1. Data controller
This Web site and the services offered are operated by
FRANK plastic AG
Tel.: +49 7486 181-0
Managing Director: Dr. Christian Holzherr
We designed the development of the website to collect as little data as possible from you. Generally, it is possible to visit our website without giving any personal details. The processing of personal data is only required once you decide to make use of certain services (e.g. use of the contact form). In doing so, we always make sure that we process your personal data in compliance with a legal basis or with your consent. We comply with the provisions of the General Data Protection Regulation (GDPR), effective as of 25 May 2018, and any applicable data protection provisions, e.g. the Federal Data Protection Act and the Telemedia Act or other more specific laws on data protection.
“personal data”: all information that refer to an identified or identifiable natural person (hereinafter “data subject”); a natural person is considered to be identifiable if the person can be identified, directly or indirectly, especially by means of attribution to a feature such as a name, to an identification number, to an online identifier or to one or more specific characteristics that express the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person;
“processing”: any action or set of actions that is performed on personal data or sets of data, whether automated or not, e.g. the collection, registration, organisation, arrangement, storage, adaptation or change, reading, querying, using, disclosure by transmission, dissemination or any other form of provision, comparison or linking, restriction, erasure or destruction;
“restriction of processing”: the marking of stored personal data in order to restrict its processing in the future;
“pseudonymisation”: the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without bringing in additional information if this additional information is kept separately and is subject to technical and organisational measures, which ensure that the personal data cannot be attributed to an identified or identifiable natural person;
“controller”: the natural or legal person, public authority, institution or other body that establishes the purposes and means of the processing of personal data, alone or together with other actors; where the purposes and means of processing are specified by EU law or the law of the member states, the controller or the criteria for his appointment can be designated according to EU law or the law of the member states;
“processor”: a natural or legal person, public authority or other body that processes data on behalf of the controller;
“recipient”: a natural or legal person, public authority, institution or other body to which personal data is disclosed, regardless of whether it is a third party or not. However, authorities that receive personal data in the context of a specific investigation mandate under EU law or the law of the member states are not deemed recipients; processing of such data by the aforementioned authorities is done in conformity with the applicable data protection provisions according to the purposes of the processing;
“third party”: a natural or legal person, public authority, institution or other body that is not the data subject, the controller, the processor; and those persons who are authorised, under the direct responsibility of the controller or the processor, to process the personal data.
“consent” of the data subject: any informed, unambiguous and freely given permission for the specific case in the form of a declaration or any other unambiguous affirmative action by which the data subject agrees to have the personal data relating to him or her processed.
To some extent, we collect certain personal data for which we need your consent during your visit to our website. Specifically, this is done in our contact area using our contact form and when you subscribe to our newsletter.
Declaration of consent
5. Purpose and legal basis of the processing of personal data
Personal data, that is required for the establishment, implementation or execution of our services, is processed by us on the legal basis of Section 6 (1) letter b of the GDPR. To the extent we use external service providers as part of the data processing, the processing is performed on the legal basis of Section 28 of the GDPR.
The personal data is collected, processed and used by us exclusively for the following purposes:
|Purpose of data processing||Legal basis for data processing (“What is the data processing required for”)|
|for contacting and the correspondence it entails||on the basis of your consent|
|to process your request and for any consultancy you may desire||on the basis of your consent|
|sending our newsletter||on the basis of your consent|
|in order to ensure that our website is presented to you in the most effective and interesting way (e.g. through anonymised analysis)||on account of legitimate interests|
|for the technical realisation of our offers||on account of legitimate interests|
6. Personal data collected and processed
We collect and process your personal data only if you voluntarily, with your knowledge, provide us with it, e.g. by filling in forms or sending e-mails.
Within the scope of the context of available forms, this refers, first of all, to the following data:
General contact data:
• Name *
• E-mail address *
• Subject *
• Message *
Login data for subscription to the newsletter:
• First name *
• Last name *
• E-mail address *
Mandatory fields are marked with *
The personal data provided by you and its contents remain exclusively with us and our affiliates. Your data is stored and processed only for the purposes stated in Item 5. Any use beyond the described purpose requires your explicit consent. The same applies to the transfer and transmission of your data to third parties.
7. General log files
The web server temporarily records the connection data of the requesting computer (IP address) in log files; the pages you visited; the date and duration of your visit; the identification data of the type of browser and operating system as well as the website from which you visit us and the successful access. The technical administration of the web pages and anonymous statistical surveys allow the analysis of the accesses to the range of offers of FRANK plastic AG and an analysis that aims for increasing data protection and data security in our company, ultimately in order to increase an optimal level of protection of the personal data processed by us.
The data of the server log files is stored separately from the personal data specified by you.
Subject to any statutory retention obligations, we delete or anonymise your IP address after you have left our Web site.
Information is collected and stored on our Web site by means of so-called browser cookies.
What are cookies?
Cookies are small text files that are stored on your data medium; they store specific settings and data for exchange with our system via your browser. Usually, a cookie contains the name of the domain from which the cookie data was sent as well as information on the age of the cookie and an alphanumeric identification sign.
Cookies enable our systems to identify the device of the user and immediately make any pre-settings available. As soon as a user accesses the platform, a cookie is transmitted to the hard drive of the computer of the respective user. Cookies help us improve our Web site in order to be able to offer you improved services that meet your needs even better. They allow us to recognise your (mobile) end device when you return to our Web site and thus:
• store information on your preferred activities on the Web site so as to align our Web site to your individual interests
• increase the speed of the implementation of your requests
We work with third-party services that help us to make the Internet range of offerings and the website more interesting to you. This is why cookies of partner companies (third-party providers) are also stored on your hard drive. These are cookies that are automatically erased after a defined period of time.
The table below contains a list of the cookies placed by us:
|Name of cookie||Cookie of first-party provider or cookie of third-party provider?||Description / function||Standard expiration time|
|_ga||Third-party provider||Google Analytics / marketing||2 years|
|_gat||Third-party provider||Google Analytics / marketing||1 minute|
|_gid||Third-party provider||Google Analytics / marketing||24 hours|
|4b3e1c925879ea425a4ffc99700d2a72||Third-party provider||Google Analytics / marketing||30 seconds up to 1 year|
|IDE||Third-party provider||DoubleClick / advertising||1.5 years|
|DSID||Third-party provider||DoubleClick / advertising||1.5 years|
|id||Third-party provider||DoubleClick / advertising||1.5 years|
If you do not wish the use of browser cookies, you can set up your browser so that the storage of cookies is not accepted. Please note that, in this case, our website can only be used to a limited extent or not at all. If you want to accept our own cookies only but not the cookies of our service providers and partners, you can select “Block third-party cookies” in your browser settings. We assume no responsibility for the use of third-party cookies.
If you want to subscribe to an e-mail newsletter, FRANK plastic AG needs your title, name and e-mail address to which the newsletter is to be sent. Any further information is voluntary and will be used in order to address you and design the newsletter in a personal way as well as to clarify any questions on the e-mail address.
If you subscribe to the newsletter on this website, FRANK plastic AG shall use the data entered by you solely for this purpose or else to inform you of relevant circumstances of this service and registration for it. This data is forwarded by FRANK plastic AG to the service provider CleverReach for administrative purposes and the implementation of the newsletter mailing. FRANK plastic AG has concluded a contract with the e-mail marketing service provider CleverReach on the procedure for the data processing. This ensures that the aforementioned service provider complies in all respects with the strict provisions of German data protection law when administering and implementing the newsletter mailing. This also ensures your data will only be stored within the EU, where a high level of protection applies. There is no storage of your data on servers outside the European Union.
A valid e-mail address is needed to receive the newsletter. In addition, the IP address is stored through which you subscribe to the newsletter as well as the date on which you subscribed to it. This data serves as proof for FRANK plastic AG in case of misuse when a different e-mail address is registered for the newsletter. Furthermore, in order to prevent third parties from entering an e-mail address in the mailing list of FRANK plastic AG, we work in accordance with the “double opt-in” method. This means that, after registration, you will receive a confirmation e-mail to the e-mail address specified by you. Only once you confirmed your registration, by clicking on the link contained there, you will receive the desired e-mail newsletter in the future. With this method, the subscription to the newsletter, the sending of the confirmation e-mail and the receipt of the registration confirmation are logged.
You are free to revoke your consent to store the data and your e-mail address for sending the newsletter at any time taking effect in the future. FRANK plastic AG provides a link for the revocation in each newsletter. In addition, you have the option of sending your revocation request in writing to the aforementioned contact options.
10. Inclusion of third-party services and content
Our website uses the content and services of other providers. In order to access and display this data in the users browser, the transfer of the IP address is mandatory. Hence the providers (hereinafter referred to as “third-party providers”) note the IP address of the respective user.
Even if we endeavour to use third-party providers exclusively who need the IP address only for the delivery of content, we have no influence on whether the IP address might be stored. In this case, the process serves for statistical purposes. If we become aware that the IP address is being stored, we will point it out to you.
Use of Google Analytics
Our Web site uses features of the Google Analytics Web analysis service. This Web analysis service is offered by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States.
Google Analytics uses “cookies”. Cookies are small text files stored by your Web browser on your end device that make an analysis of the website use possible. Information on your use of our website created by means of cookies is transmitted to a server of Google and stored there. Usually, the server is located in the United States.
The placing of Google Analytics cookies is based on Section 6 (1) letter f of the GDPR. As the operator of this Web site, we have a legitimate interest in the analysis of user behaviour in order to optimise our website and, if applicable, our advertising.
We use Google Analytics in conjunction with the IP anonymization function. It ensures that Google will abbreviate your IP address within the member states of the European Union or another contract state of the Agreement on the European Economic Area before transmitting it to the United States. In exceptional cases, Google transfers the full IP address to a server in the United States and abbreviates it there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activities and to provide other services to the website operator that are associated with the use of the website and the Internet. No merging of the IP address transmitted by Google Analytics with other data by Google takes place.
More detailed information on how Google Analytics handles user data can be found in the data protection statement of Google: https://support.google.com/analytics/answer/6004245?hl=de.
For full compliance with statutory data protection provisions, we concluded a contract with Google on processing.
Our website uses the “Demographic characteristics” feature of Google Analytics. With it, reports can be created that contain information on the age, gender and interests of site visitors. This data comes from interest-based advertising of Google and from visitor data of third-party providers. An assignment of the data to a specific person is not possible. You can disable this feature at any time. This can be done in the display settings in your Google account; or you can generally ban the collection of your data by Google Analytics as it is explained in the Item “Objection against data collection”.
As an alternative, you can disable collection by Google Analytics by placing a so-called “opt-out cookie” by clicking here: If you delete the cookies in your browser, you have to click on the link again afterwards.
Use of Google AJAX Search API
Our Web site uses AJAX Search API by Google. The service is offered by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States
Use of DoubleClick
Our Web site uses the online marketing tool DoubleClick by Google. The service is offered by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States
In addition, cookie IDs help DoubleClick to capture so-called conversions with regard to advertising inquiries. Such a case is at hand, for example, when you see a DoubleClick ad and, at a later time, make a purchase on the website of the advertiser with the same web browser. According to Google, no information with reference to individuals is stored in DoubleClick cookies.
Due to the marketing tools used, your browser automatically creates a connection with the Google server. We have no influence over the scope and use of the data this tool collects through Google. According to our current level of knowledge, Google learns via DoubleClick which area of our website you have accessed and on which of our advertisements you have clicked. If you are logged into your Google account, Google is able to assign the visit to our Web site to your account. Even without being logged in, it cannot be precluded that the provider identifies and stores your IP address.
With a modern web browser, you can monitor, restrict or disable the placing of cookies. This way, you have the option of objecting to the tracking. The disabling of cookies can result in a limited functionality of our Web site.
Google has been certified for the U.S.-European data protection agreement “Privacy Shield”. This data protection agreement has the purpose of ensuring compliance with the level of protection applicable within the EU.
You’ll find more detailed information on the data protection provisions of DoubleClick by Google at: http://www.google.de/policies/privacy/
Use of Google Web Fonts
For a uniform display of fonts, this site uses so-called web fonts provided by Google. When accessing a site, your browser uploads the required web fonts in your browser cache in order to display texts and fonts correctly.
For this purpose, the browser used by you must connect to the servers of Google. This way, Google learns that our website was accessed from your IP address. The use of Google web fonts is done in the interest of a uniform and attractive presentation of our online offers. This constitutes a legitimate interest within the meaning of Section 6 (1) letter f of the GDPR.
If your browser does not support web fonts, the standard font of your computer is used.
Use of Google Ajax & jQuery libraries
Our website uses the Ajax and jQuery technologies to optimise loading times. The provision of associated program libraries, e.g. map contents, is done via CDN (Content Delivery Network) by Google. If you have used jQuery on previous websites, your web browser will use a copy located in the cache. Otherwise, it connects to Google servers in the United States. In the process, your IP address and other data may be transferred by your web browser.
11. Data security
Unfortunately, the transfer of information via the Internet can never be 100% secure. Therefore we cannot guarantee the security of the data transferred to our Web site via the Internet.
However, we secure our Web site by technical and organisational measures against the loss, destruction, access, modification or distribution of your data by unauthorised persons.
In particular, your personal data is transferred in encrypted form at our company. For this, we use the SSL/TLS (Secure Sockets Layer/Transport Layer Security) coding system. Our security measures are continuously improved in line with the state-of-the-art technological development.
12. Rights of the data subject
To the extent you are a data subject under Section 4 no. 1 GDPR, you have the following rights with respect to the processing of your personal data in accordance with the GDPR. For the legal text of the rights listed below, please refer to https://www.bfdi.bund.de/SharedDocs/Publikationen/Infobroschueren/INFO6.html.
Right to confirmation and information
Under the conditions of Section 15 GDPR, you have the right to request a confirmation whether personal data concerning you is processed; you have the right to demand at any time, at no cost, information from the controller on the personal data stored concerning your person as well as a copy of this information.
Right to correction
Under the conditions of Section 16 GDPR, you have the right to demand immediate correction of incorrect personal data concerning you. In addition, you have the right to demand the completion of incomplete personal data — also by means of a supplementary statement — taking in due consideration the purposes of the processing.
Right to erasure
Under the conditions of Section 17 GDPR, you have the right to demand that the personal data concerning you be immediately erased if one of the reasons stated in Section 17 GDPR is given and to the extent processing is not required.
Right to restriction of processing
Under the conditions of Section 18 GDPR, you have the right to demand a restriction of processing if one of the conditions stated in Section 18 GDPR is given.
Right to data portability
Under the conditions of Section 20 GDPR, you have the right to receive the personal data you have provided us with in a structured, common and machine-readable format; furthermore, you have the right to transmit the personal data to another controller without being hindered therein by us insofar as the further conditions of Section 20 GDPR are given.
Right to revoke consent
You are entitled to revoke a consent given us for the processing of personal data at any time with effect in the future. Please send the revocation to the contact data specified above.
Right of objection
Under the conditions of Section 21 GDPR, you have the right to object to the processing of personal data that concern you at any time. If the conditions for an effective objection are given, we are no longer allowed to process the personal data.
Right to file a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to file a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or location of the alleged violation, if you are of the opinion that the processing of the personal data concerning you violates the GDPR.
13. Disclosure of your personal data
Disclosure of your personal data takes place as follows.
The hosting of the website is done by an external service provider in Germany. We ensure that the data is only processed in Germany. This is necessary for the operation of the website as well as for the establishment, implementation and fulfilment of the existing licence agreement and is also possible without your consent.
Data is also disclosed if we are entitled or obligated to disclose it due to legal requirements and/or official orders or court orders. This refers in particular to the provision of information for purposes of law enforcement, the aversion of dangers or the enforcement of intellectual property rights.
If your data is disclosed to service providers to the necessary extent, these service providers have access to your personal data only to the extent it is necessary for the fulfilment of their tasks. These service providers are obligated to handle your personal data in accordance with the applicable data protection laws, in particular the GDPR.
Beyond the circumstances described above, in principle, we do not disclose your data to third parties without your consent. In particular, we do not disclose personal data to a body in a third country or an international organisation.
14. Storage period for the personal data
With regard to storage periods, the following applies: We erase personal data as soon as its storage is no longer required for the fulfilment of the original purpose and if there are no statutory retention periods. The statutory retention periods are ultimately the criterion for the final period for which personal data is stored. Once the period has lapsed, the respective data is routinely erased. If there are retention periods in place, processing is restricted by blocking the data.
15. References and links
The provisions of third-party service providers regarding the collection, processing and handling of personal data may differ from ours. It is therefore advisable to gather information on how personal data is handled there before entering personal data on the Web sites of third parties.
17. Data Protection Officer
If you have any questions concerning data protection, please contact our Data Protection Officer.
Herold Unternehmensberatung GmbH
Herr Philipp Herold