Privacy statement

Privacy statement

“This data privacy statement explains the nature, scope and purpose of the processing of personal data within our online services and the associated websites, functions and content as well as external online sites such as our social media profiles. With regard to the terms employed, such as ‘processing’ or ‘controller’, we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).”


1. The name and contact details of the data processor and the data protection officer

This data protection information applies to data processing by the controller:

RIGK GmbH, Friedrichstr. 6, 65185 Wiesbaden, GermanyAssociation represented by Markus Dambeck and Jan Bauer (Managing Directors)

Telefon: +49 611 30 86 00 18 ; E-Mail: The data protection officer can be reached at the following address:

RIGK GmbH, Friedrichstr. 6, 65185 Wiesbaden, Germany


2. Explanations of the VerenA-System

VerenA (Packaging Recovery for Agriculture – Verpackungsentsorgung Agrar) is a take-back system operated by the German agricultural industry in cooperation with four industry associations and RIGK. These associations are:

  • Bundesverband Deutscher Pflanzenzüchter e.V. (German Plant Breeders´s Association – BDP)
  • Bundesverband der VO-Firmen e.V. (German Association of Seed Propagation Organisations – BVO)
  • DER ARARHANDEL (AGRICULTURAL TRADE) – Bundesverband Agrarhandel und Verein der Getridehändler der Hamburger Börse e.V. (German Agricultural Trade Associationand the Grain Traders´Association oft he Hamburg Stock Exchange)
  • Deutscher Raiffeisenverband e.V. (German Federation of Rural Cooperatives – DRV)

Together, these associations make up the “Interessengemeinschaft (IG) VerenA” (VerenA Interest Group).

The system operator is RIGK. The system serves to take-back of empty used Big Bags of non-hazardous substances as well as associated transport and secondary packaging from the agricultural sector.

3. Definitions

We use the following terms in this privacy statement:

a) Personal data

Personal data refers to any information relating to an identified or identifiable natural person (hereinafter: you, your, etc.). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

b) Data subject

The data subject is any identified or identifiable natural person whose personal data is processed by the data controller.

c) Processing

Processing means any operation or series of operations performed on personal data, with or without the aid of automated procedures, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of personal data.

d) Data controller or data processor

The data controller or data processor is a natural or legal person, an agency, a public authority, or any other body which, alone or jointly with others, determines the purposes of any personal data and the means of processing it. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

e) Processor

Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

f) Recipient

Recipient means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular enquiry in accordance with Union or Member State law shall not be regarded as recipients.

g) Third party

Third party means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.

h) Consent

Consent of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

4. Collection and storage of personal data; type and purpose of their use


a) when you visit the website

When you visit the website, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. An order processing contract according to Article 28 GDPR has been concluded with the external service provider commissioned for the hosting. The following information is collected without any action on your part and stored until automated deletion:

  • IP address of the requesting computer,
  • Date and time of access,
  • Name and URL of the retrieved file,
  • Website from which access is made (referrer URL),
  • Browser used and, if applicable, the operating system of your computer and the name of your access provider.

We process the specified data for the following purposes:

  • to ensure a problem-free connection to the website,
  • to ensure the convenient use of our website,
  • to evaluate system security and stability and
  • for other administrative purposes.

The legal basis for data processing is Article 6(1)(f) GDPR. Our legitimate interest follows from the above-listed purposes for data collection. We shall in no case use the collected data for the purpose of drawing conclusions about you personally. In addition, we use cookies and analysis services when you visit our website. You can find more information about this in sections 8 and 9 of this data privacy statement.

b) When you contact us or pre-registering for a collection

When contacting  us or pre-registering for a collection, you must provide us with the following information about yourself:

  • Contact details
    • Title
    • First name
    • Last name
    • Company name
    • Address
    • Email address
    • Telephone number

We, or a third party commissioned by us, process the above data for the following purposes:

  • to process your enquiry
  • to provide specific information
  • for communication purposes

The data processing for the above-mentioned purposes is carried out in accordance with Article 6(1)(a) GDPR on the basis of your freely given consent.

The personal data collected by us for the use of the contact form or the pre-registration for a collection will be archived and stored until the purpose has been achieved and the statutory retention periods have expired.

c) When taking back the packaging collected by the VerenA take-back system at the VerenA collection points

When taking back the packaging collected by the VerenA take-back systemat VerenA collecting points, you must provide us with the following information about yourself:

  • Contact details
    • Company name
    • First name
    • Last name
    • Address
    • Email address (optional)
  • Amount to be handed
  • Personal signature

The above mentioned data will only be used for the following purposes:

  • Fulfilment of legal, regulatory and contractual obligations
  • Ensurance of a smooth processing flow
  • Improvement of the Collecting services
  • prevention of data loss

The data processing for the above-mentioned purposes is carried out in accordance with Article 6(1) ab, b, c, f GDPR.We may give the necessary data to third parties for the processing of your request, with whom a Data processing contract based on Article 28 GDPR exists.

5. Data transfer

Your personal data will not be transmitted to third parties for purposes other than those listed below.

We shall only disclose your personal data to third parties if:

  • you have given your express consent to do so according to Article 6(1)(a) GDPR,
  • there is a legitimate interest for the transfer according to Article 6(1)(f) GDPR and there is no reason to assume that you have an overriding and legitimate interest in the non-disclosure of your data,
  • there is a legal obligation for the transfer according to Article 6(1)(c) GDPR, and
  • this is legally permissible and necessary in order to initiate and execute a contract with you according to Article 6(1)(b) GDPR.


6. Legal basis for the processing of personal data

If we obtain your consent for the processing of personal data, Article 6(1)(a) GDPR shall serve as the legal basis.

When processing personal data that are necessary for the fulfilment or execution of a contract or pre-contractual measures, Article 6(1)(b) GDPR shall serve as the legal basis.

If the processing of personal data is required in order to fulfil a legal obligation to which we are subject, Article 6(1)(c) GDPR serves as the legal basis.

If the processing is required in order to protect our legitimate interest or that of a third party and if your interests or fundamental rights and freedoms do not override the former interest, Article 6(1)(f) GDPR shall serve as the legal basis for the processing.

7. Data deletion and storage duration

Your personal data will be deleted or made unavailable as soon as the purpose of the storage is no longer valid. It may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. The data will also be made unavailable or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a requirement for further storage of the data for the conclusion of a contract or the fulfilment of a contract.

8. Cookies

We use cookies on our website. These are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your device, do not contain viruses, trojans or other malware.

The cookie stores the information that is generated in connection with the specific device used. However, this does not mean that we acquire direct knowledge of your identity.

Cookies are only used with your consent.

We use Cookiebot to manage your consent or refusal. Cookiebot is a trademark of Usercentrics A/S., a which is registered in Denmark. The following is a description of the Cookiebot privacy policy:

For more details, please see the annex Cookiebot Details. In this annex, Cookiebot describes cookies and their functions in greater detail.

9. Analysis/tracking tools

We implement the tracking measures listed below on the basis of Article 6(1)(f) GDPR. We use these tracking measures in order to ensure that the website is designed in line with requirements and that it is continuously optimised. Furthermore, we use the tracking measures in order to record the use of the website statistically and for the purpose of evaluating and optimising our services for you. These interests shall be considered as justified within the meaning of the aforementioned provision.

The respective data processing purposes and data categories can be found in the corresponding tracking tools.

a) Google Analytics

We use Google Analytics, a web analytics service provided by Google Inc. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; in the following ‘Google’) for the purpose of designing and continuously optimising the website. Pseudonymised user profiles are created and cookies are used (see section 7) in this context. The information generated by the cookie about your use of this website, such as:

  • browser type/version,
  • operating system used,
  • referrer URL (the page previously visited),
  • host name of the accessing computer (IP address),
  • time of the server request,

are usually transferred to a Google server within the EU or the European Economic Area and stored there. The information is used to evaluate the use of the website, to compile reports on website activities and to provide additional services related to the use of the website and the Internet for market research purposes and the design of these Internet pages according to requirements. This information may also be transferred to third parties if required by law or if third parties have been commissioned to process this data. Under no circumstances will your IP address be merged with other data from Google. The IP addresses are anonymised so that they cannot be assigned (IP masking).

You can prevent the installation of cookies by configuring the settings of your browser software accordingly; however, please note that if you do so, you may not be able to use all the functions of this website to their full extent.

10. Social media links and plugins

We use externe links on its website based on Article 6 (1)(f) GDPR to offer you more background information. You can find further information about the data processings on the third parties’ websites.


Our website uses Plugins of the Website YouTube. The operator of these websites is the Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in extended data protection mode. According to YouTube, this mode causes that YouTube doesn’t save any information about visitors of our website, before they watch the video. The transfer of data to partners of YouTube is not necessarily excluded by the extended data protection mode. So YouTube establishes a connection to the Google DoubleClick network even if you don’t watch the video.

When you start a YouTube video on our website a connection to YouTube will be established. Then the YouTube-Server will be informed, which of our websites you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can avoid this by logging out of your Youtube-Account before you watch the video.

Moreover, after starting the video YouTube can install various cookies on your end device. With these cookies YouTube can get more information about the visitors to our website. This information is used, among other things, to collect video statistics, improve the user experience and prevent fraud attempts.These cookies will remain on your device until you delete them.

If necessary, further data processing operations may be triggered after the start of a YouTube video, over which we have no control. The use of YouTube takes place in the interest of an attractive presentation of our online offers. This is a legitimate interest in terms of Article 6 (1)(f) GDPR.

You can find more information about data protection at YouTube in their privacy policy under: . .

11. Rights of data subjects

You have the right:

  • to access information about your personal data processed by us, in accordance with Article 15 GDPR. In particular, you have the right to access information about the processing purposes, the category of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned duration of storage, information about the existence of a right to rectification, erasure, restriction of processing, the right to object, the right to lodge a complaint, the origin of the data, as long as these were not collected by us, and any existence of an automated decision-taking process, including profiling and, if applicable, meaningful information about any details;
  • to obtain without delay the rectification of inaccurate or incomplete personal data concerning you and stored by us, in accordance with Article 16 GDPR;
  • to the erasure of your personal data stored with us, unless the processing is necessary for exercising the right of freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims, in accordance with Article 17 GDPR;
  • to obtain the restriction of processing of your personal data in accordance with Article 18 GDPR if you contest the accuracy of the personal data, the processing is unlawful and you oppose its erasure and we no longer need the data, but you need it for the establishment, exercise or defence of legal claims, or you have objected to processing in accordance with Article 21 GDPR;
  • to receive your personal data, which you have provided us, in a structured, commonly used and machine-readable format or to transmit those data to another controller, in accordance with Article 20 GDPR;
  • to withdraw the consent you have given us at any time, in accordance with Article 7(3) GDPR. As a result, we may no longer continue to process data based on this consent for the future and
  • to complain to a regulatory authority in accordance with Article 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.


12. Right to object

If your personal data are processed on the basis of legitimate interests according to Article 6(1)(f) GDPR, you have the right, in accordance with Article 21 GDPR, to object to the processing of your personal data on grounds relating to your particular situation or you object to processing for direct marketing purposes. In the latter case, you have a general right to object, which is implemented by us without any indication of a specific situation.

If you wish to exercise your right to withdraw consent or right to object, please send an email to

13. Data security

We use the common Secure Socket Layer (SSL) method during your visit to our website together with the highest level of encryption supported by your browser. This is typically 256-bit encryption. If your browser does not support 256-bit encryption, we will use 128-bit v3 technology instead. You can tell whether we are transmitting an individual page of the website in encrypted form by the closed version of the key or lock symbol in the upper status bar of your browser.

We also implement suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

14. Updates and changes to this data privacy statement

This data privacy statement is currently valid as of the latest version dated August 2021. As a result of the ongoing development of the website and services above or due to changes in legal or regulatory requirements, it may become necessary to change this data privacy statement. The current data privacy statement can be retrieved and printed at any time on the website at