Privacy policy
1. Data protection at a glance
The following notes give a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified. Detailed information on data protection is set out in the privacy policy below this text.
The data processing on this website is carried out by the website operator. You find its contact details in the legal notice of this website. Some of your data is collected because you provide it to us, for example in the contact form. Other data is collected automatically by our IT systems when you visit the website, above all technical data (for example internet browser, operating system or the time of the page view).
This website sets no cookies and uses no analytics or advertising services. Fonts and all other resources are stored on our own server, no content is loaded from third-party servers.
2. Hosting
We host the content of our website with the following provider:
The provider is Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4-6, 32339 Espelkamp, Germany (hereinafter Mittwald). For details please see the privacy policy of Mittwald: https://www.mittwald.de/datenschutz.
Mittwald is used on the basis of Article 6 (1) (f) GDPR. We have a legitimate interest in presenting our website as reliably as possible.
We have concluded a data processing agreement for the use of the service named above. This is a contract required by data protection law which ensures that the provider processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.
3. General notes and mandatory information
The operators of these pages treat the protection of your personal data as a priority. We treat your personal data confidentially and in accordance with the statutory data protection rules and this privacy policy.
We point out that data transmission over the internet (for example when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.
The controller for the data processing on this website is:
R&R Vivendi GbR
Roman Rötting and Roman Breitenbach
Ochtruper Straße 34a
48455 Bad Bentheim, Germany
Telephone: +49 5922 8070855
E-mail: info@rr-vivendi.de
Many data processing operations are only possible with your express consent. You can withdraw consent already given at any time. An informal e-mail to us is sufficient. The lawfulness of the data processing carried out before the withdrawal remains unaffected by it.
In the event of breaches of the GDPR, data subjects have a right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, their place of work or the place of the alleged breach. This right exists without prejudice to other administrative or judicial remedies.
You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this is only done as far as it is technically feasible.
For security reasons and to protect the transmission of confidential content, such as enquiries you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the address line of the browser changing from „http://“ to „https://“ and by the lock symbol in your browser line. When SSL or TLS encryption is active, the data you transmit to us cannot be read by third parties.
Within the applicable statutory provisions you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of the data processing, and where applicable a right to correction or deletion of this data. For this and for further questions about personal data you can contact us at any time at the address given in the legal notice.
You have the right to request the restriction of the processing of your personal data. For this you can contact us at any time at the address given in the legal notice.
4. Data collection on this website
The provider of the pages automatically collects and stores information in so-called server log files, which your browser transmits to us automatically. These are:
- browser type and browser version
- operating system used
- referrer URL
- host name of the accessing computer
- time of the server request
- IP address
This data is not merged with other data sources. It is collected on the basis of Article 6 (1) (f) GDPR. The website operator has a legitimate interest in the technically faultless presentation and the optimisation of its website, and the server log files have to be collected for that purpose.
If you send us enquiries through the contact form, your details from the enquiry form including the contact data you provide there are stored with us for the purpose of handling the enquiry and in case of follow-up questions. We do not pass this data on without your consent.
This data is processed on the basis of Article 6 (1) (b) GDPR where your enquiry is connected with the performance of a contract or is necessary for pre-contractual steps. In all other cases the processing is based on our legitimate interest in handling the enquiries addressed to us effectively (Article 6 (1) (f) GDPR).
To protect against automated mass sending we limit the number of messages per sender. For that we store, at the moment of sending, a non-reversible check value of your IP address together with the time, for a maximum of 1 hour. The legal basis is Article 6 (1) (f) GDPR, our legitimate interest in undisturbed operation.
The data you enter in the contact form stays with us until you ask us to delete it, withdraw your consent to storage or the purpose for storing the data no longer applies. Mandatory statutory provisions, in particular retention periods, remain unaffected.
If you contact us by e-mail or telephone, your enquiry including all personal data arising from it (name, enquiry) is stored and processed by us for the purpose of handling your request. We do not pass this data on without your consent. The legal bases correspond to those for the contact form.
5. Order, payment and signature
If you order our service, we process the data of your company and of your authorised representative that you enter in the order form: company name, address, national identification number, VAT number or taxpayer reference number, salutation, first and last name, e-mail address, telephone number, brand names and your details about the packaging volumes. The legal basis is Article 6 (1) (b) GDPR, the processing is necessary for the performance of the contract. Without this data we cannot take on the representation.
To carry out the mandate we transmit your details to the Zentrale Stelle Verpackungsregister and to the dual system with which we license your packaging. This transmission is required by law and necessary for the performance of the contract.
If you provide an EU VAT number, we verify it through the VAT Information Exchange System (VIES) of the European Commission. Only the number and the country code are transmitted. The legal basis is Article 6 (1) (c) GDPR, the check fulfils our obligations under tax law.
For the payment we use the payment service provider Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, Netherlands. When you choose a payment method you are forwarded to Mollie. Mollie processes the data required for the payment, in particular the amount, the payment method and the details you enter there yourself. We never see your payment data. The legal basis is Article 6 (1) (b) GDPR. Further information is available in the privacy policy of Mollie at mollie.com/en/privacy.
Under German law the power of attorney has to meet the written form requirement. Electronically this is only met by a qualified electronic signature. For that we use the signature service of Skribble AG, Hardturmstrasse 161, 8005 Zurich, Switzerland. We transmit your first and last name, your e-mail address and the power of attorney as a document to Skribble. Skribble invites you to sign by e-mail.
For the qualified signature, Article 24 of Regulation (EU) No 910/2014 (eIDAS) requires a check of your identity. You carry out this check once, directly with the identification service commissioned by Skribble, by scanning your ID document and recording a short video of yourself. Your ID data is not transmitted to us, we only learn that the identification was successful. The legal basis is Article 6 (1) (b) and (c) GDPR.
Switzerland is covered by an adequacy decision of the European Commission, so the transfer there is permitted without additional safeguards. Further information is available in the privacy policy of Skribble at skribble.com/de-de/datenschutz.
For accounting and invoicing we use the software Collmex of Collmex GmbH, Wilhelm-Schickard-Str. 9, 78052 Villingen-Schwenningen, Germany. We transmit the data required for the invoice there. The legal basis is Article 6 (1) (c) GDPR in conjunction with the retention obligations under commercial and tax law. We keep invoices and contract documents for 10 years under section 147 AO and section 257 HGB.