Privacy
What we collect, why, and how long we keep it. The German version of this page is at /de/datenschutz.
Who is responsible
Jennifer Rogalski-Koschel
Mozartstraße 16b
12247 Berlin, Germany · hello@germanpackaging.com
We are the controller for the processing described here, under the EU General Data Protection Regulation.
What we collect and why
| Data | Why | Legal basis |
|---|---|---|
| Company name, legal form, address, VAT number, name of the person authorised to sign | To conclude the appointment contract and register the appointment | Art. 6(1)(b) — contract |
| Email address | Contract, reminders, confirmations | Art. 6(1)(b) |
| Shop URLs and brand names | To identify who places packaging on the German market | Art. 6(1)(b) |
| Number of parcels sent to Germany, packaging weights per material | To calculate and file the quantities we are legally required to report | Art. 6(1)(c) — legal obligation |
| Your confirmation of those quantities, with timestamp | Evidence that the figure came from you and was checked | Art. 6(1)(c) and 6(1)(f) — legitimate interest in documenting compliance |
| Documents you upload, such as proof of business registration, invoices or contracts from a recycling system | To verify identity and the correct company name for the contract | Art. 6(1)(b) |
| Payment data | To collect fees and pass on recycling charges | Art. 6(1)(b) |
| Server log data — IP address, time, page requested | Operating and securing the website | Art. 6(1)(f) |
What we deliberately do not collect
We do not collect the names, addresses or order details of your customers. If you use a shop export to tell us how many parcels went to Germany, that file is read in your browser and never reaches our servers — only the resulting number does. The cost calculator on our home page runs entirely in your browser and stores nothing.
Who receives your data
| Recipient | What they get | Why |
|---|---|---|
| Recycling system operator | Company details and quantities | To licence your packaging |
| Stiftung Zentrale Stelle Verpackungsregister | Company details and quantities | Statutory reporting |
| Payment provider Stripe | Payment and billing data | Collecting payment |
| Signature provider provider name | Name, email, identity check | Qualified electronic signature |
| Email and hosting providers names | Contact data, technical data | Operating the service |
Providers acting on our instructions do so under data processing agreements. Where a provider processes data outside the EU, that transfer is covered by the European Commission’s standard contractual clauses or an adequacy decision.
How long we keep it
- Contract and reporting records — for the statutory retention periods under German commercial and tax law, generally six to ten years from the end of the year concerned.
- Quantity confirmations — for the same period, because they document how a reported figure was arrived at.
- Enquiries that do not lead to a contract — deleted after twelve months.
- Server logs — deleted after 7 days.
Your rights
You can ask us for access to your data, correction, deletion, restriction of processing, and portability. Where we rely on legitimate interest, you can object. You can also complain to a supervisory authority — the competent one for us is the Berliner Beauftragte für Datenschutz und Informationsfreiheit.
Note that we cannot delete data we are legally required to keep for reporting and retention purposes.
Fonts and external content
The typefaces used on this site are served from this server, not from Google Fonts or any other outside source. Opening a page does not send your IP address anywhere except to the server hosting this site. There are no embedded videos, maps or social media widgets either.
Cookies
The cookies needed to make the site work store no profile of you and are not used to track you across other websites. Beyond those, the only cookies are the analytics ones described below — and they are set only if you agree.
Analytics
To understand which pages help and which don't, this site can use Google Analytics 4, operated by Google Ireland Limited. It sets cookies and processes a shortened form of your IP address, the pages you visit and technical details of your device.
This only happens if you agree. Nothing is loaded and no cookie is set before you choose. The legal basis is your consent under Art. 6(1)(a) GDPR and section 25(1) of the German Telecommunications Digital Services Data Protection Act. You give or refuse it in the banner, and you can change your mind at any time — the "Cookie settings" link at the bottom left of every page brings the choice back.
Your choice is stored in your browser for a year. Data may be transferred to the United States; the transfer is covered by the European Commission's standard contractual clauses and the EU–US Data Privacy Framework.
Advertising
No advertising cookies are set on this site at present. If that changes, it will be described here and will require your agreement in the same way.
Visit counting
This website counts which site visitors arrived from. Only the date, the referring domain and the page visited are stored. No IP addresses, no cookies and no identifiers are stored, and visitors are not recognised across visits. No conclusions about individual people can be drawn from this.