Notes on Data Protection

Data Protection Statement

In the following, we inform you about the collection of personal data when using our website Personal data is such information about the personal or factual circumstances of users, such as address, name, email address, telephone number, user behaviour and other information that allows conclusions to be drawn about a person. To the extent that we collect such data, you will be informed in the following about the purpose and scope of the data use.

 1. Controller

The controller within the meaning of Article 4 (7) GDPR is Papierfabrik Palm GmbH & Co. KG, Palm Allee 1, 73432 Aalen, Germany, Ulm Register Court HRA 501010, represented by the managing directors Dr Marina Palm, Dr Wolfgang Palm, Stephan Gruber, Joachim Lange, Karsten Risser.
Telephone: +49 7361 577-0
Telefax: +49 7361 577-298

When asserting your rights in accordance with Section 7, please contact the controller or the data protection officer.

 2. Data protection officer

Data protection officer of the controller is:

Martin Fähnle
Papierfabrik Palm GmbH & Co. KG
Palm Allee 1 73432 Aalen, Germany

 3. General information on the handling of personal data

Personal data is processed when you use our website and contact us by email. We ensure that the data is only used during processing within the scope of the applicable legal provisions or only with your consent. If we use your personal data on the basis of your consent, you have the right to object, so that the consent expires with effect for the future. In addition, you have further rights which are explained in Section 7. In detail, we collect and use personal data in the following processes.

 4. Logging of the scope of use of data processing

Regardless of your activities, we also temporarily store the usage processes even for simple use (without registration or should you provide us with further information) on the website in a log file. In doing so, we store:

  • the date and time of access, 
  • the duration of access, 
  • the name of the file request, 
  • the amount of data transferred, 
  • the IP address, 
  • the operating system of the computer from which access is made, 
  • the web browser used to access the site, 
  • the page that was visited before, 
  • websites from which the user has accessed our site, 
  • the subpages that are used.

The legal basis for storage is Article 6 I f GDPR. The storage of the IP address is necessary to ensure the functionality and the security of the website. We only store the IP address for the duration of your visit. A personal evaluation does not take place. The collection of data for the provision of the website and the storage of data in log files is necessary for the operation of the website. As a result, there are no possibilities for the user to object. You can only avoid data collection if you do not use the website.

5. Use of cookies

Cookies are small text files that are used to adapt the offerings of the website for the user, to facilitate the use of the website or to analyse the use of the website. In principle, the browser automatically saves cookies on your computer.

However, you can specify in the settings of your browser that cookies are not stored or that the storage of cookies requires your consent. You can delete stored cookies in your browser at any time via the "Settings". Information about the function of your browser can be found in the help section of the browser. If you do not allow cookies to be stored on your computer or if you delete cookies, this may result in certain services of the offerings not being able to be used at all or only being available for use to a limited extent.

On our web pages, we provide various possibilities for you to contact us or to receive information from us.

6. Contacting us by email

If you contact us by email, we store the communication until your request or use is resolved in order to answer questions and document the communication.

When contacting us by email, third parties may be able to view the email if it is not encrypted.

The legal basis for the use of the personal data transmitted via email is Article 6 (1) lit. f GDPR. Should the email contact be aimed at the conclusion of a contract, the additional legal basis for processing is Article 6 (1) lit. b GDPR.

7. User rights to information, objection, erasure and blockage of personal data, right of complaint

As so-called data subjects, you have various rights vis-à-vis us with regard to your personal data. At any time, you may request information (Article 15 GDPR) on the personal data we have stored about you and, you may also request that incorrect data be rectified (Article 16 GDPR), restricted for further processing [Article 18 GDPR) or erased (Article 17 GDPR). You have the right to transmit your data to a third party (Article 20 GDPR) and the right to object to the processing of your data (Article 21 GDPR). You can find the regulations here in Chapter III

The personal data of the data subject will be erased or blocked as soon as the purpose of the storage lapses. However, erasure is only permissible if there are no legal obligations to retain the data. In such cases, the erasure of personal data is replaced by the blocking of this data. If you have any questions about the use of your personal data or if you wish the data to be erased, please contact the responsible office in accordance with Section 1. We reserve the right to answer your inquiry only in writing and to establish your identity.

To the extent that we use your data with a legitimate interest, you may object to its use at any time, with the result that we will erase your data. Please address this objection to the controller named in Section 1.

If we use your data on the basis of a consent, you have the right at any time to withdraw this consent with effect for the future. Please address the revocation informally to the controller named in Section 1.

Should you wish to lodge a complaint about the handling of your personal data, you have the right to complain to a data protection supervisory authority about how we have processed your personal data. Status of the Data

Protection Statement: As of May 2018                                                


Amendment December 2023

Meta Conversion Pixel

Parts of our website use the "conversion pixel" or visitor action pixel of Meta Platforms, Inc., 1601 South California Avenue, Palo Alto, CA 94304, USA (here: Meta). This is a tracking technology in the "Optional Settings" category. By accessing this pixel from your browser, Meta Platforms, Inc. is able to recognise whether a Meta advertising measure was successful, for example whether it has led to the conclusion of a contract. From Meta Inc. we only receive statistical information about the data without any specific personal reference. This is important for us to ensure the effectiveness of our Meta advertising measures for statistical purposes and market research. In the event that you are a user of Meta Platforms, Inc. offerings, we also refer you to their to their data protection information The Meta Conversion Pixel is only used with your prior consent in the "Optional Settings" category. The legal basis for this is Art. 6 para. 1 lit. a) GDPR in conjunction with your consent.

Meta Website Custom Audience

Our website uses "Website Custom Audiences" pixels from the social media service Facebook, provided by Meta Platforms, Inc.. For this use, we have integrated so-called tracking pixels on our site. When our website is accessed, a direct connection between your browser and a Meta server via the tracking pixel is created. Meta Platforms, Inc. thereby receives from your browser, among other things, the information from which device you have accessed our site. If you have a Facebook or Instagram account and are logged into Meta's social media service with it, Meta Platforms, Inc. can use this link to assign the visit to this website to your account. However, as the operator of the website, we have no knowledge of the content of the transmitted data and its use by Meta Platforms, Inc.. We only have the option to select which groups of people with a Facebook or Instagram account should be shown advertising measures (according to demographic and interest-based criteria). The use of Custom Audiences takes place at a low intervention intensity level, as we do not collect any data records, in particular e-mail addresses, of customers and interested parties to Meta. For further information, please refer to Meta's privacy policy at Meta Custom Audience is only used after your prior consent in the "Optional Settings" category. The legal basis for this is Art. 6 para. 1 lit. a) GDPR in conjunction with your consent.