[[NOTICE: THIS IS A TRANSLATION TEMPLATE, NOT LEGAL ADVICE. It is a translation of the German default text and is offered so you have an English draft to work from; please have it checked (ideally by someone with data-protection expertise) before you publish it, and adapt it to what you actually do. If you do not need it, simply delete this paragraph in brackets. This template describes what the ordering software itself does with data. If you use advertising in the invoice email, add the text template "Advertising" below.]]
Privacy Policy
We are glad that you are ordering at our stand. Here you can find out which personal data we process when you use this ordering page, why we do so, and what rights you have.
1. Controller
The controller responsible for data processing on this page is the operator of the stand. You will find name, address and contact details at the end of this page and in our legal notice (Impressum). Please direct any data protection questions to that address.
2. The essentials at a glance
You do not need a customer account with us and do not have to provide your name or address. Giving an email address is optional.
We do not use analytics or tracking tools, do not show third-party advertising and do not embed third-party content. Fonts, icons and program components are loaded from our own server.
We automatically delete your uploaded design 24 hours after your order has been handed out (immediately if it is cancelled), and at the latest after 14 days.
3. Accessing the page and server logs
When you access this page, your browser technically transmits data to our server: your IP address, date and time, the address accessed, the status code of the response, and details of your browser and operating system. This information is recorded in server logs. We need it to deliver the page, detect faults and ensure the security of the system, for example to defend against attacks. We do not combine it with other data or evaluate it with regard to your person. The logs are removed after a short time as part of regular deletion.
We evaluate your browser's preferred language in order to show you the page in the appropriate language; it is not stored for this purpose.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and stable operation of the ordering page.
The connection to this page is encrypted using TLS (recognisable by "https://").
4. Cookies
We use only technically necessary cookies, no cookies for advertising or analytics purposes:
"canprintweb_session" remembers your current ordering session, your shopping cart and a discount code you entered. Without this cookie, placing an order is not possible. Its content is protected against tampering. The cookie expires after 14 days at the latest; the ordering session itself already ends after 20 minutes of inactivity.
"kiosk_sprache" is only set if you choose a language yourself, and remembers that choice for up to 365 days.
The legal basis is § 25(2) no. 2 TDDDG; further processing takes place under Art. 6(1)(b) GDPR (carrying out your order) or Art. 6(1)(f) GDPR (display in your language). You can delete cookies in your browser at any time.
5. Design and ordering
When you design a motif, your photo is initially processed only in your browser. Only the finished design is transmitted to our server, once you add it to your cart. In doing so, we remove embedded metadata from the image (for example location or camera data) and store it under a random file name.
For your order we store: the order number, the products ordered with quantity and price, any discount code used, the total amount, the order and payment status, and the corresponding timestamps.
We transmit the design to the print PC at our stand, which prints it. There it is only held ready for printing.
We use this data to accept, produce, invoice and hand over your order. The legal basis is Art. 6(1)(b) GDPR.
Retention period: We automatically delete the uploaded design 24 hours after the order has been handed out (immediately if it is cancelled), but at the latest 14 days after it was uploaded, even if the order was never collected. During these 24 hours we can repeat a failed print and undo an order that was marked as handed out by mistake. If you confirm receipt on your order page, we store the time of that confirmation as proof of handover (Art. 6(1)(b) GDPR). Preview images on the print PC at our stand are kept for at most 24 hours. Designs that are not ordered are automatically deleted after 24 hours. Unpaid orders are automatically cancelled after 30 minutes. We keep order and invoice data for as long as statutory retention obligations require (generally 8 years under § 147 AO and § 14b UStG); the legal basis for this is Art. 6(1)(c) GDPR.
6. Email address
Giving your email address is optional. If you provide it, we send you an order confirmation, a message as soon as your order is ready for collection, and your invoice. Without an email address you can see the order status and receipt on the confirmation page.
The legal basis is Art. 6(1)(b) GDPR. The email address is stored together with the order and as proof of dispatch of the invoice, and is therefore subject to the same retention period as the order (see section 5). Emails are sent from our own mailbox; the messages pass through the servers of our email provider, who processes them only for delivery.
7. Payment
Payment is made via the payment services offered on the ordering page. For the payment process you are redirected to the respective provider's page. You enter your payment details (for example card data or PayPal login details) exclusively there; we do not receive them.
We transmit the amount to be paid, the order number and the items ordered to the payment service. From the payment service we receive the payment status, a transaction identifier, any fee incurred, and information about refunds.
Stripe: Stripe Technology Europe, Limited, 25/28 North Wall Quay, Dublin 1, D01 H104, Ireland. Privacy notice: https://stripe.com/de/privacy
PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. Privacy notice: https://www.paypal.com/de/legalhub/privacy-full
The payment services additionally process your data under their own responsibility, for example for fraud prevention and to fulfil statutory obligations; this may also involve transfers to countries outside the EU. Please see the providers' own privacy notices for details.
The legal basis is Art. 6(1)(b) GDPR.
8. Browser notification (optional)
If waiting times are longer, we offer you on the confirmation page to notify you by browser notification as soon as your order is ready. This only happens if you agree and allow notifications in your browser.
For this we store the receiving address generated by your browser together with a key linked to your order. The message (containing your order number) is delivered encrypted via your browser vendor's push service, for example Google, Mozilla or Apple. We delete this receiving address 24 hours after your order has been handed out (immediately if it is cancelled), but at the latest after 48 hours.
The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can withdraw your consent at any time with effect for the future by disabling notifications for this page in your browser.
9. Hosting and technical service providers
This ordering page runs on the servers of a technical service provider who supplies us with the ordering software and operates it on our behalf. It processes the data mentioned above exclusively on our instructions (data processing agreement under Art. 28 GDPR). To protect against data loss, the database is backed up daily; the backups are deleted after 30 days. Uploaded designs are not included in these backups.
10. No automated decision-making
We do not make any automated decisions, including profiling, within the meaning of Art. 22 GDPR.
11. Your rights
You have the right to information about the data we hold about you (Art. 15 GDPR), to rectification (Art. 16 GDPR), to erasure (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR), and to data portability (Art. 20 GDPR). You can withdraw any consent given at any time with effect for the future (Art. 7(3) GDPR).
Right to object: Insofar as we process data on the basis of Art. 6(1)(f) GDPR, you can object at any time for reasons arising from your particular situation (Art. 21 GDPR).
Please contact the details given below. If possible, please tell us your order number or the email address used, so that we can find your data.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the federal state of your residence or of our registered office.
Last updated: 22 September 2026 (version 2)