Data protection

Papier Karl GmbH + Co. Sales KG
represented by Papier Karl GmbH Munich and Mr Robert Karl,
Rottmanner Str. 1-3, 85457 Hörlkofen
Telephone: +49 8122/999 886-0
Fax: +49 8122/999 886-88


1. General

The security of your data is, of course, important to us. Treating your data with complete confidentiality, and not passing them on to third parties, is one of our core principles. By so doing, we are adhering to the provisions of the Federal Data Protection Act (BDSG), the Teleservices Data Protection Act (TDDSG) and the basic data protection regulation (DSGVO). In the following, we will explain which data we save, and the extent to which we save it, and we will give you instructions for data processing.


We only collect, process and use personal data with your consent or if legislation allows it. Personal data is all data that contains information about personal or material circumstances of a particular or identifiable customer. These include, for instance, name, address, e-mail address and telephone number. We only collect, process and use personal data that is necessary for the conduct and the use of our services, or that you voluntarily make available to us.


The following are responsible for data protection:

Papier Karl GmbH + Co. Sales KG
represented by Papier Karl GmbH Munich and Mr Robert Karl,
Rottmanner Str. 1-3, 85457 Hörlkofen
Telephone: +49 8122/999 886-22
Fax: +49 8122/999 886-88


2. Data collection and data storage of personal data to fulfil the contract

We process the data that you provide to us as a customer to carry out pre-contractual measures, at the conclusion of the contract, and for the execution of the contract. The following personal data are collected by us

• First name and surname
• Address
• Telephone
• Fax
• Email address

Data processing takes place pursuant to art. 6 para. 1 sentence 1 lit. b DSGVO to fulfil our contractual obligations or, pursuant to art. 6 para. 1 lit. c, when the processing is necessary to fulfil a legal obligation to which we are subject. Besides this, data processing is also done, pursuant to art. 6 para. 1 sentence 1 lit. f DSGVO, if there is a legitimate interest on our part or, pursuant to art. 6 para. 1 sentence 1 lit. a DSGVO, as long as you have given us voluntary consent to data collection and processing. Your data will only be used by us

• for the execution of the contract,
• to answer your inquiries,
• for accounting and billing purposes

A transfer of your personal data to third parties (for example, shipping service providers, tax consultants, etc.) takes place exclusively for the purpose of contract execution or for billing purposes or if you have given express consent.
We will delete your personal information as soon as the purpose of its storage is fulfilled
and your data is no longer required, or if its storage becomes inadmissible for legal reasons.


3. Data collection and personal data storage on our website

a) When visiting our website

In principle, you do not have to enter any data to visit our website. Correspondingly, no personal information will be saved without direct inquiry and contact.

When accessing our website,, our hosting partner saves the
following anonymous access data without personal identifiers:

IP address of the requesting computer,
• Date and time of the search query,
• Website from which you access it (referrer URL),
• Name and URL of the retrieved file and
• The browser used and, if applicable, the operating system of your computer and the name of your access provider.

These data are not assignable to specific persons. These data will not be combined with
other data sources. The data mentioned are processed by us for the following purposes:

Ensuring a smooth connection setup of the website,
• Ensuring comfortable use of our website,
• Evaluation of system security and stability, and
• For further administrative purposes.

The legal basis for data processing is art. 6 para. 1 sentence 1 lit. f DSGVO. Our legitimate
interest follows from the data collection purposes listed above. In no case will collected data be used to draw inferences about your person.

In addition, when visiting our website, cookies and analysis services are used. Further details can be found from section 6 onwards.

b) On using our contact form and our email address

We offer you the opportunity to contact us with any questions via one on our website forms. For this, we need the following information:

the name
• an e-mail address

so that we know who the request came from, and so that we can answer it. Further information can be provided voluntarily.
Alternatively, you can contact us via the email address provided by us. In this case, the user’s personal data that is transmitted by email is saved.

Data processing for the purpose of contacting us is in accordance with art. 6 para. 1 sentence 1 lit. a DSGVO, on the basis of your voluntary consent. Art. 6 para. 1 sentence 1 lit. f DSGVO forms the legal basis for the processing of data in the context of sending an email. The personal data collected for the use of the contact form will automatically be deleted on the completion of the query you have raised.

c) On using our request form

Concrete packaging, service and logistics inquiries can be made to us via one of our Internet page request forms. Next to the packing dimensions, the following personal data is to be provided:

• First name and surname
• Address
• Telephone
• Fax
• Email address

4. Transfer of the data

The personal data you provide us with will be transmitted by us to third parties exclusively in the context of service partners involved in the execution of the contract, such as the logistics company commissioned with delivery and the bank responsible for the payment transaction.

In cases of transfer of your personal data to third parties, however, the scope of the transmitted data is limited to the minimum required. We wish to make you aware that payment service providers can obtain information separately for the purpose of identity and credit checks.

In addition, we only share your personal information with third parties if:

Pursuant to art. 6 para. 1 sentence 1 lit. a DSGVO, you have given express consent to this
• Disclosure, pursuant to art. 6 para. 1 sentence 1 lit. b DSGVO, is required for the execution of a contract or for the implementation of pre-contractual measures,
• Disclosure, pursuant to art. 6 para. 1 sentence 1 lit. c DSGVO, is a legal obligation or
• Disclosure, pursuant to art. 6 para. 1 sentence 1 lit. f DSGVO, is necessary for the protection of our legitimate interests or for the protection of legitimate interests of third parties, unless the interests or fundamental rights and freedoms of the data subject requiring personal data protection prevail, especially if the data subject is a child.

5. Data storage

The personal data provided by us are only kept for as long as is necessary for the purposes for which they are being processed, in accordance with art. 5 para. 1 lit.  DSGVO.
Occasionally, permanent data storage may be required due to legal obligations.

6. Automatic data collection through cookies

We use cookies on our website. Cookies are text files that are stored temporarily or permanently on a hard disk. Cookies are used to authenticate and collect information (eg IP address, browser type, Internet Service Provider (ISP), Internet usage via mobile phone, the Unique Device Identifier, the operating system, users’ Internet actions, websites visited, scrolling activities, so-called non-personal data) used by users of websites. The data collected by the cookies are anonymised. Personal data of users are not collected. Cookies stored on users’ hard drives can be deleted. The browser can also be set to block (new) cookies in the future. However, this could mean that different websites, including that of the intermediary, cannot be used with full functionality.
On the one hand, the use of cookies serves to make the presentation of our offers more pleasant to you. For example, we use so-called session cookies to recognize that you have already visited individual pages on our website. These are automatically deleted after leaving our page.

In addition, to improve usability, we also use temporary cookies that are stored on your device for a specified amount of time.
If you visit our site again to use our services, it will automatically recognize that you have already been with us, and the inputs and settings you made, so you do not have to re-enter them.

On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer. These cookies allow us to automatically recognize that you have already been with us, when you visit our site again. These cookies are automatically deleted after a defined time period. The data processed by cookies are required for the purposes mentioned in order to safeguard our legitimate interests, as well as those of third parties, pursuant to art. 6 para. 1 sentence 1 lit. f DSGVO. Most browsers accept cookies by default. If you do not want to use cookies, you can block their use in your browser. In the event that you deactivate the cookies, it cannot be ruled out that this will affect the functionality of our website.

7. Collection and processing by Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94943 (headquarters of the German affiliate: Google, Hamburg Google Germany GmbH, ABC Street 19, 20354 Hamburg; subsequently referred to as Google). Google Analytics is used for the purpose of customization and continuous optimization of our website. Google Analytics uses so-called “cookies” which are stored on your computer and which allow an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the US and stored there. However, if IP anonymization is activated on this website, your IP address will be transferred in an already truncated form by Google within member states of the European Union, or in other contracting states of the European Agreement Economic area. Only in exceptional cases will the full IP address be sent to a Google server in the US and truncated there.

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide it to the website operators of other services related to website usage and internet usage. The IP address transmitted by Google Analytics within the scope of Google Analytics will not be merged with other data provided by Google. You can prevent the storage of cookies by setting your browser software accordingly. We point out, however, that you may not be able to fully use all functions of this website.

You can also prevent the collection of the generated by the cookie and related to your use of the website (including your IP address) to Google, and the processing of this data by Google, by downloading and installing the browser plug-in available in the following link. The deactivation add-on can be found here:

As an alternative to the browser add-on, especially for browsers on mobile devices, you can prevent collection by Google Analytics by clicking on this link. An opt-out cookie will be set that will prevent the future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must reinstall the opt-out cookie.

Google’s privacy policy is available on Google’s website:

Contract data processing

We have entered into a contract data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Demographics in Google Analytics

This website uses the demographics feature of Google Analytics.
Reports are produced that contain statements on the age, gender and interests of the site visitors. This data comes from interest-based advertising from Google and third-party visitor data. This data cannot be assigned to specific persons. You can disable this feature at any time through the ad settings in your Google Account, or generally prohibit the collection of your data by Google Analytics as outlined in the section “Objection to Data Collection”.

8. Data security

By using every technical and organizational tool possible, we endeavor to store your personal data so that they are not accessible to third parties.
We use the popular SSL (Secure Socket Layer) method during visits to our website, in conjunction with the highest level of encryption supported by your browser. In general, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we’ll use 128-bit v3 technology instead. An encrypted page on our website is indicated by the closed representation of the key or lock icon in your browser’s lower status bar.

It should also be noted that when disclosing personal data (personal and non-personal) online, e.g. by e-mail, public access to the data may be possible, i.e. the data may be collected, processed and used by third parties.

We therefore point out that the online disclosure of personal information is fundamentally a security risk that cannot be completely ruled out, which is why we generally advise you to deal responsibly and cautiously with the disclosure of personal information online

9. Affected rights

If you have given us your consent for the use, processing and transmission of your personal data, you can request information about your stored and processed data from us at any time free of charge, pursuant to art. 15 DSGVO. In particular, you may demand information on the purposes of processing, the category of personal data, the categories of recipients to whom your data has been disclosed, the planned retention period, the right of rectification, erasure, restriction of processing or objection, the existence of a right of appeal, the origin of their data, if they were not collected from us, as well as the existence of an automated decision-making including profiling and, if necessary, meaningful information about their details.

Furthermore, you have the right to demand the rectification of incorrect or completed personal data stored by us, pursuant to art. 16 DSGVO, without delay.

Pursuant to art. 17 GDPR, you have the right to request the deletion of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest, or to assert, exercise or defend legal claims.

Pursuant to art. 18 GDPR, you have the right to demand the restriction of the processing of your personal data, as far as the accuracy of the data is disputed by you, the processing is unlawful, but you reject its deletion and we no longer need the data, according to art. 21 DSGVO on objection to data processing.

According to art. 20 GDPR, you have the right to receive your personal data provided to us in a structured, common and machine-readable format or to request the transfer to another person in charge.
Furthermore, pursuant to art. 7 para. 3 DSGVO, you are entitled to revoke your once-given consent at any time without stating reasons. Please contact:

Papier Karl GmbH + Co. Sales KG
represented by Papier Karl GmbH Munich and Robert Karl,
Rottmanner Str. 1-3, 85457 Hörlkofen
Telephone: +49 8122/999 886-0
Fax: +49 8122/999 886-88

As a result, we are no longer allowed to continue data processing based on this consent in future.
According to art. 77 GDPR you have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority for this:

Bavarian State Office for Data Protection Supervision
Promenade 27
91522 Ansbach
Phone: 0981 – 53 1300
Fax: 0981 – 53 98 1300

You can always contact us free of charge with questions about data protection and privacy policy.

13. Right to object

If your personal data are processed, based on legitimate interests in accordance with art. 6 para. 1 sentence 1 lit. f DSGVO, you have the right to file an objection against the processing of your personal data in accordance with art. 21 DSGVO, provided that there are reasons for this arising from your particular situation, or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which is implemented by us without specifying any particular situation. If you would like to exercise your right of revocation or objection, please send an e-mail to