Privacy Policy

“This data privacy statement explains the nature, scope and purpose of the processing of personal data within our online services and the associated websites, functions and content as well as external online sites such as our social media profiles. With regard to the terms employed, such as ‘processing’ or ‘controller’, we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).”

1. Name and contact details of the person responsible for processing and the company Data Protection Officer

This data protection information applies to data processing by:
Controller: RIGK GmbH, Friedrichstr. 6, 65185 Wiesbaden. Statutory representatives: Markus Dambeck and Jan Bauer
Tel: +49 611 308600-0 · Fax +49 611 308600-30; Email info(at)rigk.de.
The Data Protection Officer of RIGK GmbH can be contacted at the following address:
RIGK GmbH,  -Datenschutzbeauftragter -, Friedrichstr. 6, 65185 Wiesbaden, Email: Datenschutzbeauftragter(at)rigk.de.

2. Definitions

We use the following terms in this privacy statement:

a) Personal data
Personal data refers to any information relating to an identified or identifiable natural person (hereinafter: you, your, etc.). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

b) Data subject
The data subject is any identified or identifiable natural person whose personal data is processed by the data controller.

c) Processing
Processing means any operation or series of operations performed on personal data, with or without the aid of automated procedures, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of personal data.

d) Data controller or data processor
The data controller or data processor is a natural or legal person, an agency, a public authority, or any other body which, alone or jointly with others, determines the purposes of any personal data and the means of processing it. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

e) Processor
Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

f) Recipient
Recipient means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular enquiry in accordance with Union or Member State law shall not be regarded as recipients.

g) Third party
Third party means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.

h) Consent
Consent of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

3. Collection and storage of personal data and type and purpose of use

a) When you visit our website
When you access our website www.rigk.de, the browser used on your end device automatically sends information to our website’s server. This information is saved temporarily in a log file. The following information is collected and saved until the next automatic erasure:

  • IP address of the computer used to access the website
  • Date and time of access
  • Name and URL of the file accessed
  • Website from which the site is accessed (referrer URL)
  • Browser used, operating system of your computer if applicable, name of your access provider

We use the aforementioned data for the following purposes:

  • To guarantee a smooth connection to the website
  • To guarantee convenient use of our website
  • To analyse system security and stability
  • For other administrative purposes

The legal basis for data processing is Art. 6 Para. 1 Clause 1 lit. f GDPR. Our vital interest results from the purposes of data collection listed above. We never use the data collected for the purpose of drawing conclusions on your person. We also use cookies and analysis services when you visit our website. You can find more details on this in Sections 8 and 9 of this Privacy Statement.

b) When you sign up for our newsletter
If you have expressly consented according to Art. 6 para. 1 sentence 1 lit. a GDPR, we will use your email address to regularly send you the company's newsletter. Providing an email address is sufficient for receiving the newsletter. In addition to your email address, we store your first and last name for personalized newsletter delivery.
We pass on the data necessary for the processing of newsletter dispatch and for unsubscribing to an external service provider with whom a data processing agreement exists.
Unsubscribing from the newsletter is possible at any time, for example, via a link at the end of each newsletter. Alternatively, you can also send your unsubscribe request to info(at)rigk.de via email at any time.

c) Use of the customer portal (www.portal.rigk.de)
Our customer portal is used for the administrative processing of our take-back systems in the RIGK-, RIGK-G- as well as Pick-UP-Systems. To use our customer portal, it is necessary that you provide information on the following personal data during your registration:

  • Salutation
  • First name
  • Last name
  • contractual number, company address
  • Business e-mail address
  • Business phone number for possible queries

After completing registration, you can log in to the customer portal using your e-mail address and the authentication link sent to you. This gives you the option of submitting your packaging reports digitally, which are obligatory under a concluded take-back system participation agreement.

The above mentioned data will be processed by us for the following purposes:

  • Fulfilment of contractual obligations of the contractual partner according to its agreement and connected system,
  • Provision of contract-specific data/details
  • Inspection of information specific to the contractual partner

The legal basis for the data processing is Art. 6 para. 1 p. 1 lit. b of the GDPR on the basis of the performance of a contract.

For the purpose of hosting our customer portal, for back-up services and technical further development of the customer portal, we use external service providers who may receive access to exemplary data in the course of order processing. There is an order processing contract with these processors on the basis of Art. 28 GDPR.

The personal data collected for the use of the customer portal is processed and stored for the duration of the contract period up to a final invoice for contractual services. In addition, we store your personal data for the fulfillment of legal obligations to provide proof and to retain records, which result, among other things, from the German Commercial Code (Handelsgesetzbuch), the German Fiscal Code (Abgabenordnung) and the German Money Laundering Act (Geldwäschegesetz).

d) Docusign
This website uses the services of Docusign for the creation and transmission of digital signatures for the purpose of concluding contracts. The provider is Docusign, at the address 9 Appold St, London EC2A 2AP, United Kingdom.

DocuSign's main product and services support users in setting up transactions digitally or electronically, executing them or proving their validity. As requested by our users, we collect and document, as part of the provision of our services, those data that enable parties to prove the effectiveness of the transactions they have made. This data also includes the persons involved in the transactions and the terminal devices used by these persons.

The data collected by this website using Docusign is stored on servers of the contractor Docusign.

The use of Docusign is in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR

Further information on the handling of user data can be found in the privacy policy of Docusign at: https://www.docusign.de/unternehmen/datenschutz

4. Data transfer

Your personal data will not be transmitted to third parties for any purpose other than the purposes listed below.
We only disclose your personal data to third parties in the following cases:

  • Where you have given your explicit permission in accordance with Art. 6 Para. 1 Clause 1 lit. a GDPR
  • Where disclosure is required in accordance with Art. 6 Para. 1 Clause 1 lit. f GDPR for the establishment, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest in the non-disclosure of your data that is worthy of protection
  • Where there is a legal obligation to disclose in accordance with Art. 6 Para. 1 Clause 1 lit. c GDPR.
  • Where it is lawfully permissible and required for the processing of contractual relationships with you in accordance with Art. 6 Para. 1 Clause 1 lit. b GDPR

5. Legal basis for the processing of personal data

If we obtain your consent for the processing of personal data, Article 6(1)(a) GDPR shall serve as the legal basis.

When processing personal data that are necessary for the fulfilment or execution of a contract or pre-contractual measures, Article 6(1)(b) GDPR shall serve as the legal basis.

If the processing of personal data is required in order to fulfil a legal obligation to which we are subject, Article 6(1)(c) GDPR serves as the legal basis.

If the processing is required in order to protect our legitimate interest or that of a third party and if your interests or fundamental rights and freedoms do not override the former interest, Article 6(1)(f) GDPR shall serve as the legal basis for the processing.

6. Data deletion and storage duration

Your personal data will be deleted or made unavailable as soon as the purpose of the storage is no longer valid. It may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. The data will also be made unavailable or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a requirement for further storage of the data for the conclusion of a contract or the fulfilment of a contract.

7. Cookies

Our website uses cookies. These are small files that are created automatically by your browser and saved on your end device (laptop, tablet, smartphone etc.) when you visit our website. Cookies do not damage your end device, nor do they contain viruses, Trojans or other malware.

The cookie stores information gathered in relation to the specific device used. However, this does not mean that we are directly aware of your identity.

Using cookies helps to make it easier and more pleasant for you to use our website. We use session cookies, for example, to detect that you have visited individual pages on our website before. They are automatically deleted when you leave our website.

To optimise user-friendliness even more, we also use temporary cookies that are saved on your device for a defined period of time. If you visit our website again to use our services, these cookies automatically detect that you have visited us before and remember the entries and settings you made, so that you do not have to do it again.

We also use cookies to gather statistical data on the use of our website and analyse it in order to optimise our services for you (see Section 5). When you visit our website again, these cookies enable us to automatically detect that you have visited us before. These cookies are automatically deleted after a defined period.

The data processed by cookies is required for the purposes stated in order to protect our vital interests and those of third parties in accordance with Art. 6 Para. 1 Clause 1 lit. f GDPR.

Most browsers accept cookies automatically. However, you can configure your browser to prevent any cookies from being saved on your computer or to always show notification before a new cookie is created. Deactivating cookies completely may prevent you from using some functions of our website.

8. Analysis/tracking tools

We implement the tracking measures listed below on the basis of Article 6(1)(f) GDPR. We use these tracking measures in order to ensure that the website is designed in line with requirements and that it is continuously optimised. Furthermore, we use the tracking measures in order to record the use of the website statistically and for the purpose of evaluating and optimising our services for you. These interests shall be considered as justified within the meaning of the aforementioned provision.

The respective data processing purposes and data categories can be found in the corresponding tracking tools.

Google Analytics
In order to continuously optimise our website and structure it in line with demand, we use Google Analytics, a web analysis service from Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”). This involves the creation of pseudonymised usage profiles and the use of cookies (see Section 8). The information on your use of this website generated by the cookie, such as

  • browser type/version,
  • operating system used,
  • referrer URL (the site visited before),
  • host name of the accessing computer (IP address),
  • time of server request,

is usually transmitted to a Google server within the EU or European Economic Area and saved there. However, saving in the USA cannot be ruled out. The information is used to analyse use of the website, compile reports on website activity and provide further services in connection with the use of the website and the internet for the purposes of market research and demand-based structure of this website. The information may also be transmitted to third parties where this is required by law or such third parties process it on our behalf. Google will never connect your IP address with other data. The IP addresses are anonymised so that they cannot be attributed (IP masking).

You can prevent the installation of cookies by making the relevant settings in your browser software. However, please note that this may mean that some functions of this website do not work in full.

You can also prevent the data on your use of the website generated by the cookie (incl. your IP address) from being collected and from being processed by Google by downloading and installing a browser add-on.

As an alternative to the browser add-on, especially for browsers on mobile devices, you can prevent collection by Google Analytics by clicking this link. This places an opt-out cookie that prevents your data being collected when you visit this website in future. The opt-out cookie applies only for this browser and only for our website, and is stored on your device. If you delete the cookies in this browser, you need to reset the opt-out cookie.
You can find more information on data protection in connection with Google Analytics in the  Google Analytics Help, for example.

Exclude from tracking

9. Social media links and plug-ins

Based on Art. 6 Para. 1 Clause 1 lit. f GDPR, we use links to the social networks YouTube and LinkedIn on our website in order to raise the profile of our company. The advertising purpose of this is considered a vital interest under the GDPR. The provider in each case is responsible for guaranteeing operation that complies with data protection. YouTube videos are embedded using a plug-in. In order to protect the data of visitors to our website, we integrate this plug-in under the enhanced data protection mode via YouTube-nocookie.com/embedded.

a) LinkedIn
Our website provides a link to the LinkedIn network provided by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.

Each of the links to LinkedIn creates a connection to LinkedIn servers. LinkedIn receives notification that you have visited our website with your IP address. If you click the LinkedIn “Recommend” button while you are logged in to your LinkedIn account, LinkedIn can attribute your visit to our website to you and your user account. Please note that, as the website provider, we are not aware of the content of the data transmitted or its use by LinkedIn.

You can find more information on data collection and the legal and setting options you have in the LinkedIn privacy policy at https://www.linkedin.com/legal/privacy-policy.

b) YouTube
Our website uses Plugins of the Website YouTube. The operator of these websites is the Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use Youtube in extended data protection mode. According to YouTube, this mode causes that YouTube doesn’t save any information about visitors of our website, before they watch the videos. The transfer of data to partners of YouTube is not necessarily excluded by the extended data protection mode. So YouTube establishes a connection to the Google DoubleClick network even if you don’t watch the video.

When you start a YouTube video on our website a connection to YouTube will be established. Then the YouTube-Server will be informed, which of our websites you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can avoid this by logging out of your Youtube account before you watch the video.

Moreover, after starting the video YouTube can install various cookies on your end device. With these cookies YouTube can get more information about the visitors to our website. This information is used, among other things, to collect video statistics, improve the user experience and prevent fraud attempts. These cookies will remain on your device until you delete them.

If necessary, further data processing operations may be triggered after the start of a YouTube video, over which we have no control.

The use of YouTube takes place in the interest of an attractive presentation of our online offers. This is a legitimate interest in terms of Article 6 (1)(f) GDPR.

You can find more information about data protection at YouTube in their privacy policy under: https://policies.google.com/privacy?hl=de .

c) Twitter
A link of the social network Twitter is integrated on our website. The provider of this social network is Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103 U.S.A. For more information on data protection when using Twitter, please refer to the provider's privacy policy (https://twitter.com/en/privacy).

10. Rights of persons affected

Your rights:

  • In accordance with Art. 15 GDPR, you have the right to demand information about the personal data on you that we process. In particular, you can demand information on the purposes of processing; the category of personal data; the categories of recipients to whom your data is or was disclosed; the planned storage period; the existence of a right to correction, erasure, limitation of processing or objection; the existence of a right of complaint; the source of your data if not collected by us; and the existence of automated decision-making including profiling and meaningful information about the details of this.
  • In accordance with Art. 16 GDPR, you have the right to demand the immediate correction or completion of your personal data stored by us.
  • In accordance with Art. 17 GDPR, you have the right to demand the erasure of your personal data stored by us, unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims.
  • In accordance with Art. 18 GDPR, you have the right to obtain restriction of processing of your personal data where you contest the accuracy of the data, the processing is unlawful but you oppose its erasure, or we no longer need the data but you require it for the establishment, exercise or defence of legal claims, or you have objected to the processing in accordance with Art. 21 GDPR.
  • In accordance with Art. 20 GDPR, you have the right to obtain your personal data you provided to us in a structured, commonly used and machine-readable format and to demand transmission of that data to another controller.
  • In accordance with Art. 7 Para. 3 GDPR, you have the right to withdraw your consent from us at any time. This will mean that we are not permitted to continue the data processing based on this consent in future.
  • In accordance with Art. 77 GDPR, you have the right to lodge a complaint with a supervisory body. You can usually do this by contacting the supervisory body in your habitual place of residence, place of work, or our company seat.

11. Right of objection

Where your personal data is processed based on vital interests in accordance with Art. 6 Para. 1 Clause 1 lit. f GDPR, you have the right in accordance with Art. 21 GDPR to object to the processing of your personal data on grounds relating to your particular situation or where the objection is to direct marketing. In the latter case, you have a general right to objection, which we shall implement without specification of a particular situation.

If you would like to exercise your right of objection or withdrawal, an email to datenschutzbeauftragter(at)rigk.de is sufficient.

12. Data security

During your visit to our website, we use the common SSL (secure socket layer) process combined with the highest level of encryption your browser supports. This is usually 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can see whether a particular page of our website is transmitted in encrypted form by the closed key or padlock icon in the lower status bar of your browser.

We also use appropriate technical and organisational security measures to protect your data against accidental or deliberate manipulation, partial or total loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological progress.

13. Up-to-dateness and amendment of this Privacy Statement

This Privacy Statement is currently valid and is dated December 2022.
Further development of our website and services or changed statutory or regulatory provisions may necessitate amendments to this Privacy Statement. You can access the latest version of the Privacy Statement on the website at www.rigk.de/datenschutz at all times and print it off.