Data privacy statement
Data privacy statement
1. Name and contact details of the controller and the company data protection officer
This data protection information applies to data processing by:
Controller: Delta Packaging Services GmbH, Siemensstr. 8, 50259 Pulheim
The responsible party: Delta Packaging Services GmbH, Siemensstr. 8, 50259 Pulheim The company privacy officer of Delta Packaging Services GmbH can be contacted at the above-named address, FAO Mr. Christian Adolphy, or by e-mail at christian.adolphy@ca-c.de / Tel. 0611-408096-90.
2. Collection and storage of personal data and the type and purpose of their use
a) When visiting the website
When accessing our website www.deltapackaging.de information is automatically sent to the server of our website by the browser used on your device. This information is temporarily stored in a so-called log file. The following information is collected without any action on your part and stored until it is automatically deleted:
- IP address of the requesting computer,
- Date and time of access,
- Name and URL of the retrieved file,
- Website from which access is made (referrer URL),
- the browser used and, if applicable, the operating system of your computer and the name of your access provider.
We process the aforementioned data for the following purposes:
- Ensuring a smooth connection to the website,
- To ensure a comfortable use of our website,
- Evaluation of system security and stability and
- for other administrative purposes.
The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the purposes for data collection listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your person.
We also use cookies and analysis services when you visit our website. You can find more detailed explanations on this under Sect. 4 and 5 of this privacy policy.
b) When using our contact form
For questions of any kind, we offer you the opportunity to contact us via a form provided on the website. It is necessary to provide a valid e-mail address so that we know who sent the request and can answer it. Further information can be provided voluntarily.
Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR on the basis of your voluntarily given consent. The personal data collected by us for the use of the contact form will be deleted at the end of the year.
3. Disclosure of data
Your personal data will not be transferred to third parties for purposes other than those listed below. We only pass on your personal data to third parties if:
- You have given your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR have given your express consent to this,
- the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary for the establishment, exercise or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data,
- in the event that the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR there is a legal obligation, and
- this is legally permissible and in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR for the processing of contractual relationships with you.
4. Cookies
We use cookies on our website. These are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware.
Information is stored in the cookie that results in each case in connection with the specific end device used. However, this does not mean that we obtain direct knowledge of your identity.
On the one hand, the use of cookies serves to make the use of our website more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after you leave our site.
In addition, we also use temporary cookies to optimize user-friendliness, which are stored on your end device for a specified period of time. If you visit our site again to use our services, it is automatically recognized that you have already visited us and which entries and settings you have made so that you do not have to enter them again.
On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you (see section 5). These cookies enable us to automatically recognize that you have already visited our website when you visit it again. These cookies are automatically deleted after a defined period of time.
The data processed by cookies are necessary for the purposes mentioned to protect our legitimate interests and those of third parties in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR required.
Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, completely deactivating cookies may mean that you cannot use all the functions of our website.
5. Analysis tools
Tracking tools
The tracking measures listed below and used by us are carried out on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR are carried out. With the tracking measures used, we want to ensure a needs-based design and the continuous optimization of our website. On the other hand, we use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you. These interests are to be regarded as legitimate within the meaning of the aforementioned provision.
The respective data processing purposes and data categories can be found in the corresponding tracking tools.
Cookie consent with Usercentrics
This website uses Usercentrics’ cookie consent technology to obtain your consent to the storage of certain cookies on your end device and to document this in compliance with data protection regulations. The provider of this technology is Usercentrics GmbH, Rosental 4, 80331 Munich, Germany, website: https://usercentrics.com/de/ (hereinafter referred to as “Usercentrics”).
When you enter our website, the following personal data is transmitted to Usercentrics:
- Your consent(s) or the withdrawal of your consent(s)
- Your IP address
- Information about your browser
- Information about your end device
- Time of your visit to the website
Furthermore, Usercentrics stores a cookie in your browser in order to be able to assign the consents you have given or revoke them. The data collected in this way is stored until you ask us to delete it, delete the Usercentrics cookie yourself or the purpose for storing the data no longer applies. Mandatory statutory retention obligations remain unaffected.
Usercentrics is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 sentence 1 lit. c GDPR.
Contract on order processing
We have concluded a contract on order processing with Usercentrics. This is a contract required by data protection law, which ensures that Usercentrics processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
Matomo
We use the open source software Matomo to analyze and statistically evaluate the use of the website. Cookies are used for this purpose (see section 4). The information generated by the cookie about website usage is transmitted to our servers and summarized in pseudonymous usage profiles. The information is used to evaluate the use of the website and to enable a needs-based design of our website. The information is not passed on to third parties.
Under no circumstances is the IP address associated with other data relating to the user. The IP addresses are anonymized so that an assignment is not possible (IP masking).
If you do not agree with the storage and use of your data, you can deactivate the storage and use here. In this case, an opt-out cookie is stored in your browser that prevents Matomo from storing usage data. If you delete your cookies, the Matomo opt-out cookie will also be deleted. The opt-out must be reactivated when you visit our site again.
INFO: A Matomo opt-out cookie is set for this website. Your visit to this website is currently not recorded by Matomo web analytics.
6. Plugins and tools
YouTube with extended data protection
Our website uses plugins from the YouTube website. The operator of the pages is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.
We use YouTube in extended data protection mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, the transfer of data to YouTube partners is not necessarily excluded by the extended data protection mode. For example, YouTube establishes a connection to the Google DoubleClick network regardless of whether you watch a video.
As soon as you start a YouTube video on our website, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.
Furthermore, YouTube can store various cookies on your end device after starting a video. With the help of these cookies, YouTube can obtain information about visitors to our website. This information is used, among other things, to record video statistics, improve user-friendliness and prevent fraud attempts. The cookies remain on your device until you delete them.
After the start of a YouTube video, further data processing operations may be triggered over which we have no influence.
The use of YouTube is in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
Further information about data protection at YouTube can be found in their privacy policy at https://www.youtube.com/t/privacy_at_youtube
7. Rights of data subjects
You have the right:
- in accordance with Art. 15 GDPR, to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
- in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us;
- in accordance with Art. 17 GDPR, to demand the deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
- in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR;
- in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller
- in accordance with Art. 7 para. 3 GDPR, you have the right to withdraw your consent at any time. As a result, we may no longer continue the data processing that was based on this consent in the future and
- to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority at your usual place of residence or workplace or at the registered office of our law firm.
8. Right of objection
If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation.
If you wish to exercise your right of revocation or objection, simply send an e-mail to delta.pulheim@dssmith.com.
9. Data security
We use the widespread SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser for the contact form when you visit the website.
As a rule, this is 256-bit encryption.
If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead.
You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.
We also use suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties.
Our security measures are continuously improved in line with technological developments.
Data protection policy for
Customers and suppliers of the
DS Smith Group
This policy applies to
(i) customers and suppliers of DS Smith Plc (the “Company”, “we” or “us” at 350 Euston Road, London, United Kingdom, NW1 3AX, or any of DS Smith Plc’s group companies; and
(ii) users of the website www.dssmith.com or any relevant sub-domain (together referred to as the “Website”) operated by DS Smith Plc or any of its group companies.
The Company recognizes the importance of open and responsible use of your personal data.
This Privacy and Cookies Policy (“Policy”) explains how the Company collects, uses and discloses your personal information both in the course of ordinary business transactions with us and when you visit a DS Smith website.
What kind of data does the company collect from its customers and suppliers and why?
We collect data that is necessary to contact you as a customer or supplier of DS Smith to discuss and/or fulfill our contractual obligations to you.
What types of personal data does the company collect?
The categories of personal data that we collect are listed below:
- Your full name and title
- Your business contact details such as address, telephone numbers and e-mail address
- The reason you are contacting us – this may be a concern or request on your own behalf, a concern or request on behalf of another person, a customer service request or a comment or information relating to a potential or existing order or service agreement
- When you create an online account – your username, password, email address and full name, address and phone numbers
- Your preferred contact medium and marketing communication preferences (after obtaining consent where required by law)
- Information required for legal compliance
We primarily collect information voluntarily provided by you, but to the extent permitted by law, we may also obtain it from public sources, third parties, individuals with whom you have agreed to share personal information, government agencies, tax or law enforcement authorities and other third parties (and merge it with the relevant information from these sources).
We may also collect personal data from your use of services provided by group companies of the Company.
How does the Company use your data?
The Company may use your data for the purposes set out in this Policy or disclosed on the Website or as part of our services.
For example, we may use your data for the following purposes:
- Response to or processing of your request or inquiry
- For internal documentation
- Contacting you (directly, either by the company or by one of its group companies or by a partner or representative) by email or telephone for the reasons set out above
- In accordance with your consent, where required by law, to carry out direct marketing and/or email marketing activities that you have requested
- If applicable, as part of a restructuring of the company or the sale of a part of the company or assets of the Group
- Execution of contracts between you and the Group
- Compliance with legal, regulatory and other government requirements
Some of the personal data that the company stores is kept in paper format, other personal data is kept as digital files and in electronic databases in accordance with the following explanations.
In most cases, the processing of your data by the Company is necessary to process your request, required by law, necessary to fulfill contractual obligations or necessary to protect the Company’s legitimate business interests and requirements.
In this case, special care will be taken to protect your rights and ensure that such use is appropriate.
What is the legal basis for the use of personal data?
The legal basis for the processing of your personal data by us includes the following:
- In some cases, we process your data with your consent (for example, if you consent to us placing cookies on your computer or processing data that you enter on our website).
- In other cases, we process your data if this is necessary for the performance of a contract with you (e.g. for billing purposes) or if we are legally obliged to do so (e.g. to comply with statutory retention obligations).
- We also process your data if this corresponds to our legitimate interests and if your data protection rights do not take precedence over these interests (including, for example, the transfer of data to our group companies).
Does the company pass on personal data to third parties?
Your personal data will be provided on a need-to-know basis for the purposes set out above (or as otherwise notified to you) and only to management, sales/customer service teams, legal, logistics, audit, compliance, IT and other company personnel who have a need to know due to their role within the Group.
Certain individuals who view your personal data may not be located directly within the company or in your country (see below).
We may share personal data within the Group as required, if this is appropriate and necessary for administration, analysis, planning and decision-making.
Your personal data may also be provided to third parties (within or outside the Group) who provide relevant services under their contract with the Group (further information below), such as auditors and compliance managers, service providers or call centers, and IT hosting and IT maintenance providers.
These third parties may use your data to perform their function on our behalf.
The company has taken numerous security and data protection measures, including with these third parties, to protect personal data and ensures compliance with applicable legal requirements.
We may disclose certain information in response to legitimate requests by governmental, law enforcement and regulatory authorities, when required or permitted by law, and for tax and other purposes.
Personal data may also be disclosed to third parties in response to legal process where we are required to comply with certain laws, to enforce our agreements, company policies and terms of use, or to protect the rights, property or safety of the Group, our employees, agents, customers and others, and to parties to whom the Company may disclose your personal data based on your authorization.
Your personal data will not be sold to third parties, with the exception of the restructuring of the Group or the sale of a part of the company or assets of the Group.
Will your personal data be transferred abroad?
Some transfers of personal data have already been mentioned above.
Individuals in the European Economic Area (“EEA”) should be aware that the recipients of their personal data, within the Group or third parties (as explained in this Policy) may not be located in the EEA, but in countries whose protection of personal data is not up to the standard within the EEA.
In this case, care will be taken to protect your personal data in accordance with the applicable laws.
For example, data will be adequately protected by standard contractual clauses approved by the EU Commission, appropriate EU-USA Framework certification or binding corporate rules for vendors’ processors.
A copy of the relevant mechanism can be provided on request for illustrative purposes at the following email address: corporate@dssmith.com.
What choices does the Company offer in relation to direct marketing?
The Company may send you information about new products, services, promotions and offers that may be of interest to you and may invite you to participate in market analysis activities or ask for your feedback on the Group’s products and services.
Such communication may be by email, telephone, post or SMS.
Where we are required to do so by law, we will obtain your consent and inform you how to opt out of receiving these communications.
Contact/address details
If you have any questions about this privacy policy, please contact us at the following address:
Legal Team
DS Smith Plc
350 Euston Road
Regent’s Place
London
NW1 3AX
You can contact our data protection officer for Germany, Mr. Christian Adolphy, at the e-mail address datenschutz.de@dssmith.com .
