We take the protection of your personal data very seriously. Below we explain which data are processed when you visit this website and use our services.
Nadezda Walz
Isastr. 3
67574 Osthofen
Germany
Email: info@packaging-compliance.de
This website is hosted by Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA. When you access the website, technically necessary data are processed (IP address, date and time of access, page accessed, browser type, operating system). The legal basis is our legitimate interest in providing the website securely and reliably (Art. 6(1)(f) GDPR).
Information submitted via the forms on this website (contact form, invoice request, feedback, consents) is received and stored via Netlify Forms. Licence keys and records of consent are stored in a Netlify data store (Netlify Blobs).
Netlify may process data in the USA. Netlify, Inc. is certified under the EU-U.S. Data Privacy Framework; in addition, the standard contractual clauses of the European Commission apply. More information: Netlify privacy policy.
If you send us enquiries via the contact form, the details you enter (name, email address, message) are stored via Netlify Forms for the purpose of processing your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). The data are not passed on to third parties.
The information you enter into a generator (e.g. company name, address, registration numbers, packaging description) is processed exclusively in your browser. The finished document is created directly in your browser and made available for download; it is neither sent by email nor stored on our servers. To make further use easier, your entries may be stored locally in your browser (local storage); these data do not leave your device and can be deleted by you at any time via your browser settings.
The PPWR label generator is free of charge and can be used without providing personal data. The declaration of conformity generator is a paid service (see section 5). When a licence key is activated, the key is transmitted to our server and the number of declarations created is counted (Art. 6(1)(b) GDPR).
Payment for the declaration of conformity generator is processed by the payment service provider Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. For payment you are redirected to a Stripe payment page. Stripe processes the data required for the payment (name, email address, payment details, billing address and VAT identification number where applicable). Payment details such as card numbers are processed exclusively by Stripe; we have no access to them. Stripe may also process data in the USA. Stripe, LLC is certified under the EU-U.S. Data Privacy Framework; in addition, the standard contractual clauses of the European Commission apply. More information: Stripe privacy policy.
After successful payment we receive from Stripe your name, email address, the selected plan, the amount paid and the order number. From this we generate a licence key, which is stored together with your email address, plan, order number, purchase date and the number of activations (Netlify Blobs, see section 2).
If you request an invoice instead of paying by card, the data you enter in the invoice form (company, name, address, VAT identification number, email address, selected plan) are stored via Netlify Forms and used for invoicing.
The legal basis is Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(c) GDPR (retention obligations under commercial and tax law). Accounting records and invoices are retained for ten years in accordance with § 147 AO and § 257 HGB (German tax and commercial codes).
To send the licence key and service emails (e.g. purchase confirmation) we use the service Resend (Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA). Your email address and the content of the email are transmitted to Resend. The legal basis is Art. 6(1)(b) GDPR. The transfer to the USA is based on the standard contractual clauses of the European Commission; Resend is also certified under the EU-U.S. Data Privacy Framework. More information: Resend privacy policy.
If you have expressly consented when making a purchase or when subscribing voluntarily in the label generator, we will inform you by email about new tools, generators and important updates. Your consent is voluntary and is not a condition of purchase or of using the generators.
Independently of consent, we may send purchasers information about similar products of our own (e.g. new generators) to the email address provided at purchase (§ 7(3) UWG, German Unfair Competition Act; Art. 6(1)(f) GDPR, legitimate interest in direct marketing). You can object to this at any time, e.g. via the unsubscribe link in every email, without incurring any costs other than the transmission costs at basic rates.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.
To be able to prove your consent, we store your email address, the time of consent, the wording of the consent and, where applicable, the related order (Art. 6(1)(c) and (f) GDPR).
You can withdraw your consent at any time with effect for the future, via the unsubscribe link in every email or by sending us a message. After withdrawal you will not receive any further emails of this kind. Your email address may be stored in a suppression list to ensure this. The lawfulness of processing carried out before the withdrawal remains unaffected.
Only if you click “Accept” in the cookie banner do we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies and similar technologies to analyse the use of the website (e.g. pages visited, time spent, approximate location, device type). The IP address is truncated before storage. The data may be transferred to servers of Google LLC in the USA; Google LLC is certified under the EU-U.S. Data Privacy Framework. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Without your consent, Google Analytics is not loaded. You can withdraw your consent at any time by deleting this website’s cookies in your browser; the banner will then appear again and you can choose “Decline”. More information: Google privacy policy.
Partner attribution: If you reach our website via a partner's link (e.g. https://packaging-compliance.de/?ref=servix), the address contains a partner code. So that we can attribute a referral to the partner, we carry this code over into the links of our website during your visit and pass it to Stripe when you make a purchase (as the order reference) or send it together with your form when you make an enquiry. The code contains no information about you. The legal basis is our legitimate interest in settling accounts with our partners (Art. 6(1)(f) GDPR). Only if you click “Accept” in the cookie banner do we additionally store the code in a cookie (“pc_ref”) for 90 days, so that a later purchase can also be attributed to the partner; the legal basis is then your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can withdraw your consent at any time by deleting this website's cookies in your browser. We only tell partners the number and value of referred purchases, not any information about you.
This website contains a link to WhatsApp. Only when you click the link and send us a message are data (your telephone number, your name, the content of the message) processed by WhatsApp Ireland Limited (Meta). The legal basis is Art. 6(1)(b) or (f) GDPR. More information: WhatsApp privacy policy.
Enquiries via the contact form and other feedback are deleted as soon as the purpose of storage no longer applies, at the latest after two years. Purchase, licence and invoice data are stored for the duration of the statutory retention obligations (ten years). Consents to email information remain valid until withdrawn; the record of consent is deleted three years after withdrawal.
You have the right at any time to access your stored data (Art. 15 GDPR), to rectification of inaccurate data (Art. 16 GDPR), to erasure (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR), to data portability (Art. 20 GDPR) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR). You may withdraw any consent given at any time with effect for the future.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz), Hintere Bleiche 34, 55116 Mainz, Germany, www.datenschutz.rlp.de.
If you have any questions about data protection, please contact: info@packaging-compliance.de
Last updated: October 2026