Pregis Europe Website Privacy Policy

Last Modified: 7.10.26

 

This Privacy Policy explains how Pregis Holding Company B.V. and its European affiliates ("we", "us", "our") collects and uses personal information when you visit or interact with our European websites and other digital properties that link to this Privacy Policy (collectively, the "Website"), and when you otherwise interact with us in connection with the Website (collectively, the "Services").
 

Who Is Responsible for Your Personal Information (Data Controller)
For the European domains covered by this Privacy Policy, the data controller is:

Pregis Holding Company B.V.
Registered address: Nijverheidsweg 4, 6422 PD, Heerlen, The Netherlands
Email: dataprivacy@pregis.com
Phone: 00800 888 888 40

If Pregis Holding Company B.V.  does not have an establishment in the European Economic Area for these processing activities, Pregis Holding Company B.V. will appoint an EU representative in accordance with Article 27 GDPR and will update this Privacy Policy with the representative's contact details.

Data Protection Officer (DPO)
Pregis LLC has appointed Data Protection Officer, Marvin Franssen, who can be contacted at dataprivacy@pregis.com for any questions regarding the processing of your personal information or the exercise of your rights under the GDPR.
 

2. Applicability
This Privacy Policy applies to personal information processed in connection with the Services. If you follow a link from an EU Website to a website that is operated by a different U.S. Pregis LLC entity or another company, that website will have its own privacy policy and terms.
 

3. Personal Information We Collect

A. Information You Provide to Us
We may collect personal information when you:

Contact us or submit an inquiry. If you contact us or submit an inquiry, we may collect identifiers and contact details (for example, name, email address, telephone number, company name and postal code) and any information you include in your message. We use this information to respond to your request, provide customer support and maintain our business records.

Legal basis: Taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR), or our legitimate interests in responding to inquiries and managing customer relationships (Article 6(1)(f) GDPR), depending on the nature of your request. Our legitimate interest is to operate, support and grow our B2B business. We have determined this interest is not overridden by your rights and freedoms because we process only the minimum information needed and apply appropriate safeguards.

Download content (for example, a case study, brochure or eBook). If you request downloadable content, we may collect identifiers and contact details (for example, name, email address and company name) to deliver the content and to maintain a record of your request.

Legal basis: Delivery of the requested content is based on taking steps at your request (Article 6(1)(b) GDPR). Any subsequent marketing communications are based solely on your separate, freely given consent (Article 6(1)(a) GDPR), which you may withdraw at any time.

Request a service call. If you request a service call, we may collect identifiers and contact details (for example, name, email address, telephone number, company name and postal code) and commercial information (for example, equipment purchased and serial number) to schedule and deliver the service.

Legal basis: Performance of a contract or taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR).

Subscribe to updates or newsletters. If you subscribe to receive updates, we may collect identifiers and contact details (for example, name, company name, postal code, country, state or region, phone number and email address) to send you the communications you requested.

Legal basis: Your consent (Article 6(1)(a) GDPR). You can withdraw consent at any time (see Section 7).

 

B. Information We Receive from Third Parties
From time to time, we may receive personal information from third parties, including:

• Authorized channel partners, such as distributors and converters
• Joint marketing partners (where applicable)
• Trade associations and industry events you have attended or registered for
• Publicly available business sources (for example, professional networking sites and company websites)
• Social media platforms, where you have chosen to share information with them and they are permitted to share it with us

Legal basis: Our legitimate interests in maintaining business relationships and marketing our B2B products and services (Article 6(1)(f) GDPR), or your consent where required (Article 6(1)(a) GDPR).

 

C. Information Collected Automatically (Cookies and Similar Technologies)
When you use our Website, we may collect certain information automatically, such as:

• Usage information (for example, pages visited, interactions and referring URLs)
• Device information (for example, browser type or language, operating system and settings)
• IP address and approximate location information derived from your IP address

Legal basis for IP and device data: Our legitimate interests in ensuring Website security, preventing fraud and abuse and maintaining the technical functioning of the Website (Article 6(1)(f) GDPR). For analytics and marketing-related automatic collection, we rely on your consent (Article 6(1)(a) GDPR) given via our cookie management platform.

 

Cookies and Similar Technologies

We use cookies and similar technologies. For EU and EEA visitors, non-essential cookies (including analytics, advertising and social media cookies) are placed only after you provide your consent via our cookie banner or cookie management platform. Essential cookies are always enabled because they are necessary for the Website to function.

Cookie Categories

• Essential cookies: required for core site functionality, security and fraud prevention.
• Functional cookies (optional): enhance functionality and remember preferences.
• Analytics cookies (optional): help us understand how the Website is used and improve it.
• Advertising cookies (optional): help deliver and measure relevant advertising.
• Social media cookies (optional): enable social media features and may allow third parties to track your activity.

You can manage your cookie preferences at any time using our cookie management platform ("Cookie Settings") and you can also control cookies through your browser settings. If you refuse or withdraw consent for non-essential cookies, we will not place those cookies and related tags will not fire. We honour recognized browser-based privacy signals where legally required.

4. How We Use Your Personal Information
We use personal information for the following purposes:

• To provide the Services and respond to inquiries
• To deliver requested marketing content or services
• To operate, secure and improve the Website
• To measure and improve marketing effectiveness (only with consent where required)
• To comply with legal obligations and protect our rights
  
  

Automated Decision-Making and Profiling

We do not use your personal information to make decisions that produce legal effects concerning you or similarly significantly affect you on the basis of automated processing alone, as defined under Article 22 GDPR. We may use limited segmentation for marketing purposes (for example, grouping subscribers by industry or region), but such segmentation does not produce legal or similarly significant effects.

 

5. How We Share Your Personal Information
We may share personal information with:

• Within the Pregis LLC group. We may share information within the Pregis LLC corporate group (subsidiaries and affiliates) for internal administrative purposes and to provide the Services. Intra-group transfers are governed by internal data transfer agreements that include appropriate safeguards consistent with GDPR requirements. Where we transfer personal data outside the EEA within our group, we rely on the European Commission's Standard Contractual Clauses.

Legal basis: Our legitimate interests in efficient business operations (Article 6(1)(f) GDPR).

 

• Service providers and processors. We use trusted service providers who process personal information on our behalf, such as providers of website hosting, analytics, cookie consent management, Customer Relationship Management CRM and marketing automation, customer support and IT or security services. Examples include LinkedIn or Google advertising tools, ZoomInfo, HubSpot and cookie consent tooling, as applicable to the Website configuration. These providers act as processors under written data processing agreements that require them to protect personal information.
  
  Note on joint controllership: For certain advertising and analytics tools, Pregis LLC and the provider may act as joint controllers for specific processing activities, as described in the relevant provider's joint controller arrangements. An up-to-date list of key sub-processors is available on request.

Legal basis: Our legitimate interests in operating and improving the Services (Article 6(1)(f) GDPR), and consent where required for optional cookies or marketing (Article 6(1)(a) GDPR).

• Distributors and sales partners. Where you request information or where it is appropriate to follow up on your request, we may share your contact details with authorized distributors or partners to respond to you.

Legal basis: Our legitimate interests and/or taking steps at your request (Article 6(1)(b) or 6(1)(f) GDPR).

• Corporate transactions. In the event of a merger, acquisition, reorganization or sale of assets, personal information may be disclosed to relevant third parties (and their advisors) as part of the transaction.

Legal basis: Our legitimate interests (Article 6(1)(f) GDPR).

• Legal and safety reasons. We may disclose personal information where required by law, to protect rights and safety or to prevent fraud and misuse.

Legal basis: Compliance with a legal obligation (Article 6(1)(c) GDPR) and/or legitimate interests (Article 6(1)(f) GDPR).

6. International Transfers
Some of our service providers and group companies are located outside the European Economic Area (EEA), including in the United States. Where we transfer personal information outside the EEA, we use appropriate safeguards, including:

• The European Commission's Standard Contractual Clauses (SCCs)
• The EU and U.S. Data Privacy Framework (DPF), where the recipient is certified
• Adequacy decisions issued by the European Commission, where applicable
• Additional technical and organizational measures (for example, encryption, access controls and data minimization) where required by transfer impact assessments

You may request a copy of the safeguards that apply to transfers of your personal information by contacting us at dataprivacy@Pregis.com (see Section 12).

 

7. Your Rights and Choices (EU and EEA)
If the GDPR applies to our processing of your personal information, you may have the right to:

• Access your personal information
• Correct inaccurate or incomplete information
• Request deletion (erasure) in certain circumstances
• Restrict processing in certain circumstances
• Object to processing based on legitimate interests
• Receive a copy of certain information and request portability
• Withdraw consent at any time (this does not affect processing before withdrawal)
• Lodge a complaint with your local supervisory authority

To exercise your rights, or to withdraw consent, contact us at dataprivacy@Pregis.com. You can withdraw cookie consent at any time via our cookie management platform (Cookie Settings) and unsubscribe from marketing emails using the unsubscribe link in each email.

Providing your personal information is generally voluntary. However, if you do not provide information we request in connection with a contract, inquiry or service request, we may not be able to respond to you or provide the requested Service.

 

8. Retention
We keep personal information only as long as necessary for the purposes described above, unless a longer retention period is required by law.

• Cookie lifetime (non-essential cookies): up to 13 months, subject to your consent
• Analytics data derived from cookies: retained for up to 25 months, after which it is deleted or anonymized
• Marketing preferences and subscription data: up to 3 years from your last interaction
• Customer service inquiries: up to 10 years after closure
• Business transactions and contractual records: up to 10 years after the business relationship ends (where required for legal or accounting purposes)
• Backups: Deletions may take a reasonable period to propagate to backup systems.
  
  

9. Security
We implement reasonable technical and organizational security measures (for example, access controls, encryption where appropriate, network monitoring and personnel training). No system is completely secure and we cannot guarantee absolute security.

 

10. Children
The Services are directed at business users and are not intended for children under 16 (or the applicable age of digital consent in local legislation, which may be as low as 13). We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us at dataprivacy@Pregis.com and we will take appropriate steps to delete it.

 

11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or other factors. Material changes will be communicated via prominent notice on the Website and, where appropriate, by email to subscribers. The "Last modified" date below will always reflect the most recent update. We encourage you to review this Privacy Policy periodically.

 

12. Contact Us
If you have any questions about this Privacy Policy or our privacy practices, contact:

Pregis Holding Company B.V.
À l'attention de : Data Privacy
Nijverheidsweg 4, 6422 PD, Heerlen, The Netherlands
dataprivacy@Pregis.com
Phone: 00800 888 888 40

You also have the right to lodge a complaint with your local data protection supervisory authority. A list of EU and EEA supervisory authorities is available on the European Data Protection Board website (edpb.europa.eu).