Privacy policy

Information on the processing of your personal data pursuant to Articles 13 and 14 of the EU General Data Protection Regulation (GDPR). The German version of this policy is legally authoritative.

1. Controller

The controller within the meaning of the GDPR is:

packconsult GmbH
Engelbergerstraße 45a
79106 Freiburg im Breisgau
Germany

Represented by the Managing Director Ingo Zucker
Phone: +49 172 7536969
Email: info@packconsult.com

We have not appointed a data protection officer, as the legal conditions requiring such an appointment (§ 38 BDSG) do not apply to our company. For any data protection questions, please contact us using the details above.

2. General information and legal bases

As a matter of principle, we process the personal data of our users only to the extent necessary to provide a functional website together with our content and services. Processing regularly takes place only with the data subject's consent, or in cases where consent cannot be obtained for factual reasons and processing is permitted by statutory provisions.

The legal bases for the processing of personal data are, in particular:

• Art. 6(1)(a) GDPR, consent of the data subject;
• Art. 6(1)(b) GDPR, performance of a contract or pre-contractual measures;
• Art. 6(1)(c) GDPR, compliance with a legal obligation;
• Art. 6(1)(f) GDPR, protection of legitimate interests, provided the interests or fundamental rights of the data subject do not override them.

Personal data means any information relating to an identified or identifiable natural person (e.g. name, email address, IP address).

3. Provision of the website and server log files

Each time our website is accessed, the system automatically collects data and information from the accessing device. The following data is collected and stored in so-called server log files:

• IP address of the requesting device;
• date and time of access;
• name and URL of the resource retrieved (requested file/page);
• browser type and version used (user agent);
• the previously visited page (referrer URL), where transmitted.

Processing this data is necessary to deliver the website, to ensure system security and stability, and to prevent misuse. The legal basis is our legitimate interest in a technically flawless and secure operation of the website (Art. 6(1)(f) GDPR). We do not merge this data with other data sources to identify you. Log data is deleted as soon as it is no longer required for the purpose for which it was collected.

4. Hosting

Our website is a static website hosted by a service provider within the European Union:

1&1 IONOS SE
Elgendorfer Straße 57
56410 Montabaur
Germany

IONOS provides the technical infrastructure (servers, storage and delivery of the pages) and, in doing so, processes on our behalf the data arising in connection with the website access (in particular the access data referred to in section 3). The server location is in Germany. We have concluded a data processing agreement with IONOS pursuant to Art. 28 GDPR. The legal basis is our legitimate interest in the secure and efficient provision of our online offering (Art. 6(1)(f) GDPR). No transfer of personal data to countries outside the European Union or the European Economic Area takes place.

5. Self-hosted fonts (web fonts)

To display fonts consistently, we use web fonts that we serve locally within our own hosting. No external font services (e.g. Google Fonts) are integrated via a content delivery network. When you access our website, no connection is therefore established to Google servers or other third-party providers, and no IP address or other personal information of visitors is transmitted to Google or third parties. The fonts are loaded exclusively from our server.

6. Cookies

Our website does not set any tracking or marketing cookies. The analytics tool we use works cookieless (see section 7). Only, where necessary at all, technically required elements are used that are essential for the proper operation of the website and do not allow any conclusions to be drawn about your person. For this reason, no cookie consent banner is required for our website. Should consent-requiring cookies or services be used in the future, we will obtain your consent beforehand pursuant to § 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR.

7. Web analytics with Matomo (self-hosted, cookieless)

To design our website in line with demand, to continuously optimise it and to measure reach statistically, we use the open-source analytics software Matomo. We run Matomo self-hosted on a server in Germany (available under the subdomain matomo.packconsult.com, server location Germany with 1&1 IONOS SE). The data collected is not passed on to third parties and does not leave our sphere of responsibility in Germany.

We have configured Matomo in a particularly privacy-friendly way:

• Cookieless: Matomo does not set any cookies on your device;
• IP anonymisation: your IP address is truncated before any processing (the last bytes are masked) so that no direct attribution to your person is possible;
• Do Not Track: the "Do Not Track" setting of your browser is respected; if it is enabled, no data is collected;
• No data sharing: no data is transferred to third parties and no data is transferred to third countries.

In particular, the pages accessed, the approximate location (derived from the truncated IP) at a coarse resolution, the date and time of access, the device/browser used and the referrer page are processed. The legal basis is our legitimate interest in a demand-oriented and statistically sound design of our online offering (Art. 6(1)(f) GDPR). Due to the cookieless and IP-anonymised configuration, the processing is permitted without consent.

Objection: You can object to collection by Matomo at any time with effect for the future. The simplest way is to activate the "Do Not Track" function in your browser; in this case your visits will not be recorded. In addition, you can inform us of your objection informally using the contact details in section 1.

8. Contact form and contact by email

On our website we offer you the option of contacting us via a contact form. In doing so, we collect the following information:

• Name
• Company
• Email address
• Your message

We process this data exclusively to handle your enquiry and for any follow-up questions. The legal basis, where your enquiry is aimed at concluding or initiating a contract, is Art. 6(1)(b) GDPR (contract / pre-contractual measures); in all other cases the legal basis is our legitimate interest in effectively handling enquiries (Art. 6(1)(f) GDPR). If you tick the corresponding checkbox when submitting, we will additionally send you a copy of your enquiry as a confirmation of receipt to the email address you provided.

Alternatively, you can contact us directly by email (info@packconsult.com) or by phone. In this case, the personal data you transmit is processed for the purpose of handling your request.

Transmission and recipients: Enquiries received via the form are delivered to the responsible mailbox at packconsult. This mailbox is operated by the provider 1&1 IONOS SE (Elgendorfer Straße 57, 56410 Montabaur, Germany); the server location is in Germany. A data processing agreement pursuant to Art. 28 GDPR exists with IONOS. No additional external email dispatch service is used.

Storage period: We store your enquiry until it has been conclusively handled and no further communication is to be expected. Where statutory retention obligations exist (in particular commercial and tax law periods under § 257 HGB, § 147 AO, generally 6 or 10 years), we store the relevant data for the duration of these periods. You may object to the processing at any time or withdraw any consent given; in the event of objection or withdrawal we will delete your data unless statutory retention obligations prevent this.

9. Recipients and processors

Your data is only passed on to third parties if this is necessary to fulfil the stated purposes or if you have consented. Recipients may in particular be the processors we use, namely our hosting and email provider 1&1 IONOS SE (see sections 4 and 8). Our web analytics with Matomo is self-hosted (see section 7); no data is transferred to third parties in the process. Data processing agreements pursuant to Art. 28 GDPR exist with all processors, ensuring that your data is handled in compliance with data protection law. No transfer beyond this, in particular for advertising purposes, takes place.

10. Storage period

We process and store personal data only for as long as is necessary to achieve the respective processing purpose or as required by statutory retention periods. If the purpose ceases to apply or a statutory retention period expires, the data is routinely deleted or anonymised. The specific storage periods are stated with the respective processing activities (sections 3, 7 and 8).

11. Your rights as a data subject

Within the framework of the applicable statutory provisions, you have the following rights:

• Access (Art. 15 GDPR) to the data processed about you;
• Rectification (Art. 16 GDPR) of inaccurate or incomplete data;
• Erasure (Art. 17 GDPR), provided no statutory retention obligations prevent this;
• Restriction of processing (Art. 18 GDPR);
• Data portability (Art. 20 GDPR), receipt of your data in a structured, commonly used and machine-readable format;
• Withdrawal of consent (Art. 7(3) GDPR) with effect for the future, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise your rights, an informal message to the contact details in section 1 is sufficient.

12. Right to object (Art. 21 GDPR)

You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you which is based on Art. 6(1)(f) GDPR (legitimate interest). If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. You can address your objection informally to the contact details in section 1.

13. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your personal data infringes the GDPR. The authority responsible for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, LfDI BW)
Lautenschlagerstraße 20
70173 Stuttgart, Germany
Phone: +49 711 615541-0
Email: poststelle@lfdi.bwl.de
Web: www.baden-wuerttemberg.datenschutz.de

14. Data security (SSL/TLS encryption)

For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the fact that the browser's address line changes from "http://" to "https://" and by the lock symbol in your browser line. When SSL/TLS encryption is activated, the data you transmit to us cannot be read by third parties.

15. Currency and amendment of this privacy policy

This privacy policy is dated 7 August 2026. As our website and offerings develop, or due to changed legal or regulatory requirements, it may become necessary to amend this privacy policy. The current version can be accessed on this page at any time.