Scope of validity

The following Privacy Policy informs you about the principles by which COSACK GMBH & CO. KG handles your personal data. The Privacy Policy is based on the terminology used by the European legislator for directives and regulations when enacting the General Data Protection Regulation (GDPR).
This Privacy Policy relates to the collection, processing and use of both personal data and also anonymized data. Personal data means any information concerning the personal or material circumstances of an identified or identifiable individual. Anonymized data are data that cannot be attributed to an identified or identifiable individual, e.g. general usage data for the website.

Name and address of the responsible controller

The responsible controller as defined in the General Data Protection Regulation, other data protection laws in the Member States of the European Union, and other provisions of a data protection character is:
COSACK GMBH & CO. KG Druck + Verpackung Von-Siemens-Straße 14 59757 Arnsberg

Data protection officer

COSACK GMBH & CO. KG has decided to appoint the external company INTARGIA Managementberatung GmbH, Dreieich Plaza 2A, 63303 Dreieich, Germany as the data protection officer.

Access data

Whenever you access a page on our website or access a file, your end device and browser send data to our server. The access data for this transaction is stored in a log file on the server.

The relevant log file contains: the page from which the file was requested, the name of the file, the date and time of the request, the volume of data transmitted, the access status (file transmitted, file not found, etc.), a description of the type of operating system and web browser used, the original URL that directed you to our website, the volume of data transmitted, the load time, the name of your Internet service provider(ISP). The stored data cannot be used to determine your identity and are evaluated exclusively for statistical purposes and deleted after a standard period. The contained data are deleted on the basis of the criterion of necessity.

The legal basis for the processing of the IP address is Article 6(1)(f) of the GDPR. Our legitimate interest results from the following list of purposes:
• Ensuring a seamless establishment of the connection and provision of our information offerings.
• Ensuring the comfortable use of our website
• Assessing the system security
• Conducting a needs analysis of the requirements of visitors


This website uses cookies. These are small text files that are stored on your end device. Your browser accesses these files. The use of cookies increases the user-friendliness and security of this website.

Common browsers offer the option not to accept cookies. Note: It is not guaranteed that you can access all functions of this website without restrictions if you make the appropriate settings.

Handling of personal data

The website operator will only collect, use and pass on your personal data if this is permitted by law or if you consent to data processing.

Handling of contact data

If you contact the website operator through the contact options offered, your details will be stored so that they can be used to process and respond to your inquiry. This data will not be passed on to third parties.

Rights of the user: Information, correction and deletion

You can request information free of charge about what personal data has been stored about you. You also have the right to correction of incorrect data, to deletion of your personal data, and to restriction in processing.

Provided your personal data is processed on the basis of Art. 6 (1)(1)(f) GDPR (safeguarding legitimate interests), you have right, according to Art. 21 GDPR, to object to the processing of your personal data, provided that there exist reasons related to your particular situation, or you object to the data being processed for the purposes of direct advertising. In the latter case, you have a general right to object, which we will implement without the need for you to state the specific reasons relating to your particular situation (Art. 21(2) GDPR). If you object for reasons relating to your particular situation, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or that the processing is required for the establishment, exercise or defence of legal claims (Art. 21(1) GDPR).

If you have provided your consent to any of the processing of your personal data, you have the right to withdraw your consent to that processing at any time, where relevant.

If you provide us with data that relates to you and we process that data on the basis of your consent or in order to perform our obligations under contract to you, you may request that we provide you with the data in a structured common and machine-readable format or that we transmit that data to another responsible person where technically feasible (so-called right to data transferability).

Furthermore, you have the right to complain to a responsible data protection supervisory body if you believe our processing of your personal data breaches the legal regulations.

To assert your rights described here, or for any other questions relating to the processing of your personal data, you can contact us at any time via the contact details provided above.

Data privacy for applications and in the application process

The responsible controller collects and processes the personal data of applicants for the purpose of processing the application. Processing may also be carried out electronically. This is particularly the case if an applicant submits the relevant application documents electronically, for example by email or via a web form on the website, to the responsible controller. If the responsible controller concludes an employment contract with an applicant, the data transmitted will be stored for the purpose of processing the employment relationship in compliance with statutory provisions. If the responsible controller does not conclude a contract of employment with the applicant, the application documents will be automatically deleted within the statutory prescribed deadline.

Data minimization

We store personal data in accordance with the principles of data avoidance and data economy only for as long as necessary or as required by the law (statutory retention period). If the purpose for the collected information ceases to exist or the retention period ends, we will block or delete the data.

Changes to the Privacy Policy

COSACK GMBH & CO. will review and revise this Privacy Policy from time to time. We therefore recommend that you read the terms of this Privacy Policy from time to time to ensure that you know how COSACK GMBH & CO. KG collects, processes and uses data.

Further information

Should you have any questions regarding our Privacy Policy, please contact us via the email address For general questions, please use the contact form on our website.