Thank you for your interest in our Internet site and our enterprise. We attach great importance to protection of your data and ensuring that your private sphere is respected. In line with this objective, we inform you herein about how we handle your personal data and the principles underlying our data privacy policies.
This data protection notice applies to
Der Grüne Punkt Holding GmbH & Co. KG
as well as the affiliated enterprises
Der Grüne Punkt - Duales System Deutschland GmbH
Green Dot Rep GmbH
Systec Plastics GmbH
Systec Plastics Eisfeld GmbH
and in particular to our website at www.gruener-punkt.de,
to the portals that can be called up at www.gruener-punkt.de/de/portale.html and all other websites of Der Grüne Punkt Holding GmbH & Co. KG and its subsidiaries that make explicit reference to data protection.
When visiting our website your surfing behaviour can be statistically analysed. This will especially be done by using cookies and so called analysing programmes. Your surfing behaviour will normally be analysed anonymously; the surfing behaviour cannot be traced back to you. You may reject this analysis or prevent its execution by not using specific tools. Detailed information can be found in the following data protection notice.
Your possibilities of contradiction will be shown in this data protection notice, too.
General information
In principle, you can visit our website without disclosing who you are to us. We do not store the name of your Internet service provider, the website from which you are visiting us, or the name of the file you request.
Various data, including personal data, is only collected when you use one of our portals or another service if you provide your consent to such (see the chapter "Online data collection at der Grüne Punkt").
Collection, processing, use and disclosure of personal data and its purpose
Personal data means all information relating to your identity such as e.g. your name, your e-mail address or your postal address.
Generally we use your personal information to respond to your enquiry, process your order or provide you with access to special information or offers. This may make it necessary for us to pass on your data to other companies in our Group or external service providers in connection with the processing of your order. If this is necessary to conclude or fulfil a contractual agreement or if you have provided your consent, we may transfer your data to third parties (e.g. to process your order). Should data be passed on to service providers and/or affiliated companies in the processing of an order, these enterprises are also obligated to adhere to data protection regulations applicable in Germany and to abide by our instructions.
We would like to point out that we process your personal data in the whistleblower software we use to implement the Whistleblower Protection Act if you have been named as a witness in a relevant case.
Data transfers to third countries are performed in the operation of IT systems and only to the extent that a) such transfer is in principle permissible and b) the special preconditions for transfer to a third country are present, in particular the importer of the data guarantees an appropriate level of data protection in accordance with the EU standard contractual clauses for the transfer of personal data to processors in third countries. The provisions of the Federal Data Protection Act, the Telemedia Act (Telemediengesetz) and the General Data Protection Regulation serve as the foundations.
Objection
The use and processing of data can be objected to at any time by sending an informal message to
Der Grüne Punkt Holding GmbH & Co. KG
Data Protection Officer (Datenschutzbeauftragter)
Edmund-Rumpler-Straße 7
D-51149 Cologne
or an e-mail to
dsddatenschutzbeauftragter(at)gruener-punkt(dot)de
You can also revoke your consent to the collection and use of your personal data at any time with effect for the future wherever you have already provided such.
Option
In general, you are free to decide what information you provide to us. It may be necessary to transmit certain information to perform the contractual agreement or to obtain access to individual website contents or portals, however.
If you do not wish to transmit any information, this may disrupt execution of the contractual agreement. Moreover, you may not be able to access certain content on the websites or the portals. This is noted separately on the portals once again.
Data security in the transmission of data via the Internet
Your personal data is transmitted in encrypted form via the Internet using ssl / https. We protect our website and other systems against loss, destruction, access, alteration or dissemination of your data by unauthorised persons by means of technological and organisational measures.
You may only access your user account by entering your personal password. You should always keep your access information confidential and close the browser window when you have terminated your communication with us, especially if you share your computer with others.
Use, transfer and specification of purpose upon conclusion of the agreement
We collect, process and use your personal data in accordance with applicable data-protection provisions.
We use your data to conclude, execute or terminate a contract with you. This also includes storing data on payment behaviour. We need this data in order to be able to carry out a dunning procedure, blockage and possible termination of the contractual agreement. In order to assert or defend against a claim, we may also forward your data to attorneys or debt-collection companies hired by us.
Whenever necessary, we pass personal data on to affiliated companies or external service providers (e.g. for billing and IT services) when processing orders.
We do not sell your personal data to third parties, nor do we market it in any other way except in the case of the sale of receivables.
Your rights
Under the General Data Protection Regulation ((EU) 2016/679) you are entitled to
- information on the collection, processing, use and disclosure of your stored personal data,
- correction of your data,
- restrictions on processing,
- deletion or blocking and
- transmission of your stored personal data to you or a third party.
free of charge. You can contact our joint Data Protection Officer to assert your rights and to obtain answers to your questions regarding the processing of your personal data or data protection:
Der Grüne Punkt Holding GmbH & Co. KG
Data Protection Officer (Datenschutzbeauftragter)
Edmund-Rumpler-Straße 7
D-51149 Cologne
E-Mail: dsddatenschutzbeauftragter(at)gruener-punkt(dot)de
You may also get in touch with the contacts at the company known to you to have individual personal data corrected or deleted.
In addition, we note that you have a right to file a complaint with a supervisory authority at any time if you are of the opinion that we are in breach of the General Data Protection Regulation in the processing of your personal data.
The supervisory authority being responsible for our enterprises without Systec Plastics Eisfeld is:
Die Landesbeauftragte für den Datenschutz Nordrhein-Westfalen
Kavalleriestraße 2 – 4, 40213 Düsseldorf
Tel.: 02 11 / 38 42 40
The supervisory authority being responsible for Systec Plastics Eisfeld is:
Thüringer Landesbeauftragter für den Datenschutz und die Informationssicherheit
Postfach 90 04 55, 99107 Erfurt
Häßlerstrasse 8, 99096 Erfurt
poststelle(at)datenschutz.thueringen(dot)de
Tel.: 03 61 / 57 311 29 00
Fax: 03 61 / 57 311 29 04
Restriction on liability
The contents of this website have been prepared with the greatest possible diligence and to the best of our knowledge. Nevertheless, the provider of the website accepts no liability for the currentness, completeness or correctness of the sites and content provided.
Under § 7, section 1 of the German Telemedia Act (TMG), in its capacity as service provider, the provider of the website is responsible for its own content and information provided on these sites in accordance with general laws and regulations. Under § 8 to § 10 of the Telemedia Act (TMG), however, it is not obliged to monitor the transmitted or stored external information. This content shall be removed or blocked immediately upon us becoming aware of a concrete violation of law. Liability is only possible beginning at the point in time when we gain awareness of such violation.
Copyright / ancillary copyright
Content, works and information made available on the website are subject to German copyright and ancillary copyright law. Any kind of duplication, editing, dissemination, storage or any type of exploitation outside the scope of copyright law are subject to the prior written consent of the respective copyright holder. Unauthorised copying/storage of the information provided on this website is not permitted and is punishable by law.
External links
The website contains so-called "external links" to other websites over whose content the provider of the website has no influence. For this reason, the provider cannot accept any liability for this content.
The respective provider of the linked website is responsible for the content and accuracy of the information it provides. No violations of law were evident when the link was established. The link will be removed immediately if we become aware of any such violation of law.
Online data collection at der Grüne Punkt
You can visit our website without revealing your identity in principle. We do not store the name of your Internet service provider, the website from which you are visiting us, or the name of the file you request.
For technical reasons, however, your Internet browser automatically transmits data to the web server when you access it. This includes the date and time of access, the URL of the website, the browser type and version, operating system and your IP address.
This data is stored for one respective session and is deleted after you leave the respective site.
With our portals that we program ourselves, which have been written with the development tool APEX, the APEX site used and the user ID are disclosed in the event of registration through contractual partners on one of our portals.
Cookies
In order to make our website more user-friendly, more effective and more secure, our website uses so-called "cookies" with session and runtime information.
We use them to personalize content and advertisements, to offer functions for social media and to analyse traffic to our website. Depending on your preferences, we will pass on information about your use of our website to our partners for social media, advertising and analysis. Our partners may combine this information with other data that you have provided to them or that they have collected as part of your use of the services.
This page uses different cookie preferences. Some cookies are placed by third parties that appear on our pages.
We need your permission for the differently used cookie preferences:
Technically neccessary
Here you can find all technically necessary scripts, cookies and other elements that are necessary for the operation of the website or for which the operator has a legitimate interest according to GDPR Art. 6, para. 1.
Measurement
For the site, visitors, web page views and various other data are stored anonymously.
Other
Here you can find other scripts and cookies that do not fit any of the above categories.
When logging in to one of our portals, a cookie is used that stores the username upon login. Multilingual portals may contain a cookie for storing the language selected. In addition, Apex standard cookies are used on our portals.
Most browsers are pre-set to automatically accept cookies. You can deactivate the storage of cookies, however, or set your browser so that it informs you before cookies are stored. Users who do not accept cookies may not be able to access certain areas of our website or our portals.
Google Analytics
We use Google Analytics on our website www.gruener-punkt.de, a web analysis service of Google Inc, 1600 Amphitheatre Parkway, Mountain View, California, 94043 USA (hereinafter referred to as "Google"). Google Analytics also uses cookies to analyse use of the website. Information generated by the cookie on usage of this website by users is usually transferred to a Google server in the USA and stored there.
However, if IP anonymisation is activated on this website, Google will first shorten the IP addresses of users within Member States of the European Union or in other states party to the Agreement on the European Economic Area. The complete IP address will only be transmitted to a Google server in the USA and shortened there by Google in cases of exception. IP anonymisation is active on this website. Google will use this information on behalf of the operator of this website to evaluate usage of the website by users, prepare reports on website activities and provide the website operator with further services associated with website and Internet use.
The IP address transmitted by your browser within the framework of Google Analytics is not combined with other Google data. Users may block the use of cookies by means of respective settings on their browser. However, we would note that in this case you may not be able to use all functions of this website to the full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and Google from processing this data by downloading and installing the browser program provided at the following link:
https://tools.google.com/dlpage/gaoptout
Alternatively to this browser program or in browsers on mobile devices, please click this link to prevent Google Analytics from collecting data on this website in the future. An optout cookie will then be stored on your device. If you delete your cookies, you have to click this link again.
Microsoft Dynamics 365 Customer Insights
This website uses Dynamics 365 Customer Insights ("Dynamics") from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA, exclusively after your consent in the cookie banner in accordance with Art. 6 para. 1 lit. a GDPR. Further information on data protection can be found at https://privacy.microsoft.com/de-de/privacystatement. This enables us to show you relevant advertising based on your interests.
We also use Dynamics to send you relevant information about the company, its products, services, and events by electronic means - subject to your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR or, in the case of existing customers, our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR.
We process your data until it is no longer required for these purposes, or you object to the processing or withdraw your consent.
AWStats / Standard APEX Background Tracking
We use the web analysis service AWStats of the Free Software Foundation to compile statistics on portal call-ups. The program declaration on AWStats can be called up at
https://awstats.sourceforge.io
The data protection declaration of the Free Software Foundation manufacturers' association is available at the link:
https://www.fsf.org/about/free-software-foundation-privacy-policy
At our portals which have been written with the development tool APEX, the standard APEX background tracking module is used in part to log user page calls (session tracking).
Integration of the Trusted Shops Trustbadge
The Trusted Shops Trustbadge is integrated into our portals to display our Trusted Shops seal of approval and any reviews that may have been collected, as well as to offer Trusted Shops products to customers after having ordered.
It serves to safeguard our legitimate interests, which predominate in the context of a weighing up of interests, in optimal marketing by enabling safe shopping in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR. The Trustbadge and the services advertised with it are an offer from Trusted Shops GmbH, Subbelrather Str.15C, 50823 Cologne. The Trustbadge is provided by a CDN provider (Content Delivery Network) as part of order processing. Trusted Shops GmbH also authorises service providers from the USA. An adequate level of data protection is ensured. Further information on data protection at Trusted Shops GmbH can be found here: https://www.trustedshops.de/impressum/#datenschutz
When you call up the Trustbadge, the web server automatically saves a so-called server log file, which also contains your IP address, the date and time of the call, the amount of data transferred and the requesting provider (access data) and documents the call. Individual access data are stored in a security database for the analysis of security issues. The log files are automatically deleted no later than 90 days after creation.
Further personal data is transferred to Trusted Shops GmbH if you decide to use Trusted Shops products after completing an order or if you have already registered for use. The contractual agreement made between you and Trusted Shops applies. For this purpose, personal data is automatically collected from the order data. Whether you are already registered as a buyer for a product use is automatically checked using a neutral parameter, the email address hashed by a cryptological one-way function. The e-mail address is converted into this hash value, which cannot be decrypted for Trusted Shops, before transmission. After checking the value, the parameter is automatically deleted.
This procedure is necessary for the fulfillment of our and Trusted Shops predominant legitimate interests in the provision of the buyer protection linked to the specific order and the transactional evaluation services according to Art. 6 para. 1 sentence 1 lit. f GDPR. Further details, including how to object, can be found in the Trusted Shops data protection declaration linked above and in the Trustbadge.
More corresponding explanation you will find at TrustedShops on the website: https://support.trustedshops.com/de/lp/dsgvo
Audio and Video Conferences with MS Teams
For the communication with our customers we use online conference tools amongst others. These tools used by us are listed below. If you communicate with us by video- or audioconference via Internet, your personal data shall be selected and processed by us and the provider of the special conference tool.
These conference tools select every data, that you deliver / use for the handling (email address and/or telephone number). Moreover, the conference tools process the duration of the conference, beginning and ending of the conference sharing, number of the participants and other “context information” in accordance with the communication process (metadata).
Furthermore, the provider of the tool processes all technical data, that are necessary for the execution of the online communication, including especially IP-addresses, MAC-addresses, device-ID, device type, type and version of the operation system, client version, camera type, microphone, and loud speaker as well as the kind of access.
If content is exchanged, uploaded or otherwise made available within the tool, it is stored on the servers of the tool providers, too. Such content specifically includes cloud recordings, chat/instant messages, voicemails, uploaded photos and videos, files, whiteboards, and other information shared while using the service.
Please note that we do not have full influence on the data processing operations of the tools used. Our options are largely determined by the corporate policy of the particular provider. For further information on data processing by the conference tools, please refer to the privacy statements of the respective tools used, which we have listed below this text.
Purpose and legal basis
The conference tools are used to communicate with future or existing contract partners or to offer certain services to our customers (Art. 6.1 s. 1 lit. b GDPR). Furthermore, the use of the tools serves the general simplification and acceleration of communication with us or with our company, respectively (legitimate interest in the sense of Art. 6.1 lit. f GDPR). As far as consent has been requested, the tools in question are used on the basis of this consent; the consent can be revoked at any time with effect for the future.
Storage duration
The data collected directly by us via the video and conference tools will be deleted from our systems as soon as you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies. Saved cookies remain on your device until you will delete them. Mandatory legal retention periods remain untouched.
We have no influence on the duration of storage of your data, that will be saved by the providers of the conference tools for their own purpose. For further details please inform yourselves directly at the providers of the conference tools.
We use the following conference tools:
Microsoft Teams
We use Microsoft Teams. Provider is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Details on the data processing you will find in the privacy statement by Microsoft Teams: https://privacy.microsoft.com/de-de/privacystatement.
Conclusion of an agreement on job processing
We have concluded an agreement on job processing with our Microsoft Teams provider and fully implement the strict requirements of the German data protection authorities when using Microsoft Teams.
Our social media presence
This privacy policy applies to the following social media presences
- https://www.facebook.com/DerGruenePunkt
- https://www.instagram.com/der.gruene.punkt
- https://www.linkedin.com/company/der-gruene-punkt-duales-system-deutschland
- https://www.youtube.com/channel/UC1Dw6Vk1_8nMRRExfuG25aw
Data processing by social networks
We maintain publicly accessible profiles on social networks. The specific social networks we use are listed below.
Social networks such as Facebook, YouTube, etc. can usually analyze your user behavior comprehensively when you visit their website or a website with integrated social media content (e.g., like buttons or advertising banners). Visiting our social media presences triggers numerous data processing operations that are relevant to data protection.
Specifically: If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected if you are not logged in or do not have an account with the respective social media portal. In this case, this data is collected, for example, via cookies stored on your device or by recording your IP address. With the help of the data collected in this way, the operators of social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you both within and outside the respective social media presence. If you have an account with the respective social network, interest-based advertising can be displayed on all devices on which you are or were logged in. Please also note that we cannot track all processing operations on social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and privacy policies of the respective social media portals.
Legal basis
Our social media presence is intended to ensure the most comprehensive presence possible on the Internet. This is a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. The analysis processes initiated by the social networks may be based on different legal bases, which must be specified by the operators of the social networks (e.g., consent within the meaning of Art. 6 (1) (a) GDPR).
Responsible party and assertion of rights
When you visit one of our social media sites (e.g., Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. You can assert your rights (information, correction, deletion, restriction of processing, data portability, and complaint) both against us and against the operator of the respective social media portal (e.g., against Facebook).
Please note that, despite our joint responsibility with the social media portal operators, we do not have full control over the data processing operations of the social media portals. Our options are largely determined by the corporate policy of the respective provider.
Storage period
The data collected directly by us via our social media presence will be deleted from our systems as soon as you request us to do so, revoke your consent to storage, or the purpose for data storage no longer applies. Stored cookies remain on your device until you delete them. Mandatory legal provisions—in particular retention periods—remain unaffected. We have no influence on the storage period of your data, which is stored by the operators of social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g., in their privacy policy, see below).
Your rights
You have the right to receive information about the origin, recipient, and purpose of your stored personal data free of charge at any time. You also have the right to object, the right to data portability, and the right to lodge a complaint with the competent supervisory authority. Furthermore, you can request the correction, blocking, deletion, and, under certain circumstances, the restriction of the processing of your personal data.

We have a profile on Facebook. This service is provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (hereinafter Meta). According to Meta, the data collected is also transferred to the USA and other third countries.
In connection with the operation of our Facebook page, the agreement on joint processing (“Controller Addendum”) between us and Meta automatically applies as part of the terms of use, which come into effect through the operation or continued use of the Facebook page. This agreement specifies which data processing operations we or Meta are responsible for when you visit our Facebook page. You can view the agreement here: https://www.facebook.com/legal/terms/page_controller_addendum.
You can adjust your advertising settings yourself in your user account. To do so, click on the following link and log in: https://www.facebook.com/settings?tab=ads.
Data transfer to the US is based on the standard contractual clauses of the EU Commission. Details can be found here: www.facebook.com/legal/EU_data_transfer_addendum and de-de.facebook.com/help/566994660333381.
For details, please refer to Facebook’s privacy policy: https://www.facebook.com/about/privacy/.
The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the US that aims to ensure compliance with European data protection standards when processing data in the US. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/4452

We have a profile on Instagram. This service is provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.
For details on how they handle your personal data, please refer to Instagram’s privacy policy: https://privacycenter.instagram.com/policy/.
The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the US that aims to ensure compliance with European data protection standards when processing data in the US. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this is available from the provider at the following link: https://www.dataprivacyframework.gov/participant/4452

We have a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.
If you wish to disable LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
Data transfer to the US is based on the standard contractual clauses of the EU Commission. Details can be found here: www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.
For details on how they handle your personal data, please refer to LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy.
The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the US that aims to ensure compliance with European data protection standards when processing data in the US. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5448
YouTube

We have a profile on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Details on how they handle your personal data can be found in YouTube’s privacy policy: https://policies.google.com/privacy?hl=de.
The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the US that is intended to ensure compliance with European data protection standards when processing data in the US. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this is available from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780
Registration for the newsletter
By subscribing to the newsletter, you consent to receiving personalised and individualised e-mails with news about Der Grüne Punkt - Duales System Deutschland GmbH.
You can unsubscribe from the newsletter at any time. To do this, simply click on the link
Unsubscribe
which you will find at the end of each newsletter mail.
The first time a link is called up from the newsletter, a cookie is placed for an unlimited period of time. If the cookie has been deleted in the meantime or you use another browser, the cookie will be saved once again.
