Privacy policy & General Terms and Conditions
Privacy Policy pursuant to the EU General Data Protection Regulation
Gerhard Lang Recycling GmbH
Status: January 2025
The following information provides you with an overview of how Gerhard Lang Recycling GmbH (hereinafter referred to as Lang Recycling) processes your personal data and your rights regarding data protection. Personal data includes all information that can be related to a natural person, such as name, address, email address, etc. For definitions of terms such as “processing” or “controller,” please refer to Article 4 of the General Data Protection Regulation (GDPR). The privacy policy of Lang Recycling must be read in conjunction with other legal notices and terms of use provided on other pages of our website or during contract initiation. The specific data processed and used depends on the services requested or agreed upon. Please also refer to the respective privacy policies that we may provide separately during contract initiation.
1. Name and contact details of the controller and the data protection officer
a) Controller:
Gerhard Lang Recycling GmbH
Wilhelm-Lang-Straße 1-3,
76571 Gaggenau
Phone: +49 7225-96690
Fax: +49 7225-96698000
Email: office@lang-recycling.de
b) Data Protection Officer:
Gerhard Lang Recycling GmbH
Wilhelm-Lang-Straße 1-3,
76571 Gaggenau
Phone: +49 7225-96690
Fax: +49 7225-96698000
Email: datenschutz@lang-recycling.de
2. Information about the categories and sources of personal data we process
When you visit our website www.lang-recycling.de purely for informational purposes, without registering or providing information, we only collect the personal data your browser transmits to our server (server log files). To display our website and ensure its stability and security, we collect the following technically necessary data based on Art. 6(1)(f) GDPR: IP address, date and time of the request, content of the request (name and URL of the file retrieved), access status/HTTP status code, referring website (referrer URL), browser used and operating system, name of your access provider, and the data volume transferred. Additionally, we use cookies on our website. For further details, see Section 10 of this privacy policy.
When you contact us by email, post, fax, phone, or via a contact form, the data you provide will be stored to process your inquiry. A valid email address, phone number, or address is required to identify the source of the inquiry and respond. Data processing for contact and business initiation is based on your voluntarily given consent (Art. 6(1)(a) GDPR). We delete data when no longer necessary unless legal retention requirements apply.
We also process personal data received from customers during business relationships. If necessary for contractual services, we process personal data lawfully obtained from third parties (e.g., credit agencies) or publicly available sources (e.g., debtor directories, land registers, trade and association registers, press, media, internet).
Relevant data includes names, contact information (phone, email), and credit scores. During business initiation and ongoing relationships, further personal data may arise from communication channels, dates, purposes, and results of contact, (electronic) correspondence copies, and participation in direct marketing campaigns.
3. Purpose of data processing and legal basis
We process personal data in accordance with the GDPR and the Federal Data Protection Act (BDSG):
a. To fulfill contractual obligations (Art. 6(1)(b) GDPR):
Processing is necessary for delivering services or fulfilling contracts or pre-contractual measures requested by you. Purposes include communication, needs analysis, consulting, licensing, hardware procurement, and workshops. Details can be found in contractual documents and terms.
b. Based on legitimate interests (Art. 6(1)(f) GDPR):
Where necessary, data is processed beyond contract performance to safeguard our or third parties’ legitimate interests unless overridden by your rights. Examples include:
-
Creditworthiness checks via credit agencies
-
Customer segmentation and targeted communication
-
Marketing and market research
-
Legal claims and defense
-
IT security
-
Crime prevention
-
Facility access control
-
Property rights enforcement
-
Business development
-
Risk management
c. With your consent (Art. 6(1)(a) GDPR):
If you grant consent (e.g., for intra-group data sharing), processing is lawful. Consent may be revoked anytime, effective going forward, via office@lang-recycling.de.
d. Legal obligations (Art. 6(1)(c) GDPR) or public interest (Art. 6(1)(e) GDPR):
We are subject to legal requirements (e.g., HGB, AO, GmbHG). Purposes include tax compliance and risk management.
4. Data recipients
Within Lang Recycling, only authorized personnel access your data. Employees are bound by confidentiality. External service providers may process data for technical operations. All processors are carefully selected, meet high data protection standards, and act only under instruction.
Data is shared with third parties only:
-
For contract fulfillment (Art. 6(1)(b) GDPR)
-
To protect legitimate interests (Art. 6(1)(f) GDPR)
-
Based on legal obligations
-
With your consent (Art. 6(1)(a) GDPR)
Potential recipients include:
-
Public authorities
-
Credit agencies
-
Auditors, tax consultants, lawyers
-
Software and hardware providers, IT support, archiving, call centers, data destruction
-
Parties with your consent
5. Data transfers to third countries or international organizations
Transfers outside the EU/EEA (third countries) occur only:
-
For contract execution
-
Where legally required
-
With your consent
-
Under data processing agreements
Third-country providers are bound by European data protection levels unless an adequacy decision exists.
6. Duration of data storage
We retain data only as long as necessary for contractual and legal obligations. Business relationships may be long-term. Data no longer needed is deleted unless temporary further processing is required for:
-
Commercial/tax retention periods (e.g., HGB, AO, GwG), typically 2–10 years
-
Preservation of evidence under limitation laws (e.g., up to 30 years, typically 3 years under BGB)
7. Data subject rights
You have the following rights:
-
Access (Art. 15 GDPR)
-
Rectification (Art. 16 GDPR)
-
Erasure (Art. 17 GDPR)
-
Restriction (Art. 18 GDPR)
-
Objection (Art. 21 GDPR)
-
Data portability (Art. 20 GDPR)
Restrictions under §§ 34 and 35 BDSG apply. You may lodge complaints with a supervisory authority (Art. 77 GDPR in conjunction with § 19 BDSG).
8. Obligation to provide data
You must provide personal data required for business relationships or legal obligations. Otherwise, we may decline to enter or continue contracts.
9. Automated decision-making (including profiling)
We generally do not use fully automated decisions under Art. 22 GDPR. If used, you will be informed separately. We may use profiling to:
-
Target product/service offers via analysis tools
-
Assess creditworthiness using credit agency scoring based on statistical methods, which contribute to our risk management
10. Cookies
We use cookies (small text files stored on your device) to enhance user experience. They do not execute programs or transmit viruses. This website uses:
-
Transient cookies (e.g., session cookies): Deleted upon browser closure. They store session IDs for continuity.
-
Persistent cookies: Remain for a defined duration. Can be deleted via browser settings.
Cookies are necessary for some features (e.g., session continuity, login persistence). Analytical cookies improve usability and are used only with your prior consent (Art. 6(1)(a) GDPR). You can configure or disable cookies in your browser but may lose functionality. Regular deletion is recommended.
11. Application procedures
Lang Recycling collects and processes applicant data for recruitment, including electronically via email or forms. If hired, data is stored for employment purposes (Art. 88 GDPR in conjunction with § 26 BDSG, Art. 6(1)(b) GDPR). If not hired, data is deleted 6 months post-rejection unless legitimate interests or consent (Art. 6(1)(a) GDPR) apply. Legitimate interests may arise from the General Equal Treatment Act (AGG).
12. Protection of minors
Individuals under 18 should not submit personal data without parental consent. We do not knowingly collect or share data from minors.
13. Updates and changes to this privacy policy
This privacy policy is current as of May 2024. It may change due to website or legal developments.
Information on your right to object under Art. 21 GDPR
-
Objection based on individual circumstances:
You may object at any time to data processing under Art. 6(1)(e/f) GDPR based on your specific situation. We will stop processing unless we demonstrate compelling legitimate grounds or the processing is for legal claims. -
Objection to direct marketing:
You may object at any time to the processing of your data for direct marketing, including related profiling. We will stop such processing. -
Submitting objections:
You may object informally by contacting:
Gerhard Lang Recycling GmbH, Wilhelm-Lang-Straße 1-3, 76571 Gaggenau,
Phone: +49 7225-96690,
Fax: +49 7225-96698000,
Email: office@lang-recycling.de
General Terms and Conditions
GTC of Gerhard Lang Recycling GmbH and RSH GmbH
Status: April 2025