shipping conditions

papphaus, karton-haus, kartonhaus

Data protection

1. Name and contact details of the controller and the company data protection officer

Bruch & Bruch GbR
Kinderspielzeug Pappdorf
Heideweg 8a
01109 Dresden

Telephone: 0351 - 321 44 47
Fax: 0351 - 321 44 76

Tax Office: Dresden II
USt.Id .: DE265295016

Managing Directors: Anja and Jens Uwe Bruch
Register court: Dresden

2. Collection and storage of personal data as well as the nature and purpose of their use

a) When visiting the website

When you visit our website, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information will be collected without your intervention and stored until automated deletion:

IP address of the requesting computer,
• date and time of access,
• name and URL of the retrieved file,
• Website from which access is made (referrer URL),
• the browser used and, if applicable, the operating system of your computer as well as the name of your access provider.

The data mentioned are processed by us for the following purposes:

• ensuring a smooth connection of the website,
• ensuring comfortable use of our website,
• evaluation of system security and stability,
• for administrative purposes.

The legal basis for data processing is Art. 6 para. 1 p. 1 lit. f DSGVO. Our legitimate interest follows from the data collection purposes listed above. In no case we use the collected data for the purpose of drawing conclusions about you. In addition, we use cookies and analysis services when visiting our website. Further details can be found under no. 4 and 5 of this privacy policy.

3. Disclosure of data

Your data will be forwarded to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of the goods. To process payments, we pass on your payment data to the bank responsible for the payment.
In the event of a double payment delay, Bruch & Bruch GbR will also forward your data to the

EuroTreuhand Inkasso GmbH
Amsterdam Road 133 b
D-50735 Cologne

A transfer of your personal data to third parties for purposes other than those listed below does not take place. We only share your personal information with third parties if:

• You yours according to Art. 6 para. 1 sentence 1 lit. a DSGVO have given express consent to this
• disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f DSGVO is required to assert, exercise or defend legal claims and there is no reason to assume that you have a predominantly legitimate interest in not disclosing your data,
• in the event that disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c DSGVO is a legal obligation, as well
• this is legally permissible and according to Art. 6 para. 1 sentence 1 lit. b DSGVO is required for the settlement of contractual relationships with you.

4. Cookies

We use cookies on our site. These are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not harm your device, do not contain viruses, Trojans or other malicious software. In the cookie information is stored, each resulting in connection with the specific terminal used. However, this does not mean that we are immediately aware of your identity. On the one hand, the use of cookies serves to make the use of our offer more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages on our website. These are automatically deleted after leaving our page. In addition, to improve usability, we also use temporary cookies that are stored on your device for a specified period of time. If you visit our site again to take advantage of our services, it will automatically recognize that you have already been with us and what inputs and settings you have made, so you do not have to re-enter them.
On the other hand, we use cookies in order to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer (see Section 5). These cookies allow us to automatically recognize when you visit our site again that you have already been with us. These cookies are automatically deleted after a defined time. The data processed by cookies are for the purposes mentioned in order to safeguard our legitimate interests as well as third parties according to Art. 6 para. 1 sentence 1 lit. f DSGVO required. Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or always a hint appears before a new cookie is created. However, disabling cookies completely may mean that you can not use all features of our website.

5. Google Analytics

We use Google Analytics, a web analytics service provided by Google Inc. ("Google"), for the purpose of designing and continuously optimizing our website. The legal basis for data processing through the use of Google Analytics is Art. 6 para. 1 sentence 1 lit. f DSGVO. Our legitimate interest follows for the aforementioned purposes of the needs-based design and continuous optimization of our offer. Google Analytics creates pseudonymised usage profiles and uses cookies (see point 4). The information generated by the cookie about your use of this website such as

• browser type / version,
• used operating system,
• Referrer URL (the previously visited page),
• host name of the accessing computer (IP address),
• date and time of the server request,

are transmitted to a Google server in the US and stored there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator.

You can prevent the storage of cookies by a corresponding setting of your browser software; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible.

In addition, you may prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading the browser plug-in available under the following link and install:
As an alternative to the browser add-on or within browsers on mobile devices, please click deactivate Google Analytics to prevent future tracking by Google Analytics within this website. An opt-out cookie is stored on your device. If you delete your cookies, you must click this link again.

The IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data. In view of the discussion about the use of analysis tools with full IP addresses, we would like to point out that this website uses Google Analytics with the extension "_anonymizeIp ()" and therefore IP addresses are only shortened processed in order to exclude a direct personal reference.

6. Plugins and Tools

6.1 YouTube

Our website uses plugins from the Google-powered YouTube page. Site operator is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit one of our YouTube plug-in-enabled sites, you will be connected to the servers of YouTube. It tells the YouTube server which of our pages you've visited. If you're logged into your YouTube account, YouTube will allow you to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account. The use of YouTube is in the interest of an attractive presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.
For more information about how to handle user data, please refer to the YouTube Privacy Policy at

6.2 Use of social plugins

On these internet pages plugins of the social networks, twitter and google + are used. "Facebook-I-Like" or "Facebook-Like" is operated by: Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, United States. "Twitter Re-Tweet" is operated by: Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, United States. "Google + 1" is operated by: Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, United States.

If you visit our internet presence with such a plugin, a connection to the respective servers will be established and transmitted, which of our web pages you have visited. If you are logged in as a member of Google +, Twitter or Facebook, Google, Twitter or Facebook assigns this information to your personal user account. When using the plugin functions (for example, clicking on the "Like" button, submitting a comment), this information is also assigned to your account, which you can only prevent by logging out before using the plugin. By using Twitter and the "Re-Tweet" function, the websites you visit are linked to your Twitter account and shared with other users. This data is also transmitted to Twitter. We point out that we as the provider of the pages are not aware of the content of the transmitted data and their use by Twitter. For more information on the collection and use of data by Google, Twitter and Facebook, about your rights and ways to protect your privacy, please refer to the privacy policy of Facebook ( , in the privacy policy of Twitter ( and on Google's privacy policy (

Hints to the Facebook Fanpage

For the information service offered here we use the technical platform and the services of Facebook Ireland Ltd., 4 Grand Canal Square Grand Canal Harbor, Dublin 2, Ireland. We point out that you use this Facebook page and its functions on your own responsibility. This is especially true for the use of interactive features (e.g., commenting, sharing, rating). Alternatively, you can also access the information offered on this page on our Internet offer at When visiting our Facebook page, Facebook, etc. collects your IP address and other information that exists in the form of cookies on your PC. This information is used to provide us as the operator of the Facebook pages statistical information on the use of the Facebook page. For more information, please contact Facebook at the following link: http: // DE - The data collected about you in this context will be published by Facebook Ltd. processed and, where appropriate, transferred to countries outside the European Union. What information Facebook receives and how it is used is described by Facebook in general terms in its data usage policies. There you will also find information about contact options for Facebook as well as the setting options for advertisements. The data usage guidelines are available at the following link:

The complete Facebook data policy can be found here:

In which way Facebook uses the data from the visit of Facebook pages for its own purposes, to what extent activities on the Facebook page are assigned to individual users, how long Facebook stores these data and whether data from a visit to the Facebook page to third parties will not be finalized and clearly named by Facebook and is not known to us. When accessing a Facebook page, the IP address assigned to your end devices will be transmitted to Facebook. According to information provided by Facebook, this IP address is anonymised (for "German" IP addresses) and deleted after 90 days. Facebook also stores information about its users' terminals (e.g., as part of the "logon notification" feature); If necessary, Facebook is thus able to assign IP addresses to individual users. If you are currently logged in to Facebook as a user, you will find a cookie with your Facebook ID on your device. As a result, Facebook is able to understand that you visited this page and how you used it. This also applies to all other Facebook pages. Via Facebook buttons embedded in web pages, Facebook is able to record your visits to these web pages and assign them to your Facebook profile. Based on this data content or advertising can be tailored to suit you. If you want to avoid this, you should log out of Facebook or disable the "stay logged in" feature, delete the cookies on your device and stop and restart your browser. This will delete Facebook information that can be immediately identified. This allows you to use our Facebook page without revealing your Facebook ID. When you access interactive features of the page (like, comment, share, news, etc.), a Facebook login screen appears. After any registration, you will be recognizable as a specific user for Facebook again. For information on how to manage or delete existing information about you, visit the following Facebook support pages: https: // DE -

This Privacy Policy can be found in the current version under the item "Privacy" on our Facebook page. If you have questions about our information offer, you can contact us at The concept underlying the offer can be found at the following Internet address: Further information on Facebook and other social networks and how you can protect your data can also be found on


6.3 Use of webfonts

On these websites external fonts, Google fonts are used. Google Fonts is a service of Google Inc. ("Google"). The integration of these web fonts is done by a server call, usually a Google server in the USA. This will be transmitted to the server, which of our websites you have visited. Also, the IP address of the browser of the terminal of the visitor of this website is stored by Google. For more information, see the Google Privacy Policy, which you can access here:

6.4 Google Maps

This website uses the Google Maps API to visually display geographic information about poster locations or other locations. When using Google Maps, Google (Google Inc., 1600 Amphitheater Parkway, Mountain View, California, 94043) also collects, processes and uses data about the use of Maps features by visitors to the Websites. For more information about Google's data processing, please refer to Google's Privacy Policy, which can be found at

6.5 Use of your data through the contact form or by e-mail

The personal data that you provide us in the context of a contact request will only be used to answer your inquiry or contact and for the associated technical administration. The transfer to third parties does not take place. You have the right to revoke your consent with effect for the future at any time. In this case your personal data will be deleted immediately. Your personal data will also be deleted without your revocation if we have processed your request or if you revoke the consent given here for storage. This also happens if the storage is inadmissible for other legal reasons. You can always check the date stored on your person.

7. Use and use of Google AdSense

The controller has integrated Google AdSense on this website. Google AdSense is an online service that provides third-party advertising mediation. Google AdSense is based on an algorithm that selects advertisements displayed on third-party websites in accordance with the contents of the respective third-party website. Google AdSense allows interest-based targeting of the Internet user, which is implemented by generating individual user profiles. The operating company of the Google AdSense component is the Alphabet Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA. The purpose of the Google AdSense component is to include advertisements on our website. Google AdSense sets a cookie on the information technology system of the data subject. What cookies are, has already been explained above. By using this cookie, Alphabet Inc. provides an analysis of the use of our website. Each visit to one of the pages of this site operated by the controller and incorporating a Google AdSense component automatically initiates the Internet browser on the information technology system of the person concerned through the respective Google AdSense component To submit data to Alphabet Inc. for purposes of online advertising and commission settlement. As part of this technical process, Alphabet Inc. gains knowledge of personal information, such as the IP address of the data subject, which is used by Alphabet Inc., inter alia, to understand the origin of visitors and clicks and, as a result, to facilitate commission settlement. The affected person can prevent the setting of cookies through our website, as shown above, at any time by means of a corresponding setting of the Internet browser used and thus permanently contradict the setting of cookies. Such a setting of the Internet browser used would also prevent Alphabet Inc. from setting a cookie on the information technology system of the person concerned. In addition, a cookie already set by Alphabet Inc. can be deleted at any time via the Internet browser or other software programs. Google AdSense also uses so-called counting pixels. A counting pixel is a miniature graphic that is embedded in web pages to enable log file recording and log file analysis, whereby a statistical evaluation can be performed. Based on the embedded pixel count, Alphabet Inc. can detect if and when an internet page was opened by an affected person and which links the affected person clicked on. Counting pixels are used, among other things, to evaluate the flow of visitors to a website. Google AdSense will transfer personal information and information, including the IP address required to collect and bill the displayed advertising, to Alphabet Inc. in the United States of America. This personal information is stored and processed in the United States of America. Alphabet Inc. may transfer such personal information collected through the technical process to third parties. Google AdSense will be explained at

8. Credit check

(1) If we make an advance payment, we may collect a credit report from SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden, based on mathematical and statistical procedures, to safeguard our legitimate interests. Your legitimate concerns will be taken into account in accordance with the law.

A transfer to other third parties does not take place.

(3) We use the received information about the statistical probability of a default for a balanced decision on the establishment, implementation or termination of the contractual relationship. The credit information can contain probability values ​​(score values) which are calculated on the basis of scientifically recognized mathematical-statistical methods and whose calculation includes, among other things, address data. Your concerns will be considered in accordance with the statutory provisions.

(4) If you would like information about the data stored in the companies mentioned under paragraph 2, please contact them directly. We do not receive detailed information about you during the credit check. Please understand that we reserve the right to exclude payment methods for initial and follow-up orders depending on the credit check and order amount.
9. Affected rights

You have the right:

in accordance with Art. 15 DSGVO, to request information about your personal data processed by us. In particular, you can provide information on the processing purposes, the category of personal data, the categories of recipients to whom your data has been disclosed, the planned retention period, the right to rectification, deletion, limitation of processing or opposition, the existence of a The right to complain, the source of their data, if not collected from us, and the existence of automated decision-making including profiling and, where appropriate, meaningful information about their details; pursuant to Art. 16 DSGVO, to demand the correction of incorrect or completed personal data stored by us immediately; in accordance with Art. 17 DSGVO, to demand the deletion of your personal data stored by us, except where the processing is for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims is required; in accordance with Art. 18 GDPR to demand the restriction of the processing of your personal data, as far as the accuracy of the data is disputed by you, the processing is unlawful, but you reject their deletion and we no longer need the data, but you this to assert, exercise or defense of legal claims or you have objected to the processing in accordance with Art. 21 GDPR pursuant to Art. 20 GDPR to obtain your personal data provided to us in a structured, common and machine-readable format or to request the transfer to another person responsible; pursuant to Art. 7 para. 3 DSGVO your once granted consent to revoke against us at any time. As a result, we are no longer allowed to continue the data processing based on this consent for the future and; according to Art. 77 GDPR to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or work or our company headquarters.

10. Minors

We are particularly interested in ensuring the protection of personal data of children. For this reason, there is no knowledgeable processing of data of minors, unless the holder of the parental responsibility has given the consent. As soon as we recognize that minors enter personal data without consent, or if personal information about such persons is entered, we will delete this data immediately.

11. Right of objection

If your personal data are based on legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f DSGVO are processed, you have the right to file an objection against the processing of your personal data in accordance with Art. 21 DSGVO, provided that there are reasons for this arising from your particular situation or the objection is directed against direct mail. In the latter case, you have a general right of objection, which is implemented by us without specifying any particular situation. If you would like to exercise your right of revocation or objection, please send an e-mail to:

12. Data security

We use the widely used Transport Layer Security (TLS) method in conjunction with the highest level of encryption that your
Browser is supported. This is usually 256-bit encryption. If your browser does not support 256-bit encryption, we'll use 128-bit v3 technology instead. Whether a single page of our website is transmitted in encrypted form is indicated by the closed representation of the lock icon to the left of the web address in the URL bar of your browser.

We also take appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or total loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

13. Updating and changing this privacy policy

This privacy statement is currently valid and is dated May 2018. As our website evolves and offers become available, or as a result of changes in legal or regulatory requirements, it may be necessary to change this privacy policy. The current data protection declaration can always be accessed and printed by you at: