Privacy policy

1) Information about the collection of personal data and contact details of the person responsible

1.1We are pleased that you visit our website and thank you for your interest. In the following we will inform you about dealing with your personal data when using our website. Personal data is all data with which you can be personally identified.

1.2Papercrush GmbH, Chausseestr. 59 b, 10115 Berlin, Germany, Tel.: +49 30 94046072, email: info@papercrush.de. The person responsible for processing personal data is the natural or legal person who decides alone or together with others about the purposes and means of processing personal data.

1.3This website uses an SSL and TLS encryption. You can see an encrypted connection to the string "https: //" and the castle symbol in your browser line.

2) Data acquisition when visiting our website

When it comes to the mere informative use of our website, i.e. if you do not register or otherwise convey information, we only collect data that your browser transmits to our server (so-called "server log files"). When you call up our website, we will collect the following data that is technically necessary for us to display the website:

  • Our visited website
  • Date and time at the time of access
  • Quantity of the data sent in byte
  • Source/reference from which they came to the page
  • Browser used
  • Operating system used
  • Used IP address (possibly: in anonymized form)

The processing takes place in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. There is no transfer or other use of the data. However, we reserve the right to check the server log files retrospectively, should indicate specific indications of illegal use.

3) Hosting & Content Delivery Network

Hosting by Shopify
We use the shop system of the service provider Shopify International Limited, Victoria Building, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"), for the purpose of hosting and the display of the online shop based on one Processing on our behalf. All data collected on our website is processed on the Shopify servers. As part of the aforementioned services of Shopify, data can also be used as part of a further processing to the Shopify Inc., 150 ELGIN ST, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing, Shopify Payments (USA) Inc . or Shopify (USA) Inc. In the event of the transmission of data to Shopify Inc. in Canada, the reasonable data protection level is guaranteed by the European Commission's appropriateness decision. Further information on the data protection from Shopify can be obtained on the website below: https://www.shopify.de/legal/data protection
Further processing on other servers than the aforementioned of Shopify only takes place in the framework that is communicated below.

4) Cookies

In order to make the visit of our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. In some cases, these cookies are automatically deleted after closing the browser (so-called "session cookies"), some of these cookies remain longer on their device and enable the storage of side settings (so-called "persistent cookies"). In the latter case, you can find the memory duration of the overview of the cookie settings of your web browser.
If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 Para. 1 Lit.B GDPR either for the implementation of the contract, in accordance with Art. 6 Para. 1 lit. a GDPR in the event of consent or According to Art. 6 Para. 1 Lit. f GDPR to maintain our legitimate interests in the best possible functionality of the website and a customer -friendly and effective design of the page visit.
You can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or can rule out the acceptance of cookies for certain cases or in general.
Please note that the functionality of our website may be restricted if you are not accepted.

5) contact

As part of contact with us (e.g. via contact form or email)-only for the purpose of processing and answering your request and only to the extent required-personal data are processed. The legal basis for the processing of this data is our legitimate interest in answering your concern in accordance with Art. 6 Para. 1 lit. f GDPR. If your contact is aimed at a contract, the additional legal basis for the processing is Art. 6 Para. 1 lit. b GDPR. Your data will be deleted if it can be seen from the circumstances that the affected fact is finally clarified and if there are no legal retention obligations

6) Use of customer data for direct marketing

6.1Registration for our email newsletter

If you register for our email newsletter, we will send you information about our offers regularly. Your email address is solely mandatory for sending the newsletter. The specification of further data is voluntary and is used to be able to address you personally. For the newsletter shipping, we use the so-called Double Opt-in that ensures that you will only receive newsletters if you have expressly confirmed your consent to the newsletter reception by pressing an email address provided to the specified email address

By activating the confirmation link, you will give us your consent to the use of your personal data in accordance with Art. 6 Para. 1 Lit. a GDPR. Here we save your IP address entered by the Internet Service provider (ISP) as well as the date and time of registration in order to be able to understand a possible misuse of your email address at a later date. The data collected by us when registering for the newsletter are used strictly. You can unsubscribe from the newsletter provided in the newsletter at any time via the link provided or by means of a message to the responsible responsible person. After deregistration, your e-mail address will be deleted immediately in our newsletter distributor, unless you have expressly consented to further use of your data or we are reserved for any further data usage that is legally permitted and about which we inform you in this declaration.

6.2- Newsletter shipping via Klaviyo
Our email newsletter is sent by the technical service provider »Klaviyo«, 225 Franklin St, Boston, MA 02110, USA (http://www.klaviyo.com/) to which we will pass on your data provided when registering for the newsletter. This transfer takes place in accordance with Art. 6 Para. 1 lit. f GDPR and serves our legitimate interest in the use of an advertising -effective, safe and user -friendly newsletter system. Please note that your data is usually transferred to a clavy server in the USA and stored there.
Klaviyo uses this information to send the newsletter on our behalf. Klaviyo does not use the data of our newsletter receivers to write them down or pass them on to third parties.
To protect your data in the United States, we have a data processing order ("Data Processing Agreement") with Klaviyo, in which Klaviyo is committed to protecting our users' data in accordance with its data protection regulations on our behalf and in particular not to third parties to pass on.
You can view the data protection regulations of Klaviyo here: https://www.klaviyo.com/privacy

6.3- Advertising by mail mail
On the basis of our legitimate interest in personalized direct marketing, we reserve the right to have your first and last name, your postal address and - as far as we received this additional information from you as part of the contractual relationship - your title, academic degree, your year of birth and your professional, Save the industry or business name in accordance with Art. 6 Para. 1 Lit. f GDPR and use it for the sending of interesting offers and information about our products by letter mail.
You can object to the person responsible for the storage and use of your data for this purpose at any time.

7) Data processing for order processing

7.1Insofar as the contractual processing is required for delivery and payment purposes, the personal data we collect will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 Para. 1 Lit.B GDPR.

If we are on the basis of a corresponding contract updates for goods with digital elements or for digital products, we will process the contact details you transmit when you order (name, address, email address) in order to be within the framework of our statutory information obligations in accordance with Art. 6 ABS . 1 lit. c GDPR on a suitable communication path (such as postal or by email) about upcoming updates in person in the statutory period. Your contact details will be used strictly for communications about updates owed by us and for this purpose by us only processed to the extent that this is necessary for the respective information.

To handle your order, we also work with the subsequent service provider (s), who support us in whole or in part in the implementation. Certain personal data is transmitted to these service providers in accordance with the following information.

7.2Use of special service providers for ordering and processing

- Amazon Fulfillment (FBA)
The order processing takes place via the service provider "Amazon" (Amazon EU S.A. R.L., 38 Avenue John F. Kennedy, L-1855 Luxembourg) as part of the "Shipping by Amazon" (= fulfillment by Amazon). Your personal data will only be passed on for the purpose of processing the online order to Amazon. The transfer takes place in accordance with Art. 6 Para. 1 lit. b GDPR and only insofar as this is necessary for the order processing. Details on data protection from Amazon and its data protection declaration can be viewed at the following link: https://www.amazon.de/GP/Help/Customer/display.html/ref = footer_privacy? Ie = utf8& nodeid = 3312401
- Easybill
Order processing (especially the invoice is provided) takes place via the service provider "Easybill" (Easybill GmbH, Düsselstr. 21, 41564 Kaarst). Name, address and, if applicable, further personal data will be passed on to Easybill exclusively to process the online order in accordance with Art. 6 Para. 1 Lit. B GDPR. Your data is only passed on if this is actually necessary for the processing of the order. Details on the data protection from Easybill and the data protection declaration from Easybill can be viewed on the Easybill website at easybill.de.

7.3Use of payment service providers (payment services)

- Amazon Pay
When selecting the payment method "Amazon Pay", payment processing is made via the payment service provider Amazon Payments Europe S.C.A., 38 Avenue J.F. Kennedy, L-1855 Luxembourg (hereinafter: "Amazon Payments"), to which we will pass on your information given as part of the ordering process in addition to the information about your order in accordance with Art. 6 Para. 1 lit. b GDPR. Your data is passed on exclusively for the purpose of payment processing with the payment service provider Amazon Payments and only insofar as it is necessary. If when using Amazon Pay Cookies, i.e. small text files that are stored on the end device, this is made exclusively on the basis of your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. This consent can be revoked at any time via the "cookie consent tool" implemented on the website. You can get more information about the data protection regulations of Amazon Payments from the website below: https://pay.amazon.de/Help/82974
- PayPal
When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment in installments" via PayPal, we will give your payment data as part of the payment processing to the PayPal (Europe) S.A.R.L. et cie, s.c.a., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as "PayPal"). The transfer takes place in accordance with Art. 6 Para. 1 lit. b GDPR and only insofar as this is necessary for payment processing.
PayPal reserves the execution of a credit information via PayPal, direct debit via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment" via PayPal. For this purpose, your payment data will be passed on to the determination of your solvency on credit agency in accordance with Art. 6 Para. 1 Lit. f GDPR on the basis of PayPal's legitimate interest. PayPal uses the result of the credit check in relation to the statistical probability of payment for the purpose of deciding on the provision of the respective payment method. The credit information can contain probability values ​​(so-called score values). Insofar as score values ​​flow into the result of the credit information, you have your basis in a scientifically recognized mathematical-statistical process. The calculation of the score values ​​flow, among other things, but not exclusively, address data. Further data protection information, including the information used, please refer to the PayPal data protection declaration: https://www.paypal.com/de/WebApps/mpp/UA/Privacy full
You can object to this processing of your data at any time by a message to PayPal. However, PayPal may remain entitled to process your personal data, provided that this is necessary for contractual payment processing.
- Shopify Payments
We use the payment service provider "Shopify Payments", 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered via the payment service provider Shopify Payments, payment processing is carried out via the technical service provider Stripe Payments Europe Ltd. , 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to which we can find your information given as part of the order process in addition to your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency and transaction number) pass on according to Art. 6 Para. 1 lit. b GDPR. Your data is passed on exclusively for the purpose of payment processing with the Stripe Payments Europe Ltd. And only insofar as it is necessary. You can find more information on the data protection of Shopify Payments at the following Internet address: https://www.shopify.com/legal/privacy.
Data protection information on Stripe Payments Europe Ltd. You will find here: https://stripe.com/de/privacy

8) Online marketing

Facebook pixel for the creation of Custom Audiences (with Cookie Consent Tool)
Within our online offer, the so-called "Facebook pixel" of the social network Facebook is used, which is operated by the Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Facebook").
If a user clicks on a advertisement that we are played, which is played on Facebook, the URL of our linked page is added to Facebook Pixel. If our page via Pixel allows you to share data with Facebook, this URL parameter is inscribed in the user's browser by cookie, which sets our linked page itself. This cookie is then read out by Facebook Pixel and enables the data to be forwarded to Facebook.
With the help of the Facebook pixel, Facebook is possible to determine visitors to our online offer as a target group for displaying advertisements (so-called "Facebook Ads"). Accordingly, we use the Facebook pixel to notify the Facebook ADs that we have connected only that have shown that our online offer has been interested in our online offer or the certain characteristics (e.g. interests on certain topics or products that were visited based on the visited Websites are determined) which we transmit to Facebook (so -called "Custom Audiences"). With the help of the Facebook pixel, we would also like to ensure that our Facebook ads correspond to the potential interest of the users and do not have an annoying effect. In this way, we can continue to evaluate the effectiveness of Facebook advertisements for statistical and market research purposes by understanding whether users have been forwarded to our website after clicking on a Facebook advertisement (so-called "conversion").
The data collected are anonymous for us, so we do not provide any conclusions about the identity of the users. However, the data is saved and processed by Facebook, so that a connection to the respective user profile is possible and Facebook the data for your own advertising purposes, according to the Facebook data usage guideline (https://www.facebook.com/About/privacy/). The data can enable Facebook and its partners to switch advertisements on and outside of Facebook.
The data processing associated with the use of the Facebook Pixel are only available if your express consent is available in accordance with Art. 6 Para. 1 Lit. a GDPR. You can cancel your consent with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.

9) Web analysis services

Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analysis service from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google (Universal) Analytics uses so -called "cookies", these are text files that are stored on your end device and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website (including the shortened IP address) is usually transferred to a Google server and stored there, here it can also be transmitted to the Google LLC server. come in the USA.
This website uses Google (Universal) Analytics exclusively with the "_anonymizeiP ()" expansion, which ensures anonymization of the IP address by cutting and excludes direct personal relationship. The expansion previously reduced your IP address from Google within Member States of the European Union or in other contracting states of the agreement via the European Economic Area. Only in exceptional cases is the full IP address transferred to a server by Google LLC.In the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activities and to provide us with other services associated with website usage and internet usage. The IP address transmitted by your browser as part of Google (Universal) Analytics is not merged with other Google data.
Google Analytics enables a special function, the so -called "demographic characteristics", and also the creation of statistics with statements about age, gender and interests of the side visitors on the basis of an evaluation of interest -related advertising and with the supply of third -party information. This allows the definition and differentiation of user circles on the website for the purpose of the target group -optimized orientation of marketing measures. However, no specific person can be assigned to the "demographic characteristics".
Details on the processing initiated by Google Analytics and how Google's dealings with data from websites can be found here: https://policies.google.com/Technologies/partner sites
All processing described above, in particular the setting of Google Analytics cookies for reading information on the end device used, will only be carried out if you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. Without this granting of consent, the use of Google Analytics does not matter during your page visit.
You can revoke your consent granted at any time with effect for the future. To exercise your revocation, please deactivate this service in the "cookie consent tool" provided on the website. We have concluded an order processing contract with Google for the use of Google Analytics, with which Google is obliged to protect our side visitors' data and not to pass it on to third parties.
For the transmission of data from the EU to the USA, Google relies on so -called standard data protection clauses of the European Commission, which should ensure compliance with the European data protection level in the United States.
Further information on Google (Universal) Analytics can be found here: https://policies.google.com/privacy? hl = de& gl = de

10) Retargeting/ remarketing/ recommendation advertising

Google ads remarketing
Our website uses the functions of Google Ads Remarketing, with this we advertise for this website in the Google search results, as well as to third websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). For this purpose, Google sets a cookie in the browser of its end device, which automatically enables interest-based advertising using a pseudonymous cookie ID and, based on the pages you are visited,. In addition, data processing only takes place if you have agreed to Google that your Internet and app browser history from Google is linked to your Google account and information from your Google account is used for personalizing ads that you can use in the web regard. If you are logged in on Google during the page visit to our website, Google uses your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, your personal data from Google is temporarily linked to Google Analytics data in order to form target groups. As part of the use of Google Ads Remarketing, it can also be transmitted to the Google LLC server. come in the USA.
Details on the processing initiated by Google Ads remarketing and how Google's dealings with data from websites can be found here: https://policies.google.com/Technologies/partner sites
You can permanently contradict the setting of cookies by Google Ads remarketing by downloading and installing the browser plug-in from Google available under the following link:
https://www.google.com/settings/ads/Onweb/
You can view further information and the data protection regulations regarding advertising and Google here:
https://www.google.com/policies/Technologies/ads/
All processing described above, in particular the setting of cookies for reading information on the end device used, will only be carried out if you have given us your express consent in accordance with Art. 6 Para. 1 Lit. a GDPR. You can cancel your consent with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.

Pinterest retargeting pixel
On this website there is a pixel (Pinterest Tag) of the Pinterest Europe Ltd. (Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest") integrated. With the help of the pixel, information about the surfing behavior of website visitors can be collected, saved and evaluated in a pseudonymized form. Further information that has stored the Pinterest, for example, due to the owner of an account on the social network "Pinterest" about the user. Pinterest analyzes the surfing behavior based on an algorithm and can then be targeted product recommendations as personalized advertising banners on the user's pinterest account Show. Pinterest can also combine the information collected via the pixel with further information that has collected Pinterest via other websites and / or in connection with the use of the social network "Pinterest", and thus create pseudonymized usage profiles. However, the information recorded is used to personally identify visitors to this website.
All processing described above, in particular the setting of cookies for reading information on the end device used, will only be carried out if you have given us your express consent in accordance with Art. 6 Para. 1 Lit. a GDPR. You can cancel your consent with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.

11) Page functionalities

Trustami confidence seal
The Trustami trust seal is integrated on this website for displaying the collected reviews and social media feedback. This serves to implement our legitimate interests on optimal marketing of our offer on our own website in accordance with Art. 6 Para. 1 lit. f GDPR.
When calling up the Trustami trust seal, the web server automatically stores data (access data) in the form of a server log file, which, for example, contains the date and time of access, your IP address in abbreviated form and the requesting provider. These access data are not evaluated and automatically overwritten at the latest seven days after the end of your page visit. The Trustami seal of trust and the services advertised with it are an offer from Trustami GmbH, Schröderstraße 5, 10115 Berlin.
You can find more information on Trustami, the automated processing of data and the data protection regulations https://www.trustami.com/data protection/

12) Tools and other

12.1- Accountone
To complete the accounting, we use the cloud -based accounting software from Accountone GmbH, Fördepromenade 4d, 24944 Flensburg ("Accountone").
Accountone processes input and output bills as well as the bank movements of our company to automatically record invoices, to match the transactions and to create the financial accounting in a partially automated process.
If personal data is also processed, the processing is carried out in accordance with Art. 6 Para. 1 Lit. f GDPR on the basis of our legitimate interest in an efficient organization and documentation of our business processes.
You can find more information on AccountOne, automated processing of data and data protection regulations at https://www.accountone.de/Data protection/

12.2Cookie Consent tool

This website uses a so-called "cookie consent tool" to obtain effective user consent for cookies and cookie-based applications. The "cookie consent tool" is displayed in the form of an interactive user interface, on which checking can be issued for certain cookies and/or cookie-based applications. The use of the tool only invites all cookies/services subject to consent if the respective user grants the corresponding consent by ticking. This ensures that such cookies are only placed on the user's respective end device in the event of a granted consent.
The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed here.
If it comes to the processing of personal data (such as the IP address) in individual cases for the purpose of storing, assigning or logging in cookie settings, this takes place in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest Legal, user -specific and user -friendly consent management for cookies and therefore in a legally compliant design of our website.
The further legal basis for processing is also Art. 6 Para. 1 lit. c GDPR. As the person responsible, we are subject to the legal obligation to make the use of technically not necessary cookies dependent on the respective user consent.
Further information on the operator and the setting options of the cookie consent tool can be found directly in the corresponding user interface on our website.

13) Rights of the person concerned

13.1The applicable data protection law grants you the following rights (rights of information and intervention) with regard to the processing of your personal data, whereby refer to the led legal basis for the respective exercise requirements:

  • Right of information in accordance with Art. 15 GDPR;
  • Right to correction according to Art. 16 GDPR;
  • Right to deletion according to Art. 17 GDPR;
  • Right to restrict the processing in accordance with Art. 18 GDPR;
  • Right to information in accordance with Art. 19 GDPR;
  • Right to data portability in accordance with Art. 20 GDPR;
  • Right to revocation granted consent in accordance with Art. 7 Para. 3 GDPR;
  • Right to complaint according to Art. 77 GDPR.

13.2RIGHT TO OBJECT

If we process your personal data on the basis of our predominant interest in the context of a balancing of interests, you have the right to object to this processing with effect for the future for reasons that arise from your special situation.
If you make use of your right to object, we end the processing of the data concerned. However, further processing is reserved if we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, fundamental rights and fundamental freedoms, or if the processing of assertion, exercise or defend legal claims serves.

If we are processed your personal data to operate direct mail, you have the right to object at any time to the processing of personal data relating to the purpose of such advertising. You can exercise the objection as described above.

If you make use of your right of objection, we end the processing of the data concerned for directives.

14) Duration of the storage of personal data

The duration of the storage of personal data is measured on the basis of the respective legal basis, in the processing purpose and- if relevant- also based on the respective statutory retention period (e.g. commercial and tax law retention periods).

When processing personal data on the basis of express consent in accordance with Art. 6 Para. 1 lit. a GDPR, this data is stored until the person concerned revokes his consent.

If there are statutory retention periods for data that are processed in the context of legal transactions or legal transactions on the basis of Art. 6 Para. 1 lit. b GDPR, this data is routinely deleted after the retention periods, provided that it is no longer necessary for the fulfillment of contract or contract are and/or on our part there is no legitimate interest in the further storage.

When processing personal data on the basis of Art. 6 Para. 1 Lit. f GDPR, this data is saved until the person concerned exerts his right of objection in accordance with Art. 21 Para. 1 GDPR, unless we can compelling legitimate grounds Provide the processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

When processing personal data for the purpose of direct advertising on the basis of Art. 6 Para. 1 lit. f GDPR, this data is saved until the person concerned exerts his right to object in accordance with Art. 21 Para. 2 GDPR.

Unless otherwise aroused from the other information of this explanation about specific processing situations, stored personal data will also be deleted if they are no longer necessary for the purposes for which they were collected or processed in any other way.