1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.
1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Tanja Kugelmann, PapierRomantik, Augsburger Straße 16, 85221 Dachau, Germany, Tel.: 01525 8910684, Email: info@papier-romantik.de. The controller responsible for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
2.1 When using our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to the site server (so-called “server log files”). When you visit our website, we collect the following data that is technically necessary for us to display the website to you:
– Our visited website
– Date and time at the moment of access
– Amount of data sent in bytes
– Source/reference from which you came to the page
– Browser used
– Operating system used
– IP address used (if applicable: in anonymized form)
The processing is carried out in accordance with Art. 6 (1) (f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files subsequently if there are concrete indications of illegal use.
2.2 This website uses SSL or TLS encryption for security reasons and for the protection of the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser line.
To make visiting our website attractive and to enable the use of certain functions, we use cookies, which are small text files that are stored on your device. Some of these cookies are automatically deleted after closing the browser (so-called “session cookies”), others remain stored on your device for a longer time and enable the saving of page settings (so-called “persistent cookies”). In the latter case, you can find the storage duration in the overview of the cookie settings in your web browser.
If personal data is also processed by individual cookies implemented by us, the processing is carried out in accordance with Art. 6 (1) (b) GDPR either for the performance of the contract, in accordance with Art. 6 (1) (a) GDPR in the case of consent given or in accordance with Art. 6 (1) (f) GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.
You can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or generally.
Please note that if cookies are not accepted, the functionality of our website may be limited.
When you contact us (e.g. via contact form or email), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used solely for the purpose of responding to your request or for establishing contact and the associated technical administration.
The legal basis for processing this data is our legitimate interest in responding to your request pursuant to Art. 6 (1) (f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) (b) GDPR. Your data will be deleted after final processing of your inquiry; this is the case if it can be inferred from the circumstances that the relevant facts are finally clarified and provided that there are no statutory retention obligations.
As part of the comment function on this website, in addition to your comment, information about the time of creation of the comment and your chosen commentator name are stored and published on this website. Furthermore, your IP address is logged and stored. This storage of the IP address is done for security reasons and in case the person concerned violates the rights of third parties or posts illegal content through a submitted comment. We need your email address to contact you in case a third party should object to your published content as illegal. The legal bases for storing your data are Art. 6 para. 1 lit. b and f GDPR. We reserve the right to delete comments if they are objected to as illegal by third parties.
6.1 Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables an analysis of your use of our website.
By default, when visiting the website, Google Analytics 4 sets cookies, which are stored as small text elements on your device and collect certain information. This information also includes your IP address, which is however shortened by Google by the last digits to exclude direct personal reference.
The information is transferred to Google’s servers and processed there. Transfers to Google LLC based in the USA are also possible.
Google uses the collected information on our behalf to evaluate your use of the website, to compile reports on website activities for us, and to provide other services related to website use and internet usage. The shortened IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google. The data collected through the use of Google Analytics 4 is stored for a period of two months and then deleted.
All processing described above, in particular the setting of cookies on the device used, only occurs if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR.
Without your consent, Google Analytics 4 will not be used during your visit to the site. You can revoke your given consent at any time with effect for the future. To exercise your right of revocation, please deactivate this service via the “Cookie Consent Tool” provided on the website.
We have concluded a data processing agreement with Google that ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.
For the transfer of data to the USA, Google relies on Standard Contractual Clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
Further legal information about Google Analytics 4, including a copy of the aforementioned standard contractual clauses, can be found at https://policies.google.com/privacy?hl=en&gl=en and at https://policies.google.com/technologies/partner-sites
Demographic characteristics
Google Analytics 4 uses the special feature “demographic characteristics” and can create statistics that make statements about the age, gender, and interests of site visitors. This is done by analyzing advertisements and information from third-party providers. This allows target groups for marketing activities to be identified. However, the collected data cannot be assigned to a specific person and will be deleted after being stored for a period of two months.
Google Signals
As an extension to Google Analytics 4, Google Signals can be used on this website to create cross-device reports. If you have enabled personalized ads and linked your devices to your Google account, Google can, subject to your consent to use Google Analytics according to Art. 6 Para. 1 lit. a GDPR, analyze your usage behavior across devices and create database models, including for cross-device conversions. We do not receive any personal data from Google, only statistics. If you want to stop cross-device analysis, you can disable the “Personalized Advertising” feature in your Google account settings. Follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=en For more information about Google Signals, visit the following link: https://support.google.com/analytics/answer/7532985?hl=en
UserIDs
As an extension to Google Analytics 4, the “UserIDs” function can be used on this website. If you have consented to the use of Google Analytics 4 according to Art. 6 Para. 1 lit. a GDPR, have set up an account on this website, and log in to this account on different devices, your activities, including conversions, can be analyzed across devices.
6.2 Google Tag Manager
This website uses the “Google Tag Manager”, a service of the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: “Google”).
The Google Tag Manager provides a technical basis for bundling various web applications, including tracking and analysis services, and calibrating, controlling, and linking them to conditions via a unified user interface. The Google Tag Manager itself does not store any information on user devices or read them out. The service also does not perform any independent data analysis. However, when a page is accessed, your IP address is transmitted to Google via the Google Tag Manager and may be stored there. Transmission to Google LLC servers in the USA is also possible. You can revoke your given consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the “Cookie Consent Tool” provided on the website.
We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.
For the transfer of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
Facebook Pixel for Creating Custom Audiences
Within our online offer, we use the “Facebook Pixel” service from the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”)
When a user clicks on an advertisement we place on Facebook, the URL of our linked page is extended with a parameter using “Facebook Pixel”. This URL parameter is then entered into the user’s browser by a cookie set by our linked page itself after redirection.
On one hand, this allows Facebook to determine visitors to our online offer as a target group for displaying ads (so-called “Facebook Ads”). Accordingly, we use the service to display the Facebook Ads we place only to those Facebook users who have also shown an interest in our online offer or who have certain characteristics (e.g., interests in certain topics or products determined based on the websites visited) that we transmit to Facebook (so-called “Custom Audiences”).
On the other hand, “Facebook Pixel” can be used to track whether users are redirected to our website after clicking on a Facebook advertisement and what actions they take there (so-called “Conversion Tracking”).
The collected data is anonymous for us, therefore providing no conclusions about the identity of users. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes.
All processing described above, especially the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent according to Art. 6 Para. 1 lit. a GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.
We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.
The information generated by Facebook is usually transferred to a Facebook server and stored there; in this context, a transfer to servers of Meta Platforms Inc. in the USA may also occur.
For the transfer of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
8.1 Instagram Plugins
Plugins from the social network of the following provider are used on our website: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland
These plugins enable direct interactions with content on the social network.
To increase the protection of your data when visiting our website, the plugins are initially deactivated using a so-called “2-click” or “Shariff” solution integrated into the page.
This integration ensures that when accessing a page of our website that contains such plugins, no connection is established with the provider’s servers.
Only when you activate the plugins and thereby give your consent to data transmission in accordance with Art. 6 Para. 1 lit. a GDPR, does your browser establish a direct connection to the provider’s servers. In this process, regardless of whether you are logged into an existing user profile, certain information about your device used (including your IP address), your browser, and your page history is transmitted to the provider and may be further processed there.
If you are logged into an existing user profile on the provider’s social network, information about interactions made through the plugins will also be published there and displayed to your contacts.
You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation has no influence on the data that has already been transferred to the provider.
Data may also be transferred to: Meta Platforms Inc., USA
We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.
For the transfer of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
8.2 Pinterest Plugins
Plugins from the social network of the following provider are used on our website: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland
These plugins enable direct interactions with content on the social network.
To increase the protection of your data when visiting our website, the plugins are initially deactivated and integrated into the page using a so-called ‘2-click’ or ‘Shariff’ solution.
This integration ensures that no connection is established with the provider’s servers when a page of our website containing such plugins is accessed.
Only when you activate the plugins and thereby give your consent to data transmission in accordance with Art. 6 Para. 1 lit. a GDPR, does your browser establish a direct connection to the provider’s servers. In this process, regardless of whether you are logged into an existing user profile, certain information about your device used (including your IP address), your browser, and your page history is transmitted to the provider and may be further processed there.
If you are logged into an existing user profile on the provider’s social network, information about interactions made through the plugins will also be published there and displayed to your contacts.
You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation has no influence on the data that has already been transferred to the provider.
Data may also be transferred to: Pinterest Inc., USA
We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.
For the transfer of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
8.3 Google reCAPTCHA
On this website, we use the CAPTCHA service of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data may also be transferred to: Google LLC, USA. For the visual design of the Captcha window, the provider uses “Google Fonts”, which are fonts loaded from the internet by Google. This does not involve processing any information other than that mentioned above, which is already transferred to Google through the functionality of ReCaptcha.
The service checks whether an input is made by a natural person or abusively by machine and automated processing, and blocks spam, DDoS attacks, and similar automated harmful accesses. To ensure that an action is taken by a human and not by an automated bot, Cloudflare Turnstile collects the IP address of the device used, identification data of the browser and operating system type used, as well as the date and duration of the visit, and transmits these to the provider’s servers for evaluation.
The legal basis is our legitimate interest in determining individual responsibility on the internet and preventing abuse and spam in accordance with Art. 6 para. 1 lit. f GDPR.
We have concluded a data processing agreement with the provider that ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.
For the transfer of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
8.4 Google Photos
This website uses the image service “Google Photos” from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: “Google”) for the integration and display of photographs.
Google Photos itself does not store or read any information on user devices. The service also does not perform any independent data analysis.
However, when loading image files from the Google network, your IP address is transmitted to Google when the page is accessed and may be stored there. A transfer to servers of Google LLC. in the USA is also possible.
This processing is only carried out if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. Without this consent, image files will not be loaded via Google Photos.
You can revoke your given consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the “Cookie Consent Tool” provided on the website. We have concluded a data processing agreement with Google, which obliges Google to protect the data of our site visitors and not to pass it on to third parties.
For the transfer of data from the EU to the USA, Google relies on so-called standard data protection clauses of the European Commission, which are intended to guarantee compliance with the European data protection level in the USA.
You can find further data protection information on Google Photos here: https://policies.google.com/privacy?hl=en
Cookie Consent Tool
This website uses a so-called “Cookie Consent Tool” to obtain effective user consent for cookies and cookie-based applications that require consent. The “Cookie Consent Tool” is displayed to users when the page is accessed in the form of an interactive user interface, on which consent for certain cookies and/or cookie-based applications can be given by ticking a box. By using the tool, all cookies/services requiring consent are only loaded when the respective user grants consent by ticking the corresponding box. This ensures that such cookies are only set on the respective user’s end device if consent has been given.
The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed in this context.
If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this is done in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in a legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website.
Further legal basis for the processing is also Art. 6 para. 1 lit. c GDPR. As the responsible party, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.
Where necessary, we have concluded a data processing agreement with the provider that ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.
You can find more information about the operator and the setting options of the Cookie Consent Tool directly in the corresponding user interface on our website.
10.1 The applicable data protection law grants you the following data subject rights (rights of information and intervention) with respect to the processing of your personal data by the controller, whereby reference is made to the cited legal basis for the respective exercise requirements:
– Right of access according to Art. 15 GDPR;
– Right to rectification according to Art. 16 GDPR;
– Right to erasure according to Art. 17 GDPR;
– Right to restriction of processing according to Art. 18 GDPR;
– Right to notification according to Art. 19 GDPR;
– Right to data portability according to Art. 20 GDPR;
– Right to withdraw given consent according to Art. 7 Para. 3 GDPR;
– Right to lodge a complaint according to Art. 77 GDPR.
10.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR LEGITIMATE INTERESTS AFTER BALANCING INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.
IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
The duration of storage of personal data is determined by the respective legal basis, the processing purpose and – if applicable – additionally by the respective statutory retention period (e.g., commercial and tax law retention periods).
When processing personal data on the basis of explicit consent pursuant to Art. 6 Para. 1 lit. a GDPR, this data is stored until you revoke your consent.
If there are statutory retention periods for data that is processed within the framework of legal or similar obligations based on Art. 6 Para. 1 lit. b GDPR, this data will be routinely deleted after the retention periods have expired, provided that it is no longer required for the fulfillment or initiation of the contract and/or we have no legitimate interest in its continued storage.
When processing personal data on the basis of Art. 6 Para. 1 lit. f GDPR, this data is stored until you exercise your right to object pursuant to Art. 21 Para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
When processing personal data for the purpose of direct marketing on the basis of Art. 6 Para. 1 lit. f GDPR, this data is stored until you exercise your right to object pursuant to Art. 21 Para. 2 GDPR.
Unless otherwise stated in the other information in this declaration on specific processing situations, stored personal data will be deleted if it is no longer necessary for the purposes for which it was collected or otherwise processed.
Private appointments at our studio in Dachau’s historic old town are available upon request.
© 2021 – 2025 PapierRomantik | Tanja Kugelmann | All Rights Reserved
