Kallfass Verpackungsmaschinen GmbH

Authorized Managing Director: Jens Kallfass
Siemensstraße 8
D-72622 Nürtingen
Phone: +49 (0) 7022 607-0
Email: info@kallfass.com

datenschutz@kallfass.com

Link to the legal notice: Legal notice

As a user of our website, this privacy policy provides you with all the necessary information about how, to what extent, and for what purpose we or third-party providers collect and use your data.

The collection and use of your data is carried out strictly in accordance with the requirements of the EU General Data Protection Regulation (GDPR-EU), German data protection law under the DSAnpUG-EU, and the Telemedia Act (TMG), where applicable.

We are committed to the confidentiality of your personal data and therefore work strictly within the limits set by legal requirements.

The collection of this personal data is carried out on a voluntary basis wherever possible. We also only pass this data on to third parties with your express consent.

For particularly confidential data, such as in payment transactions or with regard to your inquiries to us, we ensure a high level of security through the use of SSL encryption.

At this point, we would like to point out the general risks of using the internet, over which we have no influence. Especially in email communication, your data is not secure without further precautions and may under certain circumstances be captured by third parties.

Terms used
"Personal data" means any information relating to an identified or identifiable natural person (hereinafter "data subject"); a natural person is considered identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g., cookie), or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

"Processing" is any operation or set of operations, whether or not carried out using automated means, in connection with personal data. The term is broad and covers practically any handling of data.

The "controller" is the natural or legal person, authority, institution, or other body that, alone or jointly with others, determines the purposes and means of processing personal data.

Relevant legal bases
In accordance with Art. 13 GDPR-EU, we inform you of the legal bases for our data processing. Unless the legal basis is stated in the privacy policy, the following applies:

• The legal basis for obtaining consent is Art. 6(1)(a) and Art. 7 GDPR-EU
• The legal basis for processing to fulfill our services and carry out contractual measures, as well as to answer inquiries, is Art. 6(1)(b) GDPR-EU
• The legal basis for processing to fulfill our legal obligations is Art. 6(1)(c) GDPR-EU
• The legal basis for processing to safeguard our legitimate interests is Art. 6(1)(f) GDPR-EU.
• In the event that vital interests of the data subject or of another natural person require the processing of personal data, Art. 6(1)(d) GDPR-EU serves as the legal basis.

Cooperation with processors and third parties
Insofar as, in the course of our processing, we disclose data to other persons and companies (processors or third parties), transmit it to them, or otherwise grant them access to the data, this is done only on the basis of

• a legal permission (e.g., data to payment service providers where necessary under Art. 6(1)(b) GDPR-EU for contract performance)
• your consent
• a legal obligation requiring it, or
• our legitimate interests (e.g., when using agents, web hosts, IT maintenance services, etc.)

Insofar as we engage third parties to process data on the basis of a so-called "data processing agreement," this is done on the basis of Art. 28 GDPR-EU.

Transfers to third countries
Insofar as we process data in a third country (i.e., outside the European Union (EU) or the European Economic Area (EEA)), or this occurs in the context of using third-party services or disclosing or transmitting data to third parties, this is only done if it

• is necessary to fulfill our (pre)contractual obligations
• is based on your consent
• is due to a legal obligation, or
• is based on our legitimate interests.

Subject to legal or contractual permissions, we only process data, or have it processed, in a third country if the special requirements of Art. 44 et seq. GDPR-EU are met. This means that processing takes place, for example, on the basis of special guarantees, such as the officially recognized determination of a data protection level equivalent to that of the EU (e.g., for the USA through the "Privacy Shield") or compliance with officially recognized special contractual obligations (so-called "standard contractual clauses").

Rights of the data subjects
You have the right to request confirmation as to whether the data concerning you is being processed, as well as information about this data and further information and a copy of the data in accordance with Art. 15 GDPR-EU.

In accordance with Art. 16 GDPR-EU, you have the right to request the completion of data concerning you or the correction of inaccurate data concerning you.

In accordance with Art. 17 GDPR-EU, you have the right to request that data concerning you be deleted without delay, or alternatively, in accordance with Art. 18 GDPR-EU, to request a restriction of the processing of the data.

You have the right to receive the data concerning you that you have provided to us, in accordance with Art. 20 GDPR-EU, and to request its transmission to other controllers.

Right to lodge a complaint with the competent supervisory authority
In the event of data protection violations, you have the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection matters is the state data protection officer of the federal state in which our company is based:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit
Königstrasse 10 a
70173 Stuttgart
Phone: 07 11/61 55 41-0
Fax: 07 11/61 55 41-15

Right of withdrawal
You have the right to withdraw any consent given, pursuant to Art. 7(3) GDPR-EU, with effect for the future.

Right to object
You may object at any time to the future processing of data concerning you in accordance with Art. 21 GDPR-EU. The objection may in particular be directed against processing for the purposes of direct marketing.

Deletion of data
You have the right to request the correction, blocking, or deletion of your data. Excluded from this are data that must be retained due to legal requirements or are required for proper business processing. So that a data block can be implemented at any time, data is kept in a block file for control purposes. If data is not subject to a legal archiving obligation, we will delete your data upon your request. If the archiving obligation applies, we will block your data. For all questions and concerns regarding the correction, blocking, or deletion of personal data, please contact our data protection officer using the contact details provided in this privacy policy, or the address given in the legal notice.

Personal data
Each time a user accesses our website and each time a file is retrieved, data relating to this process is temporarily stored and processed in a log file.

Before storage, each data record is anonymized by altering the IP address.

Specifically, the following data is stored for each access/retrieval:

• anonymized IP address
• date and time,
• page accessed/name of the file retrieved,
• amount of data transferred,
• notification of whether the access/retrieval was successful.

This data is evaluated solely for statistical purposes and to improve our offering, and is then deleted. It is not used in any other way or passed on to third parties.

Insofar as we collect personal data, we do so, in keeping with the principles of data minimization and data avoidance, only to the extent and for as long as is necessary for the use of our website, or as required by law.

If we collect personal data — such as your name, address, or email address — this data collection is voluntary. Without your express consent, this data is not disclosed to third parties.

We take the protection of your personal data seriously and strictly adhere to the relevant legal provisions and this privacy policy when collecting and processing personal data.

If the purpose of the data collection no longer applies or the statutory retention period has ended, the collected data will be blocked or deleted. As a rule, our website can be used without disclosing personal data.

Cookies
Our website partly uses so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our offering more user-friendly, effective, and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called "session cookies." They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser the next time you visit.

You can set your browser so that you are informed about the setting of cookies and allow cookies only on a case-by-case basis, exclude the acceptance of cookies in certain cases or generally, and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.

Cookies that are required to carry out the electronic communication process or to provide certain functions you wish to use (e.g., the shopping cart function) are stored on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimized provision of its services. Insofar as other cookies (e.g., cookies for analyzing your browsing behavior) are stored, they are treated separately in this privacy policy.

Collection of personal data when submitting the email contact form
By submitting the contact form, you provide us with the personal data optionally entered therein (salutation/name/phone number/email/possibly further information in the "Your message" field). This data is processed by us solely for the purpose of handling your message and is deleted after your contact request or inquiry has been dealt with (generally after 3 weeks). In particular, the email address is not used for sending promotional emails.

Collection of access data and log files
We, or our hosting provider, collect data on the basis of our legitimate interests within the meaning of Art. 6(1)(f) GDPR-EU regarding every access to the server on which this service is located (so-called server log files). Access data includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address, and the requesting provider. These log files do not allow any conclusions to be drawn about you as a person.

For security reasons (e.g., to investigate misuse or fraud), log file information is stored for a maximum of 7 days and then deleted. Data whose further retention is required for evidentiary purposes is exempt from deletion until the respective incident has been finally clarified.

Third-party content and services
Our website's offering may also include content, services, and features from other providers that complement our offering.

Accessing these third-party services regularly requires the transmission of your IP address. This enables these providers to perceive and also store your user IP address. We favor only those third-party providers that use IP addresses solely for the delivery of content. However, we have no influence on which third-party provider may store the IP address. This storage may serve statistical purposes, for example. Should we become aware of storage processes by third-party providers, we will inform our users of this fact without delay.

In this context, please also note the specific privacy policies of individual third-party providers and service providers whose services we use on our website. You will also find these notices in this privacy policy.

SSL encryption
Our website uses SSL encryption when it comes to transmitting confidential or personal content from our users. This encryption is activated, for example, when processing payment transactions and for inquiries you send to us via our website.

Please make sure that SSL encryption is activated for such activities on your part. The use of encryption is easy to recognize: the display in your browser bar changes from "http://" to "https://". Data encrypted via SSL cannot be read by third parties. Only transmit your confidential information when SSL encryption is activated, and if in doubt, contact us.

Use of Google Analytics
We use Google Analytics on our website, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics allows us to analyze usage behavior on our website and improve our offering. Cookies are used for this purpose, which collect information about the use of our website. The information generated by the cookies is generally transferred to Google servers and processed there. In doing so, personal data may be transmitted to Google LLC servers in the USA.

We use Google Analytics exclusively on the basis of your consent in accordance with Art. 6(1)(a) GDPR. You can withdraw or adjust your consent at any time via our cookie settings.

Insofar as Google Analytics is used, your IP address is generally shortened within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area before transmission (IP anonymization). Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there.

For further information on data protection at Google, please visit:
https://policies.google.com/privacy?hl=de
https://support.google.com/analytics/answer/6004245?hl=de

Embedded YouTube videos
We embed YouTube videos on some of our web pages. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you visit a page with embedded YouTube videos, a connection to Google's servers may be established. In doing so, information about your use of the website as well as your IP address may be transmitted to Google. If you are logged into your YouTube account, Google may associate this information with your user account. You can prevent this by logging out of your YouTube account beforehand.

Embedding only takes place after your consent via our cookie consent management system. The legal basis is Art. 6(1)(a) GDPR.

After your consent, YouTube may use cookies or similar technologies to process information about the use of the videos.

Further information on data protection at "YouTube" can be found in the provider's privacy policy at: https://www.google.de/intl/de/policies/privacy/"

Cookie consent management
We use the cookie consent management of the TYPO3 extension "mindshape_cookie_consent" to obtain and document your consent to the storage of cookies and the use of certain services. The provider is mindshape GmbH, Bonner Straße 172-176, 50968 Cologne.

The tool processes information about your consent settings so that they can be taken into account on subsequent visits. Technically necessary cookies may be stored in this process.

The processing is carried out to fulfill our legal obligations in accordance with Art. 6(1)(c) GDPR.

Adobe Fonts (Typekit)
Fonts from Adobe Fonts are used on this website. The provider is Adobe Systems Software Ireland Limited, 6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland.

To display fonts, a connection to Adobe's servers is established when you visit our website. In doing so, your IP address may be transmitted to Adobe. Adobe may process this information to provide and display the fonts.

Further information on data protection at Adobe can be found at: https://www.adobe.com/privacy.html