Privacy policy

1. Controller

Phone: +49 4503 76 239 76 00
E-mail: info@baking-paper.de

2. Provision of the website

When you access the website, the web server processes technically necessary connection data. This may include, in particular, IP address, time of access, address accessed, amount of data transferred, status code, referrer and information about the browser and operating system.

The processing serves to ensure the secure and stable provision of the website, error analysis and protection against misuse. The legal basis is Article 6 Paragraph 1 Letter f GDPR. Our legitimate interest lies in the safe and reliable operation of our internet offering.

Log data will be deleted or anonymized as soon as it is no longer required for these purposes. Longer storage only occurs if a security incident needs to be clarified or if legal obligations require this.

3. Contact and enquiry forms

If you contact us via a form, we will process the information you provide. Depending on the request, this includes name, company, contact details as well as product, project or sales-related information and your message.

We use this data to process your request, clarify queries and, if necessary, prepare an offer or collaboration. The legal basis is Art. 6 Para. 1 lit. b GDPR, insofar as the communication serves to initiate or implement a contract. In other business cases, processing is carried out on the basis of Article 6 Paragraph 1 Letter f of the GDPR; Our legitimate interest lies in processing business enquiries.

Required fields are marked as such. Without this information we cannot process the respective request. Recipients can be internally responsible employees as well as technically necessary hosting and email service providers.

4. Protection against abusive requests

To protect the contact form from automated or abusive requests, we use technical checks and time-limited access restrictions. For this purpose, a non-immediately readable test value is created from technical query characteristics such as IP address and browser identifier. Only points in time are saved for this test value; The underlying raw data and form content are not stored in the access limit.

This test data will be removed after 24 hours at the latest. The legal basis is Article 6 Paragraph 1 Letter f GDPR. Our legitimate interest is to protect the website and our communication systems from spam and misuse.

5. Privacy settings

Your decision to optionally measure range will be stored in your browser's local storage and is valid for up to 182 days. An expired selection will be removed on a subsequent visit. This storage is necessary so that the website can take your choices into account. The legal basis is Section 25 Paragraph 2 No. 2 TDDDG.

You can change your selection at any time via “Cookie Settings” in the footer. If range measurement is rejected or consent given is revoked, Google Analytics will be deactivated and existing analysis cookies will be deleted, to the extent that they are technically possible.

6. Google Analytics

If you expressly agree, we use Google Analytics to measure reach. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The service helps us to understand how our website is used and to improve content and contact channels. In particular, pages accessed, page titles, time, session and interaction data, approximate location, technical device and browser information, pseudonymous identifiers and the IP address technically transmitted during the connection can be processed. We do not transmit content from contact forms, names, companies, email addresses and telephone numbers to Google Analytics as analysis data.

Google Analytics will only be loaded after you have agreed to the reach measurement. The legal basis is your consent in accordance with Article 6 Paragraph 1 Letter a GDPR in conjunction with Section 25 Paragraph 1 TDDDG. Google signals and personalized advertising are disabled in our website integration.

Google Analytics can use cookies _ga and _ga_<ID> to distinguish pseudonymous users and sessions. Their regular storage period is up to two years; browser restrictions or prior withdrawal may shorten this period. Event-level data is retained for 2 months in the Analytics property used. User-level data is retained for 14 months. The option 'Reset user data on new activity' is enabled; when new activity occurs, the retention period for the relevant user identifier therefore starts again. After the applicable period expires, the affected data is removed in the monthly deletion process. These settings primarily affect explorations; aggregated standard reports may remain unaffected.

When using the service, processing by Google companies and service providers outside the European Economic Area, particularly in the United States, cannot be ruled out. For transfers to Google LLC in the United States, Google relies, where applicable, on the European Commission's adequacy decision for the EU-US Data Privacy Framework (Article 45 GDPR). Where this mechanism does not apply, Google uses the standard contractual clauses approved by the European Commission as appropriate safeguards (Article 46(2)(c) GDPR). Further information can be found in Google's information on international data transfers and Google’s privacy policy.

7. Recipients and service providers

We use service providers for hosting, technical maintenance and email communication to the extent necessary to operate the website and process enquiries. They only process data within the scope of their tasks and on the basis of the applicable data protection agreements.

Fonts, scripts and images on the website are generally provided locally. Our website will only establish a connection to Google if you agree to the range measurement.

8. Storage period

We only store personal data for as long as it is necessary for the respective purpose. The data will then be deleted unless legal retention requirements, the assertion or defense of claims or other permissible reasons require further storage.

9. Your rights

You have the right to information, correction, deletion, restriction of processing and data portability within the framework of the legal requirements. You can revoke your consent at any time with future effect.

If processing is based on Article 6 Paragraph 1 Letter f of the GDPR, you can object to the processing for reasons arising from your particular situation.

To exercise your rights, simply send a message to info@baking-paper.de. You also have the right to complain to a data protection supervisory authority.

10. Automated decisions

Exclusively automated decision-making including profiling within the meaning of Art. 22 GDPR does not take place.

11. Updating this notice

We adapt this data protection notice if the website, services used or legal requirements change. The version published on this page applies.

As of: July 2026