Data Privacy

With the following data privacy declaration, we, Gerhard Schubert GmbH, inform you about what will happen with your personal data when you visit websites of the Schubert Group or use online services of the Schubert Group.

To put it briefly, "personal data" is any information that can be used to identify you personally. A more detailed description of the term "personal data" (hereinafter also referred to as "data") can be found in Section 2.

Who records your data?

Unless expressly stated otherwise, data processing on the websites of the Schubert Group and when using online services is carried out by Gerhard Schubert GmbH as the entity responsible for data processing. Their contact details can be found below in Section 2.

How do we record your data?

We collect your data as a result of your sharing of your data with us. This may, for instance be information you enter in our contact form or provide to us as part of your registration for an online service.

Other data is collected automatically when you visit our website or when you use our online services.

What are the purposes we use your data for?

A portion of the information is generated to guarantee the error free provision of the website. Other data may be used to analyse your user patterns.This is primarily technical data (e.g. Internet browser, operating system or time of the page view).

We also process the data collected in order to make the respective online service available to you for use as agreed.

What rights do you have as far as your information is concerned?

You have the right to receive information about the source, recipients and purposes of your archived personal data free of charge. You also have the right to demand that your data are rectified, blocked or eradicated.

Please do not hesitate to contact us at any time under the address disclosed in section "Information Required by Law" or in Section 2 below if you have any further questions on the subject of data protection. You also have the right to log a complaint with the competent supervising agency. Moreover, under certain circumstances, you have the right to demand the restriction of the processing of your personal data.

Further information on your rights as a person concerned can be found below in Section 2.

Analysis tools and tools provided by third parties

There is a possibility that your browsing patterns will be statistically analysed when your visit our website. Such analyses are performed primarily with cookies and with what we refer to as analysis programs. As a rule, the analyses of your browsing patterns are conducted anonymously; i.e. the browsing patterns cannot be traced back to you. You have the option to object to such analyses or you can prevent their performance by not using certain tools. For detailed information about this, please consult our Data Protection Declaration below. You do have the option to object to such analyses. We will brief you on the objection options in this Data Protection Declaration.

Data protection and personal data

The Schubert Group takes the protection of your personal data very seriously. This means we handle your personal data as confidential information and in compliance with the statutory data protection regulations and this Data Protection Declaration.

"Personal data" means any information relating to an identified or identifiable natural person - hereinafter also referred to as "person concerned". An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Personal data is also referred to below as "data" for short.

When you use Schubert Group websites or utilise functionalities and/or services available via the Internet - hereinafter referred to collectively as "online services" - of the Schubert Group, various personal data are collected. This Data Protection Declaration explains which data we collect as well as the purposes we use this data for. It also explains how, and for which purpose the information is collected.

We herewith advise you that the transmission of data via the Internet (e.g. through e-mail communications) may be prone to security gaps. It is not possible to completely protect data against third party access.

Information about the responsible party (referred to as the "controller" in the GDPR)

Unless a different controller is named for individual online services, the following applies:

The data processing controller on this website is:
Gerhard Schubert GmbH
Verpackungsmaschinen
Industriegebiet Südost
Hofäckerstraße 7
74564 Crailsheim
Germany

Phone: 0 79 51 4 00 - 0
E-mail: info@gerhard-schubert.de

The controller is the natural person or legal entity that single-handedly or jointly with others makes decisions as to the purposes of and resources for the processing of personal data (e.g. names, e-mail addresses, etc.).

Revocation of your consent to the processing of data

Some data processing transactions are only carried out subject to your express consent. You can revoke your consent at any time effective for the future. To do so, all you are required to do is send us an informal notification via e-mail. This shall be without prejudice to the lawfulness of any data collection that occurred prior to your revocation.

After receipt of your revocation by the responsible body, the relevant processing of your data will be stopped immediately. If the data processing was necessary for the provision of our websites or for your use of our online services, this may result in restrictions in the further use of the websites or online services concerned or even in their unavailability.

Right to object to the collection of data in special cases; right to object to direct advertising (Art. 21 GDPR)

In the event that data are processed on the basis of Art. 6 Sect. 1 lit. e or f GDPR, you have the right as a person concerned to object at any time to the processing of your personal data based on grounds arising from your unique situation. This also applies to any profiling based on these provisions. To determine the legal basis, on which any processing of data is based, please consult this Data Protection Declaration. If you log an objection, we will no longer process your affected personal data, unless we are in a position to present compelling protection worthy grounds for the processing of your data, that outweigh your interests, rights and freedoms or if the purpose of the processing is the claiming, exercising or defence of legal entitlements (objection pursuant to Art. 21 Sect. 1 GDPR).

If your personal data is being processed in order to engage in direct advertising, you have the right to at any time object to the processing of your affected personal data for the purposes of such advertising. This also applies to profiling to the extent that it is affiliated with such direct advertising. If you object, your personal data will subsequently no longer be used for direct advertising purposes (objection pursuant to Art. 21 Sect. 2 GDPR).

Right to log a complaint with the competent supervisory agency

In the event of violations of the GDPR, data subjects are entitled to log a complaint with a supervisory agency, in particular in the member state where they usually maintain their domicile, place of work or at the place where the alleged violation occurred. The right to log a complaint is in effect regardless of any other administrative or court proceedings available as legal recourses.

Right to data portability

You have the right to demand that we hand over any data we automatically process on the basis of your consent or in order to fulfil a contract be handed over to you or a third party in a commonly used, machine readable format. If you should demand the direct transfer of the data to another controller, this will be done only if it is technically feasible.

SSL and/or TLS encryption

For security reasons and to protect the transmission of confidential content, such as purchase orders or inquiries you submit to us as the website operator, our websites and online services use either an SSL or a TLS encryption program. You can recognise an encrypted connection by checking whether the address line of the browser switches from "http://" to "https://" and also by the appearance of the lock icon in the browser line. When the SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.

Information about, blockage, rectification and eradication of data

Within the scope of the applicable statutory provisions, you have the right as a person concerned to demand at any time information about your archived personal data, their source and recipients as well as the purpose of the processing of your data. You may also have a right to have your data rectified, blocked or eradicated.

Right to demand processing restrictions

As a person concerned, you have the right to demand the imposition of restrictions as far as the processing of your personal data is concerned. The right to demand restriction of processing applies in the following cases:

• In the event that you should dispute the correctness of your data archived by us, we will usually need some time to verify this claim. During the time that this investigation is ongoing, you have the right to demand that we restrict the processing of your personal data.
• If the processing of your personal data was/is conducted in an unlawful manner, you have the option to demand the restriction of the processing of your data in lieu of demanding the eradication of this data.
• If we do not need your personal data any longer and you need it to exercise, defend or claim legal entitlements, you have the right to demand the restriction of the processing of your personal data instead of its eradication.
• If you have raised an objection pursuant to Art. 21 Sect. 1 GDPR, your rights and our rights will have to be weighed against each other. As long as it has not been determined whose interests prevail, you have the right to demand a restriction of the processing of your personal data.
• If you have restricted the processing of your personal data, these data – with the exception of their archiving – may be processed only subject to your consent or to claim, exercise or defend legal entitlements or to protect the rights of other natural persons or legal entities or for important public interest reasons cited by the European Union or a member state of the EU.

Our rejection of unsolicited e-mails

We herewith object to the use of contact information published in conjunction with the mandatory information to be provided in section "Information Required by Law" to send us promotional and information material that we have not expressly requested.

In particular, Gerhard Schubert GmbH as the operator of this website and its pages reserve the express right to take legal action in the event of the unsolicited sending of promotional information, for instance via SPAM messages.

Designation of a data protection officer as mandated by law
We have appointed a data protection officer for our companies.

Gerhard Schubert GmbH:
Samantha Pittlik
E-mail: datenschutz@gerhard-schubert.de

Schubert Packaging Systems GmbH
Leonie Köhnlein
E-mail: datenschutz@schubert-packaging-systems.com

Schubert Fertigungstechnik GmbH
Klaus Henne
E-mail: klaus.henne@schubert-fertigungstechnik.de

Schubert Additive Solutions GmbH
Samantha Pittlik
E-mail: datenschutz@gerhard-schubert.de

Cookies

In some instances, our website and its pages use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. The purpose of cookies is to make our website more user friendly, effective and more secure. Cookies are small text files that are placed on your computer and stored by your browser.

Most of the cookies we use are so-called "session cookies". They are automatically deleted after your leave our site. Other cookies will remain archived on your device until you delete them. These cookies enable us to recognise your browser the next time you visit our website.

You can adjust the settings of your browser to make sure that you are notified every time cookies are placed and to enable you to accept cookies only in specific cases or to exclude the acceptance of cookies for specific situations or in general and to activate the automatic deletion of cookies when you close your browser. If you deactivate cookies, the functions of this website may be limited.

Cookies that are required for the performance of the electronic communications transaction or to provide certain functions you want to use (e.g. the shopping cart function), are stored on the basis of Art. 6 Sect. 1 lit. f GDPR. The website operator has a legitimate interest in storing cookies to ensure the technically error free and optimised provision of the operator’s services. If other cookies (e.g. cookies for the analysis of your browsing patterns) are stored, they are addressed separately in this Data Protection Declaration.

Server log files

The provider of this website and its pages automatically collects and stores information in so-called server log files, which your browser communicates to us automatically. These are:

• Browser type and version used
• Operating system used
• Referrer URL
• Host name of accessing computer
• Time of server inquiry
• IP address

This data is not merged with other data sources.

This data is recorded on the basis of Art. 6 Sect. 1 lit. f GDPR. The operator of the website has a legitimate interest in the technically error free depiction and the optimization of the operator's website. In order to achieve this, server log files must be recorded.

Contact form

If you submit inquiries to us via our contact form, the information provided in the contact form as well as any contact information provided therein will be stored by us in order to handle your inquiry and in the event that we have further questions. We will not share this information without your consent.

As a result, the processing of the data entered into the contact form occurs exclusively based on your consent (Art. 6 Sect. 1 lit. a GDPR).

The information you have entered into the contact form shall remain with us until you ask us to eradicate the data, revoke your consent to the archiving of data or if the purpose for which the information is being archived no longer exists (e.g. after we have concluded our response to your inquiry). This shall be without prejudice to any mandatory legal provisions – in particular retention periods.

Registration on this website

You have the option to register on our website to be able to use additional website functions. We shall use the data you enter only for the purpose of using the respective offer or service you have registered for. The required information we request at the time of registration must be entered in full. Otherwise we shall reject the registration.

To notify you of any important changes to the scope of our portfolio or in the event of technical modifications, we shall use the e-mail address provided during the registration process.

We shall process the data entered during the registration process on the basis of your consent (Art. 6 Sect. 1 lit. a GDPR).

The data recorded during the registration process shall be stored by us as long as you are registered on our website. This shall be without prejudice to mandatory statutory retention obligations.

Processing of data (customer and contract data)

In addition, we collect, process and use personal data only to the extent necessary for the establishment, content organization or change of the legal relationship (data inventory). These actions are taken on the basis of Art. 6 Sect. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual actions. We collect, process and use personal data concerning the use of our website (usage data) only to the extent that this is necessary to make it possible for users to utilize the services and to bill for them.

The collected customer data shall be eradicated upon completion of the order or the termination of the business relationship. This shall be without prejudice to mandatory statutory retention obligations.

Registration

If you register for the use of functionalities and/or services available via the Internet - collectively referred to as "online services" - of the Schubert Group, we process your relevant details such as your user name and/or real name, your e-mail address if applicable, and a password (access data).

This is primarily carried out for the purpose of establishing your identity as a user of the online service in question. The basis for this data processing is Art. 6 Sect. 1 lit. b GDPR and Art. 6 Sect. 1 lit. f GDPR.

Access to online services

When you access and use an online service, access data is usually collected. These are, for example, the user name, the IP address, the date of access, the hardware used and its operating system.

This is undertaken for the purpose of recognising your identity as a user of the relevant online service, for the contractual provision of the relevant functions or for the optimisation of our online services. The basis for this data processing is Art. 6 Sect. 1 lit. b GDPR and Art. 6 Sect. 1 lit. f GDPR.

Data that you make available to us in connection with its use

We process personal data that you voluntarily disclose to us when using the relevant online service. We use this data to provide you with the functions of the respective online service in accordance with the contract and to offer you a high-quality user experience.

This data processing is carried out on the basis of Art. 6 Sect. 1 lit. a GDPR and Art. 6 Sect. 1 lit. b GDPR.

If you do not provide voluntary information or provide it incorrectly, this may mean that some functions of the relevant online service cannot be used or do not work properly or provide incorrect results.

Other usage data

During your use of the online service in question, we process such personal data that must be processed for the provision of the functions available within the respective online service and for their use by you.

The purpose of this data processing is the contractual provision of the relevant functions. The basis for data processing is Art. 6 Sect. 1 lit. b GDPR.

Cookies

Similar to our websites, our online services may also use cookies. For a more detailed explanation of the term, please see Section 4. Further information on the cookies used can be found in the cookie policy of the respective online service.

Hosting

Insofar as we use external hosting providers for the operation of our online services, the data is stored and processed on servers located within the European Union. The legal basis for this data transfer and processing is Art. 6 Sect. 1 lit. b GDPR and Art. 6 Sect. 1 lit. f GDPR.

Our hosting providers only process the data to the extent that this is necessary to fulfil their service obligations. We have concluded an order processing contract with our hosting providers.

Duration of data storage; data deletion

We only store your data collected in the course of using our online services for the period of time required to fulfil the purpose of storage or if this is provided for in laws or regulations. We will delete or anonymise your data once the purpose or statutory storage period has expired or been fulfilled.

Newsletter data

If you would like to subscribe to the newsletter offered on this website, we will need from you an e-mail address as well as information that allow us to verify that you are the owner of the e-mail address provided and consent to the receipt of the newsletter. No further data shall be collected or shall be collected only on a voluntary basis. We shall use such data only for the sending of the requested information and shall not share such data with any third parties.

The processing of the information entered into the newsletter subscription form shall occur exclusively on the basis of your consent (Art. 6 Sect. 1 lit. a GDPR). You may revoke the consent you have given to the archiving of data, the e-mail address and the use of this information for the sending of the newsletter at any time, for instance by clicking on the "Unsubscribe" link in the newsletter. This shall be without prejudice to the lawfulness of any data processing transactions that have taken place to date.

The data you archive with us for the purpose of the newsletter subscription shall be archived by us until you unsubscribe from the newsletter. Once you cancel your subscription to the newsletter, the data shall be deleted. This shall not affect data we have been archiving for other purposes.

We operate a so-called fan page (hereinafter “Facebook page”) on the social media network Facebook of Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Irland, on which we inform about news and events from our company.

Data processing on Facebook page and legal basis therefor

So-called page insights are collected solely through your visit to our Facebook page. These page insights are data collected in connection with a visit to our Facebook Page or an interaction on or with our Page that tells us how users interact with our Facebook Page. This includes, for example, information about the end devices that visit our site (such as operating system, hardware and software versions, browser type) as well as information for example about how long a user views certain posts on our Facebook page. Page insights may be based on personal data. If you are also logged into your Facebook Account, Facebook may add the processed information to your account and treat it as personally identifiable information, depending on your account settings. For more information about the data processing through Facebook, please also have a look at https://de-de.facebook.com/about/privacy.

As the operator of the Facebook page, Facebook makes these page insights available to us in anonymous form. These page insights enable us to statistically evaluate the use of our Facebook page and thus enable us to control the marketing of our activities in a targeted manner. This represents a legitimate interest within the meaning of the relevant legal basis of Art. 6 para. 1 sentence 1 lit. f GDPR.

If you write to us via the contact-function on the Facebook page, we also process this data. This opportunity to interact with our (potential) clients and applicants also represents a legitimate interest within the meaning of Art. 6 para. 1 sentence 1 lit. f GDPR.

Agreement with Facebook

In 2018, the Court of Justice of the European Union (CJEU) ruled out that Facebook and the respective owner of the fan page are Joint Controller within the meaning of Art. 4 No. 7 GDPR. We therefore have concluded a Joint Controller Agreement with Facebook pursuant to Art. 26 GDPR (Page Controller Addendum) in which the data protection obligations arising from the operation of the fan page are divided between us as the fan page operator and Facebook. In this agreement Facebook has taken over a large part of the data protection obligations, such as the fulfillment of the rights of the data subject according to Art. 12 ff. GDPR, the obligation to implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk and the communication and notification obligations in the event of a personal data breach.

Transfer of personal data

We do not pass on any personal data that we collect via the Facebook page to third parties. However, we can neither influence nor exclude that Facebook transmits the collected data to Facebook Inc. based in 1601 Willow Road, Menlo Park, California, 94025, USA. Facebook Inc. is certified under the “EU US Privacy Shield” (can be found at https://www.privacyshield.gov/list). Privacy Shield is an agreement between the European Union (EU) and the US to ensure compliance with European privacy standards in the United States.

Rights of the data subject

You can assert your data subject rights (see also section 4) with regard to data processing through our Facebook page directly against Facebook. However, you are also welcome to contact us. In this case, according to the Page Controller Addendum we are obliged to immediately forward your request to Facebook using a form available for this purpose.

For further information on the setting options regarding data processing by Facebook, please refer to the websites of Facebook, for example:

• https://www.facebook.com/settings?tab=ads
• https://de-de.facebook.com/policies/cookies/