Privacy statement

1. Name and contact details of the person responsible for processing and the company data protection officer
The person responsible within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:

EckPack Service GmbH & Co. KG
Saalbaustrasse 8-10
64283 Darmstadt
Telephone: +49 6151 27 382-0
Fax: +49 6151 27 382-20
Commercial register: Darmstadt District Court HRA 7255

EckPack Verwaltungs GmbH
represented by managing director Mr. Martin Flossmann
Saalbaustrasse 8-10
64283 Darmstadt
Telephone: +49 6151 27 382-0
Fax: +49 6151 27 382-20
Commercial register: Darmstadt District Court HRB 88545

The company data protection officer of EckPack Service GmbH & Co. KG is available at the above address or at reachable.

2nd hosting

We host the content of our website with the following provider:


The provider is Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA (hereinafter Webflow). When you visit our website, Webflow collects various log files including your IP addresses. Webflow is a tool for building and hosting websites. Webflow stores cookies or other recognition technologies that are required to display the site, to provide certain website functions and to ensure security (necessary cookies) .For details, see Webflow's privacy policy: Webflow is used on the basis of Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in presenting our website as reliably as possible. If a corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be withdrawn at any time. The transfer of data to the USA is based on the standard contractual clauses of the EU Commission.

Details can be found here:

Order processing
We have concluded an order processing contract (AVV) for the use of the above service. This is a contract required by data protection law, which ensures that the personal data of our website visitors is only processed in accordance with our instructions and in compliance with the GDPR.

3. Collection and storage of personal data and the nature and purpose of their use
In principle, we only process our users' personal data to the extent necessary to provide a functional website and our content and services. The processing of personal data of our users is regularly carried out only with the user's consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law.

Insofar as we obtain consent from the data subject for processing personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis.
When processing personal data that is necessary to fulfill a contract to which the data subject is a party, Article 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
Insofar as processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.
If processing is necessary to protect a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Article 6 (1) (f) GDPR serves as the legal basis for processing.

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may also take place if this has been provided for by European or national legislators in EU regulations, laws or other regulations to which the person responsible is subject. The data will also be blocked or deleted when a storage period prescribed by the above standards expires, unless there is a need to continue storing the data for the conclusion or performance of a contract.

a) When you visit the website

When you visit our website The browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until it is automatically deleted:

      1. IP address of the requesting computer,
      2. date and time of access,
      3. name and URL of the retrieved file,
      4. website from which access is made (referrer URL),
      5. browser used.

The above data is processed by us for the following purposes:

      1. ensuring a smooth connection to the website,
      2. ensuring convenient use of our website,
      3. evaluation of system security and stability, and
      4. for further administrative purposes.

The legal basis for data processing is Article 6 (1) (f) GDPR. Our legitimate interest results from the data collection purposes listed above. In no case do we use the collected data for the purpose of drawing conclusions about you.

We also use cookies when you visit our website. You can find more detailed explanations of this under section 4 of this privacy policy.

b) When using our contact form

If you have any questions, we offer you the opportunity to contact us using a form provided on the website. A valid email address is required so that we know who sent the request and to be able to answer it. Further information can be provided voluntarily.

Data processing for the purpose of contacting us is carried out in accordance with Article 6 (1) (a) GDPR on the basis of your voluntary consent.

In addition to the data you have entered, the following data is stored:

      1. URL of the contact form page
      2. URL of the page you visited before the contact form page
      3. URL of the page on our website that you visited first
      4. IP address
      5. Information about the browser you are using

The personal data collected by us for using the contact form will be deleted after your request has been completed.

4. Transfer of data
Your personal data will not be transferred to third parties for purposes other than those listed below.

We will only share your personal information with third parties if:

      1. you have given your express consent to this in accordance with Article 6 (1) (a) of the GDPR
      2. the transfer is necessary in accordance with Article 6 (1) (f) GDPR to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
      3. in the event that there is a legal obligation to transfer data in accordance with Article 6 (1) (c) GDPR, and
      4. This is legally permitted and is required in accordance with Article 6 (1) (b) GDPR to process contractual relationships with you.

5. Cookies
We use cookies on our site. These are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not cause any damage to your device and do not contain viruses, Trojans or other malware.

Information relating to the specific device used is stored in the cookie. However, this does not mean that we are immediately aware of your identity as a result.

On the one hand, the use of cookies serves to make the use of our website more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after you leave our site.

In addition, we also use temporary cookies to optimize usability, which are stored on your device for a specific period of time. If you visit our site again to use our services, it will automatically recognize that you have already been with us and what entries and settings you have made so that you do not have to enter them again.

On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimising our offer for you (see section 5). These cookies enable us to automatically recognize that you have already visited our site when you visit our site again. These cookies are automatically deleted after a defined period of time.

The data processed through cookies is required for the stated purposes to protect our legitimate interests and those of third parties in accordance with Article 6 (1) (f) GDPR.

Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or that a message always appears before a new cookie is created. However, completely disabling cookies may mean that you cannot use all features of our website.

6. Analysis tools
On our website We do not use any analysis tools, i.e. your visit to this website is neither recorded nor analyzed.

Should it be necessary to use tracking tools to optimize our website and/or services in the future, we will change this privacy policy here.

Tracking measures can be carried out on the basis of Article 6 (1) (f) GDPR. Tracking measures can be used to design and optimize a website in line with requirements. On the other hand, tracking measures are used to statistically record the use of a website and to evaluate it for the purpose of optimization. These interests are regarded as justified within the meaning of the above provision.

7. Embedded YouTube or Vimeo videos
On some pages of our homepage, we embed YouTube videos. The operator of the corresponding plug-ins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit a page with the YouTube plugin, a connection to YouTube servers is established. This tells YouTube which pages you visit. If you are logged into your YouTube account, YouTube can assign your surfing behavior to you personally. You can prevent this by logging out of your YouTube account beforehand.

When a YouTube video is started, the provider uses cookies that collect information about user behavior. Anyone who has deactivated the storage of cookies for the Google ad program will not have to reckon with such cookies even when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you want to prevent this, you must block cookies from being saved in the browser.

Further information on data protection at “YouTube” can be found in the provider's privacy policy at:

On some pages of the homepage, you will also find embedded videos from the “Vimeo” platform from the provider Vimeo Inc., Attention: Legal Department, 555 West 18th Street New York, New York 10011, USA. The provider's privacy policy can be found at:

8. Rights of data subjects
You have the right to:

      1. to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can provide information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right of correction, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of their data, unless they have been collected by us, as well as the existence of automated decision-making, including profiling and, if applicable, meaningful information about request their details;
      2. in accordance with Article 16 GDPR, to immediately request the correction of incorrect or completed personal data stored by us;
      3. to request the deletion of your personal data stored by us in accordance with Article 17 GDPR, unless processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
      4. to request the restriction of the processing of your personal data in accordance with Article 18 GDPR, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have objected to processing in accordance with Article 21 GDPR;
      5. in accordance with Article 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request transmission to another person responsible;
      6. to withdraw your consent to us at any time in accordance with Article 7 (3) GDPR. As a result, we are no longer allowed to continue data processing based on this consent in the future and
      7. to complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or place of work or our company headquarters.

9. Right of objection
If your personal data is processed on the basis of legitimate interests in accordance with Article 6 (1) (f) GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right of objection, which will be implemented by us without specifying a particular situation.

If you would like to exercise your right of revocation or objection, simply send an e-mail to:

10. Data security
When you visit our website, we use the common SSL (Secure Socket Layer) procedure in conjunction with the highest level of encryption supported by your browser. This is usually 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock icon in the lower status bar of your browser.

We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are constantly being improved in line with technological developments.

11. Timeliness and amendment of this privacy policy
This privacy policy is currently valid and was last updated in May 2018.

As a result of the development of our website and offers on it or due to changes in legal or regulatory requirements, it may be necessary to change this privacy policy. The current privacy policy can be viewed at any time on the website at be retrieved and printed out by you.