PRIVACY POLICY

The following sets out how we collect personal data when you use our website www.treffpack-exklusiv.de. Personal data means all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour. We have implemented extensive technical and operational safeguards to protect your data against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our security procedures are reviewed regularly and updated in line with technological advances.

1 Controller for Data Processing

The controller pursuant to Art. 4(7) of the EU General Data Protection Regulation (GDPR) is:

C.E. Gätcke's Glas Gesellschaft mbH Bredowstraße 31 D-22113 Hamburg

Managing Directors: Peter Börner, Dorothée Kuhnert

Phone.: +49 40 731 206-0
Fax: +49 40 731 206-10
E-mail: info@treffpack.de

(see our Imprint)

2 Contacting the Data Protection Officer

Our Data Protection Officer can be reached at datenschutz@treffpack.de or by post to our address, marked "Data Protection Officer".

3 Legal Bases for Our Data Processing

The processing of personal data may be based on various legal grounds. Where we require your data to fulfil a contract with you or to respond to your pre-contractual enquiries, the legal basis for such processing is Art. 6(1)(1)(b) GDPR. Where we obtain your consent for a specific processing activity, the legal basis is Art. 6(1)(1)(a) GDPR. Some processing activities are carried out on the basis of our legitimate interests, whereby we always weigh your interests worthy of protection against our legitimate interests. The legal basis in such cases is Art. 6(1)(1)(f) GDPR. Where processing is necessary to comply with a legal obligation to which we are subject, the legal basis is Art. 6(1)(1)(c) GDPR. The following explains how we process personal data via our website.

4 Your Rights

You have the following rights with respect to your personal data:

4.1 General Rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), objection to processing (Art. 21 GDPR) and data portability (Art. 20 GDPR). Where processing is based on your consent, you have the right to withdraw that consent with effect for the future at any time (Art. 7(3)(1) GDPR).

4.2 Rights Where Processing Is Based on Legitimate Interests

Pursuant to Art. 21(1) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6(1)(1)(e) GDPR (processing in the public interest) or Art. 6(1)(1)(f) GDPR (processing for the purposes of legitimate interests); this also applies to profiling based on those provisions. In the event of your objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

4.3 Rights Relating to Direct Marketing

Where we process your personal data for the purposes of direct marketing, you have the right pursuant to Art. 21(2) GDPR to object at any time to the processing of personal data concerning you for the purposes of such marketing, including profiling to the extent that it is related to such direct marketing. Should you object to processing for direct marketing purposes, we will no longer process your personal data for those purposes.

4.4 Right to Lodge a Complaint with a Supervisory Authority

You also have the right to lodge a complaint with a competent data protection supervisory authority regarding our processing of your personal data.

5 Collection of Personal Data When Visiting Our Website

When you use the website purely for information purposes – i.e. where you do not register or otherwise provide us with information – we collect only the personal data that your browser transmits to our server. When you view our website, we collect the following data, which is technically necessary for us to display the website and to ensure its stability and security:

• - IP address
• - Date and time of the request
• - Content of the request (the page/file accessed)
• - Access status / HTTP status code
• - Volume of data transmitted in each case
• - The website from which the request originates (referrer URL)
• - Operating system
• - Browser software, language and version
• - Hostname of the accessing device

The legal basis is Art. 6(1)(1)(f) GDPR and § 25(2)(2) TDDDG. As the collection of data to provide the website and its storage in log files is strictly necessary for the operation of the website and for protection against misuse, our legitimate interest in data processing takes precedence in this instance. 

6 Contact by E-Mail or Contact Form

When you contact us by e-mail, we store the data you provide (your e-mail address, and where applicable your name and telephone number) in order to respond to your enquiry. Where we request information that is not required for the purpose of making contact, we have always marked such fields as optional. This information helps us to clarify your enquiry and handle your request more effectively. Providing such information is expressly voluntary and subject to your consent, pursuant to Art. 6(1)(1)(a) GDPR. Where this information relates to communication channels (e.g. e-mail address, telephone number), you also consent to us contacting you via those channels where necessary in order to respond to your enquiry. You may of course withdraw this consent at any time with effect for the future.

Data we receive in connection with your enquiry will be deleted once it is no longer required for the purpose for which it was collected, your request has been fully dealt with, and no further communication with you is required or desired. As the data controller, our company has implemented numerous technical and organisational measures to ensure the most comprehensive protection possible for personal data processed via this website. Nevertheless, internet-based data transfers may in principle be subject to security vulnerabilities. Absolute protection cannot be guaranteed; in particular, the transmission of unencrypted e-mails is not secure. We therefore ask that you do not send sensitive data by unencrypted e-mail, but instead use encrypted communication channels or postal mail.

7 Use of Cookies

Cookies are data stored on your device by a website you visit that enable your browser to be recognised on a return visit. Cookies transmit information to the party setting them. They can store various types of information, such as your language settings, the duration of your visit to our website, or entries you have made there. This prevents you, for example, from having to re-enter required form data each time you visit. The information stored in cookies can also be used to recognise preferences and to tailor content to areas of interest.

There are different types of cookies: session cookies are temporary data held only in working memory and deleted when you close your browser. Persistent cookies are automatically deleted after a set period, which may vary depending on the cookie. The information in this type of cookie may also be stored in text files on your device. However, these cookies can also be deleted at any time via your browser settings.

First-party cookies are set by the website you are currently visiting. Only that website may read information from these cookies. Third-party cookies are set by organisations other than the operator of the website you are visiting. These cookies are used, for example, by marketing companies.

The legal bases for any processing of personal data by means of cookies, and their respective storage periods, may vary. Where you have given your consent, the legal basis is Art. 6(1)(1)(a) GDPR. Where processing is carried out on the basis of our overriding legitimate interests, the legal basis is Art. 6(1)(1)(f) GDPR. The stated purpose then corresponds to our legitimate interest.

Where we access a terminal device used by you within the meaning of § 2(2)(6) TDDDG by storing or retrieving information thereon regardless of any personal reference, we obtain your purpose-specific, voluntary and informed consent pursuant to § 25(1) TDDDG beforehand.

Where consent under the GDPR and the TDDDG can be combined, we will obtain it in a single process.

No consent under the TDDDG is required for access to information already stored on your device that is actively transmitted to us; this covers the public IP address of the terminal device, the address of the website accessed, the user agent string including browser and operating system with version, and the language setting. Furthermore, no consent under the TDDDG is required where the cookie or similar technology serves to ensure the transmission of a communication over a public telecommunications network pursuant to § 25(2)(1) TDDDG, or where the cookie is necessary to provide a service explicitly requested by you pursuant to § 25(2)(2) TDDDG.

We use cookies to ensure the proper operation of the website and to provide basic functionality.

You may delete cookies already stored on your device at any time. If you wish to prevent cookies from being stored, you can do so via your browser settings. Alternatively, you may install a so-called ad blocker. Please note that certain features of our website may not function correctly if you have disabled the use of cookies.

8 Analytics Tools

Matomo

Our website uses the open-source web analytics service Matomo, a service provided by InnoCraft Ltd, a company based at 7 Waterloo Quay PO625, Wellington, New Zealand. As InnoCraft is based outside the EU, it has designated a representative within the EU: ePrivacy Holding GmbH, Große Bleichen 21, 20354 Hamburg (privacy@innocraft.com). Matomo uses cookies that enable analysis of your use of the website. For this purpose, the usage information captured by the cookie (including your truncated IP address) is transmitted to Matomo's server located within the EU and stored for usage analysis purposes. Matomo does not transmit any data to servers outside our control. Your IP address is anonymised immediately during this process, so that you are not identifiable to us as a user. The information collected about your use of this website is not shared with third parties. We use the data collected for statistical analysis of user behaviour with the aim of optimising the functionality and stability of the website and for marketing purposes. Our interest in and purpose for processing the data is the optimisation of our website, the adaptation of content, and the improvement of our services. Users' interests are sufficiently protected through anonymisation.

We store analytics data only for as long as the purpose of processing requires, and for a maximum of 12 months. You can prevent cookies (individual or all) from being set via your browser settings; however, you may not then be able to use all features of this website to their full extent. If you do not agree to the storage and evaluation of your usage data from your visit to our website, you can prevent your data from being collected by Matomo at any time by clicking below. An opt-out cookie will then be set in your browser, with the result that Matomo will not collect any session data. Please note: if you delete your cookies, the opt-out cookie will also be deleted and must be reset by you.

Legal Basis and Right of Withdrawal
The legal basis for this data processing is your consent, Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by accessing the cookie settings in our Consent Management Platform and changing your selection there.

Plausible Analytics

We use the web analytics service "Plausible Analytics" provided by Plausible Insights OÜ, Västriku 2, 50403 Tartu, Estonia, on our website to anonymise certain user data and evaluate it in anonymised and aggregated form for the purposes of measuring reach, technical optimisation of the website, and aligning our website content with user interests.

The service collects the following data:
- IP address (anonymised directly during website analysis with Plausible Analytics and not stored)
- URL of the page visited
- HTTP referrer (URL of the page from which you arrived)
- Browser type and version
- Operating system
- Device type (desktop, mobile device or tablet)
- Country, region and city

No personal profiles are created and data is not combined across different websites.

The processing of your personal data, or its anonymisation with subsequent evaluation of the anonymised data, is carried out on the basis of our legitimate interests pursuant to Art. 6(1)(f) GDPR, namely the use of anonymised data for measuring reach, technical optimisation of the website, and aligning our website content with user interests. The recipient of the data is the service provider, Plausible Insights OÜ, Västriku 2, 50403 Tartu, Estonia (server location: Germany), which acts as a data processor on our behalf. We have concluded a data processing agreement (DPA) with the provider pursuant to Art. 28 GDPR.

No personal data is stored in the course of using this service.

Objection
You may object to or prevent this data processing, for example by clicking "Exclude my visits":

In such cases, (opt-out) information is stored on your device in order to implement and recognise your objection and to prevent the aforementioned data processing. The legal basis for storing and accessing this information is § 25(2)(2) TDDDG, as this is strictly necessary in order to honour and give effect to your objection. The legal basis for this data processing is our legitimate interest pursuant to Art. 6(1)(f) GDPR in being able to act on and give effect to your objection without delay.

Please note that this information will be deleted automatically if you clear your browser cache or website data, in which case you would need to click "Exclude my visits" again above.

Further information on data protection at Plausible Analytics can be found in the provider's privacy policy at: https://plausible.io/privacy

9 Podcast

On our website you have the opportunity to listen to our LAGERWARE Treffpack podcast. Our podcast episodes cover questions of design, sustainability, and packaging.

You can listen to our podcast on our website. We host our podcasts via podcaster.de, a podcast hosting platform provided by Fabio Bacigalupo, Brunnenstraße 147, 10115 Berlin, Germany. For details of data transmission to the provider in connection with hosting, please refer to Section 12.

To protect your personal data, we use a two-click solution via a content blocker. When you access a page on which a podcast is embedded, a connection to the podcaster.de servers is not established until you click the "Show Podcast" button. After clicking, certain visitor data is transmitted to podcaster.de.

Further information on data protection at podcaster.de is available at the following link: https://www.podcaster.de/privacy

You can also listen to our podcast via the following podcast platforms:

• iTunes, provided by Apple Inc., One Apple Park Way, Cupertino, CA 95014, USA
• podcast.de, provided by Fabio Bacigalupo, Brunnenstraße 147, 10115 Berlin, Germany
• Deezer, provided by Deezer, 24 rue de Calais, 75009 Paris, France
• Amazon Music, provided by Amazon.com Services LLC, c/o Amazon.com, P.O. Box 81226, Seattle, WA 98108-1226, USA
• Spotify, provided by Spotify AB, Regeringsgatan 19, SE-111 53 Stockholm, Sweden

You can reach these podcast platforms via links on our website, among other routes. Links to the podcast services' websites can be recognised by the respective company logo. By following these links, you will reach our podcast on those platforms. When you click on a link to such a platform, a connection to that platform's servers is established, which transmits to the platform's servers that you have visited our website.

In addition, further data is transmitted to the platform provider, which may include the following:

• Address of the website on which the activated link is located
• Date and time of access to the website or activation of the link
• Information about the browser and operating system used
• IP address

We also draw your attention to the fact that we have no influence over the scope, nature, or purpose of data processing by the podcast platform providers. Where our influence over data processing ends, so does the limit of our responsibility. In these instances, it is not possible for us to influence the data processing carried out by the podcast platform operator. We are therefore unable to provide information about what personal data is processed by them. For further information about the processing of personal data collected and available means of objection, please refer to the respective privacy policies of the platform operators. Some podcast platform providers are located in the USA and other countries outside the EU and EEA. Data may therefore also be processed by the respective platform provider in countries outside the EU. We draw your attention to the fact that companies in those countries may be subject to data protection law that does not afford your personal data the same level of protection as that provided in EU Member States.

10 Social Bookmarks

Our website incorporates so-called social bookmarks from the following providers:

• Instagram (operator: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
• LinkedIn (operator: LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland)
• Spotify (operator: Spotify AB, Regeringsgatan 19, SE-111 53 Stockholm, Sweden)

Social bookmarks are internet bookmarks that allow users of such services to collect links and news items. These are integrated on our website solely as links to the respective services. When you click on the embedded graphic, you are redirected to the relevant provider's website — it is only at that point that user information is transmitted to the respective provider. For information on how your personal data is handled when using these websites, please refer to the respective providers' privacy policies.

11 Data Transmission

Your personal data is not transmitted to third parties as a matter of principle, unless we are legally obliged to do so, transmission is necessary for the performance of the contractual relationship, or you have previously given your express consent to the disclosure of your data.
 

Our websites are hosted by external service providers, who supply the necessary infrastructure and computing capacity, storage space and database services, security services, and maintenance. We use these services for the purposes of operating our websites efficiently and securely.

In doing so, we and our hosting providers process only the data necessary for the service, namely usage data, content data, meta and communication data, as well as master data, contact data, and contract data of users and customers of our websites. This data processing is carried out on the basis of our legitimate interest in the efficient and secure provision of our websites. The legal basis is Art. 6(1)(1)(f) GDPR.

Other external service providers and partner companies, such as IT service providers, also only receive your data to the extent necessary. The volume of data transmitted is limited to the required minimum. Where our service providers process your personal data on our behalf, we ensure, within the framework of data processing agreements pursuant to Art. 28 GDPR, that they comply with data protection legislation in the same manner. Please also refer to the privacy notices of the respective providers.

We place importance on processing your data within the EU/EEA. However, it may be necessary for us to engage service providers that process data outside the EU/EEA. In such cases, we ensure that an adequate level of data protection, comparable to the standards within the EU, is established at the recipient's end prior to the transfer of your personal data. This may be achieved, for example, through EU standard contractual clauses, binding corporate rules, or specific agreements whose provisions the company has agreed to be bound by.

Responsibility for the content of third-party services lies with the respective service provider, although we carry out reasonable checks of such services for compliance with statutory requirements.

12 Applications

You may apply to our company electronically, i.e. by e-mail. Please note that e-mails sent without encryption are not transmitted with access protection.

Your details will be used to process your application and to decide whether to enter into an employment relationship. The legal basis is § 26(1) in conjunction with § 26(8)(2) of the German Federal Data Protection Act (BDSG). Your personal data may also be processed where this is necessary to defend against legal claims asserted against us arising from the application process. The legal basis for this is Art. 6(1)(1)(f) GDPR. Our legitimate interest in the processing also lies in the stated purposes.

Where an employment relationship is established between you and us, we may, pursuant to § 26(1) BDSG, continue to process the personal data already received from you for the purposes of the employment relationship, where this is necessary for the performance or termination of the employment relationship, or for the exercise or fulfilment of rights and obligations arising from a statute, collective agreement, or works or service agreement that are attributable to the employee representation body.

No processing of your application data beyond the purposes described above shall take place.

Your personal data will be deleted no later than 6 months after the conclusion of the application process, provided that no other legitimate interests on our part preclude deletion and you have not given us consent to a longer retention period. An example of such a legitimate interest would be an obligation to produce evidence in proceedings under the German General Equal Treatment Act (AGG).

13 Data Security

We have implemented extensive technical and operational safeguards to protect your data against accidental or intentional manipulation, loss, destruction, or access by unauthorised persons. Our security procedures are reviewed regularly and updated in line with technological advances.

Last updated: May 2026