Unless otherwise stated below, the provision of your personal data is neither legally nor contractually obligatory, nor required for the conclusion of a contract. You are not obliged to provide your personal data. Failure to provide it will not have any consequences. This only applies to the extent that no other indication is made in the processing operations that follow. “Personal data” refers to all information related to an identified or identifiable natural person.

Server Log Files You can visit our websites without providing any personal information. Each time you access our website, usage data is transmitted to us or our web host/IT service provider by your internet browser and stored in log data (server log files). This stored data includes, for example, the name of the page accessed, date and time of access, the IP address, the amount of data transferred, and the requesting provider. The processing is based on Article 6(1)(f) GDPR out of our predominant legitimate interest in ensuring the uninterrupted operation of our website and to improve our offering.

Your data may be transferred to third countries outside the European Union for which the EU Commission has made an adequacy decision.

Contact Responsible Party

Please contact us if you wish. The responsible party for data processing is: Lagerkarton Systembox GmbH, Dieselstraße 12, 48683 Ahaus, Germany, +49 2561 4448622, info@lagerkarton.de Customer’s Initiative Contact via Email

If you initiate contact with us via email, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing is for the purpose of handling and responding to your contact request. If the contact is for the purpose of pre-contractual measures (e.g., consultation in case of interest in purchase, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is based on Article 6(1)(b) GDPR. If the contact is made for other reasons, this data processing is based on Article 6(1)(f) GDPR out of our predominant legitimate interest in handling and responding to your request. In this case, you have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you based on Article 6(1)(f) GDPR. We use your email address only to process your request. Your data will then be deleted in compliance with legal retention periods, provided you have not agreed to further processing and use.

Collection and Processing when Using the Contact Form

When using the contact form, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing is for the purpose of contact. If the contact serves the purpose of pre-contractual measures (e.g., consultation in case of interest in purchase, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is based on Article 6(1)(b) GDPR. If the contact is made for other reasons, this data processing is based on Article 6(1)(f) GDPR out of our predominant legitimate interest in handling and responding to your request. In this case, you have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you based on Article 6(1)(f) GDPR. We use your email address only to process your request. Your data will then be deleted in compliance with legal retention periods, provided you have not agreed to further processing and use.

Use of Google Maps API Address Validation We use the address validation provided by Google (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland “Google”) on our website. The data processing is for the purpose of checking your inputs in our address forms in real-time for input and typing errors and, if necessary, to complete missing data. If incorrect data is entered, alternative suggestions for correcting the data will be displayed. For this purpose, the address data you entered is transmitted to the provider, where it is stored and evaluated. Among other things, the following information may be transmitted to and processed by Google: postal addresses (country, city, postal code, street, house number), email address, telephone number. Your data may also be transferred to the USA. An adequacy decision by the EU Commission is in place for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and thus committed to comply with European data protection principles. The processing of your personal data is based on Article 6(1)(f) GDPR out of our predominant legitimate interest in a correct data basis for fulfilling our contractual obligations. You have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you. The data is processed separately by the provider and not merged with other data. It is deleted by the provider once the status of the entered data has been determined, but no later than after 30 days. For more information on terms of use and privacy at Google, please visit: https://cloud.google.com/maps-platform/terms or https://www.google.de/policies/privacy/.

Collection and Processing When Submitting Images via Upload

We offer an upload function for image files on our website. This allows the possibility to send images to us via encrypted data transmission. Upon submission of your images, we may collect your personal data (image of an identifiable person) only to the extent provided by you. The data processing serves the purpose of creating personalized products. The submitted image serves as a template for the product and is used for this purpose (e.g., T-shirt printing). The processing is based on Article 6(1)(b) of the GDPR and is necessary for the fulfillment of a contract with you. Your data may be transferred to service providers whom we use for order processing. There is no transfer to other third parties. The image you submitted is used only within the scope of service provision. Your data will then be deleted in compliance with legal retention periods, unless you have consented to further processing and use. Collection and Processing When Submitting Images via Email

You have the option to send us images via email in connection with ordering a personalized product. Upon submission of your images, we may collect your personal data (image of an identifiable person) only to the extent provided by you. The data processing serves the purpose of creating personalized products. The submitted image serves as a template for the product and is used for this purpose (e.g., T-shirt printing). The processing is based on Article 6(1)(b) of the GDPR and is necessary for the fulfillment of a contract with you. Your data will not be transferred. The image you submitted is used only within the scope of service provision. Your data will then be deleted in compliance with legal retention periods, unless you have consented to further processing and use. WhatsApp Business

If you contact us via WhatsApp, we use the WhatsApp Business version by WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; “WhatsApp”). If you reside outside the European Economic Area, this service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA). The data processing serves the purpose of processing and answering your contact request. For this purpose, we collect and process your mobile phone number stored in WhatsApp, and, if provided, your name and other data to the extent provided by you. We use a mobile device for the service, in whose address book only data from users who have contacted us via WhatsApp are stored. Thus, no personal data is transferred to WhatsApp without your consent already given to WhatsApp. Your data is transmitted by WhatsApp to servers of Meta Platforms Inc. in the USA. An adequacy decision by the EU Commission is in place for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Meta Platforms Inc. has certified itself under the TADPF, committing to comply with European data protection principles. If the contact serves the purpose of performing pre-contractual measures (e.g., consultation for purchase interest, quotation) or concerns a contract already concluded between you and us, this data processing is based on Article 6(1)(b) of the GDPR. If the contact is made for other reasons, this data processing is based on Article 6(1)(f) of the GDPR due to our legitimate interest in providing a quick and easy contact option and answering your inquiry. In this case, you have the right to object at any time to this processing of personal data concerning you based on Article 6(1)(f) GDPR for reasons arising from your particular situation. Your personal data is used only for processing your inquiry. Your data will then be deleted in compliance with legal retention periods, unless you have consented to further processing and use. More information on terms of use and privacy when using WhatsApp can be found at https://www.whatsapp.com/legal/#terms-of-service and https://www.whatsapp.com/legal/#privacy-policy. Use of WeTransfer

We use the WeTransfer service by WeTransfer B.V. (Willem Fenengastraat 19, 1096 BL Amsterdam, Netherlands; “WeTransfer”) to send files up to 2 GB in size upon your request. The use serves the purpose of transmitting large files in high quality. For this, we forward your email address and the file to be transmitted to WeTransfer. WeTransfer generates a download link that is sent to you and us via email. The data is encrypted during transmission and storage by WeTransfer and can only be accessed via the download link. Your personal data may be transferred to WeTransfer servers in the USA and stored there (partly unencrypted). An adequacy decision by the EU Commission is in place for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). WeTransfer is not certified under the TADPF. The data transfer is based, among other things, on standard contractual clauses as suitable guarantees for the protection of personal data, viewable at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en. The data processing is based on Article 6(1)(f) of the GDPR from the legitimate interest in providing a simple option for transmitting large files. In this case, you have the right to object at any time to this processing of personal data concerning you based on Article 6(1)(f) GDPR for reasons arising from your particular situation. Your data will be deleted by WeTransfer after 7 days. Further information on data processing when using WeTransfer can be found in WeTransfer’s privacy policy at https://wetransfer.com/legal/privacy. Social Plugins

Use of Social Plugins by Facebook, Twitter, Instagram, Pinterest

Our website uses social plugins (“plugins”) from social networks. When you visit a page that contains such a plugin, your browser establishes a direct connection to the servers of Facebook, Twitter, Instagram, and Pinterest. The content of the plugin is transmitted by the respective provider directly to your browser and integrated into the page. Through this integration, the providers receive the information that your browser has accessed the corresponding page of our website, even if you do not have a profile or are not currently logged in. This information (including your IP address) is transmitted by your browser directly to a server of the respective provider (possibly in the USA) and stored there. If you are logged into one of the services, the providers can directly assign the visit to our website to your profile on Facebook, Twitter, Instagram, or Pinterest. If you interact with the plugins, for example by clicking the “Like” or “Share” button, the corresponding information is also transmitted directly to a server of the provider and stored there. The information is also published on the social network and shown to your contacts. This serves the protection of our legitimate interests in optimal marketing of our offer according to Article 6(1)(f) GDPR that are overriding in the process of balancing of interests. For the purpose and scope of data collection and the further processing and use of data by the providers, as well as your rights in this regard and setting options for protecting your privacy, please refer to the privacy policies of the providers. http://www.facebook.com/policy.php https://twitter.com/privacy http://instagram.com/about/legal/privacy/ https://about.pinterest.com/en/privacy-policy If you do not want the social networks to assign the data collected via our website directly to your profile in the respective service, you must log out of the respective service before visiting our website. You can also completely prevent the loading of plugins with add-ons for your browser, e.g., with the script blocker “NoScript” (http://noscript.net/). YouTube Video Plugins

On our website, content from third parties is integrated via plugins. If you visit a page of our website that contains such a plugin, your browser establishes a direct connection to the YouTube servers. The content of the plugin is transmitted by YouTube directly to your browser and integrated into the page. Through this integration, YouTube receives the information that your browser has accessed the corresponding page of our website, even if you do not have a YouTube profile or are currently not logged in to YouTube. This information (including your IP address) is transmitted by your browser directly to a server of YouTube in the USA and stored there. If you are logged into YouTube, YouTube can directly assign the visit to our website to your YouTube account. If you interact with the plugins, for example by clicking the “Play” button of a video, the corresponding information is also transmitted directly to a server of YouTube and stored there. The information is also published on YouTube and displayed in your YouTube account. This serves the protection of our legitimate interests in optimal marketing of our offer according to Article 6(1)(f) GDPR that are overriding in the process of balancing of interests. For the purpose and scope of data collection and the further processing and use of data by YouTube, as well as your rights in this regard and setting options for protecting your privacy, please refer to YouTube’s privacy policy. If you do not want YouTube to assign the data collected via our website directly to your YouTube account, you must log out of YouTube before visiting our website. You can also completely prevent the loading of YouTube plugins with add-ons for your browser, e.g., with the script blocker “NoScript” (http://noscript.net/). Vimeo Video Plugins

On our website, content from third-party providers is integrated via plugins. This content is provided by Vimeo LLC (“Vimeo”), 555 West 18th Street, New York, New York 10011, USA. If you visit a page of our website that contains such a plugin, your browser establishes a direct connection to the Vimeo servers. The content of the plugin is transmitted by Vimeo directly to your browser and integrated into the page. Through this integration, Vimeo receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Vimeo profile or are currently not logged in to Vimeo. This information (including your IP address) is transmitted by your browser directly to a server of Vimeo in the USA and stored there. If you are logged into Vimeo, Vimeo can directly assign the visit to our website to your Vimeo account. If you interact with the plugins, for example by clicking the “Play” button of a video, the corresponding information is also transmitted directly to a server of Vimeo and stored there. The information is also published on Vimeo and displayed in your Vimeo account. This serves the protection of our legitimate interests in optimal marketing of our offer according to Article 6(1)(f) GDPR that are overriding in the process of balancing of interests. For the purpose and scope of data collection and the further processing and use of data by Vimeo, as well as your rights in this regard and setting options for protecting your privacy, please refer to Vimeo’s privacy policy: https://vimeo.com/privacy. If you do not want Vimeo to assign the data collected via our website directly to your Vimeo account, you must log out of Vimeo before visiting our website. You can also completely prevent the loading of Vimeo plugins with add-ons for your browser, e.g., with the script blocker “NoScript” (http://noscript.net/). Google reCAPTCHA

On this website, we also use the reCAPTCHA function of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). This function is mainly used to distinguish whether an input is made by a natural person or improperly by machine and automated processing. The service includes the sending of the IP address and any other data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in determining individual willingness for actions on the Internet and avoiding abuse and spam. In the context of the use of Google reCAPTCHA, personal data may also be transferred to the servers of Google LLC. in the USA. Further information on Google reCAPTCHA as well as Google’s privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/ In the event that personal data is transferred to Google LLC. based in the USA, Google LLC. is certified for the us-European data protection agreement “Privacy Shield”, which guarantees compliance with the level of data protection applicable in the EU. You can prevent the collection and processing of your data by Google by preventing the storage of third-party cookies on your computer, using the “Do not track” function of a supporting browser, disabling the execution of script code in your browser or installing a script blocker such as NoScript (http://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser. With the setting of the opt-out cookie, however, there is the possibility that our websites can no longer be used to their full extent. Further information and the applicable data protection provisions of Google may be retrieved under https://www.google.com/intl/de/policies/privacy/ and under http://www.google.com/analytics/terms/de.html. Google Analytics is further explained under the following Link https://www.google.com/analytics/.

The text is a detailed explanation of the collection, processing, and sharing of personal data during orders, along with information on advertising practices, specifically the use of personal data for postal advertising, newsletter subscriptions, and direct advertising via email. It also outlines the legal basis for these actions under the GDPR (General Data Protection Regulation), highlighting consent and legitimate interest as key justifications. Furthermore, the text mentions the transfer of data to third countries with adequate protection decisions from the EU Commission, and details on specific email marketing services (Brevo/Sendinblue, MailPoet, HubSpot) used for newsletters, including their practices for tracking and analyzing user engagement. The document emphasizes user rights to object to certain uses of their data and the minimal extent of data sharing in compliance with legal requirements.

Now, to translate and summarize the content in English:

Collection, Processing, and Sharing of Personal Data During Orders

When placing an order, we collect and process your personal data only to the extent necessary to fulfill and process your order and to handle your inquiries. Providing this data is mandatory for the conclusion of a contract; failure to provide it means a contract cannot be concluded. Processing is based on Article 6(1)(b) of the GDPR, necessary for fulfilling a contract with you. Your data may be shared with selected shipping companies, dropshipping providers, payment service providers, order processing services, and IT service providers, strictly adhering to legal requirements with minimal data transfer.

Your data may be transferred to third countries outside the European Union, which have been deemed adequate by the EU Commission.

Advertising Using Personal Data for Postal Advertising

We use your personal data (name, address) obtained from the sale of goods or services to send you postal advertising, unless you have objected to this use. The provision of this data is mandatory for contract conclusion. Processing is based on Article 6(1)(f) of the GDPR, justified by our legitimate interest in direct marketing. You can object to this use of your address data at any time.

Use of Email Address for Sending Newsletters

We use your email address exclusively for our own advertising purposes to send newsletters, only with your explicit consent. This processing is based on Article 6(1)(a) of the GDPR. You can revoke your consent at any time, which does not affect the legality of the processing before the revocation. You can unsubscribe at any time.

Use of Email Address for Direct Advertising

We use your email address obtained from the sale of goods or services to send electronic advertising for similar goods or services, unless you have objected. The provision of the email address is mandatory for contract conclusion. Processing is based on Article 6(1)(f) of the GDPR, justified by our legitimate interest in direct marketing. You can object at any time.

Use of Email Marketing Services (Brevo, MailPoet, HubSpot)

We use services like Brevo (formerly Sendinblue), MailPoet, and HubSpot for newsletter dispatch, transferring provided information during newsletter signup to these services. These services help in sending newsletters and analyzing statistical data for campaign improvement, including tracking opens and clicks through tracking pixels or links. The processing of your personal data through these services is justified by our legitimate interest in a targeted, effective, and user-friendly newsletter system, based on Article 6(1)(f) of the GDPR. You have the right to object to this processing.

These sections aim to ensure transparency in how personal data is handled, provide legal justifications for these practices, and uphold individuals’ rights under GDPR, emphasizing minimal data sharing, the necessity of consent, and the ability to object to certain uses of personal data.

Inventory Management
Use of an External Inventory Management System

We use an inventory management system for contract processing within the scope of order processing. For this purpose, your personal data collected during the ordering process is transmitted to JTL-Software-GmbH, Rheinstr. 7, 41836 Hückelhoven.

Cookies

Our website uses cookies. Cookies are small text files that are stored in the Internet browser or by the Internet browser on a user’s computer system. When a user visits a website, a cookie can be stored on the user’s operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is revisited.

Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting appropriate technical settings in your Internet browser, you can be notified before cookies are set and decide individually about their acceptance, as well as prevent the storage of cookies and the transmission of the data contained. Already stored cookies can be deleted at any time. However, we would like to point out that you may not be able to use all the functions of this website to their full extent.

Below are links where you can find out how to manage cookies in the most important browsers (including disabling them):

Technically Necessary Cookies Unless otherwise stated in the privacy policy below, we only use these technically necessary cookies for the purpose of making our offer more user-friendly, effective, and secure. Furthermore, cookies enable our systems to recognize your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.

The use of cookies or similar technologies is based on § 25 Abs. 2 TTDSG. The processing of your personal data is based on Art. 6 Abs. 1 lit. f GDPR from our overriding legitimate interest in ensuring the optimal functionality of the website as well as a user-friendly and effective design of our offer. You have the right to object at any time to this processing of personal data concerning you for reasons arising from your particular situation.

Use of Complianz GDPR Cookie Consent

We use the Complianz GDPR Cookie Consent plugin from Complianz B.V. (Atoomweg 6B 9743 AK Groningen, Netherlands; “Complianz”) on our website. The plugin allows you to give consents to data processing via the website, especially the setting of cookies, as well as to exercise your right of withdrawal for already given consents. The data processing serves the purpose of obtaining required consents for data processing as well as documenting them and thus complying with legal obligations. Cookies can be used for this purpose. Among other things, the following information can be collected and transmitted to Complianz: uniquely assignable ID, consent status. This data is not passed on to other third parties. The data processing is carried out to fulfill a legal obligation based on Art. 6 Abs. 1 lit. c GDPR. For more information on data protection at Complianz, please visit: https://complianz.io/legal/privacy-statement/?cmplz_region_redirect=true&region=eu

Using Google Analytics 4

We utilize Google Analytics, a web analytics service provided by Google Ireland Limited, for the purpose of analyzing our website and its visitors, as well as for marketing and advertising purposes. Google will process the information obtained on behalf of the operator of this website to evaluate your use of the website, compile reports on website activity, and provide other services related to website usage and internet usage to the website operator. The information collected may include your IP address, date and time of website visits, clickstream data, information about the browser and device you use, pages visited, referrer URL, location data, and purchase activities. However, the IP address transmitted by your browser as part of Google Analytics is not associated with other data by Google. Google utilizes technologies such as cookies, browser web storage, and tracking pixels to enable analysis of website usage. The information generated by these technologies about your use of the website is usually transmitted to and stored on a Google server in the United States. Google has certified its compliance with the Trans-Atlantic Data Privacy Framework (TADPF) and commits to adhering to European data protection principles. Both Google and US government authorities have access to your data, which may be combined with other data Google has about you. When using Google Analytics 4, your website’s IP address is automatically collected and processed in anonymized form. Consent for the use of cookies or similar technologies is obtained based on legal requirements, and you can revoke consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. For more information on terms of use and privacy, visit Google’s partner site policy and privacy policy.

Use of HubSpot Live Chat System We employ the HubSpot Live Chat System for direct and efficient communication between you and us as the provider. This system uses cookies to recognize your browser and may collect and process information such as the date and time of your visit, IP address, and any other information provided by you during the chat session. HubSpot has certified its compliance with the Trans-Atlantic Data Privacy Framework (TADPF), ensuring adherence to European data protection standards. Consent for the use of cookies or similar technologies is obtained based on legal requirements, and you can revoke consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. For more information on data collection and usage by HubSpot, visit their privacy policy and security practices.

Plug-ins and Miscellaneous

Use of Google Tag Manager We utilize Google Tag Manager to manage JavaScript and HTML tags for implementing tracking and analysis tools, aiding in the tailored design and optimization of our website. While Google Tag Manager itself does not store cookies or process personal data, it enables the triggering of other tags that may collect and process personal data. For more information on terms of use and privacy, visit here.

Use of Google Maps We embed Google Maps on our website for visual representation of geographical information. When you access pages containing Google Maps, Google may collect, process, and utilize visitor data. Google has certified its compliance with the Trans-Atlantic Data Privacy Framework (TADPF), ensuring adherence to European data protection standards. Consent for the use of cookies or similar technologies is obtained based on legal requirements, and you can revoke consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. For more information on data collection and usage by Google, refer to Google’s privacy policy, where you can also manage and protect your processed data through the privacy center.

Affected Rights and Storage Duration Duration of Storage: After complete contract processing, data is initially stored for the duration of the warranty period, then saved considering legal, especially tax and commercial retention periods, and then deleted after the deadline, unless you have consented to further processing and usage. Rights of the Data Subject: Subject to legal requirements, you have rights under Articles 15 to 20 of the General Data Protection Regulation (GDPR), including the right to access, rectify, erase, restrict processing, and data portability. Additionally, under Article 21(1) of the GDPR, you have the right to object to processing based on legitimate interests, including processing for direct marketing purposes. You also have the right to lodge a complaint with the supervisory authority under Article 77 of the GDPR if you believe that the processing of your personal data is not lawful. Right to Object: If the processing of personal data listed here is based on our legitimate interests pursuant to Article 6(1)(f) GDPR, you have the right to object to such processing at any time for reasons arising from your particular situation, with effect for the future. Upon objection, the processing of the affected data will be terminated unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights, and freedoms, or if the processing serves the assertion, exercise, or defense of legal claims. If personal data processing is carried out for direct marketing purposes, you can object to this processing at any time by notifying us. Upon objection, we will cease processing the affected data for direct marketing purposes.

Last Updated: 13.07.2023