Data Protection Declaration

––––––––––––––––––––

Privacy Policy

––––––––––––––––––––

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we provide information about how we handle your personal data when you use our website. Personal data means any data that can be used to identify you personally.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is CARGRAPHIC Thomas Schnarr GmbH, Wieslauterstr. 20, 76829 Landau, Germany, Tel.: +49 6341 968 911 0, Email: info@cargraphic.de. The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website

2.1 When you use our website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to the website server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

The website visited

Date and time of access

Amount of data sent in bytes

Source/referrer from which you accessed the page

Browser used

Operating system used

IP address used (where applicable: in anonymised form)

Processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or used for any other purpose. However, we reserve the right to subsequently review the server log files if there are specific indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries sent to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the character string “https://” and the padlock symbol in your browser’s address bar.

3) Hosting & Content Delivery Network

3.1 For the hosting of our website and the presentation of website content, we use a provider that performs its services, either itself or through selected subcontractors, exclusively on servers located within the European Union.

All data collected on our website is processed on these servers unless different recipients are specified below for particular data processing activities.

We have concluded a data processing agreement with the provider which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

3.2 Cloudflare

We use a content delivery network provided by: Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA.

This service enables us to deliver large media files such as graphics, website content or scripts more quickly via a network of regionally distributed servers. Processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. We have concluded a data processing agreement with the provider which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

4) Cookies

In order to make your visit to our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. Some of these cookies are automatically deleted when you close your browser (so-called “session cookies”), while others remain on your device for a longer period and enable website settings to be saved (so-called “persistent cookies”). In the latter case, you can find the storage period in the overview of your web browser’s cookie settings.

Where personal data is also processed by individual cookies used by us, the processing is carried out pursuant to Art. 6(1)(b) GDPR either for the performance of a contract, pursuant to Art. 6(1)(a) GDPR where consent has been given, or pursuant to Art. 6(1)(f) GDPR for the purposes of our legitimate interests in ensuring the best possible functionality of the website and a customer-friendly and effective website experience.

You can configure your browser so that you are informed when cookies are set and can decide individually whether to accept them, or you can exclude the acceptance of cookies in certain cases or generally.

Please note that the functionality of our website may be limited if cookies are not accepted.

5) Contacting Us

When you contact us (e.g. via a contact form or email), personal data is collected. The data collected when using a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your enquiry or establishing contact and for the associated technical administration.

The legal basis for processing this data is our legitimate interest in responding to your enquiry pursuant to Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, Art. 6(1)(b) GDPR provides an additional legal basis for processing. Your data will be deleted once your enquiry has been fully processed. This is the case when it can be inferred from the circumstances that the matter in question has been conclusively resolved and provided that there are no statutory retention obligations to the contrary.

6) Use of Customer Data for Direct Advertising

6.1 Subscription to Our Email Newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required for sending the newsletter is your email address. Providing any additional data is voluntary and is used to address you personally. We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you an email newsletter once you have expressly confirmed that you consent to receiving newsletters. We will then send you a confirmation email asking you to confirm, by clicking on an appropriate link, that you wish to receive the newsletter in future.

By activating the confirmation link, you give us your consent to use your personal data pursuant to Art. 6(1)(a) GDPR. When you subscribe to the newsletter, we store the IP address registered by your Internet service provider (ISP), as well as the date and time of registration, in order to be able to trace any possible misuse of your email address at a later date. The data collected by us when you subscribe to the newsletter is used exclusively for advertising purposes by means of the newsletter. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending an appropriate message to the controller named above. Once you have unsubscribed, your email address will be deleted immediately from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this scope where this is permitted by law and about which we inform you in this Privacy Policy.

6.2 CleverReach

Our email newsletters and other promotional email communications are sent via the following provider: CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany.

On the basis of our legitimate interest in effective and user-friendly email marketing, we transfer the data you provide when subscribing to this provider pursuant to Art. 6(1)(f) GDPR so that the provider can send emails on our behalf.

Subject to your express consent pursuant to Art. 6(1)(a) GDPR, the provider also carries out statistical performance evaluations of email campaigns using web beacons or tracking pixels in the emails sent, which can measure opening rates and specific interactions with newsletter content. Device information (e.g. time of access, IP address, browser type and operating system) is also collected and evaluated, but is not combined with other data sets.

You can withdraw your consent to email tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider which protects the data of our website visitors and prohibits disclosure to third parties.

7) Web Analytics Services

Google (Universal) Analytics

This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables us to analyse your use of our website.

By default, when you visit the website, Google (Universal) Analytics sets cookies, which are small text files stored on your device and which collect certain information. This information also includes your IP address, although Google truncates the last digits in order to prevent direct identification of individuals.

The information is transmitted to Google servers and processed there. This may also involve transfers to Google LLC, based in the USA.

Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activity for us and provide other services relating to website and internet usage. The IP address transmitted by your browser and truncated as part of Google Analytics is not combined with other Google data. Data collected through the use of Google (Universal) Analytics is stored for a period of two months and subsequently deleted.

All processing described above, in particular the setting of cookies on the device used, takes place only if you have given us your express consent pursuant to Art. 6(1)(a) GDPR.

Without your consent, Google (Universal) Analytics will not be used during your visit to our website. You may withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service using the “Cookie Consent Tool” provided on the website.

We have concluded a data processing agreement with Google which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

Further legal information on Google (Universal) Analytics can be found at:

business.safety.google/intl/de/privacy/

policies.google.com/privacy

policies.google.com/technologies/partner-sites

Demographic Features

Google (Universal) Analytics uses the special “demographic features” function and can use it to generate statistics providing information about the age, gender and interests of website visitors. This is done by analysing advertising and information from third-party providers. This enables target groups for marketing activities to be identified. However, the collected data cannot be attributed to a specific person and is deleted after being stored for a period of two months.

Google Signals

As an extension to Google (Universal) Analytics, Google Signals may be used on this website to generate cross-device reports. If you have enabled personalised ads and linked your devices to your Google account, Google may, subject to your consent to the use of Google Analytics pursuant to Art. 6(1)(a) GDPR, analyse your usage behaviour across devices and create database models, including models relating to cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can deactivate the “Personalised advertising” function in your Google account settings. To do so, follow the instructions on this page:

support.google.com/My-Ad-Center-Help/answer/12155764

Further information about Google Signals can be found at:

support.google.com/analytics/answer/7532985

User IDs

As an extension to Google (Universal) Analytics, the “User IDs” function may be used on this website. If you have consented to the use of Google (Universal) Analytics pursuant to Art. 6(1)(a) GDPR, have created an account on this website and log in to this account on different devices, your activities, including conversions, may be analysed across devices.

8) Website Functions

8.1 Facebook Plugins

Our website uses plugins from the social network operated by the following provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

These plugins enable direct interaction with content on the social network.

To increase the protection of your data when visiting our website, the plugins are initially deactivated and integrated into the website using a so-called “2-click” or “Shariff” solution.

This integration ensures that no connection to the provider’s servers is established when you access a page on our website containing such plugins.

Only when you activate the plugins and thereby consent to the transfer of data pursuant to Art. 6(1)(a) GDPR does your browser establish a direct connection to the provider’s servers. Irrespective of whether you are logged into an existing user profile, certain information about the device you are using (including your IP address), your browser and your browsing history is transmitted to the provider and may be further processed there.

If you are logged into an existing user profile on the provider’s social network, information about interactions carried out via the plugins will also be published there and displayed to your contacts.

You can withdraw your consent at any time by deactivating the activated plugin by clicking on it again. However, withdrawal does not affect data that has already been transferred to the provider.

Data may also be transferred to: Meta Platforms Inc., USA.

We have concluded a data processing agreement with the provider which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

8.2 YouTube

This website uses plugins for displaying and playing videos provided by: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Data may also be transferred to: Google LLC, USA.

When you access a page of our website containing such a plugin, your browser establishes a direct connection to the provider’s servers, at the latest when the video is played, in order to load the content. Certain information, including your IP address, is transmitted to the provider in this process.

When playback of embedded videos is started via the plugin, the provider also sets cookies in order to collect information about user behaviour, compile playback statistics and prevent abusive behaviour.

If you are logged into a user account with the provider while visiting our website, your data will be directly associated with your account when you click on a video. If you do not want the data to be associated with your account, you must log out before clicking the play button.

All of the processing described above, in particular the setting of cookies for reading information from the device used, takes place only if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by deactivating this service via the “Cookie Consent Tool” provided on the website.

8.3 Facebook Connect

On our website, we provide a single sign-on function from the following provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

In addition to data being transferred to the provider’s location specified above, data may also be transferred to: Meta Platforms Inc., USA.

If you have an account with the provider, you can use your account details to create a user account or register on our website.

When you visit this page, this login function may establish a direct connection between your browser and the provider’s servers, even if you do not have an account with the provider or are not logged into such an account. As a result, the provider receives information that you have visited our website. The information collected in this context (which may include your IP address) is transmitted directly from your browser to a server of the provider and stored there. However, the information is not used to identify you personally and is not disclosed to third parties.

These data processing operations are carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in providing a user-friendly and interactive online presence.

If you click the login button to register on our website using your account details held by the provider, the provider will transmit to us the general and publicly accessible information stored in your account (user ID, name, address, email address, age and gender) solely on the basis of your express consent pursuant to Art. 6(1)(a) GDPR.

We store and use the data transmitted by the provider to create a user account containing the necessary information (title, first name, surname, address details, country, email address, date of birth), provided that you have made this information available to the provider. Conversely, on the basis of your consent, data (e.g. information about your browsing or purchasing behaviour) may be transferred by us to your account with the provider.

You may withdraw your consent at any time with effect for the future by contacting us.

9) Tools and Miscellaneous

Cookie Consent Tool

This website uses a so-called “Cookie Consent Tool” to obtain valid user consent for cookies and cookie-based applications that require consent. The “Cookie Consent Tool” is displayed to users when they access the website in the form of an interactive user interface through which consent can be given for certain cookies and/or cookie-based applications by selecting the relevant options. When using the tool, all cookies/services requiring consent are only loaded if the respective user gives the corresponding consent by selecting the relevant options. This ensures that such cookies are only placed on the user’s device if consent has been given.

The tool sets technically necessary cookies to store your cookie preferences. As a general rule, personal user data is not processed in this context.

If, in individual cases, personal data (such as the IP address) is nevertheless processed for the purpose of storing, assigning or recording cookie settings, this processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly cookie consent management and, consequently, in ensuring that our website is operated in compliance with the law.

A further legal basis for processing is Art. 6(1)(c) GDPR. As the controller, we are subject to the legal obligation to make the use of technically non-essential cookies dependent on the respective user’s consent.

Where necessary, we have concluded a data processing agreement with the provider which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

Further information about the operator and the settings available for the Cookie Consent Tool can be found directly in the corresponding user interface on our website.

10) Rights of the Data Subject

10.1 Applicable data protection law grants you the following rights as a data subject vis-à-vis the controller with regard to the processing of your personal data (rights of access and intervention), with reference being made to the legal basis specified in each case for the respective requirements for exercising these rights:

Right of access pursuant to Art. 15 GDPR;

Right to rectification pursuant to Art. 16 GDPR;

Right to erasure pursuant to Art. 17 GDPR;

Right to restriction of processing pursuant to Art. 18 GDPR;

Right to be informed pursuant to Art. 19 GDPR;

Right to data portability pursuant to Art. 20 GDPR;

Right to withdraw consent pursuant to Art. 7(3) GDPR;

Right to lodge a complaint pursuant to Art. 77 GDPR.

10.2 RIGHT TO OBJECT

IF, AS PART OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT TO SUCH PROCESSING WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

11) Duration of Storage of Personal Data

The duration for which personal data is stored is determined by the respective legal basis, the purpose of processing and, where applicable, additionally by the respective statutory retention period (e.g. retention periods under commercial and tax law).

Where personal data is processed on the basis of express consent pursuant to Art. 6(1)(a) GDPR, the data concerned will be stored until you withdraw your consent.

Where statutory retention periods apply to data processed in connection with contractual or similar obligations on the basis of Art. 6(1)(b) GDPR, such data will routinely be deleted after expiry of the retention periods, provided that it is no longer required for the performance or initiation of a contract and/or we no longer have a legitimate interest in its continued storage.

Where personal data is processed on the basis of Art. 6(1)(f) GDPR, such data will be stored until you exercise your right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Where personal data is processed for direct marketing purposes on the basis of Art. 6(1)(f) GDPR, such data will be stored until you exercise your right to object pursuant to Art. 21(2) GDPR.

Unless otherwise stated in the other information contained in this Privacy Policy regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Last updated: 23 September 2026, 13:34:45

Language and Currency