Privacy Policy

Information on Privacy Policy

In the following, you shall find information about the processing of your personal data when you are using our website.


Responsible entity

The company Brohl Wellpappe GmbH & Co. KG (Nikolaus-Otto-Straße 3, 56727 Mayen) shall be responsible for these web pages. Please refer to our site notice for any further information on our company and the authorized representatives. 

Which data are processed? 

Legal basis of data processin

In order to be able to offer you our website and the related services, we shall process personal data on the basis of the following legal regulations:

  • consent (art. 6 sec. 1 letter a) GDPR)
  • to the performance of contracts (art. 6 sec. 1 letter b) GDPR)
  • on the basis of the weighing of interests (art. 6 sec. 1 letter f) GDPR)
  • for the compliance with a legal obligation (art. 6 sec. 1 letter c) GDPR).

In the context of the respective processing, we shall refer to the relevant terminology, so that you shall be able to categorize on which basis we process the personal data.

If any personal data are processed on the basis of consent declared by you, you shall be entitled to revoke such consent anytime towards us with effect for the future.

If we process data on the basis of a weighing of interests, you shall be entitled as the affected party to object the processing of the personal data, in due consideration of the specifications of art. 21 GDPR.

Access data

When you visit our website, personal data shall be processed in order to show the contents of the website on your terminal device.

The IP address of the terminal that you use must be processed in order to display the pages in your browser. In addition, further information about the browser of your terminal shall be necessary.

We shall also be obliged by data protection laws to guarantee the confidentiality and integrity of the personal data processed by our IT systems.

For this purpose and on the grounds of these interests, the following data shall be recorded on the basis of a weighing of interests:

  • IP address of the accessing computer (for a maximum of 7 days)
    operating system of the accessing computer
    browser version of the accessing computer
    name of the recalled file
    date and time of the recall
    transferred amount of data
    referencing URL

After 7 days at the latest, the IP address shall be deleted from all the systems which have been used in relation to the operation of these web pages. We shall then not be able to make any reference to a person from the remaining data.

The data shall also be used in order to detect and remove errors on the web pages.

Google Analytics

This website uses functions of the web analytics service Google Analytics, offered by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses so-called "cookies". These are text files that are stored on your computer and allow for the analysis of your use of the website. The information created by the cookie about your use of this website shall usually be transferred to one of Google's servers in the USA and shall be stored there.It is possible that your data shall also be transferred to the USA in this context. In order to guarantee an appropriate data protection level, Google is Privacy Shield Certified; click here:, and enter the search keyword "google". The storage of cookies by Google Analytics and the application of this analysis tool shall be handled on the basis of your consent pursuant to art. 6 sec. 1 letter a GDPR; you can revoke your consent anytime.

Revocation of your consent

You can revoke your consent to the data collection by Google Analytics on our website anytime without any reasoning. You have the following possibilities: 
By clicking on the following link, an opt-out cookie shall be set preventing the collection of your data during any future visits on this website: 
deactivate Google Analytics. For more information on the handling of user data by Google Analytics, please refer to Google's data protection declaration: 

IP anonymization

On this website, we have activated the function IP anonymization. By this function, Google shall abbreviate your IP address within member states of the European Union or within other member states of the Agreement of the European Economic Area, before transferring it to the USA. Only in exceptional cases, the full IP address shall be tranferred to one of Google's servers in the USA and shall be abbreviated there.On behalf of the operator of this website, Google shall use this information in order to evaluate your use of the website, to compile reports on the website activities, and to provide further services to the website operator in connection with the use of the website and of the internet.The IP address transferred by your browser for the purposes of Google Analytics shall not be brought together with other data of Google. 

Browser Plugin

You can prevent the storage of the cookies by a respective option of your browser software; however, please be notified that in this case, you might not be able to use all the functions of this website to their full extent. Besides, you can prevent the transfer of the data created by the cookie and referring to your use of the website (incl. your IP address) to Google, as well as the processing of these data by Google, by downloading and installing the browser plugin available under the following link:;

Order processing

We have concluded an order processing agreement with Google, and we shall completely adhere to the strict regulations of the German data protection agencies concerning the use of Google Analytics.

Demographics of Google Analytics

This website uses the function "demographics" of Google Analytics. With this function, reports can be compiled containing statements with respect to the age, sex, and interests of the website visitors. These data stem from interest-related advertisements of Google, as well as from visitor data of third party providers. These data cannot be attributed to any particular person. You can deactivate this function anytime in the display options of your Google account, or generally prohibit the collection of your data by Google Analytics, as described in the section "objection to data collection".

Storage duration: data on user and event level stored by Google and connected with cookies, user IDs, or advertising IDs (e.g., double-click cookies, Android advertising ID), shall be anonymized or deleted after 14 months. For any details, please click on the following link:


Google Tag Manager

On our website, we use "Google Tag Manager", a service of Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter "Google"). Google Tag Manager enables us as a marketer to administer website tags on a surface. The tool Google Tag Manager, which implements the tags, is a cookieless domain and does not collect any personal data itself. Google Tag Manager serves for the tracking of other tags, which for their part might collect data. Google Tag Manager does not access these data. If a deactivation has been made on domain or cookie level, this deactivation shall persist for all tracking tags that have been implemented with Google Tag Manager. For more detailed information on data processing within Google Tag Manager, please refer to Google's FAQ:

YouTube videos

On our web pages, we have incorporated videos via the provider YouTube. For technical reasons, the servers of the providers are called because of the integration of the videos. This may also result in the transfer of data to the USA, because the provider has its head office there. The data processing shall be handled on the basis of a weighing of interests; our interest is the direct display of videos within our web pages. With respect to the involved use of data from your browser or your terminal, please be referred to the respective data protection information of the provider, because they shall be responsible for the related data processing. The data protection information of YouTube can be found here: . By being Privacy Shield Certified, the provider shall guarantee the adherence to an adequate level of data protection.

Data protection declaration of the company's Facebook page

We have an online presence on the social network Facebook, in order to be able to reach our customers, potential clients, and users active on that site, and to inform them about our services.

We cannot exclude that data of these users shall be processed outside of the area of the European Union. We hereby point out that US providers that are Privacy Shield Certified shall be obliged to adhere to the data protection standards of the EU.

We would also like to point out that the users' data shall usually be processed for purposes of market research and advertising. For example, user profiles are created on the basis of the users' behavior and the users' interests resulting there from. The user profiles can be used, e,g., for the placement of allegedly interest-related advertisements within and outside of the platforms. Usually, cookies shall be stored on the users' terminals, which then store the user behavior of the visitors. Besides, these profiles may also contain data independent from the devices used by the users (for example, this may be possible if the affected user is a member of the platform and has logged in).

The users' personal data shall be processed pursuant to art. 6 sec. 1 letter f GDPR, on the basis of our legitimate interest in effective information of the users and communication with the users. If the users are asked for their consent to the data processing described above by the respective platform providers, the legal basis of the processing shall be art. 6 sec. 1 letter a, and art. 7 GDPR.

Any further and more detailed description of the processing and of the possibilities to object to it, can be found under the following links with respect to the information of the provider of the social media platform.

Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland), on the basis of an agreement on the common processing of personal data:

data protection declaration:

opt-out: and

Privacy Shield:

If you have any queries for information or want to enforce your user rights, the most effective way shall be to contact the provider of the social media platform. Only the provider has comprehensive access to the users' data and shall be able to take measures or to provide information. Should you need any help here, please contact us anytime.


Purposes of the processing of personal data

The above indicated data shall be processed by us for the operation of our website and for the fulfillment of contractual obligations towards our customers, as well as for the preservation of our legitimate interests. In the case of your queries outside of an active customer relationship, the data shall be processed for purposes of sales and distribution and advertising. You can object to the use of your personal data for advertising purposes anytime.

Voluntary information

Insofar as you provide us with data, e.g., by filling in forms voluntarily, and these shall not be necessary for the fulfillment of our contractual obligations, we shall process these data in the legitimate assumption that the processing and usage of these data is in your interest.

Recipient / transfer of data

Any data that you provide us with shall principally not be transferred to any third party. In particular, your data shall not be transferred to third parties for their advertising purposes. However, we sometimes commission service providers for the operation of this website or for other products or services offered by us. It may happen that a service provider shall have knowledge of personal data. We select our service providers very diligently, in particular with respect to data protection and data security, and we take all the measures required by data protection rules for a permissible data processing.

Data processing outside of the European Union

Insofar as any personal data are processed outside of the European Union, you can find the relevant information above.

Data protection officer

We have appointed a data protection officer. You can contact him as follows:

Leopoldstr. 21 
80802 München 

Your rights as affected party

You shall have the right to be informed about your respective personal data. You can contact us anytime for information. In the case of any information query that is not in writing, please understand that we may require you to provide us with evidence showing that you are the person that you pretend to be. Besides, you shall have the right to have the data corrected or deleted, or to require a limitation of their processing insofar as you shall be legally entitled. Finally, you shall have a right of objection to the processing in the framework of the legal regulations. In the framework of data protection regulations, there shall also be a right of data transferability.

Cancellation of data

We shall principally delete any personal data when further storage shall not be required any longer. Such requirement may especially persist if the data are still necessary in order to fulfill contractual obligations, to examine warranty claims and claims under guarantee, and to grant or repel such claims. In the case of any legal duties to preserve records, cancellation shall only be possible upon expiry of the respective duty to preserve records.

Right of complaint before a supervisory authority

You shall have the right to complain about the processing of personal data by us before a supervisory authority for data protection.

Modification of this data protection information

We shall review this information on data protection in the case of modifications of this website or of other events requiring such review. The currently valid version can always be found on this website.

Effective: 15 October 2019