Privacy protection policy according to the GDPR
Name and address of the data controller
HANS KAPPL GmbH & Co. KG
Phone: +49 (0) 9 11 / 688 67-0
is the data controller as defined in the EU General Data Protection Regulation (GDPR) and the national data privacy laws.
Name and address of the data protection officer
The data protection officer of the data controller is:
Hanauer Landstraße 151-153
60314 Frankfurt am Main
Phone: +49 (0) 69 / 9043 79 65
General information about data processing
1. The extent to which personal data is processed
We collect and use the personal data of users of our homepage only to the extent that this is necessary for keeping our website, contents and services functioning properly.
Basically, we collect and use our users’ personal data only after they give their consent. An exception to this principle applies in cases where processing the data by statutory provisions is permitted or when obtaining prior consent for actual reasons is not possible.
2. Legal basis for processing personal data
The legal basis for processing personal data can basically be derived from the following articles:
- Art. 6 Section 1 lit. a GDPR upon obtaining the consent of the data subject.
- Art. 6 Section 1 lit. b GDPR for processing operations that serve to fulfill a contract to which the data subject is a party. Included here are processing operations that are necessary to carry out pre-contractual measures.
- Art. 6 Section 1 lit. c GDPR for processing required to fulfill a legal obligation.
- Art. 6 Section 1 lit. d GDPR, if vital interests of the data subject or another natural person require the processing of personal data.
- Art. 6 Section 1 lit. f GDPR, if the processing is necessary to safeguard the legitimate interests of our company or a third party, and the interests, fundamental rights and fundamental freedoms of the data subject do not outweigh the former interest.
3. Data erasure and storage duration
The personal data of users will be deleted or blocked as soon as the purpose of the storage is no longer applicable. Additional storage may be provided for by European or national legislators through EU regulations, laws or other regulations to which the data controller is subject. Blocking or deleting the data also takes place when a storage period prescribed by the standards mentioned expires, unless there is a need for additional storage of the data for concluding a contract or fulfilling the contract.
Use of our website, general information
1. Description and scope of data processing
Every time our website is accessed, our system automatically collects data and information from the user′s computer system. The following information is collected:
- Information about the browser type and version used
- The user′s operating system
- The user′s Internet service provider
- The user′s IP address
- Date and time of access
- Websites the user′s system accesses to get to our website
- Websites that the user′s system invokes by accessing our website
The described data are stored in the log files of our system. This data is not stored together with any other personal user data.
2. Purpose and legal basis for data processing
Our system must temporarily store user IP addresses to allow us to deliver our website to the user′s computer. To do this, the user′s IP address must be stored for the duration of the session.
Storage in log files is done to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems. This data is not evaluated for marketing purposes in this context.
The legal basis for the temporary storage of data and log files is Art. 6 Section 1 lit. f GDPR.
Collecting your personal data to ensure our web presence and storing this data in log files is essential for operating our website. A contradictory possibility of the user therefore does not exist.
3. Duration of storage
Your data will be deleted as soon as they are no longer necessary for achieving the purpose of the inquiry. Your data will be deleted when the session ends if your data has been collected to ensure the site′s availability.
If your data is stored in log files, it will be deleted after seven days at the latest. Further storage is possible, whereby in this case, the IP addresses of the users are deleted or alienated. This means that it is then no longer possible to assign the client who has accessed our website.
The legal basis for processing personal data using cookies is defined in Art. 6 Section 1 lit. f GDPR. The purpose for using technically required cookies is to simplify the use of our website.
Your rights (rights of the data subject)
According to the EU General Data Protection Regulation, as an affected party you have the following rights:
1. Right to receive information
As the data controller, you have the right to receive information from us regarding processing personal data involving you.
In addition, you may request information about the following:
- The purpose of the data processing;
- The categories of personal data that are processed;
- The recipients or categories of recipients to whom the personal data relating to you have been disclosed or are still being disclosed;
- The planned duration of the storage of your personal data or, if specific information is not available, the criteria for determining the duration of storage;
- The existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the data controller or concerned, or a right to object to such processing;
- The existence of a right of appeal to a supervisory authority;
- All available information on the source of the data if the personal data are not collected from the data subject;
- The existence of automated decision-making, including profiling according to Art. 22 Section 1 and 4 GDPR and – at least in these cases – meaningful information about the logic involved as well as the scope and the intended effects of such processing on the data subject.
Finally, you also have the right to request information about whether your personal information is being transferred to a third country or to an international organisation. In this case, you can obtain information about the appropriate guarantees in accordance with Art. 46 GDPR regarding such transfer.
You can claim your right to information under .
2. Right to rectification
If we process your personal data incorrectly or in an incomplete manner, then you have a right for it to be corrected/completed. The correction will be made immediately.
3. Right to restriction
The right to limit the processing of your personal data may be asserted in the following cases:
- The accuracy of the personal data is contested for a period of time, enabling the data controller to verify the accuracy of the personal data.
- The processing is unlawful and deleting the personal data is rejected, whereby the restriction of the use of personal data is required.
- The data controller no longer needs the personal data for purposes of processing, but the data subject needs them to assert, exercise or defend legal claims, or
- The data subject filed an objection to the processing pursuant to Art. 21 Section 1 GDPR and it is not yet clear whether the legitimate reasons of the data controller outweighed those of the data subject.
If processing personal data concerning you has been restricted, such data – viewed separately from your data storage – may be stored only with your consent or for the purposes of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or important public interest of the Union or of a Member State.
If there is a processing restriction in accordance with the principles outlined, you will be informed by us before the restriction is lifted.
4. Right to delete
You can request that your personal data be deleted immediately if you can show the following reasons: The data controller is obligated to delete this data immediately. These reasons include:
- Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
- The processing is based on a consent according to Art. 6 Section 1 lit. a or Art. 9 Section 2 lit. a GDPR protected and you revoke the consent. Another condition is that there is no other legal basis for the processing.
- You object to the processing (Art. 21 Section 1 GDPR) and there are no legitimate reasons for the processing. Another possibility is that you have a protest against the processing pursuant to Art. 21 Section 2 GDPR.
- The processing of your personal data is unlawful.
- Deleting personal data concerning you is required to fulfill a legal obligation under Union law or the law of the Member States to which the data controller is subject.
- The personal data concerning you were collected in relation to information society services offered pursuant to Art. 8 Section 1 GDPR.
If we have made personal data concerning you public and we are obligated to delete them according to Art. 17 Section 1 of the GDPR, then we shall take appropriate measures, while also taking the available technology, implementation costs and the available technology into account, to inform data controllers who process the personal data that you, as the data subject, have requested the deletion of all links to such personal data or of copies or replications of such personal data.
We would like to point out that the right to delete does not exist to the extent that processing is required:
- to exercise the right to freedom of expression and information
- to fulfill a legal obligation required by the law of the Union or of the Member States to which the controller is subject, or to carry out a task of public interest or to exercise the official authority conferred on the controller
- for reasons of public interest in the field of public health pursuant to Art. 9 Section 2 lit. h and i and Art. 9 (3) GDPR
- for archival purposes of public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 Section 1 GDPR, to the extent that the law referred to in Section (a) is likely to render impossible or seriously affect the achievement of the objectives of that processing, or
- to assert, exercise or defend legal claims.
5. Right to information
If you have asserted the right to rectify, delete or restrict the processing, we are obligated to notify all recipients to whom your personal data have been disclosed of this correction or deletion of the data or restriction of processing, unless this proves to be impossible or is associated with a disproportionate amount of effort. You also have the right to be informed about these recipients.
6. Right to data portability
According to the GDPR, you also have the right to obtain the personal data provided to us and to receive it in a structured, understandable and machine-readable format. Furthermore, you have the right to transfer this data to another data controller without hindrance by the data controller for providing the personal data, provided that
- the processing is based on consent as defined in Art. 6 Section 1 lit. a GDPR or Art. 9 Section 2 lit. a GDPR or on a contract acc. Art. 6 Section 1 lit. b GDPR
- and the processing is done using automated procedures.
Finally, where technically feasible and without harm to the freedoms and rights of others and as part of exercising the right of data transferability, you have the right to obtain that personal data related to you that has been transmitted directly from one controller to another.
The right to data portability does not apply to processing that personal data necessary for performing a task in the public interest or for exercising the official authority that has been delegated to the data controller.
7. Right to revoke the declaration of consent to data protection
You have the right to revoke your data protection declaration at any time. Please note that revoking consent does not affect the lawfulness of the processing carried out based on the consent until the revocation goes into effect.
8. Right to objection
Furthermore, for reasons based on your particular situation, you have the right at any time to file an objection to the processing of personal data relating to you, as it is defined in Art. 6 Section 1 lit. e or f GDPR. The right of objection also applies to profiling based on these provisions.
The data controller will no longer process the personal data concerning you unless he can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and liberties, or the processing is for enforcing, exercising or defending legal claims.
If the personal data related to you are processed for advertising purposes, then you have the right to object at any time to your personal data being processed for such advertising. This also applies to profiling, as far as it is associated with such direct marketing. Your personal data will no longer be processed for direct marketing purposes if you object to your data being used for such purposes.
You also have the option of discussing the use of information society services (despite Directive 2002/58/EC).
Exercise your right to object by using automated procedures that use technical specifications.
9. Automated decision on an individual basis, including profiling
Under the EU General Data Protection Regulation, you remain entitled not to be subjected to a decision based solely on automated processing – including profiling – which would have legal effect or would affect you in a similar manner. An exception to this principle, however, is when the decision
- is required for concluding or fulfilling a contract between you and the data controller,
- and is permissible based on Union or Member State legislation to which the controller is subject, and that legislation contains adequate measures to safeguard your rights and freedoms and your legitimate interests, or
- is with your express consent.
If the processing is carried out in accordance with the cases mentioned in Section 1 and 3, then the data controller shall take appropriate measures to safeguard your rights and freedoms as well as your legitimate interests. This includes at least the right to obtain the intervention of a person on the part of the data controller to state his own position and to contest the decision.
The ruling under (1) – (3) may not be based on special categories of personal data pursuant to Art. 9 Section 1 GDPR, unless Art. 9 Section 2 lit. a or g and reasonable measures have been taken to protect the rights and freedoms and your legitimate interests.
10. Right to complain to a supervisory authority
Finally, if you believe that the processing of personal data concerning you is contrary to the GDPR, you have the right to complain to a supervisory authority, in the Member State of its place of residence, employment or the location of the alleged infringement.
You will find a contact form on our homepage that you can use to contact us electronically. The data entered into the input mask are transmitted to us and stored. These data include:
- Name of the company,
- Your first and last name,
- Your e-mail-address,
- Your message to us,
- Your agreement to the privacy protection policy;
and on a voluntary base:
- Your website,
- Your address and your country
- Your phone and/or fax number
- and, in order to deliver a better reply to your request, your company type (printing house, agency, industry/trade, other).
The following data is also stored once the message has been sent:
- Date and time of registration
It is also possible to contact us via our provided email address. In this case, the user′s personal data transmitted by email will be stored.
A transfer of your data to third parties will not take place in this context; this data will be used exclusively for processing the communication record.
The legal basis for processing the data is in submitting user consent as defined in Art. 6 Section 1 lit. a GDPR. The legal basis for processing the data transmitted while sending an email is Article 6 Section 1 lit. f GDPR. If the email contact aims to conclude a contract, then additional legal basis for the processing is Art. 6 Section 1 lit. b GDPR.
Processing personal data in this context is solely for processing the contact. In the case of contact via email, this also includes the required legitimate interest in processing the data.
If further personal data are processed during the sending process, then they serve only to prevent misuse of the contact form and to ensure the security of our information technology systems.
Your data will be deleted as soon as they are no longer necessary for achieving the purpose of the inquiry. Regarding the personal data from the input form on the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the relevant facts have been finally clarified.
The additional personal data collected during the sending process will be deleted at the latest after a period of seven days.
You will have the opportunity to revoke your consent to the processing of personal data at any time. Even when contacting us by email, you can object to the storage of your personal data at any time. However, we would like to point out that in such a case, the conversation cannot continue.
The revocation of consent and objection to storage is made possible at:
All personal data stored while contacting will be deleted in this case.
Use of Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. („Google”). Google Analytics uses so-called „cookies”, text files that are stored on your computer and that allow to analyse how you use the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the US and is stored there.
However, if IP anonymization is activated on this website, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there.
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website and Internet usage to the website operator.
The IP address provided by Google Analytics within the framework of Google Analytics will not be merged with other data provided by Google. You can prevent the storage of cookies by enabling a corresponding setting in your browser software; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible. You may also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) as well as prevent Google from processing this data by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout.
his website uses Google Analytics with the extension „_anonymizeIp()”. As a result, IP addresses are processed shortened so that they cannot be related to any one particular person. Insofar as the data collected about you is assigned a personal reference, it will be immediately excluded, and the personal data will be deleted immediately.
We use Google Analytics to analyse and regularly improve the use of our website. We use the statistics to improve our offer and make it more interesting for you as a user. Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework for those exceptional cases in which personal information is transferred to the US. The legal basis for using Google Analytics is Art. 6 Section 1 p. 1 lit. f GDPR, or Art. 6 Section 1 p. 1 lit. a GDPR in the case of consent.
Third-party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User conditions: https://www.google.com/analytics/terms/gb.html, data protection policy: https://policies.google.com/privacy.
This site also uses Google Analytics for cross-device analysis of visitor traffic and is conducted through the user ID. You can deactivate your cross-device analysis of your usage under „My Data”, then „Personal Data”.
Integrating OpenStreetMap Foundation
We use OpenStreetMap Foundation offer on our website. This allows us to show you interactive maps right on the website and allow you to conveniently use the map feature.
By visiting the website, OpenStreetMap Foundation receives the information that you have accessed the corresponding subpage for our website. In addition, the information referred to in Section IV of this statement will be transmitted to OpenStreetMap Foundation. In addition, data about the country of the user will be transmitted to OpenStreetMap Foundation. This is done regardless whether OpenStreetMap Foundation provides a user account that you are logged in to, or if there is no user account. The legal basis for processing the data is the legitimate interest as defined in Art. 6 Section 1 lit. f GDPR.
Your records are used or can be used in the following ways:
- in support of the operation of the services from a technical, security and planning point of view:
- as anonymised, summarised data for research and other purposes;
- to improve the OpenStreetMap dataset. For example by analysing nominatim queries for missing addresses and postcodes and providing such data to the OSM community.
You have the right to object to the processing of this data, and you must comply with OpenStreetMap Foundation to exercise it.
Using Google Adwords Conversion
We use the offer of Google Adwords, with the help of advertising materials (Google Adwords) on external websites to attract attention to our attractive offers. We can determine how successful the individual advertising measures are in relation to the data from advertising campaigns. We are interested in showing you advertisements that are of interest to you to make our website more interesting to you and to achieve a fair calculation of advertising costs.
These advertising materials are supplied by Google via so-called „ad servers”. To do this, we use ad server cookies, which measure certain performance metrics such as ads or user clicks. If you reach our website via a Google ad, Google Adwords will save a cookie on your PC. These cookies usually lose their validity after 30 days and are not intended to identify you personally. This cookie will typically store the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant to post-view conversions), and opt-out information (a flag that the user does not want to be addressed any more).
These cookies allow Google to recognize your Internet browser. If a user visits certain pages on an Adwords customer′s website and the cookie stored on their computer has not expired, Google and the customer will be able to detect that the user clicked on the ad and was redirected to that page. Each Adwords customer is assigned a different cookie. Cookies cannot be tracked via the Adwords customer websites. We ourselves do not collect and process any personal data using the aforementioned advertising measures. We receive only statistical evaluations provided by Google. Based on these evaluations, we can identify which of the advertising measures used are particularly effective. We do not receive any further data from using advertising material, and we cannot identify users based on this information.
Your browser automatically establishes a direct connection to the Google server based on the marketing tools used. We have no control over the extent and the later use of the data that Google collects using this tool and we will therefore inform you according to our level of knowledge. By integrating AdWords Conversion, Google receives the information that you have accessed the relevant part of our website or have clicked on an ad from us. If you are registered with a service provided by Google, then Google may associate the visit with your account. Even if you are not registered with Google or have not logged in, there is a chance that the provider will find and store your IP address.
You can prevent participation in this tracking process several different ways:
- by setting your browser software accordingly; by suppressing third-party cookies, you will prevent you from receiving any third-party advertisements;
- by deactivating cookies for conversion tracking by adjusting your browser settings so that cookies from the domain called „www.googleadservices.com”, which are then blocked, https://www.google.de/settings/ads, whereby this setting will be deleted once you delete your cookies;
- by disabling interest-based ads from providers who participate in self-regulating campaigns called „About Ads” by clicking on this link: http://www.aboutads.info/choices, wobei diese Einstellung gelöscht wird, wenn Sie Ihre Cookies löschen;
- by adjusting your settings to permanently disabled in your Firefox, Internet Explorer or Google Chrome browsers by clicking on the following link: https://www.google.com/settings/ads/plugin. We would like to point out that in this case you may not be able to fully utilize all the features of this offer.
The legal basis for processing your data is Art. 6 Section 1 p. 1 lit. f GDPR or Art. 6 Section 1 p. 1 lit. a GDPR in the case of consent.
You can find additional information on Google′s data privacy policies at: https://policies.google.com/privacy and https://services.google.com/sitestats/de.html. Another option is to visit the Network Advertising Initiative (NAI) at http://www.networkadvertising.org. Google complies with EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.
Integration of Google Fonts