Privacy Policy

This Privacy Policy informs you of the extent to which we process your personal data (hereinafter referred to as “data”).

1. Responsible for data processing

In accordance with the provisions of the General Data Protection Regulation (GDPR), the controller responsible for data processing is:

Kalfany Süße Werbung GmbH & Co. KG
Industriegebiet West
Holzmattenstraße 22
D-79336 Herbolzheim
Tel. +49 (0) 7643 / 801-0
Fax +49 (0) 7643 / 801-20

2. Contact information for our data protection officer

Michael Gruber
Thundorferstr. 10
D-93047 Regensburg
Tel. +49 (0) 941 462 909 29
Mobil +49 (0) 152 32 01 04 95

3. General information about data processing

We process data in connection with the operation of our business and our website. This also includes disclosure by means of transmission to third parties and, if applicable, to “third countries” outside of the European Union (“EU”) and the European Economic Area (“EEA”). We have provided appropriate notices below in cases where we transfer data outside of the EU or EEA.

4. Data processing

The data concerned, processing purposes, legal bases, recipients and transfers to third countries are listed below:

a) Log files when visiting our website

We log your visit to our website. We process the following data in this context:

  •  Name(s) of the web page(s) you have accessed;
  • Date and time of access;
  • The quantity of data transmitted;
  • Browser type and version;
  • Your operating system;
  • Referrer URL (the previously visited website);
  • Your IP address;
  • Requesting provider.

According to Art. 6(1)(f) GDPR, the legal basis for this data processing is our compelling legitimate interest in the continuous operation and security of our website.

Log files are deleted after seven days unless they are needed in order to verify or investigate specific legal infringements occurring during the retention period.

b) Hosting

In order to operate our website, we use the services of web hosting providers who process the data referred to above (log file when you visit our website) and all other data to be processed in connection with the operation of our website on our behalf.

According to Art. 6(1)(f) GDPR, the legal basis for this data processing is our overriding legitimate interest, thus permitting us to operate the website in the first place.

c) Contacting us

If you contact us, we will process your data, including your name, contact details (if you have provided them) and your message, exclusively for the purpose of processing and responding to your enquiry.

The legal basis for this data processing is our obligation to satisfy a contract and/or to satisfy pre-contractual obligations according to Art. 6(1)(b) GDPR and/or our compelling legitimate interest in processing your enquiry according to Art. 6(1)(f) GDPR.

d) Contacting us to apply for a job

If you contact us to send us your application for employment, e.g. by e-mail or via a contact form, your data (e.g. name, e-mail address, desired location if specified by you), your message and the application documents you submit will be processed exclusively for the purpose of processing and handling your application for employment.

The legal basis for data processing is primarily section 26 BDSG. This provision permits data to be processed that is required in connection with a decision to establish an employment relationship.

Should this data be necessary for the pursuit of legal rights after completion of the application process, data processing may be carried out in the pursuit of legitimate interests pursuant to Art. 6(1)(f) GDPR, namely for purposes of asserting and/or defending against legal claims.

e) Newsletter

You have the option to sign up for our e-mail newsletter in order to receive regular information about our company and our offerings. We process any data you provide (e-mail address and other information provided voluntarily) when you register for our newsletter. We will send you an e-mail after your registration asking you to confirm your registration (“double opt-in”) in order to prevent misuse of your data. Your registration will be logged in order to be able to verify your registration in a legally compliant manner. This relates to the times of registration and confirmation as well as your IP address.

The legal basis for sending the newsletter is your prior consent pursuant to Art. 6(1)(a) GDPR. The legal basis for sending the confirmation e-mail for your registration, as well as associated data logging, is our legitimate interest according to Art. 6(1)(f) DSGVO so that we may properly verify your registration.

The newsletter will be sent by a service provider commissioned by us who acts on our behalf and upon our instructions.

f) Cookies


We use “cookies” on our website. Cookies are small text files that are placed on your device (PC, smartphone, tablet, etc.) and stored by your browser.

Cookie Consent with Consent Manager Provider

Our website uses the Consent Manager Provider cookie consent technology to obtain your consent to the storage of certain cookies on your device and data protection legislation compliant documentation of the former. The party offering this technology is Jaohawi AB, Håltegelvägen 1b, 72348 Västerås, Sweden, website: (hereinafter referred to as “Consent Manager Provider”).

Whenever you visit our website, a connection with the Consent Manager Provider’s servers will be established to obtain your consent and other declarations regarding the use of cookies.

Moreover, Consent Manager Provider shall store a cookie in your browser to be able to allocate your declaration(s) of consent or any revocations of the former. The data that are recorded in this manner shall be stored until you ask us to eradicate them, delete the Consent Manager Provider cookie or until the purpose for archiving the data no longer exists. This shall be without prejudice to any mandatory legal retention periods.

Consent Manager Provider uses cookies to obtain the declarations of consent mandated by law. The legal basis for the use of such cookies is Art. 6 Sect. 1 Sentence 1 lit.  c GDPR.


We use strictly necessary technical cookies on our website to ensure the proper functioning of the site. For example, these cookies make it possible to navigate our website or to provide other basic functions on the website.

In addition, we use optional cookies that provide us with additional information, for example to analyse data traffic or for advertising and marketing purposes.


The cookies we use remain on your device for different times that vary in length.

Session cookies: These cookies are deleted from your device immediately after you close your web browser.

Permanent cookies: These cookies remain on your device even after you close your web browser and enable us, for example, to recognise you when you next visit our website.

Cookie providers

Cookies that we set directly are called “first-party cookies”. By contrast, “third-party cookies” are set by third-party websites, for example in order to display content (advertisements, images, tracking pixels, etc.).

Legal basis for data processing

As a general rule, data processing using cookies is based on your consent in accordance with Art. 6(1)(f) GDPR, or our overriding legitimate interests in optimising and ensuring the functionality of our website in accordance with Art. 6(1)(f) GDPR.

Withdrawal and objection

If data is processed on the basis of your consent, you may withdraw your consent at any time with future effect (“opt-out”). You may object to further data processing with prospective effect in cases of data processing on the basis of our legitimate interest.

You may withdraw your consent by using the opt-out link in the section of the Privacy Policy related to the service in question.

Information about objecting to data processing may be found in Section 6.b. of this Privacy Policy.

Cookie browser settings

In addition, you can prevent or limit data processing by cookies in future by selecting the appropriate browser settings and, for example, disabling cookies. Any cookies that are already stored may be deleted using your browser settings. Please refer to the following links for more information on the respective browser settings:

Our cookies

Please find additional information about specific cookies in use, their respective purpose and duration in our Cookie Settings.


g) Analysis/Marketing

We use a variety of services on our website provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. (hereinafter referred to as “Google”). It is possible that data will also be transmitted to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, as a result.

(1) Google Analytics

We use the Google tracking tool “Google Analytics” on our website. We use Google Analytics in order to evaluate your use of the website, to compile reports on website activities on our website, and to provide other services associated with website use and to improve user-friendliness.

Interactions between website visitors are collected and automatically analysed, primarily with the aid of cookies, by virtue of the use of Google Analytics.

You may find details about the cookies we use in our Cooking Settings.

We use Google Analytics with the extension “anonymizeIp()”. IP addresses within the member states of the EU or EEA are shortened as a result. Only in exceptional cases will your complete IP address be transferred and shortened at the destination if sent to a Google server in the United States. As a rule, this precludes personal identification. In particular, it is not possible to identify the computer/device used by the website visitor to access the website.

The following data will be processed in connection with the use of Google Analytics:

  • 3 bytes of the IP address for accessing user’s system (anonymised IP address)
  • The web page viewed
  • The website from which the user reached the page accessed on our website (referrer)
  • The sub-pages accessed via the website
  • Length of stay on the website
  • Frequency of visiting the website

According to information provided by Google, Google will not associate your IP address with any other data held by Google in any case.

The legal basis for this data processing is your prior consent pursuant to Art. 6(1)(a) GDPR.

(2) Google Remarketing/Retargeting

We use “tracking cookies” from Google on our website. When you visit our site, permanent cookies are used to store information about which products you have viewed on our site and which third-party advertisements and pages have redirected you to our website. During a subsequent visit to a partner website, we can display personalised advertising for you on the basis of products you viewed on our site. The legal basis for this data processing is your prior consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time using the Cookie Settings on our website. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States.

(3) Withdrawing your consent

You may withdraw your consent at any time with future effect by changing the settings available under our Cookie Settings or via

In addition, please refer to statements concerning Google’s use of data within the Google Partner Network at:

h) Integration of third-party content

We use third-party dynamic content (“content”) to optimise the display and offerings on our website. When visiting our website, an application programming interface (“API”) automatically submits a request to the server of the respective content provider as part of which certain log data (e.g. the user’s IP address) is transmitted. The dynamic content is then transmitted to our website and displayed there.

We use third-party content in connection with the following functionalities:

aa) Integration of YouTube videos

We have integrated videos from YouTube LLC, 901 Cherry Ave. San Bruno, CA 94066, USA ("YouTube”) on our website. Log data is transferred to YouTube servers in the United States when the videos are played.

Processing in this manner is performed on the basis of our overriding legitimate interest in the optimum marketing of our website in accordance with Art. 6(1)(f) GDPR.

More information is available at:

bb) Google Maps

We use the “Google Maps” map service on our website. This service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) and is used to provide an interactive map to you. When the map is displayed, data, including your IP address and your location, is transferred to Google’s server in the USA and stored there. Processing in this manner is performed on the basis of our overriding legitimate interest in the optimum marketing of our website in accordance with Art. 6(1)(f) GDPR.

It cannot be ruled out that data may be transferred to Google- LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Additional information on data protection can be found at:

5) Data retention

We only retain personal data for as long as it is necessary for the purposes for which it is processed or until you withdraw your consent. The retention period for certain data can be up to 10 years irrespective of the processing purposes in the event we must comply with statutory retention obligations.

6) Your rights as a data subject

a) Information

Upon request, you may receive information about all personal data that we have stored about you at any time and free of charge.

b) Rectification, erasure, restriction of processing (blocking), objection

Should you no longer agree to the retention of your personal data or should such data have since become incorrect, we will arrange for the erasure or blocking of your data or make the necessary corrections (insofar as this is possible under applicable law) upon instruction from you. The same applies if you would like us to restrict the processing of your data in future. Without limitation, you have the right to object in cases where your data is necessary for the performance of a task carried out in the public interest, or in pursuit of our legitimate interests or in cases based on profiling. You likewise have a right to object in the case of data processing for purposes of direct marketing.

c) Right to withdraw consent with future effect

You can withdraw your consent at any time with future effect. Withdrawal of your consent shall not affect the lawfulness of processing based on consent before its withdrawal.

d) Data portability

You have the right to data portability in cases where data is processed on the basis of a contract, pre-contractual negotiations, consent or by means of an automated process. Upon request, we will provide you with your data in a structured, commonly used and machine-readable format so that you can, if you wish, transmit your data to another controller.

e) Right to lodge a complaint

You also have the option of lodging a complaint related to your rights as a data subject with a supervisory authority:


f) Limitations

The rights described above do not apply to data for which we are not able to identify the data subject, e.g. if anonymised for analysis purposes. It may be possible to exercise your right of access and right to erasure, blocking, rectification or portability with regard to this data if you provide us with additional information that enables us to make the required identification.

7) Exercising your rights as a data subject

For questions regarding the processing of your personal data, requests for information, rectification, blocking, objection or erasure of data, or requests to transfer your data to another company, please contact