Privacy

1. Privacy policy

Renner Etikettiertechnik GmbH (hereinafter referred to as “Renner Etikettiertechnik” or “We” or “Us”) appreciates your interest in our company and our products and your visit to our website and mobile applications (together also referred to as “Online Offer”).

The protection of your privacy when processing personal data as well as the security of all business data is an important concern for us that we take into account in our business processes. We process personal data collected during your visit to our online offers confidentially and only in accordance with the statutory provisions.

Data privacy and information security are part of our corporate policy.

2. Information about the responsible party (referred to as the “controller” in the GDPR)

The person responsible for processing your data is Renner Etikettiertechnik GmbH.

The data processing controller on this website is:

Renner Etikettiertechnik GmbH

Hendrik-Lorentz-Str.: 1-5

D-89312 Günzburg

Tel.: +49 8221 3626-0

Fax: +49 8221 3626-50

info@renner-label.de

Managing Director: Steffen Renner

Designation of a data protection officer. We have appointed a data protection officer.

Iris Lehmann

Ingenieurs-Dienstleistungen Thomas Güntner

Ulmer Str. 27

89312 Günzburg

Handy 0173 5420134

datenschutz@renner-label.de

3. Processing of personal data

3.1. Principles

Personal data is any information relating to an identified or identifiable natural person, such as names, addresses, telephone numbers, e-mail addresses, contractual, booking and billing data, which is an expression of the identity of an individual.

We only process personal data (including IP addresses) if there is a legal basis for doing so or if you have given us your consent in this regard, e.g. as part of a registration.

3.2. Categories of data processed

The following categories of data are processed:

• Communication data (e.g. name, telephone, e-mail, address, IP address)
• Contract master data (contractual relationship, product or contractual interest)
• Customer history
• Contract billing – and payment data
• Planning and control data
• Image and audio data, if applicable

3.3. Processing purposes and legal bases

We and service providers contracted by us process your personal data for the following processing purposes and on the following legal bases:

3.3.1. Contractual basis (preparation, implementation, termination):

• Answering inquiries
• Processing your orders
• Preparation, negotiation and fulfillment of a contract with you
• Granting access to certain information and offers.
• Preparation and implementation of face-to-face and virtual events

The legal basis for the processing is Art. 6 para. (1)(a) b) DSG-VO.

3.3.2. Legal obligations

• Official or court order
• Tax and commercial law regulations

The legal basis for the processing is Art. 6 para. (1)(a) GDPR.

3.3.3. Legitimate interest of Renner Etikettiertechnik

• Dircet marketing
• Improvement of products and services
• Online surveys by our employees or by commissioned market research institutes
• Establishing or protecting legal claims or defending against lawsuits
• Image and sound recordings of the events we hold for press and public relations purposes
• Prevention of abuse or other unlawful activities
• Ensuring data security
• Product or customer surveys by e-mail and/or telephone
• The legal basis for the processing is Art. 6 para. (1)(a) f) DSG-VO.

3.3.4. Consent

• Newsletter dispatch
• Pseudonymized web tracking
• Integration of map services
• Integration of translation tools
• Links to social media platforms
• The legal basis for the processing is Art. 6 para. (1)(a) a) DSG-VO.

3.4. Log files

Each time you use our website, certain information is automatically transmitted by your Internet browser and stored by us in so-called log files (e.g. Internet browser and operating system used; domain name of the website from which you came; number of visits; average time spent; pages viewed). This information is not assigned to a specific person

The log files are stored by us and our subsidiaries for a short period of time to investigate malfunctions and for security reasons (e.g. to clarify attempted attacks) and then deleted (legal basis Art. 6 para. 1 lit. f) DSG-VO). Log files whose further storage is necessary for evidentiary purposes are exempt from deletion until the final clarification of the respective incident and may be passed on to investigating authorities in individual cases.

Log files (without or without a full IP address) are also used for analysis purposes; see the section Web Analysis.

3.5 External hosting

We host our website with IONOS SE. The provider is IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany (hereinafter referred to as: IONOS). Whenever you visit our website, IONOS records various logfiles along with your IP addresses. or details, please consult the data privacy policy of IONOS:

https://www.ionos.de/terms-gtc/terms-privacy.

We use IONOS on the basis of Art. 6 (1)(a) f) DSG-VO. Our company has a legitimate interest in presenting a website that is as dependable as possible. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6 (1)(a) GDPR nd § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

Data processing

We have concluded a data processing agreement (DPA) with the above-mentioned provider. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

3.6 Contact form

If you submit inquiries to us via our contact form, the information provided in the contact form as well as any contact information provided therein will be stored by us in order to handle your inquiry and in the event that we have further questions. We will not share this information without your consent.

The processing of these data is based on Art. 6 (1)(a) (b) GDPR, if your request is related to the execution of a contract or if it is necessary to carry out pre-contractual measures. In all other cases the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6(1)(f) GDPR) or on your agreement (Art. 6(1)(a) GDPR) if this has been requested; the consent can be revoked at any time.

The information you have entered into the contact form shall remain with us until you ask us to eradicate the data, revoke your consent to the archiving of data or if the purpose for which the information is being archived no longer exists (e.g., after we have concluded our response to your inquiry). This shall be without prejudice to any mandatory legal provisions, in particular retention periods.

3.7 Request by e-mail, telephone, or fax

If you contact us by e-mail, telephone or fax, your request, including all resulting personal data (name, request) will be stored and processed by us for the purpose of processing your request. We do not pass these data on without your consent. We will not share this information without your consent.

The processing of these data is based on Art. 6 (1)(a) (b) GDPR, if your request is related to the execution of a contract or if it is necessary to carry out pre-contractual measures. In all other cases the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6(1)(f) GDPR) or on your agreement (Art. 6(1)(a) GDPR) if this has been requested; the consent can be revoked at any time.

4. Obligation to provide personal data

Insofar as a contract exists between us and you, you must provide those personal data that are necessary for the commencement, execution and termination of the contractual relationship and for the fulfillment of the associated contractual obligations or which we are legally obliged to collect. Without the provision of this data, we will generally not be able to enter into, perform and terminate a contract with you.

Insofar as the processing of data in the context of the use of this website is not required for the initiation, implementation and termination of a contractual relationship or for the fulfillment of contractual obligations and is also not required by law, the provision of your data is voluntary. Please note that certain functionalities of the website or services cannot be used if you do not provide the necessary data.

5. Children

Renner Etikettiertechnik will not knowingly process personal data of children without expressly stating that such data should only be transmitted with the consent of the parent or guardian or if applicable legal provisions so require. As a matter of principle, Renner Etikettiertechnik will only use or disclose children’s personal data to the extent permitted by law, to obtain the legally required parental consent or to protect the children.

6. Data sharing

6.1. Disclosure of data to other data controllers

As a matter of principle, we will only transfer your personal data to other responsible parties if this is necessary for the fulfillment of the contract, if we or the third party have a legitimate interest in the transfer, or if we have your consent to do so. Third parties may also be subsidiaries of Renner Etikettiertechnik. f data is transferred to third parties on the basis of a legitimate interest, this will be explained in this data protection information.

In addition, data may be transferred to other responsible parties if we are required to do so by law or by enforceable official or court order.

6.2. Service provider

We engage external service providers to perform tasks such as sales and marketing services, contract management, payment processing, programming, data hosting and hotline services, and hosting virtual events. We have carefully selected these service providers and monitor them regularly, in particular their careful handling and safeguarding of the data stored with them. All service providers are obligated by us to maintain confidentiality and to comply with legal requirements.

6.3 Disclosure to recipients outside the EEA

We may also transfer personal data to recipients located outside the EEA in so-called third countries. n this case, we ensure before the transfer that either an adequate level of data protection exists at the recipient (e.g. based on an adequacy decision of the EU Commission for the respective country or the agreement of so-called EU standard contractual clauses of the European Union with the recipient) or your consent to the transfer has been obtained.

Among other things, we use tools of companies domiciled in the United States or other from a data protection perspective non-secure non-EU countries. Among other things, we use tools of companies domiciled in the United States or other from a data protection perspective non-secure non-EU countries. We must point out that in these countries, a data protection level that is comparable to that in the EU cannot be guaranteed. For instance, U.S. enterprises are under a mandate to release personal data to the security agencies and you as the data subject do not have any litigation options to defend yourself in court. ence, it cannot be ruled out that U.S. agencies (e.g., the Secret Service) may process, analyze, and permanently archive your personal data for surveillance purposes. We have no control over these processing activities.

7. Duration of storage; retention periods

We generally store your data for as long as is necessary to provide our online offering and the associated services or for as long as we have a legitimate interest in continuing to store it (e.g., we may still have a legitimate interest in postal marketing even after a contract has been fulfilled). I n all other cases, we delete your personal data with the exception of such data that we must continue to store in order to fulfill legal obligations (e.g. tax or commercial law).

8. Cookies use

Our website uses cookies. Cookies are small text files that are stored on your computer when you visit our website. We use cookies in particular for the purposes of ensuring the use of our online services, for marketing, for individual website optimization and to ensure IT security.

When you call up our website, we display a so-called “cookie banner” in which you declare your consent to the use of cookies on this website by pressing a button and can make an individual selection of the cookies used on the website. Your selection will also be saved for future visits.

If you no longer wish to use cookies at a later point in time, you have the option to change the selection you have made for the use of cookies. To do so, use the embedded links of the respective service providers. Alternatively, you can also adjust the cookie management settings in your Internet browser. In particular, you can arrange for the deletion of cookies that have already been set or prevent cookies from being set in the future. lease note that the settings vary depending on the browser used.

Depending on their function and purpose, the use of certain cookies requires the consent of the user.

No consent is required for cookies that are absolutely necessary for the use of our online services or to ensure IT security. The setting of these cookies and related processing activities are permitted by Art. 6 (1)(a) f) DS-GVO.

Cookies for all other uses, such as for individual website optimization, for marketing or for performing statistical analyses of your activities on the website, on the other hand, require your consent in accordance with Art. 7 DS-GVO, which we request as part of the cookie banner.

9. Consent with Borlabs Cookie

Our website uses the Borlabs consent technology to obtain your consent to the storage of certain cookies in your browser or for the use of certain technologies and for their data privacy protection compliant documentation. The provider of this technology is Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, Germany (hereinafter referred to as Borlabs).

Whenever you visit our website, a Borlabs cookie will be stored in your browser, which archives any declarations or revocations of consent you have entered. These data are not shared with the provider of the Borlabs technology. The recorded data shall remain archived until you ask us to eradicate them, delete the Borlabs cookie on your own or the purpose of storing the data no longer exists. This shall be without prejudice to any retention obligations mandated by law To review the details of Borlabs’ data processing policies, please visit

https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.

We use the Borlabs cookie consent technology to obtain the declarations of consent mandated by law for the use of cookies. The legal basis for this is Art. 6 (1)(a) GDPR.

10. Analysis tools

This website uses functions of the web analysis service Google Analytics. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyze the behavior patterns of website visitors. To that end, the website operator receives a variety of user data, such as pages accessed, time spent on the page, the utilized operating system and the user’s origin. This data is summarized in a user-ID and assigned to the respective end device of the website visitor.

Furthermore, Google Analytics allows us to record your mouse and scroll movements and clicks, among other things. Google Analytics uses various modeling approaches to augment the collected data sets and uses machine learning technologies in data analysis.

Google Analytics uses technologies that make the recognition of the user for the purpose of analyzing the user behavior patterns (e.g., cookies or device fingerprinting). The website use information recorded by Google is, as a rule transferred to a Google server in the United States, where it is stored.

The use of these services occurs on the basis of your consent pursuant to Art. 6 (1)(a) GDPR nd § 25 (1) TTDSG. This consent can be revoked at any time.

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission.

Details can be found here:

https://privacy.google.com/businesses/controllerterms/mccs/.

Browser plug-in

You can prevent the recording and processing of your data by Google by downloading and installing the browser plugin available under the following link:

https://tools.google.com/dlpage/gaoptout?hl=en.

For more information about the handling of user data by Google Analytics, please consult Google’s Data Privacy Declaration at:

https://support.google.com/analytics/answer/6004245?hl=en.

Data processing

We have executed a contract data processing agreement with Google and are implementing the stringent provisions of the German data protection agencies to the fullest when using Google Analytics.

11. YouTube with expanded data protection integration

Our website embeds videos of the website YouTube. The website operator is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in the expanded data protection mode According to YouTube, this mode ensures that YouTube does not store any information about visitors to this website before they watch the video. Nevertheless, this does not necessarily mean that the sharing of data with YouTube partners can be ruled out as a result of the expanded data protection mode. For instance, regardless of whether you are watching a video, YouTube will always establish a connection with the Google DoubleClick network.

As soon as you start to play a YouTube video on this website, a connection to

YouTube’s servers will be established. As a result, the YouTube server will be notified, which of our pages you have visited If you are logged into your YouTube account while you visit our site, you enable YouTube to directly allocate your browsing patterns to your personal profile. You have the option to prevent this by logging out of your YouTube account.

Furthermore, after you have started to play a video, YouTube will be able to place various cookies on your device or comparable technologies for recognition (e.g. device fingerprinting). n this way YouTube will be able to obtain information about this website’s visitors. Among other things, this information will be used to generate video statistics with the aim of improving the user friendliness of the site and to prevent attempts to commit fraud.

Under certain circumstances, additional data processing transactions may be triggered after you have started to play a YouTube video, which are beyond our control.

The use of YouTube is based on our interest in presenting our online content in an appealing manner. Pursuant to Art. 6 (1)(a) GDPR, this is a legitimate interest. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6 (1)(a) GDPR nd § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

For more information on how YouTube handles user data, please consult the YouTube Data Privacy Policy under:

https://policies.google.com/privacy?hl=en.

12. Goolge Maps

This website uses the mapping service Google Maps The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

To enable the use of the Google Maps features, your IP address must be stored. As a rule, this information is transferred to one of Google’s servers in the United States, where it is archived.

The operator of this website has no control over the data transfer. n case Google Maps has been activated, Google has the option to use Google web fonts for the purpose of the uniform depiction of fonts. When you access Google Maps, your browser will load the required web fonts into your browser cache, to correctly display text and fonts.

We use Google Maps to present our online content in an appealing manner and to make the locations disclosed on our website easy to find. Pursuant to Art. 6 (1)(a) GDPR, this is a legitimate interest. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6 (1)(a) GDPR nd § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission.

Details can be found here:

https://privacy.google.com/businesses/gdprcontrollerterms/ and

https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

For more information on the handling of user data, please review Google’s Data Privacy Declaration under:

https://policies.google.com/privacy?hl=en.

13. Google Web Fonts

To ensure that fonts used on this website are uniform, this website uses so-called Web Fonts provided by Google. When you access a page on our website, your browser will load the required web fonts into your browser cache to correctly display text and fonts.

To do this, the browser you use will have to establish a connection with Google’s servers. As a result, Google will learn that your IP address was used to access this website. The use of Google Web Fonts is based on Art. 6 (1)(a) f) DSG-VO. The website operator has a legitimate interest in a uniform presentation of the font on the operator’s website. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6 (1)(a) GDPR nd § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

If your browser should not support Web Fonts, a standard font installed on your computer will be used.

For more information on Google Web Fonts, please follow this link:

https://developers.google.com/fonts/faq and consult Google’s Data Privacy Declaration under:

https://policies.google.com/privacy?hl=en.

Our online offer may contain links to websites of third parties – providers not affiliated with us. After clicking on the link, we no longer have any influence on the collection, processing and use of any personal data transmitted to the third party by clicking on the link. (such as the IP address or the URL of the page on which the link is located), as the behavior of third parties is naturally beyond our control. We assume no responsibility for the processing of such personal data by third parties.

17. Security

Our employees and the service companies contracted by us are obliged to maintain confidentiality and to comply with the provisions of the applicable data protection laws.

We take all necessary technical and organizational measures to ensure an adequate level of protection and to protect your data managed by us, in particular against the risks of accidental or unlawful destruction, manipulation, loss, alteration or unauthorized disclosure or access. Our security measures are constantly improved in line with technological developments. For security reasons and to protect the transmission of confidential content, such as purchase orders or inquiries you submit to us as the website operator,

this website uses either an SSL or a TLS encryption program. You can recognize an encrypted connection by checking whether the address line of the browser switches from “http://” to “https://” and also by the appearance of the lock icon in the browser line.

If the SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.

Please use the information in the “Person responsible” section to assert your rights. In doing so, please ensure that we are able to clearly identify you.

You have the right to receive information from us about the processing of your data. For this purpose, you may assert a right of access in relation to the personal information that we process from you. In addition, you may request us to correct incorrect data and – insofar as the legal requirements are fulfilled – Request completion or deletion of your data. However, this does not apply to data that is required for billing and accounting purposes or that is subject to the legal obligation to retain data. However, if access to such data is not required, its processing will be restricted. You can also request us – insofar as the legal requirements are met – to restrict the processing of your data.

Objection to data processing:

n addition, you have the right to object to data processing by us at any time. We will then stop processing your data unless we can prove – in accordance with the legal requirements – compelling reasons for further processing that are worthy of protection and which outweigh your rights.

Objection to direct marketing:

You can also object to the processing of your personal data for advertising purposes (“advertising objection”) at any time. Please take into account that for organizational reasons there may be an overlap between your revocation and the use of your data in the context of an already running campaign.

Objection to data processing with legal basis “legitimate interest“:

In addition, you have the right to object to data processing by us at any time, insofar as this is based on the legal basis of legitimate interest. We will then stop processing your data unless we can prove – in accordance with the legal requirements – compelling reasons for further processing that are worthy of protection and which outweigh your rights.

Revocation of consent:

If you have given us consent to process your data, you can revoke this consent at any time with effect for the future. The lawfulness of the processing of your data until the revocation remains unaffected by this.

Data portability

You also have the right to receive data that you have provided to us in a structured, common and machine-readable format or – if technically feasible – to request that the data be transferred to a third party.

Right of complaint to the supervisory authority:

You have the right to file a complaint with a data protection authority. To do so, you can contact the data protection authority responsible for your place of residence or federal state or the data protection authority responsible for us. This is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)

Promenade 27

91522 Ansbach

Telefon: +49 981 53 1300

Telefax: +49 981 53 98 1300

E-Mail: poststelle@lda.bayern.de

19. Rejection of unsolicited e-mails

We herewith object to the use of contact information published in conjunction with the mandatory information to be provided in our Site Notice to send us promotional and information material that we have not expressly requested. The operators of this website and its pages reserve the express right to take legal action in the event of the unsolicited sending of promotional information, for instance via SPAM messages.

Status: 31.08.2022