Privacy Policy

Of course, we take all matters relating to data protection very seriously and implement the provisions of the European Data Protection Basic Regulation (hereinafter referred to as "DS-GVO") and other legal requirements for the protection of personal data.

The following information provides you with an overview and information about the processing of personal data and the resulting data protection rights. The processing of personal data includes any operation such as the collection, recording, organisation, arrangement, storage, adaptation or alteration, reading, querying, use, disclosure by transmission, dissemination or any other form of provision, comparison or linkage, restriction, deletion or destruction. In doing so, we observe the legal requirements of data protection and process personal data only to the extent legally permissible and necessary.

 

Data controller and data protection officer 

 

  1. Person responsible
    The person responsible for the collection, processing and use of your personal data within the meaning of Art. 4 No. 7 DS-GVO is Palamo GmbH, Möllner Landstraße 15, 22969 Witzhave, Germany.


    If you wish to object to the collection, processing or use of your data by us in accordance with these data protection provisions, either as a whole or for individual measures, you can address your objection to the person responsible. You can save and print out this data protection declaration at any time.

    Managing Director: Adrian Tippenhauer, Maximilian Minkwitz
    e-mail: [email protected]
    Website: palamo.com
  1. Data protection officer
    Should you have any further questions or concerns regarding data protection, please contact our data protection officer:
Contact person: Maximilian Minkwitz
datenschutz nord GmbH
[email protected]

    General information on data processing

     

    1. Terms used 
      Personal data: "personal data" shall mean any information relating to an identified or identifiable natural person; an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an on-line identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
    2. Processing:
      "Processing" means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
    3. Description and scope of the processing of personal data
      In the following we inform you about the collection of personal data when using our website. Personal data are all data that can be related to you personally, e.g. name, address, e-mail addresses, telephone number. As a matter of principle, we process your personal data only to the extent necessary to provide a functioning website.
    1. Legal basis for the processing of personal data
      Insofar as we obtain your consent for the processing of personal data, Art. 6 para. 1 a DS-GVO serves as the legal basis. This consent can be revoked at any time with effect for the future. Revocation of consent does not, however, affect the lawfulness of the data processed up to revocation or further processing based on a different legal basis. For the processing of personal data which is necessary for the performance of a contract to which you are a party, Article 6 (1) b of the DS-GVO serves as the legal basis. This also applies to processing operations necessary for the performance of pre-contractual measures. Insofar as the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 Paragraph 1 c DS-GVO serves as the legal basis. In the event that vital interests of you or another natural person make it necessary to process personal data, Art. 6 (1) d DS-GVO serves as the legal basis. If the processing is necessary to safeguard a legitimate interest of our company or of a third party and if your interests, fundamental rights and freedoms do not outweigh the former, Art. 6 Paragraph 1 f DS-GVO serves as the legal basis for the processing. 
    1. Purpose of data processing
      We operate our website, where we offer you various products and services in the field of labels & packaging. For the execution of these services we use third independent service partners. The collection, processing or use of personal data is always carried out in accordance with the provisions of data protection law in order to first and foremost fulfill the contractual and legal obligations in providing the respective services. 
    1. Data deletion and storage period
      Your personal data will be deleted or blocked as soon as the purpose for which it was stored no longer applies. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which our company is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data in order to conclude or fulfil a contract.

     

     

    When using the website

     

    1. Description and scope of data processing
      When you call up our website, the browser used on your end device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is recorded without your intervention and stored until it is automatically deleted: IP address of the requesting computer, Date and time of access, Name and URL of the retrieved file, Website from which the access takes place (referrer-ULR), the browser used and, if applicable, the operating system of your computer and the name of your access provider. We process the above-mentioned data for the following purposes: To ensure a smooth connection of the website, Guarantee a comfortable use of our website, Evaluation of system security and stability and for other administrative purposes. 
    1. Legal basis for data processing
      The legal basis for the data processing is Art. 6 Para. 1 p. 1 f DS-GVO. Our legitimate interest follows from the purposes of data collection listed above. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person. 
    1. Purpose of data processing
      The temporary storage of the IP address by the system is necessary to enable the website to be delivered to your computer. For this purpose, your IP address must remain stored for the duration of the session. These purposes also include our legitimate interest in data processing in accordance with Art. 6 para. 1 f DS-GVO.
    1. Duration of storage
      The data will be deleted as soon as they are no longer necessary for the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session is ended. 
    1. Possibility of objection and removal
      The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website. There is therefore no possibility of objection on your part. 
    1. Data security
      To ensure data security, the transmission of the contents of our website is encrypted using the SSL procedure in accordance with the state of the art. To secure the data, we and the commissioned service providers, with whom corresponding contractual agreements have been made, use suitable measures according to the state of the art, in particular to restrict access to the data, to protect against changes and loss, and to ensure confidentiality according to the state of the art. 
    1. Cookies
      When you use our website, we and possibly third parties may use cookies and similar technologies (e.g. web beacons, local storage features such as Flash cookies, HTML 5 cookies and similar technologies that store or access data in your browser or on your terminal device). Cookies are small text files that are automatically created by your browser and stored on your terminal device when you use our website. We use cookies and similar technologies that remain stored on your device only as long as your browser is active (session cookies), as well as cookies and similar technologies that remain stored on your device for a longer time (permanent cookies).

      You can configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies. However, this may mean that you will not be able to use all the functions of our website. You are also free to delete all cookies at any time via the settings of your browser. In addition to cookies, other technologies (e.g. pixels) may be used in individual cases to collect corresponding information.

      This site uses the cookie content-tool of the Shopify App "GDPR/CCPA + Cookie Management" from iSense LLC, 855 Maude Ave Mountain View, CA, 94043-4021, USA to obtain effective user consent for cookies and cookie-based applications requiring consent.

      By embedding a JavaScript code, a banner is displayed to users when they visit the site, in which consent to certain cookies and/or cookie-based applications can be granted by placing a checkmark. The tool blocks the setting of all cookies requiring consent until the respective user gives his consent by ticking the appropriate box. This ensures that such cookies are only set on the user's terminal device if consent has been granted.

      To enable the cookie-content tool to uniquely assign page views to individual users and to individually record, log and store for a session period the consent settings made by the user, certain user information (including the IP address) is collected by the cookie-content tool when our website is accessed, transmitted to Shopify servers and stored there.

      This data processing is carried out in accordance with Art. 6 Para. 1 f DS-GVO on the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website. A further legal basis for the data processing described is Art. 6 Para. 1 c DS-GVO. As the responsible party, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.

      Further information on the processing of personal data by Shopify can be found in the Shopify privacy policy at https://www.shopify.com/legal/privacy.

      In order to obtain effective user consent for cookies and cookie-based applications requiring consent, we use the Shopify App "GDPR/CCPA + Cookie Management" from iSense LLC. In order for the cookie content-tool to uniquely associate page views with individual users and to record, log and store consent settings individually for a period of time, the cookie content-tool collects certain user information (including IP address) when you visit our website.

      We also use cookies and similar technologies to collect this information from the devices (including mobile devices) you use when you use our website. The data collected includes the following usage and device-related information

      / IP address of the terminal used to access the website
      / Data concerning cookies (e.g. cookie ID)
      / Information about web pages you visit and the time, frequency and duration of visits, the links you click and other actions you take when using our website
      / Information about your activities and interactions with our advertisers, including information about which ads were shown to you, how often they were shown, when and where they were shown, and whether you performed an action, such as clicking on an ad
      / Your affiliation to one or more user segments.
      / Model or device type, operating system and version, browser type and settings, device ID or individual device identifier, ID for advertisements, individual device token
      / Location data, including the location data of your mobile device (for most mobile devices, location services can be disabled in the settings menu generally or per application).

      This website uses cookies for the following purposes and may process personal data in this context:

      / Absolutely necessary cookies
      We use absolutely or technically necessary cookies. This is especially the case for local storage of form data when booking and contacting us. For more information on functional and required cookies that our host provider Shopify uses for us on our website, please refer to the cookies used by Shopify: https://www.shopify.com/legal/cookies.

      / Performance measurement using Google Analytics and Google Ads
      Google Analytics is a web analysis service provided by Google LLC ("Google") to evaluate the use of the website by users, to compile reports on website activities and to provide further services related to website and internet use to us as website operator. We have activated the IP anonymization function on this website. As a result, your IP address will be shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before transmission to the USA. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. If you want to deactivate Google Analytics, download and install the add-on for your web browser: http://tools.google.com/dlpage/gaoptout.

      We use Google Ads for conversion tracking to determine how effectively clicks on our ads lead to profitable activities on this website, such as booking or filling out forms. Here you can find more information about the use of cookies by Google and data processing by Google.Within the scope of Google Analytics, we also use the technical extension "Google Signals", which enables cross-device tracking. This makes it possible to associate your website visit with different end devices, provided that you have logged into your Google accounts across several devices when visiting the website and have also activated the "personalised advertising" option in your Google account settings. However, no personal data or user profiles are transmitted to us by Google. We only process your data anonymously.

      / Marketing purposes - Remarketing with Google Ads
      We use remarketing technology from Google LLC ("Google") on our website. Through remarketing we can address you with advertising, e.g. if you have already interacted with our website. You will see our ads when you visit a Google website or a website in the Google advertising network.

      Palamo bases these processing activities on the following legal principles:
      / Fulfillment of the contractual relationship with you or for the implementation of pre-contractual measures taken in response to your request (Art. 6 para. 1 lit. b DS-GVO) - this may be the case in particular when processing personal data in connection with absolutely necessary cookies;
      / legitimate interest of Palamo, Bridgemaker GmbH or other third parties (such as governmental agencies or courts) (Art. 6 para. 1 lit. f DS-GVO) - this may be the case in particular when processing personal data in connection with absolutely necessary cookies, unless there is already a case of contractual performance or implementation of pre-contractual measures;
      / Consent (Art. 6 para. 1 lit. a DS-GVO) - this may be the case when processing personal data in connection with performance and marketing cookies
    1. Analysis tools

      Google Analytics
      We use on our website the website analysis service for websites of Google Analytics, a web analysis service of Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter "Google"). In this context, pseudonymised user profiles are created and cookies are used. The information generated by the cookie about your use of this website such as Browser type/version, the operating system used, Referrer URL (the previously visited page), Host name of the accessing computer (IP address), Time of the server request, are transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on the website activities and to provide further services associated with the use of the website and the Internet for the purposes of market research and the design of these Internet pages in line with requirements. This information may also be transferred to third parties if required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are made anonymous, so that an assignment is not possible (IP masking). You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).

      Further information on data protection in connection with Google Analytics can be found in the Google Analytics help (https://support.google.com/analytics/answer/6004245?hl=de). If you have reached this page via an advertisement on Google, we use the Google Ads Conversion Tracking service, whereby a cookie is set on your device. This is used for analysis and statistical evaluation of the use of the website. The cookie is valid for 30 days. The person is not identified, but it is observed whether the user has reached the site via a Google advertisement. You can prevent this use by rejecting the setting of corresponding cookies in your browser settings.

      To protect our web forms from automated requests, we use a third-party captcha function. The captcha function automatically captures all user input and mouse movements that you make on our website (regardless of whether you visit pages that contain web forms or not). The data collected in this way is used to determine whether the input comes from a person or an automated program.  

      As the Captcha function is provided by a third party, displaying the captcha will cause third-party content to be downloaded. This provides the third party with information that you have accessed our site and with the usage data technically required for this purpose.  In this respect, the third-party provider also receives your IP address, which is technically required to retrieve the content.   

      We have no influence on the further data processing by the third-party provider.

      The legal basis for this data processing is your consent in accordance with Art. 6 para. 1 s. 1 lit. a GDPR or §15 para. 3 s. 1 TMG if you have given your consent via our cookie banner.

      Please note that the use of the Captcha function may result in your data being processed outside the EU or EEA. In some countries, there is a risk that authorities may access the data for security and surveillance purposes without informing you or allowing you to take legal action. Where we use providers in third countries without an adequate level of protection and you give your consent, the transfer to this third country is based on Art. 49 para. 1 lit. a GDPR.

      Provider Storage Duration Adequate level of data protection Revocation of consent
      Google LLC (USA and/or Ireland) No adequate level of data protection. The transfer takes place on the basis of Art. 49 para. 1 lit. a GDPR. If you wish to withdraw your consent, please click here and make the appropriate setting via our banner.

     

     

    Contact form and e-mail contact

     

    1. Description and scope of data processing
      We offer you the opportunity to contact us using a form within our product recommendation quiz provided on the website. If you take this opportunity, the data entered in the input mask will be transmitted to us and stored. In order to process the data, your voluntary consent will be obtained in accordance with Art. 6 Para. 1 a DS-GVO and reference will be made to this data protection declaration. Alternatively, it is possible to contact us via the e-mail address provided. In this case the personal data transmitted with your e-mail will be stored.
    1. Legal basis for data processing
      The legal basis for the processing of the data is the existence of your consent in accordance with Art. 6 Paragraph 1 a DS-GVO. The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 Paragraph 1 f DS-GVO. If the e-mail contact is aimed at the conclusion of a contract, an additional legal basis for processing is Art. 6 Para. 1 b DS-GVO.
    1. Purpose of data processing
      The processing of the personal data from the input mask serves us only for the processing of the establishment of contact. In the case of contacting us by e-mail, this is also the necessary legitimate interest in the processing of the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems. 
    1. Duration of storage
      When you contact us by e-mail or via a contact form, the data you provide (e.g. e-mail address, name, address, telephone number) will be stored by us in order to answer your questions. The data will be deleted as soon as they are no longer required for the purpose for which they were collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with you has ended. The conversation is finished when it can be concluded from the circumstances that the matter in question has been finally clarified. 
    1. Possibility of objection and removal
      You have the possibility to revoke your consent to the processing of your personal data at any time. If you contact us by e-mail, you can object to the storage of your personal data at any time. All personal data stored in the course of contacting us will be deleted in this case. 


      Newsletter

       

      1. Description and scope of data processing
        If you get consultation on our services on our website and provide us with your contact details, we may subsequently use this data to send you a newsletter. In such a case, the newsletter will only be used to send direct advertising for our own services. In connection with the data processing for the dispatch of newsletters, the data will not be passed on to third parties. 
      1. Legal basis for data processing
        The legal basis for sending the newsletter is § 7 para. 3 UWG.
      1. Purpose of data processing
        The collection of your data serves to send the newsletter. 
      1. Possibility of objection and removal
        The newsletter can be cancelled by you at any time. For this purpose you will find a corresponding link in every newsletter.

       

       

      Rights of the user

      If your personal data is processed, you are a data subject within the meaning of the DS-GVO and you are entitled to the following rights in relation to our company: to request information about your personal data processed by us in accordance with Art. 15 DS-GVO. In particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right of correction, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data, if it has not been collected by us, as well as the existence of automated decision making including profiling and, if applicable, meaningful information on the details of such data; in accordance with Art. 16 DS-GVO, to demand the correction of incorrect or incomplete personal data stored by us without delay; pursuant to Art. 17 DS-GVO, to demand the deletion of your personal data stored with us, unless processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims; pursuant to Art. 18 DS-GVO, to demand the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer require the data, but you require it for the assertion, exercise or defence of legal claims or you have lodged an objection to the processing pursuant to Art. 21 DS-GVO; pursuant to Art. 20 DS-GVO, to receive your personal data that you have provided us with in a structured, common and machine-readable format or to request that it be transferred to another responsible party; in accordance with Art. 7 Para. 3 DS-GVO, to revoke your consent to us at any time. As a result, we are no longer allowed to continue data processing based on this consent in the future and, pursuant to Art. 77 DSGVO, to complain to a supervisory authority. pursuant to Art. 21 DS-GVO, to object to the processing of your personal data if there are reasons for doing so that arise from your particular situation or if the objection is directed against direct advertising. In the latter case, you have a general right of objection, which we will implement without specifying a special situation. You have the opportunity to inform us of your objection informally by telephone, by e-mail, by fax or to our postal address listed at the beginning of this data protection declaration. You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us: Which one this is may depend on the state of your residence and the alleged violation. A list of the supervisory authorities with their addresses can be found at https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html;jsessionid=F2946CC289AD6635C4763174324D1B36.2_cid319.

       

       

      Data transfer

        We use external service providers to carry out the services. Your personal data will not be transferred to our external service providers for any other purposes than those listed below. We only pass on your personal data to external service providers if: you have given your express consent to do so in accordance with Art. 6 Paragraph 1 S. 1 a) DS-GVO, the disclosure under Art. 6 Paragraph 1 Sentence 1 f) DS-GVO is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data, in the event that there is a legal obligation for disclosure under Article 6(1) sentence 1 c) of the DS-GVO, and this is legally permissible and is required under Art. 6 Para. 1 S. 1 b) DS-GVO for the processing of contractual relationships with you. The potential recipients of transmitted personal data are: Public bodies If a legal obligation exists.

        Google: All personal data that a user submits to Bridgemaker GmbH will be stored on Google's servers and processed there in data centers in Europe according to Bridgemaker GmbH's requirements.

        We process your personal data in the context of applicant management in accordance with the applicable data protection regulations on the basis of Section 26 BDSG. We process the data that you disclose to us as part of your online application solely for the purpose of selecting applicants. Data processing for other purposes does not take place. You yourself determine the scope of the data that you wish to transfer to us as part of your online application. Online applications are transmitted electronically to our HR department and passed on to a service provider used for this purpose as a processor (Bridgemaker GmbH) in accordance with Art. 28 DS-GVO, which checks and processes the data for the intended purpose and in accordance with our instructions. The transmission is encrypted. Beyond that, your data will not be passed on. Your data will be treated confidentially in our company. If your application is unsuccessful, your documents will be deleted after 3-6 months. In the event that we may also consider your application for other or future job postings, we ask that you make a corresponding note on the application. We will then process your data on the basis of your consent in accordance with Art. 6 Para. 1 Sentence 1 lit. a) DS-GVO for 12 months.

         

        Transmissions to third countries 

           Should data transmissions to third countries become necessary, this will be done exclusively for the conclusion or fulfilment of contracts - insofar as this does not conflict with the legitimate interests of the person concerned - taking into account all data protection requirements. If the intention is to transfer personal data to a third country or an international organisation, this is done in accordance with Art. 45 of the DS-GVO Data Transfer on the basis of an adequacy finding. Should a data transfer nevertheless take place in accordance with Article 46 or Article 47 or Article 49 paragraph 1 subparagraph 2 of the DS-BER, we would point out that appropriate guarantees or binding internal data protection regulations exist, or that when weighing up the interests of the data subjects and the contracting parties, a strict standard is always applied in favor of the data subject.