General data privacy statement
1. Collection of personal data
We are very pleased that you are interested in RE:CORE GmbH. The protection of your personal data is important to us. We treat your personal data confidentially and according to statutory data protection regulations as well as this data privacy statement and the declaration on the use of cookies.
This website contains information about what personal data we collect from you when you use this site, for example. Personal data is data that relates to you personally and that can be used to identify you, e.g. your name, address, email address and user behaviour.
To use these services, you will need to provide additional personal data that we will then use to provide the relevant service or to contact you. The data processing principles set out in this data privacy statement apply to this personal data. If you do not provide the required information, we may not be able to provide our service.
Our website uses SSL/TLS encryption for the transfer of confidential content. We would like to point out that transmitting data online (e.g. when communicating by email) may involve security vulnerabilities. It is not possible to completely protect data against access by third parties.
The document can be printed out or saved as a PDF.
2. Controller
The controller as per Art. 4(7) of the General Data Protection Regulation (GDPR) for the processing of personal data is:
RE:CORE GmbH
Brunnenstraße 138
44536 Lünen
Germany
Email: info@recore-recycling.com
Internet: www.recore-recycling.com
3. Log files
Whenever you access our website, we automatically record data and information about your device’s system and save this in what are known as server log files. This data is information that relates to an identified or identifiable natural person (in this case: website visitors). The data is automatically transmitted by your respective browser when you access our website. The following information is recorded from this data:
- Time you accessed our website (query to the host provider’s server),
- URL of the website used to access our website,
- The operating system that you use,
- Type and version of the browser you use,
- Your computer’s IP address masked
The purpose of this processing is to ensure you can access our website from your device and to allow our website to be displayed correctly on your device/in your browser. The data also helps us to optimise our website and to ensure the security of our systems. This data is not analysed for marketing purposes. This data is recorded on the basis of Art. 6(1)(f) GPDR. We have a legitimate interest in providing you with a website optimised for your browser and allowing communication between our server and your end device. For the latter in particular, we need to process your IP address. The data is stored for seven days. The recipient of the data is our server host, which works for us within the framework of a contractual agreement.
4. Your rights
You may assert the following rights against us with regard to your personal data:
a) Right of access
b) Right to rectification
c) Right to erasure (right to be forgotten)
d) Right to restriction of processing
e) Right to data portability.
f) Right to object
g) Right to withdraw consent under data protection law
You also have the right to complain to the data protection supervisory authorities about the processing of your personal data by us.
The supervisory authority responsible for RE:CORE GmbH is:
North Rhine-Westphalia State Commissioner for Data Protection and Freedom of Information
Kavalleriestraße 2-4, 40213 Düsseldorf, Germany
Postfach 20 04 44, 40102 Düsseldorf, Germany
Tel.: +49 (0)211 / 38424 - 0
Fax: 0211/38424-999
Email: poststelle@ldi.nrw.de
5. Storage duration and blocking of personal data
If our data protection declarations do not stipulate any special storage periods, your personal data that we hold will be deleted as soon as it is no longer needed to fulfil the purpose for which it was collected. If you use the website purely for informational purposes, the IP address is deleted from all systems that are used in connection with the operation of this website within seven days. We can then no longer connect any remaining data to you personally.
If you use other services on our website, your data is usually stored on our systems for user management purposes. This data is regularly reviewed to determine whether it can be deleted. If data is no longer required in a relationship with a customer or interested party or if there is an overriding conflicting interest, we will delete the data concerned, provided that this is not prohibited by statutory retention obligations.
We will also delete your data if the storage of this data is not permitted (e.g. if the data is incorrect and it is not possible to correct it). Your data will be blocked instead of deleted if there are legal or factual obstacles preventing its deletion (e.g. special retention obligations).
If you make a legitimate request for deletion or withdraw your consent to data processing, your data will be deleted if we do not have any other lawful reasons for saving your personal data (e.g. record retention periods under tax or commercial law); in the latter case, the data will be deleted when these reasons cease to apply.
6. Data sharing with third parties/use of cookies
As a matter of principle, data that you provide to us will not be shared with third parties without your explicit consent.
Our website uses cookies. Information on the use of cookies on our website can be found in our Declaration on the use of cookies.
7. Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)
If we cite our legitimate interest or a legitimate interest of a third party as the basis of legitimacy for the processing of personal data (Art. 6(1)(f) GDPR), you have a right to object as per Art. 21 GDPR.
In accordance with Art. 21 GDPR, you have the right to object to the processing of personal data at any time. We will then no longer process your personal data for the purposes of direct marketing or any connected profiling.
Following an objection, we will also not process your personal data for other purposes, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing is for the purpose of enforcing, exercising or defending legal claims (see, for example, Art. 21(1) GDPR, known as “restricted right to object”). In this case, you must present reasons that demonstrate your particular situation for the objection.
Where personal data are processed for scientific or historical research purposes or statistical purposes pursuant to Art. 89(1) GDPR, you may object to processing of your personal data on grounds relating to your particular situation, unless the processing is necessary for the performance of a task carried out for reasons of public interest (see Art. 21(6) GDPR).
8. Legal bases of processing
For processing activities carried out by RE:CORE for which we obtain consent for a specific purpose, the legal basis is Art. 6(1)(a) GDPR. If the processing of personal data is necessary in order to perform a contract where you are a party to the contract, such as processing activities that are required to deliver goods or provide another service or consideration, this processing is carried out on the basis of Art. 6(1)(b) GDPR. The same applies to processing activities that are required for pre-contractual measures.
If we have a legal obligation to process personal data, for instance to fulfil tax obligations, these processing activities are carried out on the basis of Art. 6(1)(c) GDPR. In rare cases, the processing of personal data may be required to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor were to be injured and their name, age, health insurance details and other vital information needed to be given to a doctor, hospital or other third party. The basis for this data processing would be Art. 6(1)(d) GDPR.
Finally, processing activities may be carried out on the basis of Art. 6(1)(f) GDPR. Processing activities that are not covered by any of the aforementioned legal bases are carried out on this legal basis if the processing activity concerned is necessary for the purposes of our legitimate interests or those of a third party, provided that such interests are not overridden by the interests or fundamental rights and freedoms of the data subject. We are permitted to carry out such processing activities in particular because they have been specifically mentioned by the European legislator. The legislator considers that a legitimate interest could exist if the data subject is a customer of the controller (Sentence 2 of Recital 47 GDPR).
If you have consented to the saving of cookies or to access to information on your end device, the data processing is also carried out on the basis of Section 25(1) TTDSG [German Telecommunications and Telemedia Data Protection Act]. The consent may be revoked at any time
Last amended: July 2023
