Privacy Policy
1. Overview
General Information
As the website operator, we take the protection of personal data very seriously and process your data only in accordance with applicable data protection regulations and this privacy policy.
The following overview provides a quick and simple summary of how your personal data is processed when you visit this website. Personal data is any data that can be used to identify you directly. More detailed and comprehensive information about data protection can be found in the sections following this overview.
Please note: Data transmission over the internet (e.g. communication via email) can have security vulnerabilities. Complete protection of data from third-party access is not possible.
Data Processing on this website
Who is responsible for data processing on this website?
The website operator is responsible. You can find the contact information under the section “Controller”.
How is personal data collected?
Some data is provided directly by you (e.g. by contacting us via email or phone). Other data is automatically collected or collected with your consent through IT systems, such as technical data (e.g. browser, OS, time of access).
Why is personal data processed?
Some data is processed to ensure the website functions correctly. Other data may be used to analyze user behavior.
What rights do you have regarding your data?
You have the right to request information, free of charge, about the origin, recipients, and purpose of your stored personal data (Art. 15 GDPR). You also have the right to request the correction, deletion, or restriction of processing of your data. Additionally, you may lodge a complaint with the responsible supervisory authority.
You can contact us at any time if you have questions regarding your rights or data protection in general.
Analysis Tools and Third-Party Tools
When visiting this website, your browsing behavior may be analyzed using analytics tools. Detailed information can be found in the following sections.
2. General Information (including mandatory disclosures)
Controller (Responsible Entity)
The data processing controller on this website is:
ED-Pack GmbH
Eichenweg 15
72555 Metzingen
Germany
Phone: +49 (0)7123 9366998
Email: denzel@ed-pack.de
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data (Art. 4 No. 7 GDPR).
Legal Basis for Data Processing
Consent (Art. 6 para. 1 lit. a GDPR):** If you have given consent. Special categories of personal data are processed under Art. 9 para. 2 GDPR.
Performance of a contract (Art. 6 para. 1 lit. b GDPR):** When necessary to fulfill a contract or pre-contractual obligations.
Legal obligation (Art. 6 para. 1 lit. c GDPR):** When legally required.
Legitimate interests (Art. 6 para. 1 lit. f GDPR):** For example, ensuring secure website operation.
The applicable legal basis in each case is specified in the relevant sections of this policy.
Revocation of Consent
You may revoke your consent at any time with future effect. The legality of data processing before revocation remains unaffected.
Right to Object (Art. 21 GDPR)
General Objection Right (Art. 21 para. 1 GDPR):** If processing is based on Art. 6 para. 1 lit. e or f GDPR, you may object at any time for reasons arising from your particular situation.
Objection to Direct Marketing (Art. 21 para. 2 GDPR):** You may object to the processing of your personal data for direct marketing purposes at any time.
Storage Duration
Unless a specific retention period is mentioned, we store your personal data only as long as necessary for its processing purpose. Data will be deleted if you request deletion or revoke consent, unless legal obligations require longer storage (e.g. tax or commercial law retention periods).
Right to Access, Erasure, and Rectification
You have the right to obtain information about your stored data and request its correction or deletion (Art. 15, 16, 17 GDPR). Please contact us with such requests.
Right to Restriction of Processing
You can request restriction of processing if:
* You dispute the accuracy of the data.
* Processing is unlawful but you oppose deletion.
* We no longer need the data, but you require it for legal claims.
* You objected under Art. 21 para. 1 GDPR and the decision is pending.
In these cases, the data will only be processed under certain conditions.
Right to Data Portability
You may request your personal data in a structured, commonly used, machine-readable format (Art. 20 GDPR), if processing is based on consent or a contract.
Right to Complain to a Supervisory Authority
You have the right to lodge a complaint with a data protection authority if you believe your data is processed unlawfully.
SSL/TLS Encryption
This site uses SSL/TLS encryption to secure your data. You can recognize it by “https\://” and the lock symbol in your browser.
Objection to Promotional Emails
We object to the use of our contact data (published in compliance with legal obligations) for unsolicited advertising and reserve the right to take legal action in case of spam emails.
3. Hosting and Content Delivery Networks (CDN)
Hosting by Amazon Web Services (AWS)
Our website is hosted by:
Amazon Web Services EMEA SARL
38 Avenue John F. Kennedy
1855 Luxembourg
Your personal data may be transferred to AWS’s parent company in the USA. This transfer is based on the EU Standard Contractual Clauses. More details:
[https://aws.amazon.com/de/blogs/security/aws-gdpr-data-processing-addendum/](https://aws.amazon.com/de/blogs/security/aws-gdpr-data-processing-addendum/)
Privacy Policy: [https://aws.amazon.com/de/privacy/](https://aws.amazon.com/de/privacy/)
We use AWS under Art. 6 para. 1 lit. f GDPR for reliable website operation. If consent is required, processing is based on Art. 6 para. 1 lit. a GDPR and §25 para. 1 TDDDG. Consent can be withdrawn at any time.
AWS is certified under the **EU-US Data Privacy Framework (DPF)**. More information:
[https://www.dataprivacyframework.gov/participant/5776](https://www.dataprivacyframework.gov/participant/5776)
Data Processing Agreement (DPA)
We have signed a DPA with AWS to ensure your data is processed only under our instructions and in compliance with the GDPR.
4. Data Collection on This Website
Cookies
Our website uses “cookies”. Cookies are small text files stored on your device, either temporarily (session cookies) or permanently. Session cookies are deleted when you leave the site, permanent cookies remain until manually deleted or automatically by your browser.
Cookies may be placed by us (first-party) or by third parties. Third-party cookies enable third-party services (e.g. payment processing).
Cookies serve various functions. Some are essential for technical functionality (e.g. shopping cart), others are used for analytics or marketing.
Essential cookies are stored based on Art. 6 para. 1 lit. f GDPR, unless another legal basis is stated. Where consent is required (e.g. for analytics), processing is based on Art. 6 para. 1 lit. a GDPR and §25 para. 1 TDDDG. Consent can be withdrawn at any time.
You can configure your browser to notify you before cookies are set, allow cookies only in specific cases, or block cookies entirely. Disabling cookies may impair website functionality.
Details on specific cookies and services used can be found in this privacy policy.
Contact by Email, Phone, or Fax
If you contact us by email, phone, or fax, your inquiry and associated personal data (name, request) will be stored and processed for the purpose of handling your request. We do not share this data without your consent.
Processing is based on Art. 6 para. 1 lit. b GDPR if the request is related to a contract, or on Art. 6 para. 1 lit. f GDPR (our legitimate interest in processing inquiries). If consent is obtained, Art. 6 para. 1 lit. a GDPR applies. You can revoke consent at any time.
We retain the data until you request deletion, revoke consent, or the purpose of storage ceases. Statutory retention obligations remain unaffected.