1. Data Controller

The controller within the meaning of the General Data Protection Regulation is:

rhinopaq GmbH
Schornstr. 5
45128 Essen
Email: hello@rhinopaq.com
Phone: +49 (0) 156 7844 0389

For security reasons and to protect the transmission of personal data and other confidential information, this website uses SSL or TLS encryption.

2. Hosting and Server Log Files

Our website is hosted by a server provider in Germany – Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin. Each time you access the website, information such as your IP address, browser type, operating system, and date and time are automatically stored in server log files. The legal basis for this is our legitimate interest in the secure and error-free operation of our website in accordance with Art. 6 (1) (f) GDPR.

Strato deletes the log files containing information about visitors to our website after a maximum of 7 days. We have entered into a data processing agreement with Strato AG pursuant to Article 28 of the GDPR.

3. Cookies

We use cookies to ensure the functionality of our website and to improve the user experience. Technically necessary cookies are set on the basis of Art. 6 (1) lit. f GDPR. For analysis or marketing cookies, we obtain your express consent in advance via our consent management tool (Art. 6 (1) lit. a GDPR). You can adjust your settings at any time via the "Cookie settings" link in the footer.

4. Consent Management

To manage your consents, we use the consent management system provided by HubSpot Ireland Limited, 1 Sir John Rogerson’s Quay, Dublin 2, Ireland. When you visit our website, your IP address, as well as the date, time, and scope of your consent, are stored so that we can provide proof of your consent. Your decision is stored in the __hs_cookie_cat_pref cookie on your device.

The legal basis is Article 6(1)(c) of the GDPR in conjunction with our obligation to provide proof under Article 7(1) of the GDPR. Your consent decision will be stored in the __hs_cookie_cat_pref cookie on your device for 180 days. If you are also known to us as a contact, we will document your consent in your contact record; it will be retained there for as long as the record exists.

You can change or withdraw your consent at any time by clicking the “Cookie Settings” link at the bottom of our website, effective for the future.

5. Cookie Overview

Cookie	Provider	Purpose	Duration	Category
__hs_cookie_cat_pref	HubSpot	saves your cookie preference	180 days	necessary
weglot_wp_rocket_cache	Weglot / WP Rocket	Language Selection and Page Cache Assignment	Meeting	necessary
hubspotutk	HubSpot	Recognizing the visitor across sessions	180 days	Statistics
__hstc	HubSpot	Visits and Meetings Count	180 days	Statistics
__hssc	HubSpot	Session Counter	30 minutes	Statistics
__hssrc	HubSpot	detects when the browser session restarts	Meeting	Statistics
hs-messages-is-open	HubSpot	keeps track of whether the chat window was open	30 minutes	functional

6. Contact Information

If you contact us by email or contact form, we will store your details for the purpose of processing your enquiry and in case of follow-up questions. We will not pass on this data without your consent. Processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR (pre-contractual or contractual measures).

The contact form on our website is technically provided by HubSpot (see Section 7). The data you enter is transmitted to HubSpot and stored there in our CRM system.

7. HubSpot CRM

We use the CRM system provided by HubSpot Ireland Limited, 1 Sir John Rogerson’s Quay, Dublin 2, Ireland, to manage our customer relationships, conduct marketing activities, and send out our newsletter. Data processing takes place primarily in data centers within the EU; for any transfers to the U.S., the EU-U.S. Data Privacy Framework and standard contractual clauses apply. Processing is based on your consent or our legitimate interest in providing efficient customer service (Art. 6(1)(a) or (f) GDPR).

To subscribe to our newsletter, we collect your email address and, if applicable, your name. Subscription is handled via a double opt-in process; you will receive a confirmation email after signing up. You can revoke your consent to receive the newsletter at any time with future effect, for example, by clicking the unsubscribe link in each newsletter email.

For more information about HubSpot's privacy policy, visit: https://legal.hubspot.com/de/privacy-policy

8. HubSpot Analytics and Tracking

The HubSpot integration we use sets cookies that are used to analyze your usage behavior across pages on our website (including hubspotutk, __hstc, __hssc, and __hssrc). In particular, the following information is collected: pages visited, time spent on the site, referrer, and your IP address.

This processing is carried out exclusively on the basis of your consent pursuant to Article 6(1)(a) of the GDPR in conjunction with Section 25(1) of the TDDG. You may revoke your consent at any time with future effect by clicking the “Cookie Settings” link in the footer.

The provider is HubSpot Ireland Limited, 1 Sir John Rogerson’s Quay, Dublin 2, Ireland. A transfer of data to HubSpot, Inc. in the United States cannot be ruled out; this transfer is protected by the EU Standard Contractual Clauses.

9. Videos

Video files embedded on this website are served exclusively from our own web server. We do not integrate any third-party video services such as YouTube or Vimeo; therefore, no connection to their servers is established when the videos are played.

10. Content Delivery Network (RocketCDN)

To deliver content more quickly, we use the RocketCDN content delivery network provided by WP Media SAS, 8 rue du Sentier, 75002 Paris, France. When you visit our website, static content such as images, scripts, and stylesheets is delivered via the CDN provider’s servers.

In this process, your IP address is transmitted to WP Media SAS and processed as technically necessary. The legal basis for this is Article 6(1)(f) of the GDPR; our legitimate interest lies in providing our online services in a secure, high-performance, and resource-efficient manner.

Deliveries to visitors from the European Union are made via server locations within the EU.

11. Fonts

This website uses local copies of fonts, which are served from our own server, to ensure consistent font display. No connection is made to Google's servers.

12. Translation Service (Weglot)

To provide multilingual versions of our website, we use the Weglot service provided by Weglot SAS, 14 Rue Rollin, 75005 Paris, France. Weglot processes the content of our website on its own servers to provide automatic translations. In doing so, it sets cookies that are technically necessary and logs page views.

Based on current information, we do not plan to transfer personal data to third countries outside the EU. The processing is based on our legitimate interest in providing our services in an accessible, multilingual manner, in accordance with Article 6(1)(f) of the GDPR.

For more information about Weglot's privacy policy, visit: https://www.weglot.com/privacy

13. rhinopaq- Store integrations (Shopify & WooCommerce)

The rhinopaq do not send any personal data from the user's site to us. If the smart rhinopaq is activated, only the dimensions and weight of all products in the shopping cart are sent to our service or our servers. The data is used to offer the possible use of one of our reusable packaging options during the checkout process. If our service confirms the possibility, positive feedback is sent back to the online shop. rhinopaq then suggested as a shipping method and a pop-up is created, asking the user whether they would like to use reusable packaging or stick with a single-use solution. No personal data is sent, nor is any information about the products beyond their weight and dimensions. We store the recorded data in order to determine the quality of our calculations in the long term and to optimize the service.

14. Your Rights as a Data Subject

You have the right to obtain information about your stored data free of charge (Art. 15 GDPR) as well as the right to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), and data portability (Art. 20). If the processing is based on consent, you can revoke this at any time. You also have the right to object to processing based on legitimate interests (Art. 21) and the right to lodge a complaint with a supervisory authority.

To exercise your rights, simply send a message to hello@rhinopaq.com.

15. Retention Period

Personal data is deleted as soon as the purpose for which it was stored no longer applies or statutory retention periods (e.g., under commercial or tax law) have expired. If a specific retention period cannot be determined in advance, we will specify the criteria used to determine the duration. Specifically:

• Server log files: maximum of 7 days (see Section 2)
• Contact Requests: until your request has been fully processed and, beyond that, for as long as follow-up questions are expected or a business relationship develops as a result of the request
• CRM, prospect, and customer data: for the duration of the business relationship and beyond, as long as claims arising from this relationship can be asserted or we continue to serve you within the framework of existing business contacts
• Newsletter data: until you revoke your consent; we also retain the registration records to fulfill our accountability obligations
• Consent records: 180 days in the cookie; for known contacts, for the duration of the contact record (see Section 4)
• Invoices and accounting documents: 8 years (Section 147(3) of the German Fiscal Code (AO), Section 14b of the German Value-Added Tax Act (UStG)); books and annual financial statements: 10 years

---

As of August 18, 2026