Privacy Policy
This is a courtesy English translation. The German version is legally authoritative.
1. Controllers
This website is managed jointly. Depending on the processing operation, different entities are responsible within the meaning of the GDPR:
(a) Operation of the website (hosting, server logs, embedded services such as Tag Manager, web analytics, cookie banner, fonts):
G. J. International Rolling Supreme Private Limited (Lit Papers)
B-57/4 PH-I Maya Puri, New Delhi, South West Delhi, Delhi, 110064, India
Represented by: Geetesh Jain · Email: info@litaf.in
(b) Handling of enquiries and customer management (processing of contact requests, B2B leads and communication in our CRM and office systems):
Gillios UG (haftungsbeschränkt)
Schultenstraße 12, 49497 Mettingen, Germany
Represented by the Managing Director: Gurdial Singh Gill · Email: info@litaf.eu
Commercial register entry: Amtsgericht Steinfurt, HRB 15735
Unless one of the two entities is expressly named below, the processing concerns the operation of the website (entity a). The responsible entity is indicated in each section.
2. Representative in the EU (Art. 27 GDPR)
Since the controller named under entity (a) is based outside the European Union but its website is directed at the European market, it has appointed Gillios UG (haftungsbeschränkt), Schultenstraße 12, 49497 Mettingen, Germany, as its representative in the Union pursuant to Art. 27 GDPR. You can contact both the respective controller and the EU representative with all data protection matters.
3. General information
Legal bases. Depending on the situation, processing is based on Art. 6(1)(b) GDPR (pre-contractual measures and performance of a contract), (c) (legal obligations, e.g. retention obligations), (f) (legitimate interest in a secure, functional website and efficient communication) and (a) (consent).
Retention period. Data is only stored for as long as necessary to achieve the purpose or as long as statutory retention obligations exist; thereafter it is deleted or restricted.
Your rights. You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). You can withdraw any consent given at any time with effect for the future.
Right to complain. You can lodge a complaint with a data protection supervisory authority. The authority responsible via the EU representative / registered office of Gillios UG in Germany is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Kavalleriestraße 2–4, 40213 Düsseldorf · P.O. Box 20 04 44, 40102 Düsseldorf
Phone: +49 (0)211 38424-0 · Fax: +49 (0)211 38424-999
Email: poststelle@ldi.nrw.de · Web: www.ldi.nrw.de
Automated decision-making. No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.
4. Server log files
Responsible: entity (a) – G. J. International. When the website is accessed, the hosting provider automatically records the browser type and version, operating system, referrer URL, IP address of the accessing computer and the time of the request. This data is technically necessary for a stable and secure presentation; it is not merged with other data sources.
Legal basis: Art. 6(1)(f) GDPR.
5. Hosting
Responsible: entity (a). The website is hosted by GoDaddy. The provider is GoDaddy India Web Services Private Limited, First Floor, 01A167, WeWork Bristol Chowk, Platina Tower, MG Road, Sector 28, Gurugram, Haryana 122002, India (CIN U74900HR2014FTC051966). The hosting provider processes personal data (in particular the server log data) on our behalf in order to deliver the website to your browser. A data processing agreement pursuant to Art. 28 GDPR is in place. Since India is a third country without an adequacy decision by the European Commission, data is transferred on the basis of the EU standard contractual clauses (Art. 46(2)(c) GDPR) as an appropriate safeguard.
6. Contact form and email enquiries
Responsible: entity (b) – Gillios UG. If you contact us via the contact form or by email (e.g. info@litaf.eu), your details are stored to process the enquiry: name or contact person, email address, company name (for B2B enquiries) and the content of the message. These enquiries are processed and managed in the CRM and office systems of Gillios UG (see sections 7 and 8). The data is deleted as soon as the purpose no longer applies and no retention obligations conflict.
Legal basis: Art. 6(1)(b) and (f) GDPR.
7. Google Workspace & Google Drive
Responsible: entity (b) – Gillios UG. For handling enquiries, B2B communication and document management, Gillios UG uses Google Workspace. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. A data processing agreement is in place. Any transfer to the USA is safeguarded by the EU standard contractual clauses and the EU-US Data Privacy Framework.
Legal basis: Art. 6(1)(b) and (f) GDPR.
8. HubSpot CRM
Responsible: entity (b) – Gillios UG. To manage customer relationships, B2B leads and sales processes, Gillios UG uses HubSpot. The provider is HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141, USA. Contact data, communication histories, offers and sales stages, among other things, are processed. A data processing agreement pursuant to Art. 28 GDPR is in place on the basis of the EU standard contractual clauses; the transfer to the USA is additionally safeguarded by the EU-US Data Privacy Framework, for which HubSpot is certified.
Legal basis: Art. 6(1)(b) and (f) GDPR. Further information: legal.hubspot.com/privacy-policy
9. Google Fonts
Responsible: entity (a). To ensure a consistent font display, Google Fonts (Google Ireland Limited, Dublin) are embedded locally where possible. In the case of an exceptional dynamic request, the IP address is transmitted to Google; any transfer to the USA is safeguarded by EU standard contractual clauses and the EU-US Data Privacy Framework.
Legal basis: Art. 6(1)(f) GDPR.
10. Google Tag Manager
Responsible: entity (a). The website uses Google Tag Manager (Google Ireland Limited, Dublin) to manage embedded tags. The Tag Manager itself does not create profiles or store cookies, but records the IP address, which may also be transferred to Google servers in the USA. Use is based on your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG) and can be revoked at any time. Transfer to the USA is safeguarded by EU standard contractual clauses and the EU-US Data Privacy Framework.
11. Microsoft Clarity
Responsible: entity (a). The website uses Microsoft Clarity (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA) to analyse usage behaviour (mouse, scroll and click behaviour, heatmaps, session recordings). Among other things, the IP address (location at country level), screen resolution, device type, browser, time spent and pages visited are processed in a pseudonymised profile; cookies and comparable technologies are used for this purpose. Processing is based exclusively on your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG); Clarity is only loaded after active consent via the cookie banner. Processing also takes place in the USA (Azure Cloud); Microsoft is certified under the EU-US Data Privacy Framework, and EU standard contractual clauses additionally apply. A data processing agreement pursuant to Art. 28 GDPR is in place. Further information: privacy.microsoft.com
12. Consent management (cookie banner)
Responsible: entity (a). A consent management tool obtains and documents your consent to cookies and technologies requiring consent (in particular Google Tag Manager and Microsoft Clarity). When the website is accessed, only technically necessary cookies are loaded; services requiring consent are only activated after your active consent. You can change or revoke your selection at any time via the cookie settings.
Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG.
13. WhatsApp link
Responsible: entity (a). There is a link to our official B2B WhatsApp channel on the website. No data is transmitted to WhatsApp when simply viewing it. Only when you actively click will you be redirected to WhatsApp; from then on, processing lies with WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
14. Age verification
Responsible: entity (a). Before accessing the website, you confirm that you are at least 18 years old. This query serves the protection of minors; no personal data is stored, the selection is processed exclusively for technical access control.
Legal basis: Art. 6(1)(f) GDPR.
15. SSL/TLS encryption
This site uses SSL or TLS encryption. You can recognise an encrypted connection by the change in the address bar from "http://" to "https://" and by the lock symbol in the browser bar.
Last updated: June 2026