DE | EN
Privacy Policy
In the following, we provide information about the processing of personal data when using our website www.treffpack.de. Personal data is all data that can be related to you personally, e.g. name, address, email addresses, user behaviour. We have taken extensive technical and organisational precautions to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security procedures are regularly reviewed and adapted to technological progress.
1 Responsible for data processing (controller)
Responsible according to Art. 4 para. 7 EU General Data Protection Regulation (GDPR) is
C.E. Gätcke's Glas Gesellschaft mbH
Bredowstraße 31
22113 Hamburg
Germany
Managing Directors: Peter Börner, Dorothée Kuhnert
Phone: +49 40 731 206-0
Fax: +49 40 731 206-10
Mail: info@treffpack.de
(see our Legal Notice)
2 Contact details of the data protection officer
You can contact our data protection officer at datenschutz@treffpack.de or our postal address with the addition of "data protection officer".
3 Legal bases of our data processing
The processing of personal data can be based on various legal bases. If we need your data for the performance of a contract with you or to respond to inquiries from you regarding a contract, the legal basis for this data processing is Art. 6 para. 1 p. 1 lit. b GDPR. If we obtain your consent for a certain data processing, the legal basis is Art. 6 para. 1 p. 1 lit. a GDPR. We carry out some data processing on the basis of our legitimate interest, whereby a balancing of your interests worth protecting and our legitimate interests is always carried out. The legal basis here is Art. 6 para. 1 p. 1 lit. f GDPR. Insofar as processing is necessary for the fulfilment of a legal obligation to which we are subject, the legal basis is Art. 6 para. 1 p. 1 lit. c GDPR. In the following, we explain how we process personal data via our website.
4 Your rights
You have the following rights towards us regarding your personal data:
4.1 General rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), objection to processing (Art. 21 GDPR) and the right to data portability (Art. 20 GDPR). Insofar as the processing is based on your consent, you have the right to withdraw your consent with effect for the future (Art. 7 para. 3 p. 1 GDPR).
4.2 Rights regarding data processing based on legitimate interest
Pursuant to Article 21 para. 1 GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data which is based on Article 6 para. 1 p. 1 lit. e GDPR (data processing in the public interest) or on Article 6 para. 1 p. 1 lit. f GDPR (data processing for the purposes of safeguarding a legitimate interest); this also applies to profiling based on those provisions. In the event of your objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.
4.3 Rights in case of direct marketing
If we process your personal data for direct marketing purposes, you have the right pursuant to Article 21 para. 2 GDPR to object at any time to processing of personal data concerning you for such marketing; this includes profiling to the extent that it is related to such direct marketing. In the event of your objection to processing for direct marketing purposes, we will no longer process your personal data for these purposes
4.4 Right to lodge a complaint with a supervisory authority
You also have the right to complain to a competent data protection supervisory authority about the processing of your personal data by us
5 Collection of personal data when visiting our website
In the case of merely informational use of the website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security:
- IP address
- Date and time of the request
- Content of the request (the page/file accessed)
- Access status/HTTP status code
- Amount of data transferred in each case the website from which the request came (referrer URL)
- Operating system
- Browser software, language and version of the browser software
- Host name of the accessing computer
The legal basis is Art. 6 para. 1 p. 1 lit. f GDPR and Section 25 para. 2 no. 2 TDDDG. Since the collection of data for the provision of the website and the storage in log files are absolutely necessary for the operation of the website and to protect against misuse, our legitimate interest in data processing prevails at this point.
6 Contacting us by email, contact form and product inquiery form
When you contact us by email, the data you provide (your email address, name and telephone number, if applicable) will be stored by us in order to answer your questions.
Insofar as we request information that is not necessary for contacting you, we have always marked this as optional. This information is used to specify your request and to improve the processing of your request. Giving us this information is voluntary and based on your consent, Art. 6 para. 1 p. 1 lit. a GDPR. Insofar as this involves information on communication channels (for example, email address, telephone number), you also consent to us contacting you if necessary via this communication channel, in order to respond to your request. You can, of course, withdraw this consent at any time with effect for the future.
Your data that we have received in the course of contacting us will be deleted as soon as it is no longer required to achieve the purpose for which it was collected, your request has been fully processed and no further communication with you is necessary or desired by you.
As the controller, our company has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. Nevertheless, internet-based data transmissions can generally have security gaps. Absolute protection cannot be guaranteed; in any case, sending unencrypted emails is not secure. We therefore ask you not to send sensitive data by unencrypted email, but to use either encrypted communication channels or the postal service for this purpose.
7 Cloudflare Turnstile
We use the service "Turnstile" on our website. The provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (hereinafter "Cloudflare").
Turnstile is used to verify whether data entered on our website (in particular in contact forms) is submitted by a human or by an automated program (a so-called "bot"). This protects us against spam, misuse and automated attacks.
For this purpose, Turnstile analyses various technical information relating to the visitor and their device. This may include, in particular, the IP address, information about the browser and operating system used, the visitor's behaviour on the website, as well as other device- and browser-related characteristics. This data is transmitted to Cloudflare for evaluation.
The use of Turnstile is based on our legitimate interest in protecting our website against abusive automated access and spam (Art. 6(1)(f) GDPR). The transfer of data to Cloudflare may involve a transfer to the USA. Further information on data protection at Cloudflare can be found at: https://www.cloudflare.com/en-gb/privacypolicy/
8 Use of cookies
Cookies are data that are stored on your computer by a website you visit and enable your browser to be reassigned. Cookies transmit information to the entity that sets the cookie. Cookies can store various information, such as your language setting, the duration of your visit to our website or the entries you have made there. This prevents you, for example, from having to re-enter required form data each time you use the website. The information stored in cookies can also be used to recognize preferences and to align content according to areas of interest.
There are different types of cookies: session cookies are sets of data that are only temporarily held in the RAM and are deleted when you close your browser. Permanent or persistent cookies are automatically deleted after a predetermined duration, which may vary depending on the cookie. The information can also be stored in text files on your computer with this type of cookie. However, you can also delete these cookies at any time via your browser settings.
First-party cookies are set by the website you are currently visiting. Only that website is allowed to read information from these cookies. Third-party cookies are set by organizations that do not operate the website you are visiting. For example, these cookies are used by marketing companies.
The legal basis for possible processing of personal data using cookies and their storage period may vary. Insofar as you have given us your consent, the legal basis is Art. 6 para. 1 p. 1 lit. a GDPR. Insofar as the data processing is based on our overriding legitimate interests, the legal basis is Art. 6 para. 1 p. 1 lit. f GDPR. The stated purpose then corresponds to our legitimate interest.
Insofar as we use cookies or similar technologies to access a terminal device used by you within the meaning of Section 2 para. 2 No. 6 TDDDG by storing or reading out information there regardless of personal reference, we will obtain your purpose-related, voluntary and informed consent in accordance with Section 25 para. 1 TDDDG beforehand.
Insofar as consent under the GDPR and the TDDDG can be bundled, we will obtain it uniformly.
No consent under the TDDDG is required to access information in your terminal device that is already stored there and has been sent to us by its active transmission, this concerns the public IP address of the terminal device, the address of the website accessed, the user agent string with browser and operating system incl. version and the language set. Furthermore, no consent is required under the TDDDG if the cookie or similar technology is used to ensure the execution of the transmission of a message via a public telecommunications network in accordance with Section 25 para. 2 No. 1 TDDDG or insofar as the setting of the cookie is necessary for the provision of a telemedia service expressly requested by you in accordance with Section 25 para. 2 No. 2 TDDDG.
We use cookies to ensure the proper operation of the website, to provide basic functionality.
You can delete cookies already stored on your terminal device at any time. If you want to prevent cookies from being stored, you can do this via the settings in your internet browser. Alternatively, you can also install so-called ad blockers. Please note that individual functions of our website may not work if you have disabled the use of cookies.
9 Plausible Analytics
On our website, we use the web analytics service “Plausible Analytics” from Plausible Insights OÜ, Västriku 2, 50403 Tartu, Estonia, to anonymize certain user data so that it can be evaluated in an anonymized and aggregated form for the purposes of measuring reach, optimizing the website technically, and tailoring our website content to user interests.
The service collects the following data:
- IP address (is anonymized directly as part of the website analysis with Plausible Analytics and is not stored)
- URL of the page visited
- HTTP referrer (URL of the page you came from)
- Browser type and version
- Operating system
- Device type (desktop, mobile device, or tablet)
- Country, region, and city
No personal profiles are created, and the data is not aggregated across different websites.
The processing of your personal data, or its anonymization followed by the analysis of the anonymized data, is based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR, which lies in the use of anonymized data for measuring reach, technically optimizing the website, and tailoring our website content to user interests regarding the website. The recipient of the data is the service provider, Plausible Insights OÜ, Västriku 2, 50403 Tartu, Estonia, (Server location: Germany) which acts as a data processor on our behalf. We have entered into a Data Processing Agreement (DPA) with the provider in accordance with Article 28 of the GDPR.
No personal data is stored in connection with the use of this service.
Right to object
You can object to this data processing or prevent it, e.g. by clicking on “Exclude my visits”:
In this case, (objection) information will be stored on your device to enable us to implement your objection or recognise your objection and to prevent the aforementioned data processing. The legal basis for the storage of this information and access to it is Section 25(2)(2) of the TDDDG, as this is strictly necessary to comply with and take your objection into account. The legal basis for this data processing is our legitimate interest pursuant to Art. 6(1)(f) GDPR to be able to comply with and take your objection into account immediately.
Please note that this information is automatically deleted when you clear your browser cache or website data. In that case, you would need to click on “Exclude my visits” again.
Further information on data protection at Plausible Analytics can be found in the provider’s privacy policy at: https://plausible.io/privacy
10 Google Analytics
If you have given your consent, this website uses Google Analytics 4, a web analytics service provided by Google LLC. The controller for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
Google Analytics 4 uses cookies that enable an analysis of your use of our websites. The information collected by means of the cookies about your use of this website is generally transferred to a Google server in the USA and stored there.
Google Analytics 4 has IP anonymisation enabled by default. Due to IP anonymisation, your IP address will be shortened by Google within Member States of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. According to Google, the IP address transferred by your browser as part of Google Analytics will not be merged with other Google data.
During your website visit, your user behaviour is recorded in the form of "events". Events can be:
page views,
first visit to the website,
start of session,
web pages visited,
your "click path", interaction with the website,
scrolls (whenever a user scrolls to the bottom of the page (90%)),
clicks on external links,
internal search queries,
interaction with videos,
file downloads,
seen or clicked ads.
Also may be recorded:
Your approximate location (region),
date and time of your visit,
your IP address (in shortened form),
technical information about your browser and the end devices you use (e.g. language setting, screen resolution),
your internet service provider and
the referrer URL (via which website/advertising medium you came to this website).
On behalf of the operator Google will use this information to evaluate your use of the website and to compile reports on website activity. The reports provided by Google Analytics 4 serve to analyse the performance of our Website and the success of our marketing campaigns.
Recipients of the data are/may be:
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor under Art. 28 DSGVO);
Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA;
Alphabet Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.
Transfer of data in the USA is possible. For the USA, the European Commission adopted a news adequacy decision on 10 July 2023. Google LLC is certified under the EU-US Privacy Framework. Since Google servers are distributed worldwide and a transfer to third countries (for example to Singapore) cannot be completely ruled out, we have also concluded the EU standard contractual clauses with the provider to establish an appropriate level of data protection in those countries.
The data sent by us and linked to cookies are automatically deleted after 14 months. The maximum lifespan of Google Analytics cookies is 2 years. The deletion of data whose retention period has been reached occurs automatically once a month.
The legal basis for this data processing is your consent pursuant to Art.6 para.1 p.1 lit. a GDPR and § 25 para. 1 p.1 TTDSG (Gesetz über den Datenschutz und den Schutz der Privatsphäre in der Telekommunikation und bei digitalen Diensten-German national Law). You can withdraw your consent at any time with effect for the future by accessing the cookie settings and changing your selection there. The lawfulness of the processing carried out on the basis of the consent until revocation remains unaffected.
You can also prevent the storage of cookies from the outset by setting your browser software accordingly. However, if you configure your browser to reject all cookies, this may result in a restriction of functionalities on this and other websites. You can also prevent the collection of data generated by the cookie and relating to your use of the website (including your IP address) by Google, and the processing of this data by Google, by:
not giving your consent to the setting of the cookie or
downloading and installing the browser add-on to deactivate Google Analytics HERE.
For more information on Google Analytics' terms of use and Google's privacy policy, please visit https://marketingplatform.google.com/about/analytics/terms/de/ and at https://policies.google.com/?hl=de.
11 Social Bookmarks
So-called social bookmarks of the following providers are integrated on our website:
LinkedIn (Operator: LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland)
Social bookmarks are Internet bookmarks that allow users of such a service to collect links and news stories. These are included on our website only as a link to the corresponding services. After clicking on the embedded graphic, you will be redirected to the page of the respective provider, i.e. only then will user information be transmitted to the respective provider. For information on how your personal data is handled when using these websites, please refer to the respective provider's privacy policy.
12 Data transfer
As a matter of principle, your personal data will not be transferred to third parties unless we are required to do so by law, or the transfer of data is necessary for the performance of the contractual relationship, or you have previously given your explicit consent to the transfer of your data.
Our websites are hosted by external service providers. These provide the necessary infrastructure and computing power, storage space and database services, security services and maintenance services. We use these services for the purpose of efficient and secure operation of our websites.
In doing so, we or our hosting providers only process the data required for the service, namely usage data, content data, meta and communication data, but also inventory data, contact data and contract data of users and customers of our websites. This data processing is based on our legitimate interest in providing our websites efficiently and securely. The legal basis for this is Art. 6 para. 1 p. 1 lit. f GDPR.
Other external service providers and partner companies, such as IT service providers, receive your data also only to the extent necessary. However, the scope of the transmitted data is limited to the necessary minimum. Insofar as our service providers process your personal data on our behalf, we ensure within the scope of commissioned processing pursuant to Art. 28 GDPR that they comply with the provisions of the data protection laws in the same manner. Please also refer to the data protection notices of the respective providers.
We attach importance to processing your data within the EU / EEA. However, it may happen that we use service providers who process data outside the EU / EEA. In these cases, we ensure that an appropriate level of data protection comparable to the standards within the EU is established at the recipient before transferring your personal data. This can be achieved, for example, via EU standard contractual clauses or Binding Corporate Rules or special agreements to whose regulations the company may be subject.
The respective service provider is responsible for the content of third-party services, whereby we check the services for compliance with legal requirements within the scope of reasonableness.
13 Applications
You can apply to our company electronically, i.e. via email. Please note that emails sent unencrypted will not be protected against unauthorized access.
Your data will be used for processing your application and deciding on the establishment of an employment relationship. The legal basis is Section 26 para. 1 in conjunction with para. 8 p. 2 BDSG. Furthermore, your personal data may be processed insofar as this should be necessary for the defense of asserted legal claims against us arising from the application process. The legal basis for this is Art. 6 para. 1 p. 1 lit. f GDPR. The stated purposes also constitute the legitimate interest in the processing.
Insofar as an employment relationship arises between you and us, we may, in accordance with Section 26 para. 1 BDSG, further process the personal data already received from you for the purposes of the employment relationship if this is necessary for the performance or termination of the employment relationship or for the exercise or fulfilment of the rights and obligations of the representation of employees' interests resulting from a law or a collective agreement, a works agreement or a service agreement (collective agreement).
Your application data will not be processed beyond the described use.
Your personal data will be deleted after completion of the application process after 6 months at the latest, provided that no other legitimate interests on our part oppose deletion or you have not given us your consent for longer storage. Other legitimate interests in this sense include, for example, a duty to provide evidence in proceedings under the German General Equal Treatment Act (AGG).
14 Data security
We have taken extensive technical and operational precautions to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security procedures are regularly reviewed and adapted to technological progress.
Effective: July 2026
Legal Information
Job Vacancies
Contact
C.E. Gätcke's Glas Gesellschaft mbH
Bredowstraße 31
22113 Hamburg (Germany)
+49 40 731 206 0
info@treffpack.de
Karriere
Kontakt
C.E. Gätcke's Glas Gesellschaft mbH
Bredowstraße 31
22113 Hamburg (Germany)
+49 40 731 206 0
info@treffpack.de