Clear information about your data and your choices.
Partners: Abed Alrazzak Tfenkjee & Kawthar Bawadkje.
info@packagingworld.eu
+49 1575 3654952
Contact this address for privacy questions and rights requests.
Our hosting service processes connection data, including IP address, time, requested URL, browser information and response status, to deliver and protect the website. The legal basis is our legitimate interest in a secure, functioning business website (Article 6(1)(f) GDPR). Website hosting is provided by IONOS; our business application at packworld.app runs on a Hostinger VPS.
We process the contact and business information you submit to respond to your enquiry. A price request for a published stocklot is sent to info@packagingworld.eu with the offer reference and specifications. Supplier submissions are sent to the same inbox; photos are not required. General buying enquiries without an offer reference are handled in our business application and require email confirmation. These routes do not subscribe you to marketing. Processing is based on Article 6(1)(b) GDPR for steps towards a contract requested by you, or Article 6(1)(f) for business contact, including correspondence with company representatives.
The signup asks for your name, company and email, your choice of all offers or specific materials, and your express marketing consent. We use double opt-in: opening the confirmation link alone does not activate the subscription; you must press the confirmation button. The application stores confirmed contact details, interests and consent records. Our team receives an internal notification of the request, marked as not yet confirmed. The legal basis for sending marketing is Article 6(1)(a) GDPR. Subscription does not mean that every new offer immediately generates an automatic campaign. You can withdraw consent at any time using the unsubscribe link in our marketing email or by emailing us; withdrawal does not affect prior lawful processing.
When you request a visit, the booking calendar processes the information shown in its form to arrange and administer the appointment and any requested reminders. The website uses the existing Simply Schedule Appointments booking plugin. This is separate from email marketing and uses the enquiry legal bases described above.
WordPress may use necessary login/session cookies and request tokens. Our forms use a hidden spam field, a signed addition question for newsletter signup, request limits and short-lived hashed request identifiers to prevent abuse and duplicate submissions. The signup challenge expires after 30 minutes. Browser session storage keeps only a request identifier and a hash for duplicate prevention, not a copy of form entries. Necessary storage is used under Section 25(2) TDDDG; related personal-data processing is based on Article 6(1)(f) GDPR. Our new corporate pages do not enable optional analytics or advertising tracking. Fonts are served locally.
The embedded map is off by default. Only when you explicitly choose to load it does your browser connect to Google, which may receive your IP address, device information and usage data and may access device storage. This optional embedding is based on your consent (Article 6(1)(a) GDPR and Section 25(1) TDDDG); it can involve transfers outside the EEA. Reload the page to remove the embed; this does not reverse data already transmitted. You may use the address without loading a map. Google Maps, WhatsApp, Facebook and TikTok links open external services only when you follow them; their providers then process data under their own policies. See Google’s privacy policy.
Public stocklot information and images are supplied by packworld.app; loading app-hosted media or downloading documents connects your browser to that service. Internal supplier prices and other private application fields are not published by this integration. VAT verification sends only our fixed country code and VAT number to the European Commission’s VIES service, server to server. It does not ask for your VAT number or forward your IP address to VIES.
We do not sell personal data. Access is limited to our authorised team and service providers needed for hosting, email delivery, IT operation and handling your request, and to authorities where required by law. Information may be shared with an agent or logistics provider where necessary for an agreed transaction. Providers acting on our instructions must be bound by appropriate data-processing arrangements. External services may process information outside the EEA; where we arrange such processing, it requires an applicable adequacy decision or other lawful Chapter V GDPR safeguards. Contact us for information about the safeguards relevant to your data.
We keep enquiries and appointment data for as long as needed to handle them and resolve related matters. Contract and accounting records are retained for applicable statutory periods (Article 6(1)(c) GDPR). Marketing data is used until you withdraw consent or the purpose ends. Limited consent evidence and suppression information may remain where needed to demonstrate compliance and prevent further mailings. Technical logs and anti-abuse records are retained only as needed for operation and security; actual retention depends on the service and legal requirements.
Subject to the applicable conditions, you may request access, rectification, erasure, restriction, portability and objection under Articles 15–22 GDPR. You may object to processing based on legitimate interests for reasons relating to your situation and object to direct marketing at any time. Required form fields are needed to handle the selected request; providing information is otherwise voluntary. We do not use these forms to make solely automated decisions with legal or similarly significant effects.
You may complain to a supervisory authority, including the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Postfach 20 04 44, 40102 Düsseldorf, Germany. You can also contact the authority where you live or work. We update this notice when our services or processing change. Last updated: 18 October 2026.