Privacy statement

Bio4Pack GmbH, Marie-Curie-Straße 5, 48529 Nordhorn, Germany
Registered at the Amtsgericht Osnabrück, HRB 212801
Email: info@bio4pack.com · Phone: +49 (0) 5921 818 37 00

Bio4Pack GmbH is the controller for the data described here. It has no data protection officer, as it is not required to appoint one.

• Your email address.
• Your answers in the check: product category, packaging format, material, weight per package (fresh produce), food contact, multi-buy packaging, sales channels, role in the supply chain, sales market, company size and number of packaging types.
• The outcome of the check and the date and time you completed it.
• How you found the check: campaign tags in the link you used (UTM parameters) and the website you came from (domain name only).
• If you send a contact request from the result screen: your name, company, phone number (optional) and message.

We don't ask for special categories of personal data. Your email address is required to complete the check, because we use it to send you your advice; without it, the check can't be completed.

• To show your advice and email it to you, with the PDF attached, because you ask us to (Art. 6(1)(b) GDPR).
• To answer your contact request, at your request (Art. 6(1)(b) GDPR). Bio4Pack receives it together with your answers and outcome of the check, so it can answer in context. We then keep the request as a record for 24 months (Art. 6(1)(f) GDPR, our legitimate interest in being able to follow up on earlier questions).
• To keep a record of your request, so we can answer questions you send us about your advice, improve the check, and understand through which channels people find it (Art. 6(1)(f) GDPR, our legitimate interest in supporting businesses with the PPWR and in reaching them).
• To protect the form against abuse such as automated submissions. For this we store a keyed hash (pseudonym) of your IP address that changes every day, never the address itself, and delete it within 25 hours (Art. 6(1)(f) GDPR).

Right to object: where we rely on our legitimate interest (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your situation (Art. 21 GDPR). Email info@bio4pack.com and we'll stop, unless there are compelling legitimate grounds.

We don't send marketing emails and we don't contact you unprompted. If you reply to the advice email, we'll answer you.

The outcome of the check is an automated indication based on your answers. It is not a decision with legal or similarly significant effects (Art. 22 GDPR) and does not replace legal advice.

When you visit the check, our hosting provider automatically logs technical data such as your IP address, browser type and the time of the request. This is needed to deliver the website securely and to fix errors (Art. 6(1)(f) GDPR). These logs are kept for a limited period under the provider's log retention.

The check is built and run for Bio4Pack GmbH by Thies Gerritsen, who processes the data as a processor on behalf of Bio4Pack GmbH. He uses these sub-processors:

• Vercel Inc. (hosting): the check runs in Frankfurt, Germany.
• Neon (part of Databricks) (database): your data is stored in Frankfurt, Germany.
• Resend Inc. (email delivery): emails are sent from Ireland.
• Google Workspace (Google Cloud EMEA Ltd., Ireland): the mailbox that receives the lead notifications and your replies to the advice email.

Your data is stored and processed in the EU, except that email in the Google Workspace mailbox may also be stored outside the EU. These providers are, or belong to, US companies, so access from the US can't be ruled out; such transfers are covered by the EU-US Data Privacy Framework and/or the EU Standard Contractual Clauses. We don't sell your data or share it with anyone else.

Your answers and email address are deleted automatically 24 months after you complete the check, and contact requests 24 months after you send them. If you become a customer of Bio4Pack, the retention rules of Bio4Pack's customer records apply instead, outside this check.

The notification emails about your check and any contact request, and any replies you send us, are kept in the mailbox of the person handling requests for Bio4Pack, and deleted there after 24 months at the latest. Delivery logs at our email provider and short-term database backups are kept for the providers' standard retention periods. In addition, a weekly backup of all requests is stored privately with Vercel in Frankfurt and deleted after 8 weeks, so deleted data can remain in a backup for up to 8 weeks. Hashed IP addresses used against abuse are deleted within 25 hours.

The check doesn't use tracking cookies. We measure visits, which steps of the check are reached, the type of outcome, and clicks on the PDF download and contact button, and whether a contact request was sent, with Vercel Web Analytics, which works without cookies and doesn't store IP addresses or other data that identifies you. That's why there is no cookie banner. Only the internal admin area uses a functional login cookie.

While you fill in the check, your answers are kept in your browser's session storage, so refreshing the page doesn't lose them. They are deleted when you close the tab or choose “Start over”. This is strictly necessary to provide the check you asked for (§ 25(2) TDDDG).

You have the right to access, correct or delete your data, to restrict or object to its processing, and to receive it in a portable format (Art. 15–21 GDPR). Send your request to info@bio4pack.com. We'll reply within one month. We may ask a question to confirm it's you, but we won't ask for a copy of your ID by default.

You can file a complaint with the supervisory authority responsible for Bio4Pack GmbH:
Die Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover, Germany · lfd.niedersachsen.de
You can also contact the supervisory authority in the EU country where you live or work.