The protection and security of personal data is of the highest priority for us. Therefore, we strictly adhere to the rules of the German Basic Data Protection Regulation (DS-GVO) and the German Federal Data Protection Act (BDSG). In the following, you will be informed about the type of data we collect and the purpose for which it is used:
Resourcify GmbH, c/o Mindspace, Rödingsmarkt 9, 20459 Hamburg, Germany (hereinafter also referred to as „we“) collects, uses and stores your personal data in accordance with the provisions of the EU Basic Data Protection Regulation (DS-GVO), the Federal Data Protection Act and the Telemedia Act. Personal data is individual information about personal or factual circumstances of a certain or determinable natural person. In the following, we inform you about the type, scope and purpose of the collection and use of personal data.
Collection and processing of data
Our website uses so-called cookies on the basis of Art. 6 Para. 1 letter f (DS-GVO) in order to provide personalized functions and to be able to analyze your use of the website. A cookie is a file that stores certain information relating to the device on the user’s access device (PC, tablet, smartphone, etc.). If our website is loaded by the user’s device, the server of our website contains cookies. The server can evaluate the information stored in the cookie in various ways. Cookies can be used, for example, to adapt advertising displays to the user behaviour recorded with the cookie and to collect statistical data on website use.
You can allow or disable cookies via the settings in your browser. However, not all interactive functions of our website may be available if you deactivate cookies.
Insofar as the user of the website has provided us with personal data (e.g. via a contact form), we store and use this data on the basis of Art. 6 Para. 1 lit. a DS-GVO only to process the user’s inquiry. The user can revoke his consent to the processing of the data provided at any time by sending a message to our e-mail address email@example.com.
Registration and login for services
Insofar as the user has registered on the website and provided us with personal data in order to take advantage of our services or benefits (e.g. services via the Mein Recycling App, webinars, trainings), we store and use this data on the basis of Art. 6 Para. 1 letter b (DS-GVO) for the purpose of fulfilling the relevant contracts or implementing pre-contractual measures. The provision of the data is necessary for the conclusion of the contract.
For this storage and use of your data provided to us, we use the services of the CRM software manufacturer HubSpot Inc. („HubSpot“). HubSpot is certified under the US-EU Data Protection Agreement „Privacy Shield“ and thus undertakes to comply with EU data protection regulations. We have also entered into a Data Processing Agreement with HubSpot. This is a contract in which HubSpot undertakes to protect the data of our users and to process it on our behalf in compliance with data protection laws.
For the storage of your data we also use the services of the Open Telekom Cloud of the provider T-Systems International GmbH („T-Systems“). The Open Telekom Cloud is operated and data backed up exclusively in data centers in Germany. We have concluded a contract with T-Systems for order processing. This is a contract in which T-Systems undertakes to protect the data of our users and to process it on our behalf in compliance with data protection law. You can find more information on data protection during operation of the Open Telekom Cloud at https://open-telekom-cloud.com/de/sicherheit/datenschutz-compliance.
If you register to use our services after you have provided your data to another company, e.g. after entering your data in the customer portal of your waste disposal company, this company is responsible for processing your personal data. The data protection declaration of this company then applies.
With the newsletter we inform you about us and our offers. We use MailerLite to manage the newsletter.
The legal basis for the processing of the data after registration for the newsletter by the user is, in the case of a registration of the user for our newsletter, Art. 6 para. 1 lit. a DS-GVO.
The registration for our newsletter is carried out in a so-called double opt-in procedure. This means that after registration with your e-mail address you will receive an e-mail asking you to confirm your registration. The registrations for the newsletter are logged in order to be able to prove the registration process according to the legal requirements. This includes the storage of the registration and confirmation time as well as the IP address.
The e-mail addresses of our newsletter recipients are stored on the servers of MailChimp in the USA. MailChimp uses this information to send and evaluate the newsletter on our behalf. Furthermore, MailChimp may use this data according to its own information to optimize or improve its own services, e.g. for technical optimization of sending and presentation of the newsletters or for economic purposes to determine from which countries the recipients come. However, MailChimp does not use the data of our newsletter recipients to write to them itself and does not pass the data on to third parties.
At the end of each newsletter there is a link where you can unsubscribe from the newsletter at any time. You can also cancel the newsletter at any time by sending a message to our e-mail address firstname.lastname@example.org. If you unsubscribe from the newsletter, the personal data stored for the purpose of providing the newsletter will be deleted, as long as there is no legal obligation to store it.
Integration of third party services and content
It may happen that we include third party content on our website, such as videos from YouTube, maps from Google Maps, RSS feeds or graphics from other websites. In order to be able to display the content, the providers of this content registers the IP address of the users. We have no influence on the storage and further use of the IP address by the third party providers.
In accordance with Commission Implementing Decision (EU) 2016/1250 of 12 July 2016, the transfer of data from a data controller or processor in the EU to organisations in the USA that have committed themselves to complying with the framework principles of the EU-US data protection shield including the additional principles by self-certification with the US Department of Commerce is permitted. Google has committed to compliance with these principles through self-certification with the U.S. Department of Commerce. However, in the event that IP anonymization is activated on this website, your IP address will be truncated by Google within member states of the European Union or in other states that are parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. IP anonymization is active on this website. On behalf of Resourcify GmbH, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage for website operators.
Rights of the data subjects
In accordance with Art. 15 DS-GVO, the person concerned has the right to request information free of charge about the personal data stored about him or her. In addition, in accordance with Articles 16, 17 and 18 of the DS-GVO, the person concerned has the right to have incorrect data corrected, and to have his or her personal data blocked and deleted. Under the conditions specified in Art. 20 of the DS-GVO, he is also entitled to receive the personal data relating to him that has been stored in a structured, common and machine-readable format and to transfer this data to another person responsible without obstruction by Resourcify GmbH. In addition, in accordance with Art. 21 Paragraph 1 of the DS-GVO, the person concerned is entitled to object to the processing of personal data relating to him/her, which is carried out on the basis of Art. 6 Paragraph 1 letter e or f of the DS-GVO, for reasons arising from his/her particular situation. Resourcify GmbH will comply with the aforementioned rights of the data subject, insofar as the legal requirements for asserting the rights are met.
Any requests concerning your personal data should be sent to our e-mail address email@example.com.
Every person concerned has the right to lodge a complaint with a data protection authority regarding the processing of data when using the website.
Duration of storage and routine deletion
We process and store personal data only for the time necessary to achieve the purpose of the processing or as provided for by laws or regulations to which the controller is subject.
If the storage purpose ceases to apply or if a legally prescribed storage period expires, the personal data is routinely blocked or deleted in accordance with the legal provisions.