Privacy Policy

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data means all data that can be used to personally identify you.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Packlando GmbH, Klosterstr. 58, 48143 Münster, Germany, represented by the Managing Director Mürsel Topal, Tel.: +49 (0) 251 49 09 444 11, E-Mail: info@packlando.com. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website

2.1 When you use our website purely for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to the server (so-called “server log files”). When you access our website, we collect the following data, which are technically necessary for us to display the website to you:

  • Website visited
  • Date and time of access
  • Amount of data sent in bytes
  • Referring source/website
  • Browser used
  • Operating system used
  • IP address used (possibly in anonymized form)

Processing is carried out pursuant to Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or otherwise used. However, we reserve the right to retrospectively check the server log files if there are specific indications of unlawful use.

2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries). You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser’s address bar.

3) Hosting & Content Delivery Network

We use a provider for hosting our website and displaying the content. The provider performs its services either directly or through selected subcontractors exclusively on servers within the European Union.

All data collected on our website are processed on these servers.

We have concluded a data processing agreement with the provider, which ensures the protection of our visitors’ data and prohibits unauthorized disclosure to third parties.

4) Cookies

To make your visit to our website attractive and to enable the use of certain functions, we use cookies – small text files stored on your device. Some cookies are deleted automatically after closing the browser (“session cookies”), while others remain on your device for longer and enable us to save your settings (“persistent cookies”). The duration of storage can be found in your browser’s cookie settings.

Where cookies are used to process personal data, the processing is carried out either in accordance with Art. 6 (1) lit. b GDPR (contract performance), Art. 6 (1) lit. a GDPR (consent) or Art. 6 (1) lit. f GDPR (legitimate interest in functionality and a user-friendly website).

You can configure your browser to notify you about the placement of cookies and decide individually about their acceptance, or exclude the acceptance of cookies for certain cases or in general. Please note that if cookies are not accepted, the functionality of our website may be restricted.

5) Contact

5.1 Own review reminders

With your express consent pursuant to Art. 6 (1) lit. a GDPR, we use your e-mail address once to remind you to submit a review of your order. You can withdraw your consent at any time by sending a message to the controller.

5.2 WhatsApp Business

You may contact us via WhatsApp Business, a service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

If you contact us regarding a specific order, we store and use your mobile number and – if provided – your first and last name pursuant to Art. 6 (1) lit. b GDPR to process your request. For general inquiries, we process your number and name based on Art. 6 (1) lit. f GDPR in our legitimate interest to respond quickly and efficiently.

We only use your data to respond via WhatsApp. No data is passed to third parties. Please note that WhatsApp Business has access to the address book of the mobile device we use for this service and automatically transfers stored phone numbers to Meta Platforms Inc. in the USA. We ensure that only contacts who have contacted us via WhatsApp are stored in this device’s address book.

By using WhatsApp, each user has already consented to this transfer in accordance with Art. 6 (1) lit. a GDPR by accepting WhatsApp’s terms. Data of individuals not using WhatsApp are not transferred.

For further details, please see WhatsApp’s privacy policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy

We have concluded a data processing agreement with WhatsApp ensuring protection of your data and prohibiting unauthorized sharing with third parties. Transfers to Meta servers in the USA are covered by the EU-US Data Privacy Framework.

5.3 Price proposal function

On our website you can submit a price proposal for selected products via an electronic form. Pursuant to Art. 6 (1) lit. b GDPR, we collect and store the personal data provided (e.g. name, e-mail) to process the proposal and respond with acceptance, rejection, or a counter-offer. Data are used strictly for this purpose and deleted once the process is completed unless retention is legally required.

5.4 When contacting us (e.g. via form or e-mail), we process your personal data only as necessary to respond to your inquiry. Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest) or Art. 6 (1) lit. b GDPR (contract-related inquiries). Data are deleted once the matter is resolved, unless retention obligations apply.

6) Comment Function

When using the comment function on this website, your comment, the time it was created, and your chosen username will be stored and displayed. In addition, your IP address will be logged and stored for security reasons, e.g. if a comment violates third-party rights or posts unlawful content. Your e-mail address is required in case we need to contact you if a third party objects to your comment.

Legal basis: Art. 6 (1) lit. b and f GDPR. We reserve the right to delete comments if they are reported as unlawful by third parties.

7) Data Processing When Opening a Customer Account

Pursuant to Art. 6 (1) lit. b GDPR, we collect and process personal data as required when you open a customer account. Mandatory information is indicated on the input form. Deletion of your account is possible at any time by contacting the controller. Data will then be deleted, provided no statutory retention periods apply.

8) Use of Customer Data for Direct Advertising

Newsletter Subscription

When you subscribe to our newsletter, we send you regular information about our offers. Required data: your e-mail address. Other details are voluntary. We use the double opt-in process to ensure you only receive newsletters if you have expressly confirmed your consent via a link.

Legal basis: Art. 6 (1) lit. a GDPR. You may unsubscribe at any time via the link in the newsletter or by contacting us. Upon unsubscribing, your e-mail will be deleted unless further use is legally permitted.

9) Data Processing for Order Handling

9.1 – 9.3 If you submit image files (via e-mail, messaging, or upload) for product personalization, we collect and use them solely for this purpose in accordance with Art. 6 (1) lit. b GDPR. Data are deleted after completion unless retention obligations apply.

9.4 Where necessary for delivery and payment, personal data are shared with the transport company and payment institution pursuant to Art. 6 (1) lit. b GDPR. Data are processed strictly for this purpose.

10) Web Analytics Services

10.1 Google Analytics 4
This website uses Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Standard cookies collect information including IP addresses (shortened), usage behavior, etc. Data may be transferred to Google LLC in the USA. Use occurs only with your express consent (Art. 6 (1) lit. a GDPR). Retention: 2 months.

10.2 Google Tag Manager
This website uses Google Tag Manager to manage tracking and analytics. The service itself does not analyze or store data, but transmits your IP to Google. Use occurs only with consent (Art. 6 (1) lit. a GDPR). Data transfers to the USA are covered by the EU-US Data Privacy Framework.

11) Retargeting / Remarketing and Conversion Tracking

This website uses Google Ads Remarketing (Google Ireland Ltd.). Cookies enable interest-based ads. Data may be transferred to Google LLC in the USA. Use only with consent (Art. 6 (1) lit. a GDPR).

12) Site Functionalities

Google reCAPTCHA
We use Google reCAPTCHA (Google Ireland Ltd.) to distinguish humans from bots. Data (IP, browser details, duration of visit) are transmitted. Legal basis: Art. 6 (1) lit. f GDPR (security) or Art. 6 (1) lit. a GDPR (consent where cookies are used).

13) Rights of the Data Subject

You have the following rights under the GDPR:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to notification (Art. 19 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to withdraw consent (Art. 7 (3) GDPR)
  • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

Right to Object:
If we process your personal data on the basis of legitimate interests (Art. 6 (1) lit. f GDPR), you have the right to object at any time for reasons arising from your particular situation. If processed for direct marketing, you may object at any time without giving reasons. In such cases, your data will no longer be used for direct marketing.

14) Duration of Storage of Personal Data

The duration of storage depends on the legal basis, processing purpose, and statutory retention obligations. Data collected based on consent (Art. 6 (1) lit. a GDPR) will be stored until consent is withdrawn. Data required for contracts (Art. 6 (1) lit. b GDPR) will be retained until the contract is completed and statutory obligations end. Data processed for legitimate interests (Art. 6 (1) lit. f GDPR) will be stored until you object, unless overriding reasons apply. In all cases, data will be deleted when no longer necessary for the purposes collected.

© IT-Recht Kanzlei

Last updated: 22.08.2025, 10:22:31