Thank you for your interest in our website and our company. The protection of your personal data is important to us. We observe the legal regulations on data protection and data security.
In particular, we are subject to the provisions of the European Data Protection Regulation (DSGVO), the Federal Data Protection Act (BDSG) and the Telemedia Act (TMG).
Below you will find information on what personal data we collect when you use our website and the services and functions it contains, and how we use it and for what purposes.
1 Person responsible and contact
Responsible for the data processing described in this data protection declaration is
WR Wertstoffbörse Recycling GmbH & Co. KG
Boxhagener Str. 72
2 Purposes and legal basis
We process your personal data for the following purposes on the following legal bases:
2.1 Calling up our website
As soon as you visit our website, we automatically collect and store certain usage data. This includes the IP address assigned to your computer, which we need to transmit the contents of our website accessed by you to your computer or other terminal device (“Device”).
We also collect and store information about your use of the website, such as the type of browser and operating system you use, the date and time of your website visits and the URL of the website you visited previously. We process your data in order to provide you with our website and the associated functions.
This data is processed on the basis of legal regulations that allow us to process personal data insofar as it is necessary for the use of a service or the performance of a contract (Art. 6 (1) lit. b DSGVO), or because we have an overriding legitimate interest in making the use of the website as easy and efficient as possible (Art. 6 (1) lit. f DSGVO).
If you create or apply for an account on our website, we process the data you provide there to enable you to use our portal or to check in advance whether you are a suitable participant for this. For the verification of your e-mail address, we use the so-called “double opt-in procedure”, i.e. we ask you for a further confirmation by e-mail that your e-mail address is actually to be deposited in the course of registration. The legal basis for all data processing in connection with this registration process is Article 6 Paragraph 1 lit. b DSGVO.
2.3 Sending an invitation e-mail
In the event that you have received an email from us inviting you to register on our website, we have obtained your email address from the person named in the email. We use your email address on the basis of Article 6(1)(b) DSGVO and exclusively for sending this email.
2.4 Processing of advertisements, offers and acceptances
If you place an advertisement on our website or make an offer in relation to an existing advertisement of another company, we store this data and display it to other users so that a contract can be concluded between you and another user for the goods in question. The legal basis for this is Article 6 (1) lit. b DSGVO.
2.5 Processing of your payment data
If you have provided us with payment data, we process this in order to receive the brokerage fees and thus fulfil our contract with you. The legal basis for this is Article 6 (1) lit. b DSGVO.
2.6 Analysis of usage behaviour
For the purpose of statistical analysis, we also use service providers (see section 3.2) to convert your usage data into anonymous statistics. This enables us to gain general insights into, for example, the trading volume on our website and to further optimise our offer for you.
We process this data on the basis of Article 6 para. 1 lit. f DSGVO. Our legitimate interest in this data processing is the improvement of our offers.
3 Data recipients
3.1 Other users
Other users can view the data of the advertisements you have placed.
3.2 Engaging service providers bound by instructions
We rely on contractually affiliated third-party companies and external service providers (“order processors”) to provide the services, e.g. Amazon Web Services, Inc. for storing data in a so-called “cloud”, Elasticsearch B.V., for processing statistically relevant data using the “Kibana” tool, and Debitoor GmbH for e.g. invoicing. If we use such processors, we always oblige them to comply with the applicable data protection regulations by means of a so-called “order processing agreement”.
3.2.2 Google Analytics
For the purposes of statistical evaluation and the needs-based design of our offer, we use – unless you have objected to this – Google Analytics, a web analysis service of Google LLC (“Google”). Cookies are used for this purpose. “Cookies” are small files that are stored on your computer with the help of your internet browser. The information generated by the cookies about your use of our website is usually transmitted to a Google server in the USA and stored there. However, the so-called IP anonymisation is activated on our website, so that your IP address is shortened beforehand by Google within the European Economic Area (“EEA”). Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information on our behalf for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage.
Furthermore, Google Analytics is used by us to generate reports on the demographics and interests of our website visitors. This feature of Google Analytics draws on third-party audience data (e.g., data on interests, age and gender that is anonymous on its own).
We store the data from Google Analytics for a period of 14 months.
4 Local Storage
We store your personal data in local storage, i.e. we use the storage capacity of your browser.
This storage is used to improve Recyfy’s user experience and service to you. The data stored in Local Storage for this purpose is only accessible to you (via the browser) and Recyfy. Third parties and other websites cannot read the data. The data stored in the Local Storage will not be used for advertising purposes. The data is not merged with other data (e.g. tracking data).
If you do not wish Recyfy to use local storage functions, you can control this in the settings of your respective browser. We would like to point out that this will result in functional limitations of the Recyfy exchange.
5 Embedding of Google Maps
We use the Google Maps API (an interface for embedding Google Maps into our website), a service provided by Google Ireland Ltd. (“Google Ireland”).
Through the use of Google Maps, information about your use of our website (including your IP address) may be transmitted to and stored by a server of Google Ireland and, if applicable, Google LLC in the USA. We are not aware of the details of the data processing.
If you are logged in to Google, your data may be assigned to your account by Google Ireland or Google LLC. Google may store this data as usage profiles and use it for the purposes of advertising, market research and/or tailoring its website to meet user needs.
6 Third country transfers
If we transfer data to countries outside the European Economic Area (EEA), this will only be done in compliance with the specific legal requirements of Art. 44 et seq. DSGVO.
Amazon Web Services, Inc. and Google LLC are certified under the EU-U.S. Privacy Shield.
7 Storage period
We delete or anonymise your personal data as soon as it is no longer necessary for the purposes for which we process it.
We store the following categories of data for the following periods:
As a rule, we store your personal data that we collect when you call up our website for the duration of your use of the website plus a period of 14 days for IT security purposes.
We store your personal data that you provided during registration as long as you have not deleted your profile or account.
We store your e-mail address on the basis of an invitation by an administrator until this e-mail is sent.
We store data on contracts brokered and to be brokered (esp. advertisements, offers and acceptances) for four years from the conclusion of the contract.
We store any contact enquiries for the duration of the processing of the respective enquiry.
After expiry of these periods, the data is deleted, unless this data is required for a longer period due to statutory retention periods (in particular from tax and commercial law) or due to official enquiries. Beyond these retention periods, we may retain the data for the purposes of legal defence and enforcement for as long as is necessary for the preparation or conduct of a potential legal dispute (usually up to four years, although the legal dispute itself may suspend the running of this period). If data can be retained for these reasons, it will be blocked. The data is then no longer available for further use.
8 Provision of data
You are not obliged to provide us with personal data. However, without this personal data we are not able to provide you with the services of this portal for the mediation of contracts.
9 Your rights under data protection law
9.1 Right to information
You have the right to obtain information from us at any time, upon request, about the personal data processed by us that concerns you within the scope of Art. 15 DSGVO.
This right is limited by the exceptions of Section 34 of the German Federal Data Protection Act (“BDSG”), according to which the right to information does not apply in particular if the data is only stored on the basis of statutory storage regulations or for data security and data protection control, the provision of information would require a disproportionate effort and a misappropriation of the data processing is prevented by appropriate technical and organisational measures.
9.2 Right to rectification
You have the right to demand that we immediately correct the personal data concerning you if it is incorrect.
9.3 Right to deletion
You have the right to demand that we delete the personal data relating to you under the conditions described in Art. 17 DSGVO. These conditions exist in particular if the respective processing purpose has been achieved or otherwise ceases to apply, as well as if we should process your data unlawfully, you have revoked consent without the data processing being able to continue on another legal basis, if you successfully object to the data processing and in cases of the existence of an obligation to delete on the basis of Union law or the law of an EU member state to which we are subject.
This right is subject to the restrictions from Section 35 of the BDSG, according to which the right to deletion may be waived in particular if, in the case of non-automated data processing, there is a disproportionately high effort for deletion and your interest in deletion is to be regarded as low.
9.4 Right to restriction of processing
In accordance with Art. 18 DSGVO, you can demand that we only process your personal data in a restricted manner. This right exists in particular if the accuracy of the personal data is disputed, if you request restricted processing instead of deletion under the conditions of a justified request for deletion; furthermore, in the event that the data is no longer required for the purposes pursued by us, but you need the data to assert, exercise or defend legal claims, as well as if the success of an objection is still disputed.
9.5 Right to data portability
In accordance with Art. 20 DSGVO, you have the right to receive from us the personal data concerning you that you have provided to us in a structured, common, machine-readable format, as well as to transfer this data to another responsible party.
9.6 Right of objection
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out for the purposes of safeguarding our legitimate interests. We will stop processing your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the purpose of asserting, exercising or defending legal claims.
If you object to the processing of your personal data for advertising purposes, we will stop this processing in any case.
9.7 Right of revocation
If you have given us consent to process your personal data, you may revoke this consent at any time. We will cease processing your personal data covered by the consent from this point onwards, unless we carry out the respective data processing on another legal basis (e.g. in order to be able to continue to fulfil contracts with you).
9.8 Exercising these rights
If you wish to exercise these rights, please contact us, for example by emailing: firstname.lastname@example.org.
9.9 Right to complain
You also have the right to contact a competent supervisory authority if you have a complaint.