Data protection

Privacy policy

In this privacy policy we inform you about the following topics:

• No. 1: Responsible body for data processing and privacy officer; the scope of application
• No. 2: General principles for the processing of your personal data
• No. 3: Use of our WEBSITE (log data, cookies, Matomo, web fonts)
• No. 4: Contact/feedback
• No. 5: Subscription to our newsletter
• No. 6: Data safety
• No. 7: Your rights
• No. 8: Changes of this privacy policy

1. Responsible body for the data processing and privacy officer; the scope of application

(1) We, Robos GmbH & Co. KG, Im Moldengraben 47, 70806 Kornwestheim, Germany, phone: +49 (0) 7154 / 8225–0, fax: +49 (0) 7154 / 8225–22, email: www.robos-labels.com, are the operator of the websites accessible via www.robos-labels.com (in the following “WEBSITE”) and responsible for the processing of your personal data as a user of our WEBSITE (“you”) in accordance with Article 4 No.7 of the European General Data Protection Regulation (“GDPR”).

(2) Our privacy officer is: Dr. Norbert Kuhn, Thingstr. 3, 70565 Stuttgart, Germany, email: datenschutz@robos-labels.com

(3) In the following we want to inform you within the scope of our information duties in detail about the processing of your personal data. Furthermore, we would like to inform you what accompanying protective measures we have also adopted in both technical and organizational respect on our WEBSITE as well as your rights regarding the processing of personal data concerning you.

1. General principles for the processing of your personal data

(1) Personal data are all information which relates to an identified or identifiable natural person. Hence the personal data include all data which can be linked to your person like e.g. your name, your address, your phone number or your email address.

(2) Personal data will be primarily processed by us only if and insofar

• you have given us your consent for the data processing for one or more specified purposes (Article 6(1)(1)(a) of GDPR);
• the processing is required for the fulfilment of a contract, which you are a contractual party of, or for the processing of pre-contractual measures which follow your request (Article 6(1)(1)(b) of GDPR);
• the data processing is required for the fulfilment of a legal regulation which we are subject to (Article 6(1)(1)(c) of GDPR), or
• the data processing is required for the protection of our legitimate interests or of those of a third party, provided your interests or fundamental rights and freedoms which require the protection of personal data do not outweigh (Article 6(1)(1)(f) of GDPR).

(3) In the following regulations of this privacy policy we state what bases listed in para. 2 or other legal bases we rely on for the processing of your personal data in individual case.

(4) Partly we use external service providers for the processing of your data. Those have been chosen carefully and assigned by us, they are bound to our instructions and will be controlled regularly. Furthermore, we can forward your personal data to a third party, if contract closings or similar services will be offered by us in cooperation with our partners. You receive detailed information on this when providing your personal data or in the following regulations of this privacy policy. Insofar our service providers or partners are located in a state outside of European Economic Area (EAA), we will inform you about the consequences of this circumstance in the following regulations of this privacy policy as well.

3. Use of our WEBSITE

3.1 Log data

(1) In connection with the use of our WEBSITE we collect those of your data, which your internet browser transmits to our server automatically. Here the following data will be collected:

• IP address of the requesting pc
• date and time of the request
• time difference to Greenwich Mean Time (GMT)
• the contents of the request (certain site)
• access status / HTTP status code
• respective transmitted data volume
• website, which sends the request
• browser
• operating system and its interface
• language and the version of browser software.

(2) These data are technically necessary for us to make the use and the functionality of our WEBSITE possible for you, especially to display the WEBSITE and to ensure the safety and stability of the WEBSITE. The connection of these data to the personal data of a specified natural person does not take place. Our legitimate interest in a functioning website does exist. The legal basis for it is Article 6(1)(1)(f) of GDPR.

(3) We delete these data as soon as they are longer necessary for the purpose they were collected for. The storage of your IP address lasts up to seven days in complete form, thereafter in anonymized form. Here your IP address will be shortened by the last octet (partial segment). The temporary storage of the IP address by our system is necessary to correct malfunctions of our WEBSITE and to avert dangers. In other respects the deletion takes place when the respective session is finished.

3.2 Cookies

(1) In addition to the abovementioned data cookies will be stored on your pc when our WEBSITE is used. Cookies are small text files, which will be stored on your hard drive associated with the browser used by you and through which certain information flows to a setting party (here to us). A cookie cannot execute programs or independently transfer malware to your computer.

(2) Our WEBSITE uses the following types of cookies, which scope and functionality will be explained in the following:

– transient cookies (under a)

– persistent cookies (under b).

a) The transient cookies will be deleted automated when your close the browser. These include especially the session cookies. The session cookies will be deleted when you log out or close the browser.

b) Persistent cookies will be deleted automatically after a preset duration, which can differ from cookie to cookie.

(3) If certain cookies process personal data, the processing is carried out in accordance with Article 6(1)(1)(f) of GDPR for the protection of our legitimate interest in best possible functionality of our WEBSITE.

(4) You can avoid the storage of cookies by the respective setting of your browser. Please note that in that case you might be not able to use all the functions of our WEBSITE to the fullest extent.

3.3 Matomo

(1) Our WEBSITE uses the web analytics service Matomo by InnoCraft Ltd. (150 Willis St, 6011 Wellington, New Zealand; “Matomo”) to analyze the use of our WEBSITE and to improve it regularly. Due to the gained statistics we can improve our offer and design it more interesting for you as the user.

(2) Our WEBSITE uses Matomo with the extension “AnonymizeIP”. This way your IP address will be processed only shortened, thus the direct personal identifications will be excluded. The IP address transmitted with Matomo by your internet browser will not be connected to any other data collected by us or provided to a third party.

(3) Within our web analysis no tracking cookies will be stored on your pc. The Matomo software and the data collected by it will be used, saved and processed on our own servers exclusively.

(4) Our legitimate interests lie within the optimization and marketing purposes. The legal base for the use of Matomo is Article 6(1)(1)(f) of GDPR.

(5) You have the possibility to prevent that actions made by you here will be analyzed and linked. This will protect your privacy, but also prevent the owner from learning from your actions and improving the usability for you and other users.

 Your visit to this website is currently recorded by Matomo web analytics. Uncheck this box for opt-out.

(6) In addition, in our Matomo installation the “do not track”-function is activated. If your browser supports this function and you have activated the function in your browser settings, Matomo does not collect any data even if you do not use the abovementioned opt-out-cookie.

(7) The program Matomo is an open source project. You receive the information about the privacy by the third party via https://matomo.org/privacy/policy.

3.4 Web Fonts

3.4.1 Monotype

(1) For the unified presentation of fonts our WEBSITE uses the so-called web fonts by the provider Monotype Inc., Monotype, 600 Unicorn Park Drive, Woburn, MA 01801, USA (“Monotype”).

(2) The tracking code of web fonts does not collect, process or save any personal data. When you access our WEBISTE, Monotype collects the project identification number of the web fonts (anonymized), the URL of the licensed website which is linked to a customer number to identify the licensee and the licensed web fonts, and the URL of the previously visited site.

(3) Monotype saves the anonymized project identification number of the web fonts in encrypted log files with such data for a period of 30 days to determine the monthly amount of page views. After this determination and the saving of the amount of page views the log files will be deleted.

(4) Monotype forwards anonymized data to subsidiaries and connected companies.

(5) The use of this web fonts takes place in the interest of a unified and attracting representation. This is a legitimate interest in accordance with Article 6(1)(1)(f) of GDPR.

(6) You can find further information on this and on Monotype in the privacy policy of Monotype: https://www.monotype.com/legal/privacy-policy/web-font-tracking-privacy-policy

3.4.2 Adobe Fonts/Typekit

(1) In our internet presence we use fonts of Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA (Adobe) for the unified presentation of external fonts.

(2) We have technically stored the fonts on our server so that no data is transferred to Adobe.

3.5 Mouseflow

This WEBSITE uses Mouseflow, a web analytics tool by Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark, to record randomly selected individual visits (with anonymized IP address only). This creates a log of mouse movements and clicks with the intention of randomly replaying individual WEBSITE visits and from this deriving potential improvements for the WEBSITE.  The information is not personal and will not be passed on. If you don’t want the recording, you can deactivate it on all websites using Mouseflow via the following link: www.mouseflow.de/opt-out/.

4. Contact/Feedback

(1) If you contact us, for example to give us your feedback, the processing of your provided contact data (e.g. your given name and surname, email address, phone number) takes place to answer your requests and/or suggestions sent via contact form or email. The processing of your data serves the processing of your contact as well as the prevention of an abuse and the guarantee of the safety of our informational technological systems.

(2) The legal base for the processing of the data is Article 6(1)(1)(f) of GDPR. If your message aims to the conclusion of a contract, an additional legal base for the processing of your data is Article 6(1)(1)(b) of GDPR.

(3) Insofar the erasure of your personal data is not opposed by any legal or contractual retention period, we delete the data as soon as they are no longer necessary for the purpose they were collected for.

(4) For the requests in the business area (B2B) additionally further information in the information for business partners apply, for the requests in connection to applications the information in our information for applicants.

5. Subscription to our newsletter

(1) With your consent you can subscribe via our website to our newsletter, in which we inform you about our current interesting offers. The advertised offers are stated in the informed consent.

(2) The submission and management of our newsletter is fulfilled by the processor marmato GmbH, Wilhelmstraße 4a, 70182 Stuttgart (“marmato“).For this purpose it is essential to transmit your data provided within the framework of the newsletter subscription to marmato. These data will be stored on servers in Germany exclusively. We have concluded a contract for processing in accordance with Article 28 of GDPR with marmato. These data will be stored on servers in Germany exclusively. Marmato has proved the compliance with privacy regulations and data safety. You can find further information on privacy in the privacy policy of marmato:  www.marmato.com/datenschutz/

(3) For the subscription to our newsletter we use the so-called double-opt-out procedure. This means that we send you an email to the specified email address, in which we ask you to confirm your wish to receive the newsletter. If you don`t confirm your registration within 25 hours, your information will be deleted. In addition, we save your respectively used IP address and the time of registration and confirmation. The purposes of the procedure are to prove your registration and, if so, to resolve a possible abuse of your personal data.

(4) The only obligatory information for the submission of the newsletter is your email address. The provision of further data marked separately is voluntary and will be used to address you personally. After your confirmation we save your email address for the purpose of sending the newsletter. The legal basis is Article 6(1)(1)(a) of GDPR.

(5) Your consent to the submission of the newsletter can be revoked at any time and you can unsubscribe from the newsletter. The revocation can be done by clicking the link provided in every newsletter email or by sending a message to the contacts stated in No 1.

(6) Please note that we anonymously analyze certain actions within the framework of the newsletter sending, for example how many recipients have opened the newsletter and which links and how often have been clicked on. This serves the analysis of the contents and the optimization of our newsletter topics. For this analysis the sent emails contain the so-called web beacons or tracking pixels, which are a one-pixel image files which will be saved on our WEBSITE and connected to an individual ID. The data will be collected pseudonymized only, so the IDs will not be connected to your further personal data, a direct personal identification will be excluded. We have a legitimate interest in showing relevant and interesting topics and thus to measure the response rate to our placed topics. The legal basis for it is Article 6(1)(1)(f) of GDPR. If you do not agree to the anonymized analysis and want to file an objection against it, please unsubscribe from our newsletter. It is for us technically impossible to exclude individual newsletter recipients from it. After the unsubscribing we save the data solely statistically and anonymously.

(7) We delete your data as soon as they are no longer necessary for the purpose they were collected for. After the unsubscription we save your email address, the data collected within the framework of newsletter subscription from para. 2 as well as the date and time of the unsubscription to prove the valid consent for the sending of the newsletter up to the time of unsubscription. We save the data until the possible civil right claim which could relate to the last sent newsletter is statute-barred. The legal basis for it is Article 6(1)(1)(f) of GDPR.

6. Data safety

(1) We use technical and organizational safety measures to protect the incoming or collected personal data especially against incidental or intended manipulation, loss, and destruction or against the attack by any unauthorized person. Our safety measures will be continuously improved according to the technological development.

(2) Our WEBSITE will be encrypted using SSL technology to prevent the access by any unauthorized third party. You can identify the secured transmission by the protocol title “https://” in the URL bar.

7. Your rights

(1) Regarding the processing of your respective personal data you are entitled to the rights against us listed in the following letters a-h in accordance with law. For this please contact us or our data security officer. The contact data is listed in No 1.

a) Right to information

You can request from us a confirmation in accordance with Article 15 of GDPR if personal data concerning you will be processed by us. In this case, in accordance with Article 15(1) of GDPR you have the right to information about the processing purposes, the categories of processed personal data, the recipients or categories of recipients we disclosed or will disclose the personal data to, the planned duration of saving or criteria for the determination of the saving duration, the existence of the right to rectification or erasure of your personal data as well as the restriction of processing or objection of the processing, the existence of the right to lodge a complaint to a supervisory authority, the data origin as far as they were not collected from you, the existence of an automated decision-making incl. profiling, as well as in accordance with Article 15(2) of GDPR the right to information about the appropriate guarantees in accordance with Article 46 of GDPR within the scope of the transmission of the personal data to third countries.

b) Right to rectification

You can demand the immediate rectification and/or completion of your personal data with regard to the intention of the processing in accordance with Article 16 of GDPR insofar your data are incorrect or incomplete.

c) Right to erasure

In accordance with Article 17 of GDPR you can demand the immediate erasure of your personal data provided there is a reason in accordance with Article 17(1)(a-f) of GDPR. The right to erasure of your personal data is not applicable particularly insofar their processing is necessary for the exercise of the right to freedom of expression and freedom of information, for the compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims (Article 17(3) of GDPR).

d) Right to the restriction of processing

You can demand the restriction of processing of your personal data in accordance with Article 18 of GDPR as long as we check the correctness of your data disputed by you, when you decline the erasure of your data due to unlawful processing and demand the restriction of use of your data instead, when you need your data for the establishment, exercise or defense of legal claims or when you have filed an objection to processing as long as it is uncertain if our legitimate rights outweigh.

e) Right to information

In accordance with Article 19 of GDPR we inform all the recipients whom your personal data has been disclosed to about each correction or deletion of your personal data or the limitation of their processing in accordance with Article 16, 17(1) and 18 of GDPR unless it turns out to be impossible or requires a disproportionate effort. In accordance to Article 19 sentence 2 of GDPR you have the right against us to be informed about the recipients on your demand.

f) Right to data portability

In accordance with Article 20 of GDPR you are entitled to the right to receive your personal data which you provided to us in a structured, common and machine-readable format and to transmit this data to another responsible body provided that further conditions of Article 20 of GDPR exist, especially if it is technically feasible.

g) Right to objection

Provided we base the processing of your personal data on a legitimate interest in accordance with Article 6(1)(1)(f) of GDPR, you can object to the processing in accordance with Article 21 of GDPR. This is the case when the processing is not particularly necessary for the fulfilment of a contract with you, which will be presented by us respectively in the preceding description of the offers. When exercising this kind of objection we ask you to justify the reasons why we shall not process your personal data the way we do. In case of justified objection we will examine the situation and either not process your personal data or prove you the compelling and legitimate grounds for the processing which outweigh your interests, rights and freedoms in accordance with Article 21(1)(s2) of GDPR. The further processing remains additionally reserved, if the processing serves the establishment, exercise or defense of legal claims.

In accordance to Article 21(2) of GDPR you can naturally object the processing of your personal data for the purposes of advertising or profiling insofar it is connected to the direct advertising.

You can inform us or our privacy policy officer about your objection, the contact data is stated in No. 1.

1. h) Right to the revocation of a consent

In accordance to Article 7(3) of GDPR you are entitled to revoke your possibly informed data protection consent at any time with future effect. However, this does not affect the lawfulness of processing which has occurred based on your consent up to the time of revocation.

(2) If you believe that the processing of your data violates the data protection regulations, you are additionally entitled to the right to lodge a complaint to a supervisory authority in accordance to Article 77 of GDPR. Please contact a supervisory authority in the member state of your location, your job or at the location of the potential violation.

8. Changes of this privacy policy

We reserve the right to change this privacy policy at any time with future effect. The respective current version is available on our WEBSITE. Please access the WEBSITE regularly and get information about the valid privacy policy.

As of: August 17^th, 2022