Our goal is to make the use of reusable products as easy as possible for our customers. We aim for the same simplicity in how we communicate about data protection. On this page, you’ll find information on how we handle your data – both on our website and in our webshop. We also explain your rights regarding your personal data. If you have further questions, please don’t hesitate to contact us.

Our website is provided via encrypted connections and serves as a platform for advertising, information, and ordering. Certain advanced features such as file uploads and embedded maps require cookies and JavaScript.

We integrate various services from Google (e.g. Google Fonts, reCAPTCHA) on our website. Data processing for these services takes place in the USA. For more information, please refer to Google’s privacy policy.

On our contact page, we embed interactive Google Maps to assist you with directions. Google Maps analyzes the usage of its map features.

2.1  Proper Operation

When you access our website, the web server logs the time of access, the requested address, and your device’s IP address. Most browsers also transmit information such as browser type and version, operating system, and the previously visited page. Only your internet provider can link this data to your connection and, potentially, your identity.
We do not evaluate these server logs. They are used solely to monitor the proper functioning of our web server and to investigate possible attacks. Access is restricted to our IT department and our web hosting provider.

2.2  Usage Analysis

Using our cookie banner, you can give consent to the use of cookies for specific categories. The analytics and marketing tools we use on this site fall into the following categories:

• Statistics & Analytics: These tools help us understand how our website is used and improve the user experience.
• Marketing: These tools allow us to optimize and target our advertising – for example, on platforms like Facebook, Instagram, or LinkedIn.

These services are only activated if you have consented to the relevant category in the cookie banner.

2.2.1 Google Analytics and Google Analytics 4

We use Google Analytics and Google Analytics 4 to evaluate access to our site and optimize the use of advertising. The analysis is based on JavaScript and cookies.
Google Analytics is only activated if you have consented to the "Statistics & Analytics" category in the cookie banner. We use IP anonymization, which shortens your IP address before it is transmitted to Google. Your data is not merged with other Google data.

2.2.2 Hotjar

Hotjar helps us understand how visitors use our site in order to improve user experience. It creates anonymized heatmaps that show which parts of the site are clicked or viewed most often. The analysis is conducted via JavaScript and cookies.
Hotjar is only activated if you have given consent for the ""Statistics & Analytics"" category in the cookie banner. Without your consent, no data is processed by Hotjar. Data is processed on servers in Ireland and personal information like IP addresses is automatically anonymized.

2.2.3 Microsoft Clarity

Microsoft Clarity is an analytics and optimization tool provided by Microsoft Corporation that helps us better understand how users interact with our website. It allows the creation of heatmaps, the recording of click and scroll behavior, and the analysis of user navigation within the website.

2.2.4  Meta Services / Facebook Pixel

We use the Meta Pixel (formerly Facebook Pixel) to analyze the effectiveness of our advertising on Facebook and Instagram and to show targeted ads to visitors of our website (retargeting and conversion tracking).
The Meta Pixel is only activated if you have consented to the "Marketing" category in the cookie banner. Meta processes data such as page visits, interactions, and conversions and may link this data to your Meta account. We only receive aggregated reports.

2.2.5 LinkedIn Insight Tag

We use the LinkedIn Insight Tag to measure the success of our LinkedIn advertising campaigns. This enables us to track conversions, audiences, and reach. Visitors to our site may also be retargeted on LinkedIn.
The Insight Tag is only activated if you have consented to the "Marketing" category in the cookie banner. LinkedIn processes pseudonymized data such as shortened IP addresses, browser information, and site interactions, which are deleted after no more than 90 days.

2.2.6  Legal Basis for Usage Analysis

The legal basis for the processing of personal data in connection with the above-mentioned analytics and marketing tools is your voluntary consent in accordance with Art. 6 (1) a GDPR.
Data is only shared with the respective tool providers. Within our company, only authorized employees in marketing or web analysis have access to the collected data. You can withdraw your consent at any time by deleting the corresponding cookies in your browser, which will prevent further processing by these tools. 

2.3  Technical Operation and Hosting

We have concluded data processing agreements pursuant to Art. 28 GDPR with the service providers who process personal data on our behalf to ensure the protection of your data.

2.3.1  Timme Hosting GmbH & Co. KG

Our website is hosted by Timme Hosting GmbH & Co. KG, Ovelgönner Weg 43, 21335 Lüneburg, Germany.
When you visit our website, Timme Hosting automatically stores technical access data such as IP address, date and time of access, user agent, and requested pages (server log files). This data is used to ensure technical operation, security, and error diagnosis and is automatically deleted after 7 days. It is not combined with other data.
The legal basis for this data processing is Art. 6 (1) f GDPR (our legitimate interest in secure and reliable website operation).

2.3.2 Technical Service Provider / Web Agency

We have contracted AGENTUR KRESSER, Wuhrwaldstraße 12/1, 6971 Hard, Austria (email: hallo@agentur-kresser.at, phone: +43 5574 82 2 81) as an external service provider for maintenance, support, and development of our website.
In the course of their work, the agency may temporarily access personal data, for example in connection with support requests or bug fixes. Data processing is carried out exclusively in accordance with our instructions and based on a data processing agreement under Art. 28 GDPR.

2.4  Contact Form

We collect data via forms and specify the respective purpose on each form. The legal basis for this processing is Art. 6 (1) b GDPR.
If you contact us via email or the contact form, the data you provide will only be stored for the purpose of processing your request and for potential follow-up questions.
 

In B2B transactions, initial contact may occur in various ways: we receive contact data from event organizers, we approach you at trade fairs, or you contact us directly. In such cases, we obtain contact data from representatives of our prospects, customers, or suppliers. The legal basis is Art. 6 (1) f GDPR.

For private customers, we receive your data through your inquiry. The legal basis is Art. 6 (1) b GDPR.
To conduct credit checks, we transmit the necessary data (name, address, date of birth) to Creditreform. The legal basis is Art. 6 (1) f GDPR.
Our legitimate interest pursuant to Art. 6 (1) f GDPR lies in safeguarding against payment defaults.
The credit check helps us minimize financial risk when entering into contracts and supports informed decision-making.

The contact data is accessible to all employees involved in purchasing or sales. We use this data to process your or our inquiries and contracts. Contact data is only deleted upon request.

With regard to your personal data, you have the right to access and correct it. You may object at any time to processing based on legitimate interests, request restriction of processing, or demand deletion of your data. You also have the right to lodge a complaint with the data protection supervisory authority.

6.1 Contact

Did we fail to explain something clearly? Please don’t hesitate to contact us:

Cup Concept Mehrwegsysteme GmbH
Elzstraße 3, D-79350 Sexau
Email: datenschutz@cupconcept.com
Phone: +49 (0)7641 – 95429-8001

Emails to this address go to our data protection team, which includes our Data Protection Officer. We will get back to you promptly.

You may also contact the supervisory authority directly. For us, the responsible authority is:

The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
Königstraße 10a, D-70182 Stuttgart
Email: poststelle@lfd.bwl.de
Phone: +49 (0)711 615541 0