Information pursuant to Section 5 of the German Data Protection Act (DDG)

ALS Box Opening GmbH
Weinstr. 5
67146 Deidesheim
Germany

Represented by:
Paul Kammerscheid, Michael Kuffler

Contact:
Phone: +49 89 548446-0
Email: office@paket-oeffner.com

Registration details:
Commercial Register: Mannheim Local Court HRB 745 018
Registration number: HRB 745 018

VAT ID pursuant to Section 27a of the German Value Added Tax Act (UStG):
DE 42 66 60 718

Consumer Dispute Resolution (Section 36 of the Consumer Dispute Resolution Act)

ALS Box Opening GmbH is neither obligated nor willing to participate in dispute resolution proceedings before a consumer arbitration board.

Online Dispute Resolution (ODR)

The European Commission provides a platform for online dispute resolution (ODR):
https://ec.europa.eu/consumers/odr/

PRIVACY POLICY

1. Data Controller

ALS Box Opening GmbH
Weinstr. 5
67146 Deidesheim

Phone: +49 89 548446-0
Email: office@paket-oeffner.com

2. Hosting

This website is hosted by DomainFactory GmbH,
, Oskar-Messter-Str. 33, 85737 Ismaning, Germany.

When you visit the website, personal data is processed in server log files.

Legal basis: Art. 6(1)(f) GDPR
Purpose: To ensure stable and secure operation

3. Server Log Files

The following are processed:

• IP address

• Date and time of access

• Browser type and version

• Operating system

• Referrer URL

This data is not combined with any other data.

4. Cookies & Consent Management

This website uses cookies.
Consent management is handled by Complianz – GDPR/CCPA Cookie Consent.

Legal basis:

• Technically necessary cookies: Art. 6(1)(f) GDPR

• Statistics/Marketing Cookies: Article 6(1)(a) of the GDPR

Consent may be withdrawn at any time.

5. Google Analytics 4 (via Google Site Kit)

This website uses Google Analytics 4,
Provider: Google Ireland Limited, Dublin, Ireland.

Data processed:

• IP address (abbreviated)

• Usage data

• Device and browser information

Legal basis:
Art. 6(1)(a) GDPR (Consent)

Transfers to third countries:
A transfer to the United States cannot be ruled out.
Protection is provided through EU Standard Contractual Clauses.
A residual risk remains.

6. Burst Statistics

This website uses Burst Statistics for privacy-friendly audience analysis.

• Processing is done exclusively locally

• No cookies

• No disclosure to third parties

Legal basis:
Art. 6(1)(f) GDPR

7. Akismet Anti-Spam

Akismet is used for spam detection.
Provider: Automattic Inc., USA.

Data processed:

• IP address

• User-Agent

• Form content

Legal basis:
Art. 6(1)(a) GDPR

Transfers to third countries: United States (SCCs, residual risk)

8. Google Fonts

Google Fonts are embedded locally (OMGF / OMGF Pro).
No connection is made to Google servers.

9. Security (Wordfence, Hide My WP Ghost, Really Simple Security)

Security plugins are used to protect the website.

Data processed:

• IP addresses

• Attempts to access

• Security logs

Legal basis:
Art. 6(1)(f) GDPR

10. Performance & Media

Plugins used:

• Hummingbird

• Smush

• WP-Optimize

• WPBakery Page Builder

• Slider Revolution

These are used exclusively for technical purposes.

11. Translations (Weglot)

This website uses Weglot Translate.
In doing so, page content may be transmitted to Weglot's servers.

Legal basis:
Art. 6(1)(f) GDPR
Transfer to third countries: possible (depending on the target language)

12. WooCommerce

The store uses WooCommerce.

The following are processed:

• Order and billing information

• Contact Information

• Payment Information

Legal basis:
Art. 6(1)(b) GDPR

13. Backups

UpdraftPlus is used for data backup.

Legal basis:
Art. 6(1)(f) GDPR

14. Data Subject Rights

You have the right to:

• Right of access (Art. 15 GDPR)

• Rectification (Art. 16 GDPR)

• Erasure (Art. 17 GDPR)

• Restriction (Art. 18 GDPR)

• Data Portability (Art. 20 GDPR)

• Right to object (Art. 21 GDPR)

• Withdrawal of Consent (Art. 7(3) GDPR)

15. Right to Appeal

You have the right to file a complaint with a data protection supervisory authority.

16. Automated Decision-Making

No automated decision-making or profiling takes place.

17. Status

This Privacy Policy is current as of 2026.

Next logical step (optional, technical)

• Correctly map GA4 to "Statistics" in Complianz

• Classify Weglot as a functional or legitimate interest

• Share Burst Statistics without Consent

Liability for Content

As a service provider, we are responsible for our own content on these pages in accordance with Section 7(1) of the Digital Services Act (DDG) and general laws.
However, pursuant to Sections 8 through 10 of the DDG, we are not obligated to monitor transmitted or stored third-party information or to investigate circumstances that indicate illegal activity.

Obligations to remove or block the use of information under general laws remain unaffected by this.
However, liability in this regard is only possible from the time we become aware of a specific infringement.
Upon becoming aware of any such infringements, we will remove the content immediately.