The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. For detailed information on data protection, please refer to our privacy policy below.
Data processing on this website is carried out by the website operator. You can find the operator's contact details in the section entitled “Information about the controller” in this privacy policy.
Some of your data is collected when you provide it to us. This may, for example, include data that you enter into a contact form.
Other data is collected by our IT systems automatically or with your consent when you visit the website. This is primarily technical data, such as your internet browser, operating system or the time you accessed the page. This data is collected automatically as soon as you enter this website.
Some of the data is collected to ensure that the website functions without errors. Other data may be used to analyse your usage behaviour. If contracts can be concluded or initiated through the website, the data you submit will also be processed for contract offers, orders or other order enquiries.
You have the right to obtain information free of charge at any time about the origin, recipients and purpose of your stored personal data. You also have the right to request the rectification or erasure of this data. If you have given your consent to data processing, you may withdraw that consent at any time with effect for the future. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. In addition, you have the right to lodge a complaint with the competent supervisory authority.
You can contact us at any time about these matters or any other questions concerning data protection.
When you visit this website, your browsing behaviour may be analysed statistically. This is primarily carried out using so-called analytics programs.
You can find detailed information about these analytics programs in the privacy policy below.
We host the content of our website with the following provider:
The provider is Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA (hereinafter referred to as Webflow). When you visit our website, Webflow collects various log files, including your IP addresses.
Webflow is a tool for creating and hosting websites. Webflow stores cookies or uses other recognition technologies that are required to display the website, provide certain website functions and ensure security (necessary cookies).
For details, please refer to Webflow's privacy policy: https://webflow.com/legal/eu-privacy-policy.
Webflow is used on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in ensuring that our website is displayed as reliably as possible. Where the relevant consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as that consent covers the storage of cookies or access to information on the user's device, such as device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.
The transfer of data to the USA is based on the European Commission's Standard Contractual Clauses. You can find details here: https://webflow.com/legal/eu-privacy-policy.
The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information is available from the provider at the following link: https://www.dataprivacyframework.gov/participant/6365.
We have concluded a data processing agreement (DPA) for the use of the service mentioned above. This is an agreement required by data protection law that ensures that the provider processes the personal data of visitors to our website only in accordance with our instructions and in compliance with the GDPR.
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection provisions and this privacy policy.
Various personal data is collected when you use this website. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.
Please note that data transmission over the internet, for example when communicating by email, may have security vulnerabilities. Complete protection of data against access by third parties is not possible.
The controller responsible for data processing on this website is:
Erina Pizzuto
Friedrichsring 39
63069 Offenbach am Main
Telephone: 069 95202100
Email: Ciao@originalpapi.de
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data, such as names, email addresses or similar information.
Unless a more specific retention period is stated in this privacy policy, we retain your personal data until the purpose for processing it no longer applies. If you make a valid request for erasure or withdraw your consent to data processing, your data will be erased unless we have other legally permissible grounds for retaining your personal data, such as retention periods under tax or commercial law. In the latter case, the data will be erased when those grounds no longer apply.
If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR where special categories of data under Art. 9(1) GDPR are processed. If you expressly consent to the transfer of personal data to third countries, processing is also based on Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or access to information on your device, for example through device fingerprinting, processing is additionally based on Section 25(1) TDDDG. Consent may be withdrawn at any time. If your data is necessary for the performance of a contract or to take steps prior to entering into a contract, we process it on the basis of Art. 6(1)(b) GDPR. We also process your data on the basis of Art. 6(1)(c) GDPR where this is necessary to comply with a legal obligation. Data processing may also be based on our legitimate interest under Art. 6(1)(f) GDPR. The legal bases applicable in each case are explained in the following sections of this privacy policy.
We work with various external organisations in the course of our business activities. This sometimes requires the transfer of personal data to those organisations. We only disclose personal data to external organisations where this is necessary for the performance of a contract, where we are legally obliged to do so, for example when providing data to tax authorities, where we have a legitimate interest in disclosure under Art. 6(1)(f) GDPR, or where another legal basis permits disclosure. When using processors, we only disclose our customers' personal data on the basis of a valid data processing agreement. Where processing is carried out jointly, a joint processing agreement is concluded.
Many data processing operations are only possible with your express consent. You may withdraw consent you have already given at any time. Withdrawal does not affect the lawfulness of data processing carried out before your consent was withdrawn.
WHERE DATA IS PROCESSED ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA. THIS ALSO APPLIES TO PROFILING BASED ON THOSE PROVISIONS. PLEASE REFER TO THIS PRIVACY POLICY FOR THE LEGAL BASIS ON WHICH PROCESSING IS BASED. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING IS FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION UNDER ART. 21(1) GDPR).
WHERE YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ART. 21(2) GDPR).
In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work or the location of the alleged infringement. This right exists without prejudice to other administrative or judicial remedies.
You have the right to receive data that we process by automated means on the basis of your consent or in performance of a contract, or to have it provided to a third party, in a commonly used, machine-readable format. If you request that data be transferred directly to another controller, this will only be done where technically feasible.
Within the scope of applicable statutory provisions, you have the right at any time to obtain information free of charge about your stored personal data, its origin and recipients and the purpose of processing, and, where applicable, a right to rectification or erasure of this data. You may contact us at any time about these matters or any other questions concerning personal data.
You have the right to request the restriction of the processing of your personal data. You may contact us at any time to do so. The right to restriction of processing applies in the following cases:
If processing of your personal data has been restricted, this data may, apart from its storage, only be processed with your consent or for the establishment, exercise or defence of legal claims, to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.
For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the website operator, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the browser's address line changing from “http://” to “https://” and by the padlock symbol in your browser's address bar.
When SSL or TLS encryption is enabled, the data you send to us cannot be read by third parties.
Our website uses so-called “cookies”. Cookies are small data packages and do not cause any damage to your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are automatically deleted at the end of your visit. Persistent cookies remain on your device until you delete them yourself or your browser deletes them automatically.
Cookies may originate from us (first-party cookies) or from third-party companies (third-party cookies). Third-party cookies enable certain services provided by third-party companies to be integrated into websites, for example cookies used to process payment services.
Cookies have various functions. Many cookies are technically necessary because certain website functions would not work without them, such as the shopping basket function or the display of videos. Other cookies may be used to analyse user behaviour or for advertising purposes.
Cookies required to carry out electronic communications, provide certain functions you have requested, such as the shopping basket function, or optimise the website, such as cookies used to measure website audiences (necessary cookies), are stored on the basis of Art. 6(1)(f) GDPR unless another legal basis is stated. The website operator has a legitimate interest in storing necessary cookies to provide its services in a technically error-free and optimised manner. Where consent has been requested for the storage of cookies and comparable recognition technologies, processing is carried out exclusively on the basis of that consent (Art. 6(1)(a) GDPR and Section 25(1) TDDDG). Consent may be withdrawn at any time.
You can configure your browser to inform you when cookies are set and allow cookies only in individual cases, reject cookies in specific cases or generally, and enable the automatic deletion of cookies when the browser is closed. Disabling cookies may restrict the functionality of this website.
You can find information about the cookies and services used on this website in this privacy policy.
If you send us enquiries using the contact form, we store the information you provide in the enquiry form, including the contact details you enter, for the purpose of processing your enquiry and dealing with any follow-up questions. We do not disclose this data without your consent.
This data is processed on the basis of Art. 6(1)(b) GDPR where your enquiry relates to the performance of a contract or is necessary to take steps prior to entering into a contract. In all other cases, processing is based on our legitimate interest in handling enquiries addressed to us effectively (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), where this has been requested. Consent may be withdrawn at any time.
The data you enter in the contact form remains with us until you ask us to erase it, withdraw your consent to its storage or the purpose for storing it no longer applies, for example after your enquiry has been fully processed. Mandatory statutory provisions, particularly retention periods, remain unaffected.
We use Plausible Analytics on our website. The provider is Plausible Insights OÜ, Västriku tn 2, 50403, Tartu, Estonia.
Plausible Analytics enables us to analyse the behaviour of visitors to our website. Primarily, the following data is collected for this purpose: page URL, HTTP request, HTTP referrer, browser, operating system, device type and IP address. The HTTP request and IP address are stored in a hash for 24 hours. Within this period, a user can be recognised if they return to the website. It is not possible to identify the individual.
Where consent has been obtained, the service mentioned above is used exclusively on the basis of Art. 6(1)(a) GDPR and Section 25 TDDDG. Consent may be withdrawn at any time. Where no consent has been obtained, the service is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in obtaining the most meaningful analysis possible of the behaviour of visitors to its website.
We have concluded a data processing agreement (DPA) for the use of the service mentioned above. This is an agreement required by data protection law that ensures that the provider processes the personal data of visitors to our website only in accordance with our instructions and in compliance with the GDPR.
This website uses so-called Google Fonts, provided by Google, to ensure a consistent display of typefaces. The Google Fonts are installed locally. No connection to Google's servers is established for this purpose.
Further information about Google Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://policies.google.com/privacy?hl=de.
