Data Protection and Privacy Policy

This English version is a translation provided for your convenience. In the event of any discrepancy, the German version shall prevail.

The THIMM Group and the company Christiansen Print GmbH take the protection of personal data very seriously. This Data Protection and Privacy Policy applies to the entire website of Christiansen Print GmbH, for which Christiansen Print GmbH, named in the Imprint, is responsible.

Below, we inform you about the collection of personal data when you use our website. Personal data are all data which can be related to you personally, for example, name, address, email addresses, user behaviour. We have put in place extensive technical and operational safeguards in order to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our security procedures are reviewed regularly and adjusted to take any technological advances into account.

1 Controller responsible for data processing

The controller pursuant to Art. 4(7) of the EU General Data Protection Regulation (GDPR) is SAICA PACK CENTRAL EUROPE GmbH + Co. KG, Breslauer Str. 12, 37154 Northeim, Germany

Tel.: +49 5551 703 0
Email: infoline@thimm.de

2 How to contact the data protection officer

You can contact our data protection officer at datenschutz@thimm.de or via our postal address, marked “The Data Protection Officer”.

3 Your rights

In relation to us, you have the following rights regarding your personal data:

3.1 General rights

You have the right of access, rectification, erasure, restriction of processing, objection to processing and data portability. Provided that processing is based on your consent, you have the right to withdraw this consent from us with future effect.

3.2 Rights regarding data processing based on legitimate interest

You have the right pursuant to Art. 21(1) GDPR, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you which is based on Art. 6(1)(e) GDPR (data processing in the public interest) or on Art. 6(1)(f) GDPR (data processing to protect a legitimate interest); this also applies to profiling based on these provisions. In the event of your objection, we shall no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

3.3 Rights relating to direct marketing

Where we process your personal data for direct marketing purposes, you shall have the right pursuant to Art. 21(2) GDPR to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling to the extent that it is related to such direct marketing.

In the event that you object to processing for direct marketing purposes, we shall no longer process your personal data for these purposes.

3.4 Right to lodge a complaint with a supervisory authority

You also have the right to lodge a complaint with a competent data protection supervisory authority about the processing of your personal data by us.

4 Collection of personal data when you visit our website

If you use the website for informational purposes only, in other words, if you do not register on the site or transfer information to us in any other way, we only collect the personal data that your browser transmits to our server. If you want to view our website, we collect the following data, which are technically required by us in order to display our website to you and to ensure its stability and security. The legal basis for this is Art. 6(1)(f) GDPR:

IP address, date and time of the request, time zone difference from Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, volume of data transferred in each case, website from which the request originates, browser, operating system and its interface, language and version of the browser software.

The data are also erased after a statistical evaluation and are used exclusively to improve the attractiveness, content and functionalities of our websites.

5 Making contact by email or contact form

If you contact us by email or via a contact form, the data that you share with us (your email address, if applicable your name, your telephone number and your postal address) will be saved by us so that we can answer your questions. If we ask for inputs from you via our contact form which are not required for the purpose of making contact, we always mark these as optional. These details are used by us to learn more about your enquiry and to improve the handling of your request. The communication of these details is expressly voluntary and takes place with your consent pursuant to Art. 6(1)(a) GDPR. Insofar as this concerns information on communication channels (for example, email address, telephone number), you also consent to our contacting you via this communication channel, if applicable, in order to respond to your request. You can of course withdraw this consent at any time with future effect. A message to the email address infoline@thimm.de is sufficient.

We erase the data arising in this context once their storage is no longer required, or we restrict their processing if statutory retention obligations exist.

6 Newsletter and press distribution list

6.1 General information

With your consent in accordance with Art. 6(1)(a) GDPR, you can subscribe to our newsletter and/or our press distribution list, through which we inform you about our current offers, seminar dates and/or press releases.

When you register for our newsletter or press distribution list, we use the so-called double opt-in procedure. This means that after your registration, we send you an email to the email address you specified, in which we ask you to confirm that you wish to receive the newsletter.

We also save the IP addresses you used in each case and the times of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, if applicable, to clarify any possible misuse of your personal data.

Mandatory inputs for sending the newsletter are your salutation, name and email address. After your confirmation, we save these data for the purpose of sending you the newsletter with a personal form of address. The legal basis for this is Art. 6(1)(a) GDPR.

Mandatory inputs for participation in the press distribution list are your salutation, name, email address, medium/editorial department and business telephone number.

You can withdraw your consent to the sending of the newsletter or to participation in the press distribution list at any time and unsubscribe from the newsletter or press distribution list. You can declare your withdrawal by clicking on the link provided in every email or by sending an email to infoline@thimm.de.

7 Participation in prize draws

If you participate in prize draws, we collect the data required to conduct the prize draw. Generally, these data include an individual prize draw entry (e.g. a comment or a photo) as well as name and contact details. It is possible that we forward your data to our prize draw partners, e.g. so that the prize can be sent to you. The data processing and data forwarding may vary depending on the prize draw and are therefore described specifically in the respective conditions of participation. Participation in the prize draw and the associated data collection are of course voluntary. The legal basis for the data processing is your consent in accordance with Art. 6(1)(a) GDPR. Your data are erased after the completion of the prize draw.

8 Job applications

You may apply for a job with our company by electronic means, in particular via email or web forms. We shall of course only use your data to process your application and shall not forward them to third parties. Please note that emails sent unencrypted are not transmitted with access protection.

You may also apply for a job with our company online via our application portal. Your online application is forwarded via an encrypted connection directly to the personnel department, where it is of course treated confidentially. We shall of course only use your data to process your application and shall not forward them to third parties. Further information regarding data processing as part of the application procedure can be found in the privacy policy of our application portal.

If you have applied for a specific position and this position has already been filled, or if we consider you to be equally or even better suited for another position, we would be pleased to forward your application within the company. Please inform us if you do not consent to this forwarding.

Your personal data will be erased immediately upon completion of the application procedure, or after a maximum of 6 months, unless you have expressly given us your consent to a longer storage period for your data or a contract has been concluded. The legal basis for this is Art. 6(1)(a), (b) and (f) GDPR and Section 26 BDSG (German Federal Data Protection Act).

9 Use of social plugins

This website uses social plugins from the following provider(s):

Facebook (Operator: Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA)
XING (New Work SE, Address: Am Strandkai 1, 20457 Hamburg, Germany)
LinkedIn (Operator: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, D02 AD98, Ireland)
Instagram (Operator: Meta Platforms Ireland Limited, Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)

As standard, these plugins normally collect data from you and transmit them to the servers of the respective provider. In order to guarantee the protection of your privacy, we have taken technical measures which ensure that your data cannot be collected by the providers of the respective plugins without your consent. When you access a page on which the plugins are integrated, they are initially deactivated. Only by clicking on the respective symbol are the plugins activated, and you thereby give your consent to your data being transferred to the respective provider. The legal basis for the use of the plugins is Art. 6(1)(a) and (f) GDPR.

After activation, the plugins also collect personal data such as your IP address and send them to the servers of the respective provider, where they are saved. In addition, when the website concerned is accessed, activated social plugins set a cookie with a unique identifier. This also enables the providers to create profiles of your usage behaviour. This also occurs if you are not a member of the respective provider’s social network. If you are a member of the provider’s social network and you are logged into the social network during your visit to this website, your data and information about the visit to this website can be linked with your profile on the social network. We have no influence on the exact extent of the data collected from you by the respective provider. Please consult the privacy notices of the respective social network provider for more information on the extent, type and purpose of the data processing and on the rights and settings options for the protection of your privacy. These can be retrieved at the following addresses:

Facebook: https://www.facebook.com/policy.php
XING: https://privacy.xing.com/de/datenschutzerklaerung
LinkedIn: https://www.linkedin.com/legal/privacy-policy
Instagram: https://help.instagram.com/519522125107875

10 Use of cookies

We use several types of cookies on our website: Necessary cookies maintain the functionality of our website. We use Performance Cookies, Functional Cookies and Comfort Cookies, for example, to analyse website usage anonymously or to display videos. If you would like to use all the services on our website, you must select all cookie categories. You can find more information in the cookie statements.

11 Website analysis

For the purposes of analysis and optimisation of our websites, we use a range of services, which are described below. This enables us, for instance, to analyse how many users visit our site, which information is most in demand or how users find our website. Among other things, we collect data about the website from which a data subject arrived at a website (known as the referrer), which sub-pages of the website were accessed, or how often and for how long a sub-page was viewed. This helps us to design our offerings in a user-friendly way and to improve them. The data collected in this process are not used to identify individual users personally. Anonymous or at most pseudonymous data are collected. The legal basis for this is Art. 6(1)(f) GDPR.

12 Advertising

We use cookies for marketing purposes in order to address our users with advertising tailored to their interests. We also use the cookies to limit the probability of an advertisement being served and to measure the effectiveness of our advertising measures. This information may also be shared with third parties, such as advertising networks. The legal basis for this is Art. 6(1)(a) and (f) GDPR. The legitimate interest in direct marketing exists for the purposes pursued with the data processing. You have the right to object at any time to the processing of your data for the purposes of such advertising. To this end, we provide you below with opt-out options for the respective services. Alternatively, you can prevent the setting of cookies in your browser settings.

12.1 DoubleClick

We use DoubleClick, a service provided by Google Inc. DoubleClick uses cookies to serve user-based advertisements. The cookies recognise which advertisement has already been served in your browser and whether you have accessed a website via an advertisement that was served. In doing so, the cookies do not collect any personal information, nor can they be linked to such information.

If you do not wish to receive user-based advertising, you can deactivate the serving of advertisements using Google’s ad settings. Further information on how Google uses cookies can be found in Google’s privacy policy.

13 Data transfer

Your data are in principle not forwarded to third parties unless we are under a legal obligation to do so, or the data forwarding is required for the performance of the contractual relationship, or you have previously expressly consented to the forwarding of your data.

External service providers and partner companies, such as online payment providers or the shipping company commissioned to make the delivery, only receive your data to the extent that this is required for handling your order. In these cases, however, the extent of the transmitted data is restricted to the requisite minimum. If our service providers come into contact with your personal data, we ensure, within the framework of processing on our behalf pursuant to Art. 28 GDPR, that they comply with the provisions of data protection legislation in the same way. Please also note the respective privacy notices of the providers. The respective service provider is responsible for the content of external services, whereby, to the extent that this is reasonable, we verify the services for compliance with statutory requirements.

14 Data security

We have put in place extensive technical and operational safeguards in order to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our security procedures are reviewed regularly and adjusted to take any technological advances into account.

As of May 2025

Facebook Fan Page Privacy Policy

When you visit our Facebook Fan Page, we are joint controllers with Facebook for the processing of your personal data. Below, we inform you about the associated data processing.

1. Contact details of the controllers and joint controllership pursuant to Art. 26 GDPR

Christiansen Print GmbH
Trift 4
38871 Ilsenburg
info@christiansenprint.de

and

Meta Platforms Ireland Limited
4 Grand Canal Square, Grand Canal Harbour,
D2 Dublin
Ireland

In the view of the Court of Justice of the European Union (CJEU), we are joint controllers with Facebook for the processing of your personal data. The underlying decision of the CJEU can be found here.

Below, in view of the legal requirements pursuant to Art. 26 GDPR, we inform you about the data processing for which we are joint controllers with Facebook and how you can assert your rights under the GDPR. For this purpose, Facebook provides a supplementary agreement, which we have concluded by operating the Fan Page.

2. Data processing on the Facebook Fan Page

Please note that you use this Facebook page and its functions under your own responsibility. This applies in particular to the use of interactive functions (e.g. comment, share, rate).

When you visit our Facebook page, Facebook collects, among other things, your IP address and other information that is available in the form of cookies on your PC. This information is used to provide us, as the operator of the Facebook pages, with statistical information about the use of the Facebook page. Facebook provides further information on this at the following link: http://de-de.facebook.com/help/pages/insights.

The data collected about you in this context will be processed by Meta Platforms Ireland Limited and may be transferred to countries outside the European Union. In its data use policy, Facebook describes in general terms which information Facebook receives and how it is used. There you will also find information about the options for contacting Facebook and about the settings options for advertisements. The data use policy is available at the following link: https://de-de.facebook.com/policy.php

You can view Facebook’s full data use policy here: https://de-de.facebook.com/full_data_use_policy.

How Facebook uses the data from visits to Facebook pages for its own purposes, the extent to which activities on the Facebook page are assigned to individual users, how long Facebook stores these data and whether data from a visit to the Facebook page are passed on to third parties is not conclusively and clearly stated by Facebook and is not known to us. When you access a Facebook page, the IP address assigned to your device is transmitted to Facebook. According to information from Facebook, this IP address is anonymised (for “German” IP addresses).

Facebook also stores information about its users’ devices (e.g. as part of the “login notification” function); this may enable Facebook to assign IP addresses to individual users. If you are currently logged into Facebook as a user, there is a cookie with your Facebook ID on your device. This enables Facebook to trace that you have visited this page and how you have used it. This also applies to all other Facebook pages. Facebook buttons integrated into websites enable Facebook to record your visits to these websites and assign them to your Facebook profile. On the basis of these data, content or advertising tailored to you can be offered. If you want to make it more difficult for Facebook to track you, you should log out of Facebook or deactivate the “stay logged in” function, delete the cookies on your device, and close and restart your browser. In this way, Facebook information that can be used to identify you directly is deleted. This enables you to use our Facebook page without Facebook being able to identify you via your cookies.

When you access interactive functions on the page (like, comment, share, messages, etc.), a Facebook login screen appears. If you then log in, you will be directly identifiable to Facebook as a specific user.

Information on how to manage or delete existing information about you can be found on the following Facebook support pages: https://de-de.facebook.com/about/privacy#.

3. Retention period

In principle, we only store personal data until the respective purpose for which the data were collected has been achieved. As part of a business relationship with you, we store your personal data for as long as the business relationship continues; this also includes the initiation and processing of a contract as well as the regular limitation period. In addition, we store the data if and to the extent that we are subject to statutory retention obligations. Such obligations may arise, for example, from the German Commercial Code (Handelsgesetzbuch, HGB) or the German Tax Code (Abgabenordnung, AO).

If you have given us your consent for a processing operation, the data associated with the granting of consent will be stored until consent is withdrawn or at most for the duration of the processing operation and, after its completion, within the scope of the limitation period.

4. Your rights

If the conditions specified by law are met, you have the following rights against Facebook and us:

Access | Art. 15 GDPR
Rectification | Art. 16 GDPR
Erasure | Art. 17 GDPR
Blocking / restriction of processing | Art. 18 GDPR
Objection | Art. 21 GDPR
Data portability | Art. 20 GDPR
Right to lodge a complaint with the competent supervisory authority | Art. 77 GDPR
Right to withdraw consent with future effect, if consent has been given | Art. 7(3) GDPR

To assert your rights, please contact Facebook or us at Datenschutz@thimm.de.

5. Final provisions and further information

The currently applicable version of this privacy policy can be found under the item “Data protection” on our Facebook page. If you have any questions about our information offering, you can reach us at Datenschutz@thimm.de.

Further information on the secure use of social networks can also be found on the website of the Federal Office for Information Security at https://www.bsi-fuer-buerger.de/BSIFB/DE/DigitaleGesellschaft/SozialeNetze/sozialeNetze_node.html.

Information about data protection on our Instagram page

Christiansen Print GmbH attaches great importance to the protection of personal data. Below, we inform you about the collection of personal data when you visit our Instagram page. If you have any further questions about how we handle your personal data, please feel free to contact our data protection officer.

1. General information

Social media have become an integral part of the internet and modern communication. In order to stay in contact with our customers and interested parties, we have also set up our own Instagram page. Instagram is an online photo and video sharing service of Meta Platforms, Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. As with the social network Facebook, Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter: “Meta”) in Ireland is responsible for operating the network.

We expressly draw attention to the fact that Meta stores users’ data (e.g. IP address, preferences and personal interests (e.g. through hashtags and groups with which a user is connected), behaviour on the Instagram pages, personal information that may have been stored on Instagram, etc.) and uses them for business purposes.

We have no influence on the processing and further use of these data, as Meta alone determines the processing. We are currently unable to trace to what extent, where and for how long the data are stored, to what extent the data are linked and analysed and to whom the data are passed on. Nor do we have any insight into or influence on deletion periods, i.e. whether and to what extent deletion periods are observed.

Details from Meta itself on what information is collected can be found in the Instagram Privacy Policy, which can be viewed here.

If you are an Instagram member and are logged into your Instagram user account, Meta can assign the visit to our page to your user account. If you want to prevent Meta from linking data about your visit to our Instagram page with your member data stored on Instagram, you should

log out of Instagram before each visit to our Instagram page
delete the cookies on your device
and close and restart your browser.

However, even after these steps have been taken, Meta may recognise you through so-called unique identifiers, such as device IDs and other identifiers, such as those of games, apps or accounts you use, or family device IDs (or other identifiers that are unique to the products of the Meta Companies associated with the same device or account).

2. Scope of data collection and storage

You do not need to be a member of Instagram to view the content on our Instagram page. However, Meta collects, stores and uses data every time our Instagram page is visited.

The moment you access our Instagram page, your browser establishes a connection to a Meta server. In the process, data may be transferred to countries outside the European Union. In any case, regardless of whether or not you are registered with Instagram, your IP address is transmitted and cookies are set. If you are an Instagram member and are logged into your Instagram user account, Meta can assign the visit to our page to your user account.

According to information provided by Meta, the cookies used by Instagram serve the purposes of authentication, security, website and product integrity, advertising and measurement, website functions and services, performance as well as analysis and research. Further information is available in the Instagram Help section at the following link: https://help.instagram.com/1896641480634370.

If you do not have an Instagram account, you can manage interest-based online advertising via the settings of the European Interactive Digital Advertising Alliance and via the settings of your mobile device. In addition, you can likewise object at any time with future effect to the collection and storage of data through the use of the above-mentioned Meta cookies via the following opt-out link: http://www.youronlinechoices.com/de/praferenzmanagement/.

You can manage your preferences with regard to usage-based online advertising at the above-mentioned link. If you use the preference manager to object to usage-based online advertising by a specific provider, this only applies to that specific business’s data collection via the web browser you are currently using. Preference management is cookie-based. Deleting all browser cookies also removes the preferences you have set with the preference manager.

You can also configure your browser before visiting our Instagram page so that no cookies from Meta are stored. Information on how to adjust the cookie settings in your browser can be found in the Help section of the browser you are using.

We have no influence on whether and which cookies Meta sets via our Instagram page and how these data are processed.

When you contact or interact with us via our Instagram page, we process your data on the basis of our legitimate interest pursuant to Art. 6(1) sentence 1 lit. f GDPR. Our overriding legitimate interest lies in contact and communication with our interested parties and in responding to their specific concerns. If your message is aimed at concluding a contract or concerns matters relating to the performance of an existing contractual relationship, the legal basis for the processing is also Art. 6(1) sentence 1 lit. b GDPR.

There is no legal or contractual obligation to provide your personal data to us or to Facebook. Failure to provide the data has no negative consequences whatsoever.

3. Instagram Insights

We use the Instagram Insights function for statistical evaluation purposes. In this context, we receive anonymised data in the form of statistics on the visitors to our Instagram page, which Meta collects, among other things, via cookies and pixels. This does not enable us to draw any conclusions about you personally.

The following information is provided to us by Meta via Instagram Insights:

Followers: Number of people following us – this also includes development within a maximum period of 30 days.
Demographic data: Average age of visitors, gender, place of residence, language.
Activity data: Times at which most users from the community are active.
Reach: Number of people who see a post shared by us. Number of interactions with our post. This enables us to deduce which content is of more interest to the community than other content.
Ad performance: Number of people who were reached by a post or a paid advertisement and interacted with it.
Activities on our Instagram page: Number of clicks on our buttons (to plan a route, to send emails to us, to our website)
Views: Number of times our Instagram page was viewed

Meta provides more detailed information on the Insights functions in its Instagram Privacy Policy (https://instagram.com/about/legal/privacy).

The Instagram Help section contains a guide explaining which settings need to be made in order to decide in what form targeted advertising is displayed. You can access it via the link https://help.instagram.com/ by selecting the “Manage your account” tab and then “Instagram Ads”.

4. Disclosure and use of personal data

It cannot be ruled out that the data will be transferred to countries outside the European Union (including the USA) and processed there. Under data protection law, the USA is currently regarded as an unsafe third country, as the high European level of data protection does not exist there. It is possible that personal data may be subject to access by US authorities for control and monitoring purposes, against which it may not be possible to enforce effective legal remedies or data subject rights.

Recipients or categories of recipients: Meta Platforms Ireland Limited
Meta Platforms, Inc.

Insofar as you interact on Instagram, Meta naturally also has access to your data. In particular, it is possible that Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA, has access to your data. In this case, Meta is located in an unsafe third country in which the level of data protection is lower.

According to the information in Meta’s Instagram Privacy Policy, standard contractual clauses, among other things, are used for data transfers from the EEA to the USA and other countries. In addition, since 31 August 2020, Meta has made available online a “Facebook EU Data Transfer Addendum”, which is intended to incorporate the standard contractual clauses in those cases in which Meta Platforms Ireland Limited processes data from the EU/EEA as a processor and transfers them to Meta Platforms Inc. as a sub-processor.

5. Your rights

If the conditions specified by law are met, you have the following rights:

Access | Art. 15 GDPR
Rectification | Art. 16 GDPR
Erasure | Art. 17 GDPR
Blocking / restriction of processing | Art. 18 GDPR
Objection | Art. 21 GDPR
Data portability | Art. 20 GDPR
Right to lodge a complaint with the competent supervisory authority | Art. 77 GDPR
Right to withdraw consent with future effect, if consent has been given | Art. 7(3) GDPR

To assert your rights, please contact Instagram or us at Datenschutz@thimm.de.

6. Contact details of the controllers

Controllers

If you transfer personal data to us via our Instagram page and we alone decide on the purposes and means of the processing,

Christiansen Print GmbH
Trift 4
38871 Ilsenburg
info@christiansenprint.de

is the sole controller for the processing.

If personal data are processed in connection with our Instagram page and Meta alone decides on the purposes and means of the processing,

Meta Platforms Ireland Ltd.
4 Grand Canal Square,
Grand Canal Harbour,
Dublin 2
Ireland

is the sole controller for the processing.

7. Further information

Further information on the secure use of social networks can be found on the website of the Federal Office for Information Security at https://www.bsi-fuer-buerger.de/BSIFB/DE/DigitaleGesellschaft/SozialeNetze/sozialeNetze_node.html