Data Protection Declaration

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data means all data by which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is
CARGRAPHIC Thomas Schnarr GmbH,
Wieslauterstr. 20,
76829 Landau in der Pfalz, Germany
Tel.: +49 6341 968 911 0
Fax: +49 6341 968 912 0
E-mail: info@cargraphic.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website

2.1 When you use our website for informational purposes only, i.e. without registering or otherwise transmitting information to us, we collect only those data that your browser transmits to our server (so-called server log files). When you access our website, we collect the following data, which are technically necessary to display the website:
    •    the website visited
    •    date and time of access
    •    amount of data transmitted (in bytes)
    •    source/referring page from which you reached our website
    •    browser used
    •    operating system used
    •    IP address used (where applicable: in anonymised form)

Processing is carried out in accordance with Art. 6 (1) lit. f GDPR, based on our legitimate interest in improving the stability and functionality of our website.
The data will not be passed on or otherwise used.
However, we reserve the right to subsequently review the server log files if there are concrete indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries sent to us), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the character string “https://” and the padlock icon in your browser’s address bar.

3) Hosting & Content Delivery Network

For hosting our website and displaying its content, we use a service provider that provides its services—either itself or through carefully selected sub-contractors—exclusively on servers located within the European Union.
All data collected on our website are processed on these servers.

We have concluded a data processing agreement (DPA) with the provider, ensuring the protection of our visitors’ data and prohibiting any unauthorised disclosure to third parties.

4) Cookies

To make your visit to our website attractive and to enable the use of certain functions, we use cookies – small text files stored on your device. Some of these cookies are automatically deleted when you close your browser (so-called “session cookies”), while others remain stored for a longer period and allow your preferences to be saved (so-called “persistent cookies”). The storage duration of persistent cookies can be found in your browser’s cookie settings.

If personal data are processed by individual cookies implemented by us, such processing is carried out on the basis of
    •    Art. 6 (1) lit. b GDPR (performance of a contract),
    •    Art. 6 (1) lit. a GDPR (your consent), or
    •    Art. 6 (1) lit. f GDPR (our legitimate interest in the best possible functionality and a user-friendly, effective website experience).

You can configure your browser to inform you about the setting of cookies, to decide individually whether to accept them, or to exclude cookies for specific cases or in general.
Please note that disabling cookies may limit the functionality of our website.

5) Contacting Us

When contacting us (e.g. via contact form or email), personal data are collected. The specific data collected through a contact form are indicated in the respective form. These data are used exclusively for the purpose of responding to your enquiry and the related technical administration.

The legal basis for processing is our legitimate interest in responding to your request pursuant to Art. 6 (1) lit. f GDPR.
If your contact is aimed at the conclusion of a contract, the additional legal basis is Art. 6 (1) lit. b GDPR.

Your data will be deleted once your enquiry has been fully processed, provided that no statutory retention obligations apply. This is deemed to be the case when the circumstances indicate that the matter concerned has been conclusively resolved.

6) Use of Customer Data for Direct Advertising

6.1 Subscription to Our Email Newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory data for receiving the newsletter are your email address; any other information is voluntary and used only for personal salutation.
We use the double-opt-in procedure: you will receive a confirmation email asking you to verify that you wish to receive the newsletter.

By activating the confirmation link, you consent to the processing of your personal data in accordance with Art. 6 (1) lit. a GDPR.
At the time of registration, we store the IP address assigned by your internet service provider (ISP) as well as the date and time of registration, in order to trace possible misuse of your email address.

The data collected during newsletter registration are used exclusively for sending our newsletter. You can unsubscribe at any time via the link provided in each newsletter or by contacting the controller listed above. After unsubscribing, your email address will be promptly deleted from our mailing list unless you have expressly consented to further use or unless we are legally entitled to retain the data as outlined in this policy.

6.2 CleverReach

Our email newsletters are sent via CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany.

Based on our legitimate interest in effective and user-friendly newsletter marketing, we transfer your data provided upon newsletter registration to this provider in accordance with Art. 6 (1) lit. f GDPR, so that it can send newsletters on our behalf.

With your express consent pursuant to Art. 6 (1) lit. a GDPR, CleverReach also performs statistical analyses of newsletter campaigns using web beacons or tracking pixels embedded in emails to measure open rates and interactions. Device information (e.g. access time, IP address, browser type, operating system) may be collected and evaluated but is not merged with other datasets.

You may withdraw your consent to newsletter tracking at any time with effect for the future.

We have concluded a data processing agreement (DPA) with CleverReach, ensuring the protection of our visitors’ data and prohibiting any unauthorised disclosure to third parties.

7) Web Analytics Services

Google (Universal) Analytics

This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin D04 E5W5, Ireland (“Google”).
The service enables an analysis of your use of our website.

By default, when you visit our website, Google (Universal) Analytics sets cookies (small text files stored on your device) that collect certain information. This includes your IP address, which is shortened by Google to prevent direct personal identification.

The information is transmitted to and processed on Google servers; transfers to Google LLC, USA, may also occur.
Google processes this data on our behalf to evaluate the use of the website, compile reports on website activity, and provide other services related to website and internet usage. The shortened IP address transmitted by your browser will not be merged with other Google data.
Data collected through Google (Universal) Analytics are retained for two months and then deleted.

All processing activities described above — particularly the setting of cookies on your device — take place only with your express consent pursuant to Art. 6 (1) lit. a GDPR.
Without your consent, Google (Universal) Analytics will not be used during your visit.
You may withdraw your consent at any time with future effect by disabling this service via the cookie-consent tool provided on our website.

We have concluded a data-processing agreement (DPA) with Google to ensure the protection of our visitors’ data and to prohibit any unauthorised disclosure to third parties.

Further legal information on Google (Universal) Analytics can be found at:
    •    https://business.safety.google/intl/en/privacy/
    •    https://policies.google.com/privacy?hl=en&gl=en
    •    https://policies.google.com/technologies/partner-sites

Demographic Features

Google (Universal) Analytics uses the “Demographic Features” function, enabling the creation of statistics about visitors’ age, gender and interests through the analysis of advertising data and information from third-party providers. This allows identification of target groups for marketing purposes. The collected data cannot be associated with any specific individual and are deleted after two months.

Google Signals

As an extension of Google (Universal) Analytics, Google Signals may be used on this website to generate cross-device reports.
If you have activated personalised ads and linked your devices with your Google account, Google may — subject to your consent under Art. 6 (1) lit. a GDPR — analyse your behaviour across devices and create database models, including cross-device conversions.

We do not receive any personal data from Google, only anonymised statistics.
If you wish to disable cross-device analysis, you can deactivate “Personalised Advertising” in your Google Account settings.
Instructions: support.google.com/ads/answer/2662922
Further details on Google Signals: support.google.com/analytics/answer/7532985

User IDs

This website may also use the User IDs feature of Google (Universal) Analytics.
If you have consented to its use under Art. 6 (1) lit. a GDPR, have created an account on our website, and log in on various devices, your activities — including conversions — may be analysed across devices.

For data transfers to the United States, Google participates in the EU–US Data Privacy Framework, ensuring an adequate level of data protection in accordance with the adequacy decision of the European Commission.

8) Website Functionalities

8.1 Facebook Plugins

Our website uses plugins of the social network operated by
Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

These plugins enable direct interaction with content on the social network.
To enhance the protection of your data when visiting our website, the plugins are initially deactivated and integrated using a so-called “two-click” or “Shariff” solution.
This ensures that when a page of our website containing such plugins is accessed, no direct connection to the provider’s servers is established.

Only once you activate the plugin and thus give your consent under Art. 6 (1) lit. a GDPR to data transmission will your browser establish a direct connection to the provider’s servers.
Information about your device (including your IP address), browser, and site activity may then be transmitted to the provider and processed there, regardless of whether you are logged into a user profile.

If you are logged into your Facebook account, any interaction with the plugin may also be published on the platform and displayed to your contacts.
You can withdraw your consent at any time with future effect by deactivating the plugin again. The withdrawal does not affect data already transmitted to the provider.

Data may also be transferred to Meta Platforms Inc., USA.
We have concluded a data processing agreement (DPA) with the provider to ensure the protection of our visitors’ data and to prohibit any unauthorised disclosure to third parties.

For data transfers to the United States, Meta participates in the EU–US Data Privacy Framework, which ensures an adequate level of data protection pursuant to the adequacy decision of the European Commission.

8.2 YouTube

This website uses plugins to display and play videos from:
Google Ireland Limited, Gordon House, 4 Barrow St, Dublin D04 E5W5, Ireland.
Data may also be transmitted to Google LLC, USA.

When you access a page containing such a plugin, your browser establishes a direct connection to the provider’s servers at the latest when video playback begins in order to load the content. Certain information, including your IP address, is transmitted to the provider.

If playback of an embedded video is started, the provider may also use cookies to collect information about user behaviour, generate playback statistics, and prevent misuse.
If you are logged into a user account with the provider, your activity may be directly associated with your account. To prevent this, log out before activating the video.

All processing operations described above — in particular the setting of cookies or access to device information — occur only with your explicit consent pursuant to Art. 6 (1) lit. a GDPR.
You may withdraw your consent at any time by disabling this service via the cookie-consent tool on our website.

For data transfers to the United States, Google participates in the EU–US Data Privacy Framework, ensuring an adequate level of data protection pursuant to the adequacy decision of the European Commission.

8.3 Facebook Connect

Our website offers a Single Sign-On function provided by
Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Data may also be transmitted to Meta Platforms Inc., USA.

If you have an account with this provider, you can use your account credentials to register or log in to our website.
When visiting this page, a direct connection between your browser and the provider’s servers may be established even if you are not logged in or do not have an account. The provider will then receive information that you have visited our website (including, where applicable, your IP address). These data are not used to identify you personally and are not shared with third parties.

This data processing is based on our legitimate interest in providing a user-friendly and interactive online experience pursuant to Art. 6 (1) lit. f GDPR.

If you click the login button to register on our website using your provider account, the provider — based on your explicit consent under Art. 6 (1) lit. a GDPR — transmits your general, publicly available profile information (user ID, name, address, email address, age, gender) to us.
We store and use these data to create a user account containing the necessary information (title, first name, last name, address, country, email address, date of birth), insofar as you have authorised the transfer.
Conversely, data (such as your browsing or purchasing behaviour) may, based on your consent, be transmitted by us to your provider account.

You may withdraw your consent at any time with future effect.

For data transfers to the United States, Meta participates in the EU–US Data Privacy Framework, ensuring an adequate level of data protection pursuant to the adequacy decision of the European Commission.

9) Tools and Miscellaneous

Cookie Consent Tool

This website uses a so-called cookie consent tool to obtain valid user consents for cookies and cookie-based applications requiring consent.
When you visit our website, the tool is displayed as an interactive interface where you can grant consent for specific cookies and/or cookie-based services by ticking the respective boxes.

The tool ensures that any cookies or services requiring consent are only activated if the respective user has granted consent.
This guarantees that such cookies are only placed on the user’s device if consent has been given.

The tool sets technically necessary cookies to store your cookie preferences. As a rule, no personal data are processed for this purpose.

If, in individual cases, the processing of personal data (such as the IP address) becomes necessary to store, assign, or log cookie settings, this processing takes place pursuant to Art. 6 (1) lit. f GDPR, based on our legitimate interest in lawful, user-specific, and user-friendly consent management and thus in the lawful operation of our website.

The further legal basis for this processing is Art. 6 (1) lit. c GDPR, as we are legally obliged, as the controller, to obtain consent for technically unnecessary cookies before their use.

Where required, we have concluded a data processing agreement (DPA) with the provider of the consent tool to ensure the protection of our visitors’ data and to prevent any unauthorised disclosure to third parties.

Further information about the provider and configuration options of the cookie-consent tool can be found directly in the corresponding user interface displayed on our website.

10) Rights of the Data Subject

10.1 Rights Granted Under Data Protection Law

Under applicable data protection law, you have the following rights with respect to the controller regarding the processing of your personal data (referred to as data subject rights). The legal basis for each right is indicated below:
    •    Right of access (Art. 15 GDPR);
    •    Right to rectification (Art. 16 GDPR);
    •    Right to erasure (“right to be forgotten”) (Art. 17 GDPR);
    •    Right to restriction of processing (Art. 18 GDPR);
    •    Right to notification (Art. 19 GDPR);
    •    Right to data portability (Art. 20 GDPR);
    •    Right to withdraw consent (Art. 7 (3) GDPR);
    •    Right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

10.2 Right to Object

RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR LEGITIMATE INTERESTS PURSUANT TO ART. 6 (1) LIT. F GDPR, YOU HAVE THE RIGHT, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT AT ANY TIME TO SUCH PROCESSING WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE RELEVANT DATA. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENCE OF LEGAL CLAIMS.

WHERE YOUR PERSONAL DATA ARE PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING YOUR DATA FOR DIRECT MARKETING PURPOSES.

11) Duration of the Storage of Personal Data

The duration for which personal data are stored is determined by the respective legal basis, the purpose of processing, and—where applicable—by statutory retention periods (e.g. under commercial or tax law).

If personal data are processed on the basis of your explicit consent under Art. 6 (1) lit. a GDPR, such data will be stored until you withdraw your consent.

If there are statutory retention obligations for data processed in accordance with Art. 6 (1) lit. b GDPR (for the performance of a contract or pre-contractual measures), these data will be routinely deleted after the expiry of the retention periods, provided they are no longer necessary for contract performance or initiation and no legitimate interest in continued storage exists.

Where personal data are processed on the basis of Art. 6 (1) lit. f GDPR, such data will be stored until you exercise your right to object under Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defence of legal claims.

If personal data are processed for direct marketing purposes based on Art. 6 (1) lit. f GDPR, such data will be stored until you exercise your right to object under Art. 21 (2) GDPR.

Unless otherwise stated in this Privacy Policy for specific processing situations, personal data will be deleted once they are no longer necessary for the purposes for which they were collected or otherwise processed.

Last updated: October 6, 2025 – 07:29:11