Privacy policy

General Privacy Notice and Mandatory Information

I. Data Protection

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
When you use this website, various personal data is collected. Personal data is data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

II. Responsible Party

Responsible for the data processing on the website is
Papier- und Kartonfabrik Varel GmbH & Co. KG
Dangaster Straße 38
26316 Varel.
Telefon: +49 4451 138-0
E-Mail: info@pkvarel.de

III. Purposes or the Data Processing

How do we collect your data?
On the one hand, your data is collected by you providing it to us. This can be, for example, data that you enter in a contact form.
Other data is collected automatically or after your consent when you visit the website by our IT systems. This is mainly technical data (e.g., Internet browser, operating system or time of page view). The collection of this data takes place automatically as soon as you enter this website or have consented via cookie selection.
For what purpose do we use your data?
Part of the data is collected to ensure error-free functioning of the website. Other data may be used to analyze your user behavior. If you have provided us with your data via a contact form, we process it in order to process your inquiry and, if necessary, to contact you.

IV. Legal basis for data processing on this website

If you have consented to the processing of your data, we process your personal data on the basis of Art. 6 (1) lit. a GDPR. In the case of explicit consent to the transfer of personal data to third countries, the data processing is also based on Art. 49 para. 1 lit. a GDPR. If you have consented to the storage of cookies or to the access to information on your terminal device (e.g. via device fingerprinting), the data processing is additionally carried out on the basis of Section 25 (1) TTDSG. The consent can be revoked at any time. If your data is required for the performance of a contract or pre-contractual measures, we process your data on the basis of Art. 6 para. 1 lit. b GDPR. Furthermore, we may process your data on the basis of Art. 6 (1) lit. c GDPR if this should be necessary for the fulfillment of a legal obligation. Furthermore, data processing may be carried out on the basis of our legitimate interest pursuant to Art. 6 (1) lit. f GDPR. Information about the relevant legal basis in each individual case is provided in the following paragraphs of this privacy policy.

V. Storage Period

Unless a more specific storage period has been specified within this privacy policy, your personal data will remain with us until the purpose for the data processing ceases to exist or you have revoked your consent or asserted a justified request for deletion and there are no statutory retention obligations to the contrary.

VI. Your Data Protection Rights

You have the right, at any time, to receive information free of charge about the origin, recipient and purpose of your stored personal data. You also have a right to request the correction or deletion of this data. If you have given your consent to the data processing, you can revoke this consent at any time for the future. You also have the right to request the restriction of the processing of your personal data under certain circumstances. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
For this purpose, as well as for further questions regarding data protection, you may contact us or our company data protection officer directly at any time.

VII. Data Processors

We share your data within the scope of data processing pursuant to Art. 28 GDPR with service providers who support us in the operation of our websites and related processes. These are, for example, hosting service providers. Our service providers are strictly bound by our instructions contractually obligated accordingly. Insofar as data should be transferred outside the EU or EEA in this context, measures are taken to ensure an appropriate level of data protection.

VIII. Data Protection Officer

We have appointed a data protection officer for our company.
FIRST PRIVACY GmbH
Peter Suhren
Konsul-Smidt-Str. 88
28217 Bremen
Telefon: +49 421 6966 32 0
E-Mail: office@first-privacy.com

IX. Note on data transfer to the USA and other third countries

Among other things, we use tools from companies based in the USA or other third countries that are not deemed secure under data protection law. If these tools are active, your personal data may be transferred to these third countries and processed there. This is done on the basis of your consent via cookie selection. We would like to point out that a level of data protection comparable to the EU cannot be guaranteed in these countries. For example, US companies are obliged to hand over personal data to security agencies without you as the data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g., intelligence services) process, evaluate and permanently store your data on US servers for monitoring purposes. We have no influence on these processing activities.

X. Server Log-Files

The provider of the web pages automatically collects and stores information in so-called server log-files, which your browser automatically transmits to us. These are:
• browser type and browser version
• Operating system
• referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address
This data is not merged with other data sources.
The collection of this data is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the technically error-free functioning and optimization of our website.

XI. Contact Form

If you send us inquiries via the contact form, your data from the inquiry form, including the contact data you provided, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.
The processing of this data is based on Art. 6 (1) lit. b GDPR if your request is related to the performance of a contract or is necessary for pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6 (1) lit. f GDPR).

Cookies

Our website uses so-called “cookies”. Cookies are small text files and do not cause any damage to your terminal device. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your terminal device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain on your terminal device until you delete them yourself or an automatic deletion by your web browser takes place.
Cookies that are necessary to carry out the electronic communication process or for the correct functioning of the website (necessary cookies) are stored on the basis of Art. 6 (1) lit. f GDPR, unless another legal basis is specified. We as the website operator have a legitimate interest in storing necessary cookies for the technically error-free and optimized provision of our website. If consent to the storage of cookies and comparable tracking technologies has been requested, the processing is carried out exclusively on the basis of this consent (Art. 6 para. 1 lit. a GDPR); the consent can be revoked at any time.
You can configure your browser in such way that you are informed about the placing of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. If you disable cookies, the functionality of this website may be limited.

Consent with Borlabs Cookie

Our website uses Borlabs Cookie Consent-Technology to obtain your consent to the storage of certain cookies in your browser or to the use of certain technologies and to document this in accordance with data protection law. The provider of this technology is Borlabs – Benjamin A. Bornschein, Rübenkamp 32, 22305 Hamburg (hereinafter Borlabs).
When you enter our website, a Borlabs cookie is stored in your browser, in which the consents you have given or the revocation of these consents are stored. This data is not shared with the Borlabs cookie provider.
The collected data will be stored until you request us to delete it or until you delete the Borlabs cookie yourself or until the purpose for storing the data ceases to exist. Mandatory legal retention periods remain unaffected. Details on the data processing of Borlabs Cookie can be found at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.
Borlabs Cookie Consent technology is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 lit. c GDPR.

Analytics Tools and Advertising

eTracker

The provider of this website uses services of eTracker GmbH from Hamburg, Germany (https://www.etracker.com) to analyze usage data. We do not use cookies for web analysis by default. Insofar as we use analysis and optimization cookies, we obtain your explicit consent separately in advance. If this is the case and you consent, cookies are used to enable statistical coverage analysis of this website, measurement of the success of our online marketing measures, and test procedures, for example, to test and optimize different versions of our online presence or its components. Cookies are small text files that are stored by the Internet browser on the user’s terminal device. ETracker cookies do not contain any information that enables identification of a user.
The data generated with eTracker is processed and stored by eTracker on behalf of PKV exclusively in Germany.
The data processing is carried out on the basis of the legal provisions of Art. 6 para. 1 lit. f (legitimate interest) of the GDPR. Our legitimate interest as per the GDPR consist in the optimization of our online offerings and our web presence. Since the privacy of our visitors is important to us, the data that may allow a reference to an individual person, such as the IP address, log-in or device identifiers, are anonymized or pseudonymized as soon as possible. No other use, combination with other data or disclosure to third parties takes place.
You may object to the aforementioned data processing at any time. The objection has no adverse consequences.
We have concluded an data processing agreement (DPA) with eTracker.

Newsletter

If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the specified e-mail address and agree to receive the newsletter. Further data is not collected or only on a voluntary basis. We use the service provider CleverReach for the provision of the newsletter.
The data you enter for the purpose of receiving the newsletter (e.g., e-mail address) is stored on the servers of CleverReach in Germany or Ireland.
The data processing is based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.
We have concluded a data processing agreement (DPA) with CleverReach.

Plugins and Tools

I. Youtube with enhanced privacy mode

This website embeds videos of the provider YouTube. The operator of the pages is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
We use YouTube in extended data protection mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, the transfer of data to YouTube partners is not necessarily excluded by the extended data protection mode. Thus, YouTube -regardless of whether you watch a video- establishes a connection to the Google DoubleClick network.
As soon as you start a YouTube video on this website, a connection to YouTube’s servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to link your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.
Furthermore, YouTube can place various cookies on your terminal device after starting a video or use comparable tracking technologies (e.g. device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information is used, inter alia, to collect video statistics, improve the user experience, and prevent fraud attempts.
If necessary, further data processing operations may be triggered after the start of a YouTube video, over which we have no control.
YouTube is used in the interest of an appealing presentation of our online presence. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If a corresponding consent was requested, the processing is based exclusively on Art. 6 para. 1 lit. a GDPR, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g., device fingerprinting). The consent can be revoked at any time.
For more information about data protection at YouTube, please see their privacy policy at: https://policies.google.com/privacy?hl=de.

II. Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
The purpose of reCAPTCHA is to verify whether data entry on this website (e.g., in a contact form) is made by a human or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various pieces of information (e.g., IP address, time spent by the website visitor on the website or mouse movements made by the user). The data collected during the analysis is transferred to Google.
The reCAPTCHA analyses run entirely in the background. Website visitors are not notified that an analysis is taking place.
The storage and analysis of the data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its web presence from abusive automated spying and from SPAM.
For more information on Google reCAPTCHA, please refer to the Google Privacy Policy and the Google Terms of Use at the following links: https://policies.google.com/privacy?hl=de and https://policies.google.com/terms?hl=de.

Own Services

I. Handling of Applicant Data

We offer you the opportunity to submit a job application with us (e.g., by e-mail, postal mail or via an online application form). We assure you that the collection, processing and use of your data will be carried out in accordance with applicable data protection law and all other statutory provisions and that your data will be treated in strict confidence.

II. Scope and Purpose of the Data Collection

If you send us an application, we process your personal data (e.g. contact and communication data, application documents, notes in the context of job interviews, etc.), insofar as this is necessary for the decision on the establishment of an employment relationship. The legal basis for this is Art. 88 GDPR in conjunction with Section 26 of the German Federal Data Protection Act (BDSG).
If the application is successful, the data submitted by you will be stored in our data processing systems on the basis of Sec. 26 BDSG for the purpose of the performance of the employment relationship.

III. Data Retention Period

If we are unable to make you a job offer, if you reject a job offer, or if you withdraw your application, we may retain the data you have provided on the basis of our legitimate interests (Art. 6 para. 1 lit. f GDPR) for up to 6 months from the end of the application process (rejection or withdrawal of the application). Subsequently, the data will be deleted and the physical application documents destroyed. The data retention serves in particular as evidence in the event of a legal dispute. If it is apparent that the data will be required after the 6-month period has expired (e.g. due to an impending or pending legal dispute), the data will not be deleted until the purpose for continued storage no longer applies.
Longer storage may also take place if you have given your consent (Art. 88 GDPR in conjunction with Sec. 26 BDSG) or if legal retention obligations prevent deletion.

IV. Addition to the Applicant Pool

If we do not make you a job offer, it may be possible to ad you to our applicant pool. In this event, all documents and details from the application will be transferred to the applicant pool in order to contact you in the event of suitable vacancies.
Addition to the applicant pool is based exclusively on your express consent (Art. 88 GDPR in conjunction with Sec. 26 BDSG). The provision of consent is voluntary and is not related to the current application process. You can revoke your consent at any time. In this case, the data will be deleted from the applicant pool.
The data from the applicant pool will be deleted no later than 1 year after consent has been given.