1. Controller

The controller within the meaning of the General Data Protection Regulation is:

rhinopaq GmbH
Schornstr. 5
45128 Essen
Email: hello@rhinopaq.com
Phone: +49 (0) 156 7844 0389

For security reasons and to protect the transmission of personal data and other confidential information, this website uses SSL or TLS encryption.

2. Hosting and Server Log Files

Our website is hosted by a server provider in Germany—Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin. Each time the site is accessed, information such as your IP address, browser type, operating system, and the date and time is automatically stored in server log files. The legal basis for this is our legitimate interest in the secure and error-free operation of our website pursuant to Art. 6(1)(f) GDPR.

Strato deletes the log files containing information about visitors to our website after a maximum of 7 days. We have concluded a data processing agreement with Strato AG pursuant to Art. 28 GDPR.

3. Cookies

Cookies are small text files that are stored on your device. The storage of information on your device and access to that information are governed by Section 25 TDDDG (German Telecommunications Digital Services Data Protection Act); the subsequent processing of personal data is governed by the provisions of the GDPR.

Before you make your selection, we set only technically necessary cookies that are required to deliver the correct language version. Once you make a selection, we store this choice in additional technically necessary cookies. Storing these cookies is permitted without consent under Section 25(2) No. 2 TDDDG because it is strictly necessary to implement your selection and to be able to demonstrate it; we base the associated processing on Art. 6(1)(c) GDPR in conjunction with our obligation to provide evidence under Art. 7(1) GDPR.

The use of all other cookies and other storage access—in particular those of the embedded Microsoft Bookings appointment calendar (see Section 7)—takes place exclusively with your consent pursuant to Section 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR. Without your consent, the associated content is not loaded.

You can adjust your settings at any time via the “Cookie Settings” link in the footer of our website.

4. Consent Management

We use the Complianz consent management tool to manage your cookie consent settings. It runs on our own server; your consent data is not shared with third parties.

Your decision is stored exclusively in cookies on your device (see Section 5). This records the categories you selected and the version of the Cookie Policy to which you consented. Your IP address is not stored, nor is your consent logged on the server.

The legal basis is Art. 6(1)(c) GDPR in conjunction with our obligation to provide evidence under Art. 7(1) GDPR. The retention period is 365 days; after that, you will be asked for your consent again.

Content that requires your consent (see Section 7) will not be loaded without your consent.

You can change or withdraw your consent at any time with effect for the future via the “Cookie Settings” link in the footer of our website.

5. Cookie Overview

You can find a complete and continuously updated overview of all cookies used on this website—including the provider, purpose, retention period, and category—in our Cookie Policy.

Before you make your selection, we set only technically necessary cookies that are required to deliver the correct language version. Only after you make a selection in the cookie banner do we store this choice in additional technically necessary cookies (see Section 4). All other cookies—in particular those of the Microsoft Bookings appointment calendar (see Section 7)—are set only after you have given your consent.

6. How to Contact Us

If you contact us by email or via the contact form, we process your details (name, email address, and your message) in order to handle your inquiry and in case of follow-up questions. The legal basis is Art. 6(1)(b) GDPR (pre-contractual or contractual measures); insofar as your inquiry is not contract-related, it is Art. 6(1)(f) GDPR—our legitimate interest lies in responding to your inquiry.

The contact form is provided by our own web server; no connection to third parties is established when it is accessed. Your entries are not stored in a website database but are sent by email to our mailbox. Our mailbox is operated on our behalf by Microsoft Ireland Operations Limited (for the address, see Section 7) as part of Microsoft 365 (Art. 28 GDPR).

To protect against spam, the form contains a field that is invisible to humans as well as a time check. No cookies are set for this purpose, and no third-party services (such as reCAPTCHA) are integrated.

7. Appointment Booking (Microsoft Bookings)

On our contact page and on individual product pages, you can book an online appointment with us. The booking tool is Microsoft Bookings, a service of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland (“Microsoft”). The calendar is loaded as embedded content (iFrame) from Microsoft servers. If you access our booking page via a direct link, the information in this section applies accordingly; in that case, the connection to Microsoft is established as soon as you open the page.

Loaded only after consent: Initially, you will see only a notice here with the “Show calendar” button. Only when you click it or give your consent in the cookie banner does your browser establish a connection to Microsoft. In the process, your IP address and technical information about your browser are transmitted, and Microsoft stores information on your device (cookies and local storage, including an identifier for recognition with a lifetime of up to one year as well as identifiers for diagnostic and telemetry purposes). The legal basis is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. Clicking “Show calendar” applies only to the current page view; a permanent decision is made via the cookie banner. You can withdraw your consent at any time with effect for the future via the “Cookie Settings” link in the page footer.

When you make a booking, we process the information you provide in the booking form (name, email address, selected appointment, and voluntary information such as phone number, address, or comments) in order to arrange, confirm, and hold the appointment. The legal basis is Art. 6(1)(b) GDPR. The booking is stored in our Microsoft 365 account; Microsoft processes this data on our behalf (Art. 28 GDPR).

Processing by Microsoft Corporation in the United States cannot be ruled out. Microsoft Corporation is certified under the EU-U.S. Data Privacy Framework; the EU Standard Contractual Clauses also apply.

For more information about data protection at Microsoft, please visit: https://privacy.microsoft.com/de-de/privacystatement

8. Videos

Video files embedded on this website are served exclusively from our own web server. We do not integrate any third-party video services such as YouTube or Vimeo; therefore, no connection to their servers is established when the videos are played.

9. Fonts

This website uses local copies of fonts, served from our own server, to ensure consistent font rendering. When you visit www.rhinopaq.com, no connection is established with Google’s servers.

10. rhinopaq Shop Integrations (Shopify & WooCommerce)

The rhinopaq shop integrations do not send any personal data from the site using the integration to us. If the smart rhinopaq feature is enabled, only the dimensions and weight of all products in the shopping cart are sent to our service or our servers. This data is used to offer the option of using one of our reusable packaging solutions during the checkout process. If our service confirms that this option is available, positive feedback is sent back to the online store using the integration. rhinopaq is then suggested as a shipping method, and a pop-up appears asking the user whether they would like to use reusable packaging or stick with a single-use solution. No personal data is transmitted, nor is any information about the products beyond their weight and dimensions. We store the collected data to assess the quality of our calculations over the long term and to optimize the service.

11. Your Rights as a Data Subject

You have the right to access your stored data free of charge (Art. 15 GDPR), as well as the right to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), and data portability (Art. 20). If the processing is based on consent, you may withdraw your consent at any time. You also have the right to object to processing based on legitimate interests (Art. 21) and the right to lodge a complaint with a supervisory authority.

To exercise your rights, simply send a message to hello@rhinopaq.com.

The supervisory authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, located at Kavalleriestraße 2–4, 40213 Düsseldorf. However, you may also contact any other data protection supervisory authority.

12. Retention Period

Personal data is deleted as soon as the purpose for which it was stored no longer applies or statutory retention periods (e.g., under commercial or tax law) have expired. If a fixed retention period cannot be determined in advance, we state the criteria that determine the duration. Specifically:

• Server log files: up to 7 days (see Section 2).
• Contact inquiries: until your inquiry has been fully processed and, beyond that, for as long as follow-up questions are expected or a business relationship develops as a result of the inquiry; this also applies to appointment bookings.
• Consent decision: 365 days in the cookie on your device; no server-side logging takes place (see Section 4)
• Invoices and accounting vouchers: 8 years (Section 147(3) AO [German Fiscal Code], Section 14b UStG [German Value-Added Tax Act]); books of account and annual financial statements: 10 years

---

As of September 17, 2026