Privacy policy

Note (prototype): Yellow-marked details are still missing and are maintained in the settings.

1. Controller

RHEINVERPACKUNG Karton und Verpackung Placeholder – to be provided, Am Alten Gymnasium 6, Placeholder – to be provided Placeholder – to be provided, Germany, phone +49 177 3456874, e-mail info@rhein-verpackung.de.

2. Hosting and server log files

When you visit our website the web server automatically processes access data (IP address, date and time, page requested, browser type, referrer) based on our legitimate interest in secure and stable operation (Art. 6 (1) (f) GDPR). Log files are deleted after 14 days. Hosting: provider and server location to follow (vServer, Germany).

3. Cookies

We only use technically necessary cookies: a session cookie (rv_session) for sign-in, cart, language setting and form protection. It contains no tracking identifiers and expires after 14 days or on sign-out. A consent banner is therefore not required. We do not use analytics or advertising cookies.

4. Contact and application form

Data entered in the contact form (name, e-mail, phone, company, message) is processed to handle your enquiry (Art. 6 (1) (b) GDPR) and stored in our customer management system. Application data including CV is processed to carry out the application procedure and deleted no later than six months after completion unless you consent to longer storage.

5. Customer account, configurator and orders

For a customer account we process e-mail address, name, password (hash only), company and address data as well as your saved designs and orders (Art. 6 (1) (b) GDPR). Uploaded logos are used exclusively to visualise and produce your packaging and are not passed on to third parties. Order and invoice data is retained for ten years under German tax law. You can export your data and delete your account in the customer area.

6. Payment processing

For online payment, payment data is transmitted directly to the payment provider Stripe Payments Europe Ltd., Dublin (production phase); we do not receive full card data. Legal basis: Art. 6 (1) (b) GDPR.

7. E-mail

Transactional e-mails (registration, order confirmation, proof approval, shipping) are sent via SMTP provider to follow. We do not send newsletters without separate consent.

8. WhatsApp

The WhatsApp link opens the WhatsApp app or website (Meta Platforms Ireland Ltd.). Data is only transmitted to WhatsApp once you click; WhatsApp's privacy policy applies.

9. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR) as well as the right to lodge a complaint with a supervisory authority. Contact info@rhein-verpackung.de.

10. Data security

Transmission is TLS-encrypted. Passwords are stored as hashes only; uploads are kept outside the public web directory and are only accessible after sign-in.

Last updated: 18/10/2026