Skip to content
DEENPLFRITNLESCS
labelpass.eu Digital Product Passport for the EU

Privacy policy

1. Data protection at a glance

The following notes give a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified. Detailed information on data protection is set out in the privacy policy below this text.

The data processing on this website is carried out by the website operator. You find its contact details in the legal notice of this website. Some of your data is collected because you provide it to us, for example in the contact form. Other data is collected automatically by our IT systems when you visit the website, above all technical data (for example internet browser, operating system or the time of the page view).

This website sets no cookies and uses no analytics or advertising services. Fonts and all other resources are stored on our own server, no content is loaded from third-party servers.

2. Hosting

We host the content of our website with the following provider:

The provider is Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4-6, 32339 Espelkamp, Germany (hereinafter Mittwald). For details please see the privacy policy of Mittwald: https://www.mittwald.de/datenschutz.

Mittwald is used on the basis of Article 6 (1) (f) GDPR. We have a legitimate interest in presenting our website as reliably as possible.

We have concluded a data processing agreement for the use of the service named above. This is a contract required by data protection law which ensures that the provider processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

3. General notes and mandatory information

The operators of these pages treat the protection of your personal data as a priority. We treat your personal data confidentially and in accordance with the statutory data protection rules and this privacy policy.

We point out that data transmission over the internet (for example when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.

The controller for the data processing on this website is:

R&R Vivendi GbR
Roman Rötting and Roman Breitenbach
Ochtruper Straße 34a
48455 Bad Bentheim, Germany

Telephone: +49 5922 8070855
E-mail: info@labelpass.eu

Many data processing operations are only possible with your express consent. You can withdraw consent already given at any time. An informal e-mail to us is sufficient. The lawfulness of the data processing carried out before the withdrawal remains unaffected by it.

In the event of breaches of the GDPR, data subjects have a right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, their place of work or the place of the alleged breach. This right exists without prejudice to other administrative or judicial remedies.

You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this is only done as far as it is technically feasible.

For security reasons and to protect the transmission of confidential content, such as enquiries you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the address line of the browser changing from „http://“ to „https://“ and by the lock symbol in your browser line. When SSL or TLS encryption is active, the data you transmit to us cannot be read by third parties.

Within the applicable statutory provisions you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of the data processing, and where applicable a right to correction or deletion of this data. For this and for further questions about personal data you can contact us at any time at the address given in the legal notice.

You have the right to request the restriction of the processing of your personal data. For this you can contact us at any time at the address given in the legal notice.

4. Data collection on this website

The provider of the pages automatically collects and stores information in so-called server log files, which your browser transmits to us automatically. These are:

This data is not merged with other data sources. It is collected on the basis of Article 6 (1) (f) GDPR. The website operator has a legitimate interest in the technically faultless presentation and the optimisation of its website, and the server log files have to be collected for that purpose.

If you send us enquiries through the contact form, your details from the enquiry form including the contact data you provide there are stored with us for the purpose of handling the enquiry and in case of follow-up questions. We do not pass this data on without your consent.

This data is processed on the basis of Article 6 (1) (b) GDPR where your enquiry is connected with the performance of a contract or is necessary for pre-contractual steps. In all other cases the processing is based on our legitimate interest in handling the enquiries addressed to us effectively (Article 6 (1) (f) GDPR).

To protect against automated mass sending we limit the number of messages per sender. For that we store, at the moment of sending, a non-reversible check value of your IP address together with the time, for a maximum of 1 hour. The legal basis is Article 6 (1) (f) GDPR, our legitimate interest in undisturbed operation.

The data you enter in the contact form stays with us until you ask us to delete it, withdraw your consent to storage or the purpose for storing the data no longer applies. Mandatory statutory provisions, in particular retention periods, remain unaffected.

If you contact us by e-mail or telephone, your enquiry including all personal data arising from it (name, enquiry) is stored and processed by us for the purpose of handling your request. We do not pass this data on without your consent. The legal bases correspond to those for the contact form.

  • browser type and browser version
  • operating system used
  • referrer URL
  • host name of the accessing computer
  • time of the server request
  • IP address

5. Orders, product data and payment

When you order our service, we process the company data you enter in the order form: company name, address, VAT identification number and e-mail address. The legal basis is Art. 6 (1) (b) GDPR, the processing is necessary to perform the contract. Without this data we cannot create the product passports and cannot invoice them.

We store the product table you upload in order to create the product passports from it. As a rule it contains no personal data, but it does contain contact details of the manufacturer such as an e-mail address. Art. 27 (6) of Regulation (EU) 2024/1781 expressly requires those details in the public part of the product passport. They therefore become publicly accessible on the internet. The legal basis is Art. 6 (1) (b) and (c) GDPR.

If you upload a file without completing the order, we delete it after 24 hours at the latest.

For registration in the EU product passport registry we transmit the unique product identifier to the European Commission, together with the model and batch identifier and the commodity code where available. This transmission is required by Art. 13 of Regulation (EU) 2024/1781. The legal basis is Art. 6 (1) (c) GDPR.

We keep the created product passport publicly accessible for 10 years from its publication. This is required by Art. 11 of Regulation (EU) 2024/1781, and applies even after the contract with us has ended.

We verify your VAT identification number with the VAT Information Exchange System (VIES) of the European Commission. The country code and the number are transmitted to the Commission and the result is stored with your order. The check is required to charge value added tax correctly, in particular for the reverse charge procedure within the EU. The legal basis is Art. 6 (1) (c) GDPR.

If you supply to other EU countries, the product passport must be available in their official languages under Art. 7 (8) of Regulation (EU) 2024/1781. For translating your product details we use the interface of Anthropic PBC, 548 Market Street, San Francisco, CA 94104, USA. Only the product texts to be translated are transmitted, no contact details and no information about you personally. The legal basis is Art. 6 (1) (b) GDPR. The transfer to the USA is based on the standard contractual clauses of the European Commission.

For payment we use the payment service provider Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, Netherlands. When you choose a payment method you are forwarded to Mollie. Mollie processes the data required for the payment, in particular the amount, the payment method and the details you enter there. We never see your payment data. The legal basis is Art. 6 (1) (b) GDPR. Further information is available in Mollie's privacy policy at mollie.com/en/privacy.

For accounting and invoicing we use the software Collmex of Collmex GmbH, Rudolf-Diesel-Straße 15, 68723 Oftersheim, Germany. We transmit the company data required for the invoice. The legal basis is Art. 6 (1) (c) GDPR, we thereby fulfil our commercial and tax obligations.

We retain order and invoice data for 10 years in accordance with commercial and tax law.