlabs.io/.

We process your personal data for the technical provision of our website on the basis of the following legal bases:

for the technical provision of consent management in accordance with Section 25 (2)(2) TTDSG, as the processing of the above-mentioned data is absolutely necessary in order to enable you to use our website (with or without cookies) as expressly requested by you;

for the performance of a contract or for the implementation of pre-contractual measures pursuant to Art. 6(1)(b) GDPR, insofar as you visit our website to conclude a contract with us (e.g. for products or services) or to obtain information about our products or services;

for the use of cookie management to fulfil a legal obligation to which we as the controller are subject pursuant to Art. 6(1)(c) GDPR. The legal obligation is to inform you about the cookies we use and to obtain and document your consent to data processing; and

to protect our legitimate interests in accordance with Art. 6(1)(f) GDPR in order to be able to provide you with technical cookie management. Our legitimate interest is to be able to provide you with an appealing, technically functioning and user-friendly cookie management system, as well as to take measures to protect cookie management against cyber risks and to prevent cookie management from posing cyber risks to third parties.

IV.1.b) Analysis and tracking

For the purpose of analysing and tracking the use of our website, we or the service providers working for us use cookies that enable your surfing behaviour to be evaluated. This enables us to improve the quality of our website and its content. We learn how the website is used and can thus constantly optimise our offering.

Further information about the cookies and tools we use, their purposes and functions, the data processed in each case, the data recipients, the place of processing or transfer to so-called third countries (outside the EU/EEA), as well as the storage periods can also be obtained from the Consent Manager.

We process your personal data on the basis of the following legal bases:

You can revoke your consent via our Consent Manager at any time with effect for the future. You can access the Consent Manager from any page by clicking on the tick symbol in the bottom left-hand corner of the website and adjust your settings to withdraw your consent. If other legal bases come into consideration, these are listed below.

Google Analytics

We use Google Analytics for the purpose of the needs-based design and continuous optimisation of our website. Google Analytics is a web analytics service provided by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland (subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) (“Google”). Google Analytics uses cookies to analyse your use of the website and to track your visit to other websites or the websites you have previously visited. The information generated by the cookie about your use of this website (IP address, login status, postcode, last login, registration date, user ID and registration source) is usually transferred to a Google server in the USA and stored there. Google uses this information on our behalf to analyse your use of the website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Google Analytics is only integrated on the company website, but not on the web pages for identification processes or other of our services.

We have also activated Google Signals in Google Analytics. If you have activated personalised advertising in your Google account and are logged into your Google account, our Google Analytics statistics (advertising reports, information for remarketing, cross-device reports) are therefore expanded to include demographic characteristics and interests that Google records and sends to us in anonymised form. Google Signals can also be used to carry out remarketing to logged-in Google users.

Google carries out cross-device tracking so that your data is analysed across devices (e.g. when using your smartphone or laptop) and also uses the data for cross-device marketing. The data collected by Google is linked by Google to your Google account. This may include information about your interests and demographic characteristics, such as age, language, gender, place of residence, occupation, marital status or income, which Google collects directly or via partners.

IP anonymisation

We have activated the IP anonymisation function on this website. This means that your IP address will be truncated by Google within member states of the European Union (EU) or in other signatory states to the Agreement on the European Economic Area (EEA) before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

We only use Google Analytics with your consent according to Art. 6 (1)(a) GDPR. Once you have given your consent, you can withdraw it by

You can find more information on the terms of use and data protection of Google Analytics at http://www.google.com/analytics/terms/de.html, https://support.google.com/analytics/answer/6004245?hl=de and https://policies.google.com/privacy?hl=de.

IV.1.c) Social links

Our website contains links to services such as LinkedIn. After clicking on the link, you will be forwarded to the website of the respective provider, which means that only then will user data be transmitted to that provider. For information on how your data is handled when using the websites of other providers, please refer to the respective provider’s privacy notice.

IV.2.Active use of the website

In addition to the purely informational use of our website, you can also actively use our website to order one of our products, download information, register for a newsletter or an event or to contact us. In addition to the processing of your personal data described above for purely informational use, we also process other personal data from you that we need, for example, to process your order or to process and answer your request.

IV.2.a) User requests

In order to be able to process and answer your requests addressed to us, e.g. via the contact form or to our email address, we will process the personal data you provide in this context. This always includes your name, your email address and the subject in order to send you an answer, as well as any other information that you send us as part of your communication.

We will process your personal data to answer your requests on the basis of the following legal bases:

to safeguard our legitimate interests in accordance with Art. 6(1)(f) GDPR; our legitimate interest lies in the appropriate answer to customer requests;

if the request is aimed at the conclusion of a contract, the additional legal basis is Art. 6(1)(b) GDPR;

if the request is aimed at the assertion of your rights as a data subject, the additional legal basis is Art. 6(1)(c) GDPR, as the processing of your data is necessary for comply with legal obligations.

IV.2.b) Marketing purposes, such as newsletters, downloads of documents

With your consent, we will use your data for advertising purposes, such as the transmission of our newsletter or customer magazine, the transmission of information via e.g. download links, eBooks or white papers, advertising surveys, the transmission of product information, your invitation to events of interest to you, follow-ups, status messages, birthday mailings, market research and other marketing and promotional campaigns. We collect mandatory information such as your email address, but also information that you provide to us voluntarily. We use the voluntary information to continuously improve our customer relationship and to make it more customer-friendly for you.

We use the double opt-in procedure (DOI procedure) to ensure that no errors have been made when entering the email address: After you have entered your email address in the registration field and given your consent to receive the newsletter, we will send you a confirmation link to the email address you have provided. Only when you click on this confirmation link will your email address be added to our mailing list for sending the newsletter.

If you have provided us with your email address in connection with the purchase of goods or services, we may subsequently use it to send you a newsletter. In such a case, only direct advertising for our own similar goods or services will be sent via the newsletter.

We process your data for the sending of newsletters, surveys etc. and the personalisation of the approach on the following legal bases:

if you have given us your consent, in accordance with Art. 6(1)(a) GDPR;

if you have provided us with your email address in connection with the purchase of goods or services or if we send you personalised advertising, to protect our legitimate interests in accordance with Art. 6(1)(f) GDPR in conjunction with Section 7(3) German Act against Unfair Competition (UWG), our legitimate interest is based on our economic interests in the implementation of promotional measures and target group-oriented advertising.

Using data for promotional emails and your right to object

If we receive your email address in connection with the conclusion of a contract and the provision of services by us and you have not objected to this, we reserve the right to regularly send you emails containing offers for similar services from our offering. You can object to this use of your email address at any time by sending a message using the contact details referred to below or via a link provided for this purpose in the marketing email without incurring any costs other than the base-rate transmission costs.

IV.2.c) YouTube

We integrate videos from the YouTube service, which is provided by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland (subsidiary of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA;) (“Google”). In order to make the videos available, technically necessary data is processed by Google for this purpose. Google is responsible for this processing. Further information on how Google handles your personal data can be found at: https://policies.google.com/privacy?hl=de.

The legal basis for the initial readout and/or storage of data is Section 25 (2) No. 2 TTDSG, as the processing of the data is absolutely necessary so that we can enable the use of our website expressly requested by you (i.e. with YouTube videos, for example). The legal basis for the initial reading and/or storage of other, technically unnecessary data is the user’s consent in accordance with Section 25(1) TTDSG, Art. 6(1)(a) GDPR. Further data processing when integrating YouTube is necessary for the needs-based design of our website. This is also our legitimate interest in data processing in accordance with Art. 6(1)(f) GDPR.

V. Law enforcement

We will also process your personal data on our website in order to assert our rights and enforce our legal claims. We also process your personal data in order to be able to defend ourselves against legal claims. Finally, we process your personal data if this is necessary for the prevention or prosecution of criminal offences.

We process your personal data for this purpose on the basis of the following legal basis:

to safeguard our legitimate interests in accordance with Art. 6(1)(f) GDPR, insofar as we assert legal claims or defend ourselves in legal disputes or prevent or investigate criminal offences.

VI. Compliance with legal regulations

We will also process your personal data on our website in order to comply with any legal obligations. These may apply to us in connection with the processing of the order or business communication. These include, in particular, retention periods under commercial, trade or tax law.

We process your personal data on the basis of the following legal basis:

to comply with any legal obligation to which we are subject in accordance with Art. 6(1)(c) GDPR in connection with commercial, trade or tax law, insofar as we are obliged to record and store your data.

VII. Company sales/mergers, etc.

We may process your personal data in order to carry out a (partial) sale of the company/business or a merger (or similar transactions such as a takeover in the context of liquidation, insolvency, dissolution, etc.) with another company. In the event that another company acquires or seeks to acquire the assets from us, which may include your personal data, or we merge or seek to merge with another company, we may have to grant this company access to your personal data stored by us or transfer it for the purposes of considering and implementing the sale or merger (e.g. to determine the value of the company or business risks, to transfer the data/assets, etc.).

We process your personal data on the basis of the following legal basis:

to safeguard our legitimate interests in accordance with Art. 6(1)(f) GDPR in order to organise and carry out a planned sale of the company or a planned merger.

VIII. Links

Some sections of our website contain links to third-party websites. These websites are subject to their own privacy rules. We are not responsible for their operation, including how they handle data. If you send information to or via such third-party websites, you should check their privacy policies before providing them with information that can be attributed to you personally.

IX. Categories of recipients

Initially, only our employees will obtain knowledge of your personal data.

Your data will only be passed on to third parties if this is permitted or required by law or if you have given your consent. We also share your data to the extent necessary with the service providers we use in order to provide our services. We limit the transfer of data to what is necessary to provide our services to you. In some cases, our service providers receive your data as processors and are then strictly bound by our instructions when handling your data. In some cases, the recipients act independently with your data that we transmit to them.

The categories of recipients of your data are listed below:

IT service providers who store data, assist in the administration and maintenance of systems, file archivists and shredders, and social media platform providers;

Debt collection agencies and legal advisors in the enforcement of our claims,

Public bodies and institutions insofar as we are legally obliged to do so;

Payment service providers and banks to collect outstanding payments from accounts or pay out refunds;

Agencies, printers and lettershops that support us in the realisation of advertising measures, competitions, promotions, etc;

Training providers to make corresponding eLearning programmes available;

Logistics service providers to deliver goods etc;

Credit agencies when calling up a credit report.

X. Third country transfer

We do business globally. Therefore, your personal data may be transferred to other parts of our company in countries outside the European Union (EU). Data will only be transferred to countries outside the EU or the European Economic Area (EEA) (so-called third countries) if this is necessary in the context of processing our contractual relationships or is required by law (e.g. reporting obligations under tax law), if you have given us your consent or as part of order processing.

As part of the use of cookies and similar applications, we may transfer your IP address or your truncated IP address and, under certain circumstances, other data to countries outside the EU/EEA. The transfer of data is based on the standard contractual clauses drafted and made available by the EU Commission, which we have agreed with the respective providers.

If service providers in third countries are used and we can influence this, they are also obliged to comply with the level of data protection in Europe by agreeing the EU Standard Contractual Clauses in addition to written instructions. Alternatively, we transfer the data on the basis of Binding Corporate Rules or an adequacy decision by the EU Commission. Further information can be obtained from our Data Protection Officer.

Otherwise, we do not transfer your personal data to countries outside the EU or the EEA or to international organisations.

XI. Duration of storage

XI.1. Informational use of the website

If you use our website for information purposes only, we generally store your personal data on our servers for a period of 30 days.

You can obtain more information about the storage periods of the cookies and tools we use via the Consent Manager. You also have the option of deleting installed cookies yourself at any time.

XI.2. Active use of the website

When you actively use our website, we initially store your personal data for the duration of time required by us to reply to your request or for the duration of our business relationship. This also includes the potential future and actual initiation of a contract (pre-contractual legal relationship) and the fulfilment of a contract.

We process your data for the duration of your subscription to our newsletter, customer magazine, other advertising communication or for the duration of our marketing campaigns or until you withdraw your consent to receive/participate. This also includes the initiation of a contract (pre-contractual legal relationship) and the fulfilment of a contract.

In addition, we will then store your personal data until the limitation period for any legal claims arising from the relationship with you has expired, in order to use it as evidence if necessary. The limitation period is usually between 1 and 3 years, but can also be as long as 30 years.

We will delete your personal data upon expiry of the limitation period, unless there is a statutory retention obligation, for example under the German Commercial Code (HGB, Sections 238, 257(4) or under the German Fiscal Code (AO, Section 147(3), 147(4)). Such retention obligations can exist for a period of 2 to 10 years. During this period, the data is processed again solely in the event of an audit by the tax authorities.

XII. Your rights as a data subject

If your personal data is processed, you are a “data subject” within the meaning of the GDPR. You have the following rights vis-à-vis us as the controller, which you can also assert vis-à-vis the operator of the respective platform with regard to our social media presences. Please note that we do not have full control over the operator’s data processing operations. Our options depend largely on the company policy of the respective operator. Your rights as a data subject are as follows:

Right to information: You can request information about whether we process your personal data. If this is the case, you have the right to information about this personal data as well as to further information related to the processing and to receive a copy of your data (Art. 15 GDPR). Please note that this right of access may be restricted or excluded in certain cases.

Right to rectification: In the event that personal data relating you is not (or no longer) accurate or incomplete, you may request that this data be rectified and, if necessary, completed (Art. 16 GDPR).

Right to erasure or restriction of processing: If the legal requirements are met, you can request the erasure of your personal data (Art. 17 GDPR) or the restriction of the processing of this data (Art. 18 GDPR). However, the right to erasure pursuant to Art. 17(1) and Art. 17(2) GDPR does not apply, inter alia, if the processing of personal data is necessary (i) for exercising the right of freedom of expression and information, (ii) for compliance with a legal obligation to which we are subject (e.g. statutory retention obligations) or (iii) for the establishment, exercise or defence of legal claims.

Right to object: You are entitled to object to the processing of your personal data under the conditions of Art. 21 GDPR, so that we must stop processing your personal data. The right to object exists only within the limits provided for in Art. 21 GDPR. In addition, our interests may conflict with the termination of processing, so that we are authorised to process your personal data despite your objection.

Right to data portability: You are entitled, under the conditions of Art. 20 GDPR, to request that we provide you with the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format.

Right to revoke your data protection consent You have the right to revoke your consent at any time. The revocation is only effective for the future; this means that the revocation does not affect the legality of the processing carried out on the basis of the consent until the revocation.

Right to lodge a complaint with a supervisory authority: Without prejudice to any other administrative or judicial remedy, a data subject (you) has the right to lodge a complaint with a supervisory authority – in particular in the Member State of your habitual residence – if you consider that the processing of your personal data by us is in breach of the GDPR.

The supervisory authority responsible for us is

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart
Tel: 0711/61 55 41 – 0
Fax: 0711/61 55 41 – 15
Email: poststelle@lfdi.bwl.de

The social media platform operators have their registered office and therefore also the competent supervisory authority in another EU country. As a rule, this is the Irish data protection authority (Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland), but you can also address your complaints to the following German supervisory authorities:

LinkedIn: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) Promenade 18 91522 Ansbach, Germany.

However, we recommend that you always address a complaint, if any, in the first instance to our Data Protection Officer or the data protection contact of the respective platform operator.

If possible, your requests to exercise your rights should be addressed in writing to our address stated in Section I. or directly to our Data Protection Officer in Section II.

XIII. Scope of your obligations to provide data

In principle, you are not obliged to provide us with your personal data. However, if you do not do so, we will not be able to provide you with our website, answer your enquiries, send you information etc. or enter into a contract with you.

XIV. Automated decision-making / profiling

Due to legal requirements, we are obliged to combat money laundering and fraud. This also includes the analysis of data (e.g. for payment transactions). These measures are also designed to protect you.

Otherwise, we do not carry out any profiling and do not use any purely automated decision-making processes in accordance with Art. 22 GDPR. Should we use further procedures in individual cases in the future, we will inform you of this separately.

XV. Information about your right to object, Art. 21 GDPR

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your data which is carried out on the basis of Article 6(1)(f) GDPR (data processing based on balancing of interests) or Article 6(1)(e) GDPR (data processing carried out in the public interest). This also applies to profiling, as defined in Article 4(4) GDPR, based on said provisions.

If you object, we will no longer process your personal data unless we can prove that there are compelling reasons worthy of protection for such processing which outweigh your interests, rights and freedoms, or unless such processing serves the purpose of establishing, exercising or defending legal claims.

We will process your personal data in individual cases also for direct advertising purposes. If you do not wish to receive advertisements, you have the right to object at any time; this also applies to profiling, to the extent carried out in connection with such direct advertising. Your objection, once received, will apply with effect for the future.

In addition, upon receipt of an objection to this effect, we will stop processing your data for direct advertising purposes.

The objection does not need to be in any particular form but should be addressed to the address given in Section I. or II. above, if possible.

XVI. Changes

We reserve the right to amend this privacy policy at any time. Any changes will be notified by posting the revised privacy policy on our website. Unless otherwise specified, such changes will be effective immediately. Therefore, please check this privacy policy periodically to read the most current version.

Last revised in March 2024.