The plantamedium Agentur für Kommunikation, Konzept und Gestaltung GmbH takes the protection of personal data very seriously. We have therefore taken technical and organisational measures to ensure that data protection regulations are observed. All web activities are carried out in accordance with the applicable legal provisions for the protection of personal data and data security. Our security measures are continuously improved in line with technological developments. However, we cannot guarantee complete data security when communicating by e-mail, so we recommend that you send confidential information by post.
According to art. 13 ff. DS-GVO data protection basic regulation, we provide you with the necessary information on data protection here.
§ 1 Information about the collection of personal data
1) In the following we inform about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.
(2) The person responsible pursuant to Art. 4 Para. 7 of the EU Basic Data Protection Regulation (DS-GVO) is
plantamedium Agentur für Kommunikation, Konzept und Gestaltung GmbH, Everswinkeler Straße 7, D-48231 Warendorf, Germany.
You can reach our data protection officer at our postal address with the addition “the data protection officer” or at Datenschutz@plantamedium.de.
(3) When you contact us by e-mail, the data you provide us with (your e-mail address, possibly your name and your enquiry) will be stored by us in order to answer your questions. We will delete the data that arises in this context after it is no longer required to be stored, or restrict processing if there are legal storage obligations.
(4) If we wish to use contracted service providers for individual functions of our offer or to use your data for advertising purposes, we will inform you below in detail about the respective processes. We will also specify the criteria for the storage period.
§ 2 Your rights
(1) You have the following rights against us with regard to the personal data concerning you:
- to request information about your personal data processed by us in accordance with Art. 15 DSGVO. In particular, you may request information on the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right of rectification, deletion, restriction of processing or objection, the existence of a right of complaint, the origin of your data, unless it has been collected from us, as well as the existence of an automated decision making process including profiling and, if applicable, meaningful information on its details;
- in accordance with Art. 16 DSGVO to immediately request the correction of incorrect or incomplete personal data stored by us;
- to demand the deletion of your personal data stored by us in accordance with Art. 17 DSGVO, unless processing is necessary for exercising the right to freedom of expression and information, for fulfilling a legal obligation, for reasons of public interest or for asserting, exercising or defending legal claims;
- to demand the restriction of the processing of your personal data in accordance with Art. 18 DSGVO if the accuracy of the data is disputed by you, the processing is unlawful but you refuse its deletion and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have objected to the processing in accordance with Art. 21 DSGVO;
- in accordance with Art. 20 DSGVO, to receive your personal data which you have provided to us in a structured, common and machine-readable format or to request transmission to another responsible person;
- in accordance with Art. 7 para. 3 DSGVO to revoke your consent once given to us at any time. The consequence of this is that we may no longer continue the data processing based on this consent for the future, and
(2) If your personal data are processed on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f DSGVO, you have the right, pursuant to Art. 21 DSGVO, to object to the processing of your personal data if there are reasons for doing so which arise from your particular situation or if the objection is directed against direct advertising. In the latter case, you have a general right of objection, which is implemented by us without stating a particular situation.
(3) Please send your enquiry/objection to firstname.lastname@example.org or in writing to the following address:
plantamedium Agentur für Kommunikation, Konzept und Gestaltung GmbH,
Everswinkeler Straße 7,
(4) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.
§ 3 Collection of personal data when you visit our website
(1) Bei der bloß informatorischen Nutzung der Website, also wenn Sie sich nicht registrieren oder uns anderweitig Informationen übermitteln, erheben wir nur die personenbezogenen Daten, die Ihr Browser an unseren Server übermittelt. Wenn Sie unsere Website betrachten möchten, erheben wir die folgenden Daten, die für uns technisch erforderlich sind, um Ihnen unsere Website anzuzeigen und die Stabilität und Sicherheit zu gewährleisten (Rechtsgrundlage ist Art. 6 Abs. 1 S. 1 lit. f DS-GVO):
- IP adress
- Date and time of your request
- Contents of the request (concrete page)
- Access status/HTTP status code
- amount of data transferred in each case
- Website from which the request originates browser
- Operating system and its interface
- Language and version of the browser software.
(4) In addition, we also use temporary cookies to optimise user-friendliness, which are stored on your end device for a specific period of time. If you visit our site again to make use of our services, it is automatically recognized that you have already been with us and which inputs and settings you have made so that you do not have to enter them again.
(6) The data processed by cookies are necessary for the purposes mentioned to safeguard our legitimate interests and those of third parties pursuant to Art. 6 Para. 1 S. 1 lit. f DSGVO.
(7) Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. Complete deactivation of cookies may, however, prevent you from using all the functions of our website.
§ 4 Use of Google Analytics
(1) This website uses Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. However, if IP anonymisation is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA where it will be shortened. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator.
(2) The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.
(4) As an alternative to the browser add-on, in particular for browsers on mobile devices, you can also prevent the collection by Google Analytics by clicking on this link. An opt-out cookie is set to prevent your information from being collected in the future when you visit this site. The opt-out cookie applies only to this browser and only to our website and is placed on your device. If you delete the cookies in this browser, you will need to set the opt-out cookie again.
(5) This website uses Google Analytics with the extension “_anonymizeIp()”. This shortens the processing of IP addresses, thus excluding the possibility of personal references. If the data collected about you is related to a person, this is excluded immediately and the personal data is deleted immediately.
(6) We use Google Analytics to analyse and regularly improve the use of our website. The statistics obtained allow us to improve our services and make them more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 Para. 1 S. 1 lit. f DS-GVO.
(6) Third party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
(7) Further information on data protection in connection with Google Analytics can be found in the Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=de).
§ 5 Social Media Plug-ins
(1) We are currently using the following social media plug-ins: [Facebook, Twitter, Xing]. We use the so-called two-click solution. This means that when you visit our site, no personal data is initially passed on to the providers of the plug-ins. You can recognize the provider of the plug-in by the mark on the box above his initial letter or the logo. We offer you the possibility to communicate directly with the provider of the plug-in via the button. Only if you click on the marked field and thereby activate it will the plug-in provider receive the information that you have called up the corresponding website of our online service. In addition, the data mentioned under § 3 of this declaration will be transmitted. In the case of Facebook and Xing, the IP address is made anonymous immediately after collection, according to information provided by the respective providers in Germany. When the plug-in is activated, personal data is transferred from you to the respective plug-in provider and stored there (in the case of US providers in the USA). Since the plug-in provider collects data in particular via cookies, we recommend that you delete all cookies via your browser’s security settings before clicking on the grayed-out box.
(2) We have no influence on the collected data and data processing procedures, nor are we aware of the full scope of data collection, the purposes of processing, the storage periods. We also do not have any information on the deletion of the collected data by the plug-in provider.
(3) The plug-in provider stores the data collected about you as user profiles and uses these for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) to display demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Through the plug-ins, we offer you the opportunity to interact with social networks and other users so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 Para. 1 S. 1 lit. f DS-GVO.
(4) The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, your data collected by us will be assigned directly to your existing account with the plug-in provider. If you press the activated button and, for example, link the page, the plug-in provider also stores this information in your user account and communicates it publicly to your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this allows you to avoid being assigned to your profile by the plug-in provider.
(5) Further information on the purpose and scope of data collection and processing by the plug-in provider can be found in the following data protection declarations of these providers. There you will also find further information on your rights in this regard and setting options to protect your privacy.
(6) Addresses of the respective plug-in providers and URL with their data protection information:
Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; https://www.facebook.com/policy.php; weitere Informationen zur Datenerhebung: https://www.facebook.com/help/186325668085084, https://www.facebook.com/about/privacy/your-info-on-other#applications sowie https://www.facebook.com/about/privacy/your-info#everyoneinfo.
Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy. Twitter has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Xing AG, Gänsemarkt 43, 20354 Hamburg, DE; https://www.xing.com/privacy.
§ 6 Google+ Plug-in
Our website uses so-called social plugins (“plugins”) of the social network Google+, which is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). For example, the plugins can be recognized by buttons with the character “+1” on a white or colored background. An overview of the Google plugins and their appearance can be found here: https://developers.google.com/+/plugins. If you call up a page of our website that contains such a plugin, your browser establishes a direct connection to Google’s servers. The content of the plugin is transmitted by Google directly to your browser and integrated into the page. Through the integration, Google receives the information that your browser has called the corresponding page of our website, even if you do not have a profile on Google+ or are not currently logged in to Google+. This information (including your IP address) is transmitted directly from your browser to a Google server in the USA and stored there. If you are logged in at Google+, Google can assign the visit of our website directly to your Google+ profile. If you interact with the plugins, for example by pressing the “+1” button, the corresponding information is also transmitted directly to a Google server and stored there. The information is also published on Google+ and displayed to your contacts there. The data processing operations described are carried out in accordance with Art. 6 (1) lit.f DSGVO on the basis of Google’s legitimate interests in the display of personalised advertising in order to inform other users of the social network about your activities on our website and to tailor the service to meet your needs. If you do not want Google to associate the data collected via our website directly with your profile on Google+, you must log out of Google+ before visiting our website. You can also opt out of the Google+ plugin loading process and thus the data processing operations described above by using future add-ons for your browser, such as the “NoScript” script blocker (http://noscript.net/). Google LLC, based in the United States, is certified for the U.S. Privacy Shield Agreement, which ensures compliance with EU data protection standards. The purpose and scope of the data collection and the further processing and use of the data by Google as well as your rights in this regard and setting options to protect your privacy can be found in Google’s data protection information: https://www.google.com/intl/de/policies/privacy/.
§ 7 Integration of You-Tube videos
(1) We have included YouTube videos in our online offering that are stored at https://www.YouTube.com and can be played directly from our website. These are all integrated in the “extended data protection mode”, i.e. no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos will the data referred to in paragraph 2 be transmitted. We have no influence on this data transfer.
(2) By visiting the Website, YouTube receives the information that you have accessed the corresponding subpage of our Website. In addition, the data specified under § 3 of this declaration will be transmitted. This occurs regardless of whether YouTube provides a user account that you are logged in to or whether there is no user account. If you are logged in at Google, your data will be assigned directly to your account. If you do not wish your profile to be associated with YouTube, you must log out before activating the button. YouTube stores your data as user profiles and uses them for advertising, market research and/or the design of its website to meet your needs. Such evaluation is carried out in particular (even for users who are not logged in) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.
§ 8 Integration of Google Maps
(1) On this website we use the services of Google Maps. This enables us to display interactive maps directly on the website and enables you to use the map function conveniently.
(2) By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under § 3 of this declaration will be transmitted. This takes place regardless of whether Google provides a user account that you are logged in to or whether there is no user account. If you are logged in at Google, your data will be assigned directly to your account. If you do not want your profile to be associated with Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for advertising, market research and / or needs-based design of its website. Such evaluation is carried out in particular (even for users who are not logged in) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right.
§ 9 Comments
As part of the comment function on this website, in addition to your comment, information about the time the comment was created and the name of the commentary you have chosen will also be stored and published on the website. Your IP address will also be logged and stored. This IP address is stored for security reasons and in the event that the person concerned violates the rights of third parties by submitting a comment or posts illegal content. We need your e-mail address in order to contact you if a third party should object to your published content as unlawful. The legal basis for the storage of your data is Art. 6 para. 1 lit.b and f DSGVO. As a user of the site, you can also subscribe to comments after registering. You will receive a confirmation e-mail to check whether you are the owner of the e-mail address provided. You can unsubscribe from this function at any time via a link in the info mails.
§ 10 Use and disclosure of personal data
If you have provided us with personal data, we will use it to answer your questions, to advise and process contracts concluded with you, and for technical administration. Your personal data will only be passed on to third parties or otherwise transmitted if this is necessary for the purpose of processing the contract, for billing purposes or if you have given your prior consent. You have the right to revoke your consent with effect for the future at any time, see also § 2 concerning your rights concerned. Within the framework of contracts concluded with you, we collect and store the personal data transmitted by you for the purpose of contract processing, e.g. also for billing purposes. The data is passed on to banks as part of the billing process. The accounting data is transferred to the tax office and the tax office within the framework of tax law requirements. The legal basis for the collection and processing of the data is Art. 6 para. 1 (b) DS-GVO. The legal basis for the transfer of data to the tax office and tax office is Art. 6 para. 1 (c) DS-GVO. The deletion of this data takes place after the expiry of the applicable legal storage obligations. Insofar as we are not subject to any statutory storage obligations, the data shall be deleted when the purpose ceases to apply.
§ 11 Further functions and offers on our website
(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested. For this purpose, you must generally provide further personal data which we use to provide the respective service and to which the aforementioned data processing principles apply.
(2) In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are checked regularly.
(3) Furthermore, we may pass on your personal data to third parties if this is necessary for the execution of the contract, for the enforcement of our rights, in particular for the enforcement of claims arising from contractual relationships, and for the protection of our own justified business interests with regard to the consultation and support of our customers, as well as for the conclusion of contracts or similar services offered by us together with partners. You will receive more detailed information on this when you enter your personal data or in the description of the offer below.
(4) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this circumstance in the description of the offer.
§ 12 Amendment of the data protection declaration
We reserve the right to update this privacy statement from time to time, in particular to reflect changing legislation or jurisdiction. We therefore recommend that you visit this website regularly so that you are informed about the protection and processing of your data.
§ 13 General information
We also take internal company data protection very seriously.
The relevant legal regulations require that personal data be processed in such a way that the rights of the persons affected by the processing to confidentiality and integrity of their data are guaranteed. These rules prohibit the unauthorized or unlawful processing of personal data or the intentional or unintentional breach of the security of the processing in a manner that results in destruction, loss, alteration, unauthorized disclosure or access. Our employees have therefore been obliged by us to secrecy and in particular to comply with the provisions of data protection law to maintain confidentiality in accordance with Art. 5 Para. 1 f, Art. 32 Para. 4 Data Protection Basic Regulation (DS-GVO).
Accordingly, employees are prohibited from processing or using personal data without authorisation or from making such data accessible to third parties in any form whatsoever. If we commission external service providers to process personal data for the first time, they are contractually obliged to comply with the requirements of Art. 28 DS-GVO.
For interested parties, new customers and other affected parties
With the following information we would like to give you an overview of the processing of your personal data by us and your rights under data protection law (DS-GVO/ BDSG). Which data is processed in detail and how it is used depends largely on the services requested or agreed. Therefore not all parts of this information will apply to you. Who is responsible for data processing and who can I contact?
The responsible body is the:
Tel. 02581- 92790- 0
You can reach our operational data protection officer under:
1. What sources and data do we use?
We process personal data that we receive from our customers or other affected parties within the scope of our business relationship. In addition, we process – to the extent necessary for the provision of our services – personal data which we obtain from publicly accessible sources (e.g. trade and association registers, press, Internet) or which is transmitted to us by other companies of our group members or by other third parties (e.g. a credit reference agency).
Relevant personal data are personal data (name, address and other contact data, date and place of birth as well as nationality), identification data (e.g. identity card data). In addition, this can also include order data (e.g. payment order), data from the fulfilment of our contractual obligations (e.g. turnover data in payment transactions), information about your financial situation (e.g. creditworthiness data), as well as other data comparable with the aforementioned categories.
2. What do we process your data for (purpose of processing) and on what legal basis?
We process personal data in accordance with the provisions of the EU Basic Data Protection Regulation (DSGVO) and the German Federal Data Protection Act (BDSG).
a. for the performance of contractual obligations (Art. 6 para. 1 b DSGVO)
The processing of data is carried out to provide our production and services within the framework of the execution of our contracts with our customers or to carry out pre-contractual measures, which are carried out on request. The purposes of the data processing depend primarily on the concrete product or the concrete service. For further details on data processing purposes, please refer to the relevant contractual documents and terms and conditions.
b. as part of the balancing of interests (Art. 6 para. 1 f DSGVO)
If necessary, we process your data beyond the actual fulfilment of the contract to protect the legitimate interests of us or third parties:
- Measures for business management and further development of services and products,
- Advertising unless you have objected to the use of your data,
- Assertion of legal claims and defence in legal disputes,
- Ensuring the IT security and IT operations of our company,
- Prevention and investigation of criminal offences,
- Video surveillance for the protection of the house right, for the collection of evidence with robberies
- Measures for building and plant security (e.g. access controls),
- Measures to secure the householder’s title,
- Risk management in the company
c. on the basis of your consent (Art. 6 para. 1 a DSGVO)
If you have given us permission to process personal data for specific purposes (e.g. newsletter dispatch, etc.), the legality of this processing on the basis of your consent is given. A given consent can be revoked at any time. This also applies to the revocation of declarations of consent given to us before the DSGVO came into force, i.e. before 25 May 2018. The revocation of a consent only takes effect for the future and does not affect the legality of the data processed until the revocation.
3. Who gets my data?
Within the company, those departments that need your data to fulfil our contractual and legal obligations will have access to it. Service providers and vicarious agents employed by us may also receive data for these purposes. These are companies in the categories IT services, logistics, printing services, telecommunications, consulting as well as sales and marketing.
4. Is data transferred to a third country or to an international organisation?
A data transfer to places in states outside the European Union (so-called third states) takes place, insofar as:
- it is necessary for the execution of your orders (e.g. payment orders),
- it is required by law (e.g. tax reporting obligations) or
- you have given us your consent.
Furthermore, a transfer to offices in third countries is planned in the following cases:
- If this is necessary in individual cases, your personal data may be transferred to an IT service provider in the USA or another third country in order to ensure the IT operation of the
- company in compliance with the European level of data protection.
- Personal data of interested parties in our products and services can also be processed in the USA within the framework of a CRM system with their consent.
- With the consent of the person concerned or on the basis of legal regulations to combat money laundering, terrorist financing and other criminal acts as well as within the framework of a weighing of interests, in individual cases personal data (e.g. legitimation data) are transmitted in compliance with the data protection level of the European Union.
5. How long will my data be stored?
We process and store your personal data as long as this is necessary for the fulfilment of our contractual and legal obligations. It should be noted that our business relationship is a continuing obligation, which is intended to last for years.
If the data are no longer required for the fulfilment of contractual or legal obligations, they are regularly deleted, unless their – temporary – further processing is necessary for the following purposes:
- Fulfilment of commercial and tax retention obligations, which may result, for example, from: Commercial Code (HGB), Tax Code (AO), Money Laundering Act (GwG). The time limits specified there for storage and documentation are usually two to ten years.
- Preservation of evidence within the framework of the statutory statute of limitations. According to §§ 195 ff of the German Civil Code (BGB) these limitation periods can be up to 30 years, whereby the regular limitation period is 3 years.
6. What data protection rights do I have?
Every data subject has the right of access under Article 15 DSGVO, the right of rectification under Article 16 DSGVO, the right of cancellation under Article 17 DSGVO, the right of limitation of processing under Article 18 DSGVO, the right to object under Article 21 DSGVO and the right to data transfer under Article 20 DSGVO. The restrictions under §§ 34 and 35 BDSG apply to the right to information and the right to cancellation. In addition, there is a right of appeal to a competent data protection supervisory authority (Article 77 DSGVO in conjunction with § 19 BDSG).
7. Is there an obligation for me to provide data?
Im Rahmen unserer Geschäftsbeziehung müssen Sie diejenigen personenbezogenen Daten bereitstellen, die für die Aufnahme, Durchführung und Beendigung einer Geschäftsbeziehung und zur Erfüllung der damit verbundenen
vertraglichen Pflichten erforderlich sind oder zu deren Erhebung wir gesetzlich verpflichtet sind. Ohne diese Daten werden wir in der Regel nicht in der Lage sein, einen Vertrag mit Ihnen zu schließen, diesen auszuführen und zu beenden.
Information about your right of objection according to Article 21 (Data Protection Basic Regulation) DSGVO
1. Right of objection in individual cases
You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data on the basis of Article 6 (1e) DSGVO (data processing in the public interest) and Article 6 (1f) DSGVO (data processing on the basis of a balancing of interests); this also applies to profiling based on this provision within the meaning of Article 4 (4) DSGVO.
If you file an objection, your personal data will no longer be processed unless we can prove compelling reasons for processing worthy of protection which outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise and defence of legal claims.
2. Right to object to the processing of data for the purposes of direct marketing
In individual cases we process your personal data in order to operate direct advertising. You have the right at any time to object to the processing of your personal data for the purpose of such advertising; this also applies to profiling, insofar as it is connected with such direct advertising.
If you object to the processing for purposes of direct marketing, we will no longer process your personal data for these purposes.
The objection can be made without form and should be addressed to:
Everswinkeler Str. 7
Or via e-Mail to: email@example.com.
Translated with https://deepl.com