Privacy policy

1. Controller

Kappler Packaging Solutions GmbH
Im Stöckmädle 7, 76307 Karlsbad, Germany
Phone: +49 7248 933050
Email: office@kappler-packaging.de

We have not appointed a data protection officer, as we are not legally required to do so. If you have any questions about data protection, please contact us at the address above.

2. General information on data processing

We process personal data in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG). Personal data is any information that can be used to identify you personally, for example your name, email address or IP address.

3. Hosting and server log files

This website and our customer management system (CRM) are operated on a dedicated server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, in a data centre in Germany.

The database of our CRM is hosted by Supabase Inc. in a data centre in Ireland (region eu-west-1, EU). Supabase is a provider based outside the EU; access from third countries can therefore not be completely ruled out. This is based on the EU Standard Contractual Clauses [please check in the Supabase data processing agreement].

Data processing agreements pursuant to Art. 28 GDPR are in place with both providers.

When you visit the website, access data is stored automatically: IP address, date and time of the request, page accessed, browser type and version, operating system and referrer URL. This serves the technical provision, stability and security of the website. The legal basis is Art. 6(1)(f) GDPR. Log files are usually deleted after [7–14] days.

4. Cookies and consent

We distinguish between two categories:

• Necessary: Required to operate the website, for example to save your cookie choice. Legal basis: Section 25(2) no. 2 TDDDG, Art. 6(1)(f) GDPR.
• Statistics: Helps us understand how the website is used. These cookies are only set with your consent. Legal basis: Section 25(1) TDDDG, Art. 6(1)(a) GDPR.

We store your choice for 12 months in your browser's storage. You can withdraw or change your consent at any time with effect for the future: Open cookie settings

5. Statistics (Google Analytics)

With your consent we use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics sets cookies (e.g. “_ga”, stored for up to 2 years) and processes the pages you visit, time on site, where your visit came from, device and browser information and your click behaviour. Your IP address is only used to determine your approximate location and is not stored. Data may be transferred to servers of Google LLC in the USA; Google LLC is certified under the EU-US Data Privacy Framework, and the EU standard contractual clauses apply in addition. The data is deleted after 14 months at the latest. The legal basis is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. You can withdraw your consent at any time via “Cookie settings” in the footer.

6. Fonts

The fonts used on this website are loaded from our own server. No data is transferred to third parties.

7. Contact and inquiry form

If you contact us by email or via a form on this website, we process your details (e.g. company, name, email address, phone number, details of product and folding carton, message and uploaded files) to handle your inquiry. Inquiries are stored in our own customer management system (CRM) (server at Hetzner in Germany, database at Supabase in Ireland, see section 3). Beyond this, data is not passed on to third parties. The legal basis is Art. 6(1)(b) GDPR if your inquiry is aimed at a contract, otherwise Art. 6(1)(f) GDPR. We delete the data as soon as it is no longer required and no statutory retention obligations apply.

8. Customer portal

Separate privacy information applies to the customer portal, which you will find in the portal.

9. External links

Our website links to our LinkedIn profile and – for route planning – to Google Maps. You are only redirected to the respective provider when you click a link. Their privacy policy then applies.

10. Storage period

We only store personal data for as long as is necessary for the respective purpose or as required by statutory retention periods.

11. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3) GDPR). To do so, please contact us at the address above.

You also have the right to lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.

12. Data security

The connection to this website is encrypted via SSL/TLS. We use technical and organisational measures to protect your data against loss and unauthorised access.

13. Version and changes

Version: [Month Year]. We update this privacy policy when the website or the legal situation changes.