General Data Protection Regulation

General For our interns For customers and suppliers For employees and applicants

1. Information on the collection of personal data

(1) Below, we provide information on the collection of personal data during your use of our website.

“Personal data” means all data that can be related to you personally, e.g. name, address, email addresses and user behaviour.

(2) The controller as per Article 4, Paragraph 7 of the GDPR is:

Steinbeis Papier GmbH, Stadtstraße 20, 25348 Glückstadt, Germany;; Phone +49 4124 911 0

(3) Name and address of the data protection officer:

Mr Jörg Hagen, Jhcon Datenschutzberatung, Königstraße 50a, 30175 Hanover, Germany;



2. Your rights

(1) You have the following rights vis-à-vis us with respect to the personal data concerning you:

A right to lodge a complaint with the competent data protection supervisory authority exists at all times. To do so, please contact the data protection centre of the Federal State of Schleswig-Holstein: Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein, Holstenstraße 98, 24103 Kiel;



3. Collection of personal data when visiting our website

(1) During purely informational use of the website, i.e. if you do not log in in order to use the website, register or send us information in another way, we collect no personal data, with the exception of the data that your browser sends to our server. If you would like to view our website, we collect the following data, which are necessary for technical reasons in order for us to display our website and ensure stability and security (the legal basis is Article 6, Paragraph 1, f) of the GDPR):

(2) If you contact us by email or a contact form, we store the data you provide (your email address and, if applicable, your name and telephone) in order to answer your questions. We delete the data created in this connection after storage is no longer required, or, if legal retention requirements exist, we restrict the processing.

(3) If we make use of service providers for individual functions of our content or would like to use your data for advertising purposes, we will inform you in detail of the respective operations below. We will also identify the specified criteria of the storage duration.

(4) In addition to the above-named data, cookies are stored on your computer during your use of our website. Cookies are small text files that are stored on your hard drive in a manner associated with the browser you use and through which certain information is provided to the entity that sets the cookie (in this case, us). Cookies cannot execute programs or transfer viruses to your computer. They serve to make the Internet content user-friendlier and more effective overall.

4. Use of cookies

(1) This website uses the following types of cookies, the scope and function of which are explained below:

Transient cookies (in this regard, see (2))

Persistent cookies (in this regard, see (3))

(2) Transient cookies are deleted automatically when you close the browser. These include session cookies in particular. These save a so-called session ID with which the various queries of your browser can be associated during the same session. They allow your computer to be recognised if you return to our website. The session cookies are deleted when you log out or close the browser.

(3) Persistent cookies are automatically deleted after a pre-configured amount of time, which can differ by cookie. You can delete the cookies at any time in your browser’s security settings.

(d) You can configure your browser settings as you wish and refuse to accept third-party cookies or all cookies, for example. Please note that you may not be able to use all the functions of this website.

(4) Technically necessary cookies are used in the legitimate interest of Steinbeis Papier GmbH on an easily legible and easy-to-use website according to Article 6, Paragraph 1, f) of the GDPR. For the use of all other cookies which are not necessary, you will be asked for your consent via our cookie consent management system (cookie settings) within the scope of informed consent according to Article 1, Paragraph 1, a) of the GDPR.

(5) You have the opportunity to withdraw the use of cookies at any time later on or to agree to the use of cookies after the fact by clicking on cookie settings.

(6) You can generally configure your browser settings as you like and, for instance, reject the acceptance of third-party cookies or all cookies. Please note that in such a case, you may not be able to use all the functions of this website.

5. Use of other services

(1) Besides purely informational use of our website, we offer various services that you can use if you are interested. To do so, you normally must provide further personal data, which we use in order to provide the respective service and to which the above-named data processing principles apply.

 (2) In some cases, we make use of external service providers for processing. We have selected and engaged them carefully; they are bound by our instructions and are audited regularly.

(3) Insofar as our service providers or partners are domiciled in a country outside the European Economic Area (EEA), we inform you of the consequences of this fact in the description of the offer.

6. Blog

(1) In our blog, where we publish various contributions on topics related to our activities, you can submit public comments or share the content via Facebook, LinkedIn and Xing. If you wish to share content, you will be redirected to the respective service. Information on data protection for the individual services can be found further in our general data protection regulation. Your comments are published with the username you provide along with your message. We recommend using a pseudonym instead of your real name. The username and email address are required information; all other information is optional. When you submit a comment, we continue to store your IP address, which we delete (after one week). This storage is necessary to allow us to defend against liability claims in the event of possible publication of unlawful content. We need your email address in order to contact you in case a third party objects to your comment as unlawful. The legal basis is Article 6, Paragraph 1, a),b) and f) of the GDPR. The comments are not reviewed before publication. We reserve the right to delete comments if third parties object to them as unlawful.

(2) When writing your comment, you can check a box for our email service. This informs you when other users comment your message. We use the so-called double opt-in procedure for this service, i.e. you receive an email in which you must confirm that you are the owner of this email address and want to receive the messages. You can unsubscribe from the messages at any time by clicking the link contained in the email. We store your personal data, including your email address, time you registered for the service and IP address until you unsubscribe from the notice service.

7. Newsletter

(1) With your consent, you can subscribe to our newsletter, which we use to inform you about our current offers of interest. The goods and services advertised are identified in the declaration of consent.

(2) We use a so-called double opt-in procedure for registration for our newsletter. This means that, after receiving your registration, we send an email to the email address provided in which we ask you for confirmation that you want to have the newsletter sent. If you do not confirm your registration, your information is locked and deleted automatically after one month. Furthermore, we store the IP addresses you use and the times of registration and confirmation. The purpose of the process is to verify your registration and, if necessary, to facilitate investigation of possible misuse of your personal data.

(3) The only required information for sending the newsletter is your email address. After your confirmation, we store your email address for the purpose of sending the newsletter. The legal basis is Article 6, Paragraph 1, a) of the GDPR.

(4) You can withdraw your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare your withdrawal by clicking the link provided in each newsletter email or by emailing

8. Use of Google Analytics

(1) We use Google Analytics to analyse the use of our website and to frequently improve it. Using the statistics collected, we can improve our offer for you as the user and design it to be more interesting. In such exceptional cases in which your personal data is transferred to the USA, the EU has standard agreements in place ( The legal basis for the use of Google Analytics is Article 6, Paragraph 1, a) of the GDPR.

(2) Google Analytics is a Web analysis service from Google Inc. (Google). Google Analytics utilises so-called cookies, text files which are stored on your computer and enable us to analyse how you use our website. The information collected by the cookie about your use of this website are normally transferred to a Google server in the USA and stored there. By activating the IP anonymisation option on this website, your IP address will be shortened in advance by Google within the member states of the European Union or in other contractual states of the Agreement on the European Economic Area. Only in exceptional cases will the IP address be transferred in full to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to generate reports about the website activities and to provide additional services for the website operator associated with the use of the website and the use of the Internet.

(3) Within the scope of Google Analytics, the IP address identified by your browser will not be associated with other data from Google.

(4) You can prevent the storage of cookies by changing the respective settings in your browser software; however, please note that you will not necessarily be able to use all the functions of this website in their entirety in such a case. Furthermore, you can prevent the collection of data by the cookie and data relating to your use of the website (incl. your IP address) from Google and the processing of this data by Google by withdrawing consent to the use of such cookies in the cookie settings.

(5) Information of the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland; Fax: +353 1 4361001. Terms of Service:; Overview of data protection:; Privacy Policy:

9. Integration of YouTube videos

(1) We have integrated YouTube videos into our online content. These are stored at and can be played directly from our website. They are all integrated in “extended data protection mode”, i.e. no data about you as a user are transferred to YouTube if you do not play videos. The data listed under Clause 9. (2) of this statement are not transferred until you play the videos. We have no influence on this data transfer. The legal basis for the use of YouTube is your consent according to Article 6, Paragraph 1, a) of the GDPR.

(2) As a result of the visit to the website, YouTube is informed that you have retrieved the corresponding subpage of our website. Furthermore, the data under Clause 9. (3) of this statement are sent. This occurs regardless of whether YouTube provides a user account through which you are logged in or no user account exists. If you are logged into Google, your data are associated directly with your account. If you do not want YouTube to associate them with your profile, you must log out before clicking the button. YouTube stores your data as user profiles and uses them for purposes of advertising, market research and/or targeted presentation of its website. Such analysis is performed (even for users who are not logged in) especially for the purpose of targeted advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise it, you must contact YouTube.

(3) You can find more information on the purpose and scope of the data collection and processing by YouTube in the Privacy Policy. This also provides more information on your rights and privacy protection settings options:

Google also processes your personal data in the USA. In cases in which your personal data is transferred to the USA, the EU has standard agreements in place (

(3) You have the option to withdraw the use of cookies at any time later on by clicking on “Cookie settings”.  

10. Use of our Meta products

We, together with Meta Platforms Ireland Limited (Facebook Ireland Limited) – hereinafter referred to as Meta – 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland,, are responsible for the use of our Facebook and Instagram pages as joint controllers within the meaning of Art. 26 GDPR and the Facebook Page Insights Controller Addendum (

When Meta products are used (i.e. also when our Facebook and Instagram pages are visited), Meta processes (personal) data, including the data of individuals who have not signed up to use any Meta products. The specific types of (personal) data that are processed, as well as how, for which purposes and on which legal basis these data are processed, are described in Meta’s Privacy Policy (, which applies to all Meta products. The Privacy Policy page also contains information on how to contact Meta, as well as settings options for ads, cookies, etc. Data may also be transferred to countries outside the European Union.

Detailed information on the cookies that Meta uses in conjunction with Meta accounts, when Meta products are used (including the website and apps) and when other websites are visited or apps used that utilise Meta products (including the Like button or other Facebook technologies) can be found in the Meta Cookies Policy ( Information on how you can control the way data relating to you is used can also be found on the same page:

When you visit our Facebook or Instagram page, Meta collects data about your IP address, among other things. Meta, as the operator of Meta products and services, combines this data with additional information that it obtains through cookies to make available to us statistical information on how each product or service is used (so-called Page Insights). These combined data make it possible to understand how users interact with our Facebook and Instagram pages. The Page Insights may be based on personal data that Meta collected in the context of a visit or interaction by users with our Meta products and their content. Meta provides more detailed information on this at:

The Page Insights help us perform an anonymous analysis of the reach of our pages, the number of page views, the amount of time spent watching video clips, and user behaviour (likes, comments, sharing articles, videos, etc.). In addition, the Page Insights make it possible to break down the data in accordance with user age, gender and location (as entered in the respective Facebook (Meta) profiles. With regard to the analysis of the reach of our pages, certain settings and/or filters can be used to select specific periods of time, articles viewed and demographic groups (e.g. female, 20–30 years old). These data are anonymised, aggregated and made abstract. This means that the settings and filters do not enable us to associate the data with specific individuals. The analysis is used to optimise our pages in terms of their public relations effectiveness. The legal basis for this data processing is Art. 6 1(a) and (f) GDPR.

Beyond what is described above, we as a provider of the information service do not collect or process any other data relating to the use of the pages.

Along with your rights with respect to us, you also have the right to lodge a complaint with the Irish Data Protection Commission (responsible for Meta Platforms Ireland Limited (Facebook Ireland Limited)) – Art. 77 GDPR).

If you have any specific questions regarding the protection of your data, please contact our Data Protection Officer or the data protection officer at Meta Platforms Ireland Limited.

11. Use of LinkedIn

We manage our account in accordance with the principles set out below:

We are jointly responsible with LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland hereinafter referred to as the "platform operator".

We only process your personal data such as your surname and first name, your email address and IP address etc. if there is a legal basis for this.  You can find more detailed information on processing by the platform operator in the platform operator's privacy policy.

Data is therefore only transferred to third parties if there is a legal basis for the processing. For example, we pass on personal data to persons or companies who work for us as processors in accordance with Art. 28 GDPR. A processor is anyone who processes personal data on our behalf - i.e. in particular in a relationship of instruction and control with us.

In accordance with the requirements of the GDPR, we conclude a contract with each of our processors in order to oblige them to comply with data protection regulations and thus ensure comprehensive protection of your data.

We would like to point out that your data may also be passed on to third parties by the platform operator. However, we have no influence on this.

You can find more detailed information on processing by the platform operator in the platform operator's privacy policy.

We store all personal data that you provide us only for as long as it is required to fulfill the purposes for which this data was transmitted or as long as this is required by law. Once the purpose has been fulfilled and/or the statutory retention periods have expired, we will delete or block the data, insofar as this is technically possible for us.

Information on data storage by the platform operator can be found in the platform operator's privacy policy, see above.

The platform uses SSL encryption for security reasons and to protect the transmission of confidential content, such as the inquiries you send to us or the platform operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. There is no separate indication within apps that SSL encryption is in place.

If SSL encryption is activated, the data you transmit to us cannot be read by third parties.

Collection and storage of personal data and the nature and purpose of its use

When you access the platform operator's website, the browser used on your device or the app automatically sends information to the platform operator's server. This information is temporarily stored by the platform operator in a log file. The following information is collected without any action on your part and stored until it is automatically deleted:

However, this data is only available to the platform operator. It is not possible for us to access this data. Further information can be found in the platform operator's privacy policy, see above.

We do not collect any personal data about you. However, it is possible to obtain pseudonymized data in the form of statistics about the users of our site over a certain period of time. The software for analyzing user statistics is usually provided by the platform operator itself, but in some cases it is also possible to integrate third-party software (e.g. Google Analytics). This can collect data about the users of the site, such as age, gender, country of origin, browser used and interests.

However, this data is always pseudonymized and it is not possible for us to make statements about individual users on the basis of this data alone. We use this data exclusively to optimize the content we offer and its marketing and to adapt it to the respective user interests. This is a legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.

It is also possible for you to interact with our account. You can do this, for example, by marking a post with "Like", sharing or commenting on it or by writing to us directly.

When you interact with us, data processing by us is usually inevitable, as we can see your account and thus gain access to your personal data, such as your username, your profile picture or the date or time of the interaction.

We use this data exclusively to optimize the content we offer and its marketing and to adapt it to the respective user interests. This is a legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. Our legitimate interest follows from the above-mentioned reason for optimizing the content we provide on our profile. Furthermore, the data collected is information that is only made available to us when you interact with our profile. This establishes a relevant and appropriate relationship between you and our profile.

If deletion by us is possible, personal data will be deleted by us after 28 days at the latest, unless there is a legal basis for further processing beyond this period.

Further information on data processing by the platform operator can be found in the platform operator's privacy policy, see above.

This platform uses cookies. We have no control over which cookies the platform operator uses. You can find more information in the platform operator's privacy policy at the following link:

To enforce your rights, you can contact the platform operator directly if the processing is carried out by the platform operator. We have provided the contact details of the platform operator as the controller responsible for data processing at the beginning of this document. Of course, you can also contact us to enforce your rights.

Changes to the privacy policy

With regard to changes to the data protection declarations by the platform operator, please refer to its data protection declaration, see above.

12. Use of Xing

(1) Controller under data protection law

For the processing of personal data on XING, we define the purposes and means together with XING SE, Dammtorstraße 30, 20354 Hamburg - Germany

Phone: +49 40 419 131-0 
Fax: +49 40 419 131-11 

The data protection officer of Xing is:


(2) Purposes of the processing

Presentation of the company and interaction with our users via the XING platform. The purpose of our XING presence is therefore to provide information about our company, our products and services, combined with the opportunity for users to interact with us in a targeted manner. The legal basis for data processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is, in particular, our business interest in sharing information with our users and being able to communicate with them.

If we publish images of persons, this is done via consent (legal basis: Art. 6 para. 1 lit. a GDPR), on the basis of a contractual agreement (legal basis: Art. 6 para. 1 lit. b GDPR) and in exceptional cases on the basis of legitimate interests (legal basis: Art. 6 para. 1 lit. f. GDPR in conjunction with Section 23 (1) No. 3 of the Art Copyright Act).

We expressly point out that we have no influence on data processing by Xing. Please check which personal data you share via Xing and adjust your settings in your Xing profile accordingly. You can find the privacy policy here.

(3) Rights of the data subject

You can exercise your right to information, correction and deletion of data at any time. Simply contact us in the ways described above. If you wish your data to be deleted but we are still legally obliged to retain it, access to your data will be restricted (blocked). The same applies in the event of an objection. You can exercise your right to data portability insofar as the technical possibilities are available to the recipient and to us.

If your rights must be asserted against XING, we will forward your request to XING. Further information regarding the exercise of your data subject rights vis-à-vis XING can be found in XING's privacy policy at

You have the right to lodge a complaint with a data protection supervisory authority at any time.


13. External links

To provide you with optimal information, links are located on our site that refer to sites of third parties. Insofar as this is not obvious, we notify you that they are external links. The website operator has no influence on the content and presentation of these sites of other providers and thus refers to their data protection statements. Therefore, the guarantees of this Data Protection Statement obviously do not apply there.

14. Live chat

With your consent, we utilise on the website a live chat system from our service provider Userlike UG (limited liability company), Probsteigasse 44-46, D-50670 Cologne, Germany. You can use the live chat feature like a contact form in order to talk to our employees in near real-time. Personal data is collected when the chat feature is launched.  

Depending on the nature of your conversation with our employees, additional personal data may be collected after you enter it during the chat. The type of data collected here mainly depends on the nature of your request/query or the problem you describe to us.  

When you visit the website at, a chat widget in the form of a JavaScript file from AWS Cloudfront is loaded. The chat widget is basically the source code that is executed on your computer in order to enable the chat feature. 

Userlike also stores the content of the live chat in order to avoid inconveniencing you at a later time by having to ask you to describe previous requests/queries. This history storage also helps us continuously evaluate the quality of our live chat feature. If you do not wish to have your chat history stored, you can inform us to this effect using the contact details shown below. We will then immediately delete all of your stored live chats. 

15. Objection to or withdrawal from processing of your data

(1) If you have granted consent to the processing of your data, you can withdraw it at any time. Such withdrawal affects the permissibility of the processing of your personal data after you have declared it to us.

(2) Insofar as we base the processing of your personal data on the consideration of interests, you can object to the processing. This is especially the case if the processing is not necessary for the performance of a contract, which we describe in each case in the following description of the function. If you exercise the right to object, we ask that you describe the reasons why we should not process your personal data as we have. In the event of your legitimate objection, we review the situation and will either cease/adjust the data processing or identify our compelling grounds that are deserving of protection on the basis of which we will continue the processing.

(3) You can of course object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us of your objection to advertising via:

Withdrawal by email:

Withdrawal by post: Attn. Mr Ulrich Middelberg, Steinbeis Papier GmbH, Stadtstraße 20, 25348 Glückstadt, Germany


As of January 2024

You can change your cookie settings here.

Cookie settings
Leider verwenden Sie einen veralteten Browser.
Unser Internetauftritt wurde auf Basis zeitgemäßer und sicherer Technologien entwickelt. Daher kann es bei der Nutzung eines veralteten Browsers zu Problemen bei der Darstellung und den Funktionalitäten kommen. Wir empfehlen Ihnen, einen anderen aktuellen und kostenlosen Browser zu nutzen:
Mozilla Firefox
Google Chrome
Microsoft Edge