Privacy Policy

Scope

This policy describes how personal data is processed on this website. Named at the end of this page is the controller within the meaning of Article 4 (7) GDPR.

This website has no analytics, no advertising identifiers, no tracking pixels and no third-party scripts. It sets no cookies. Personal data is processed in exactly two circumstances: when your browser requests a page, and when you submit the business enquiry form.

Data processed when you visit a page

Each time a page is requested, the hosting provider's server records technical data: the IP address of the requesting device, the date and time, the address requested, the HTTP status, the volume transferred, and the browser and operating system reported by your device.

This data is required to deliver the website and to detect and defend against attacks. The legal basis is Article 6 (1) (f) GDPR — our legitimate interest in operating the site securely and reliably.

This website is hosted by Hostinger, which processes this log data on our behalf as a processor under Article 28 GDPR. We do not merge it with other data and do not use it to identify individual visitors.

Business enquiry form

The form requires your first name, last name, company, country, email address and message. You may additionally provide a VAT number, a telephone number, the categories you are interested in and an estimated volume. The brands you add to your enquiry are transmitted with it.

This data is used solely to answer your enquiry and to continue the commercial conversation with you. The legal basis is Article 6 (1) (b) GDPR for steps taken at your request prior to entering into a contract, and Article 6 (1) (f) GDPR for our legitimate interest in responding to business enquiries.

The content of the form is delivered to us by email. Providing the data is neither required by law nor by contract, but without the required fields we cannot process the enquiry.

Your enquiry and the associated data remain with us for as long as needed to handle it and to conduct any resulting business relationship, and thereafter for as long as statutory retention periods under commercial and tax law require — as a rule six or ten years under §§ 257 HGB and 147 AO.

Spam protection

The form contains a field hidden from visitors and measures the time between the page loading and the form being sent. Both serve to detect automated submissions.

Neither is used to analyse your behaviour, neither is stored, and neither is passed on. The legal basis is Article 6 (1) (f) GDPR — our legitimate interest in protecting the form against abuse.

No transfer to third parties

Typefaces, images and scripts are served from this domain. The website makes no request to any external server, so no third party receives your IP address through this website.

Your data is not sold, not rented and not passed to third parties for their own purposes. It is disclosed only where we are legally obliged to do so, or to processors acting on our instructions under Article 28 GDPR — currently our hosting provider alone.

Your rights

You have the right to obtain confirmation as to whether we process personal data concerning you and, if so, to access it (Article 15 GDPR), to have inaccurate data rectified (Article 16), to have data erased (Article 17), to restrict processing (Article 18), to receive your data in a structured, commonly used and machine-readable format (Article 20), and to object at any time to processing based on legitimate interests (Article 21).

To exercise any of these rights, an email to the address below is sufficient.

You also have the right to lodge a complaint with a supervisory authority (Article 77 GDPR). The authority responsible for us is: Die Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover, Germany.

Controller