Privacy Policy

As of: 29 October 2026

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

2. General information

We process personal data only insofar as this is necessary to provide a functional website as well as our content and services. The legal basis is generally Art. 6 (1) (b) GDPR (performance of a contract or pre-contractual measures) or Art. 6 (1) (f) GDPR (legitimate interest), and, where consent is obtained, Art. 6 (1) (a) GDPR.

3. Access data / server log files

When you visit our website, the hosting provider automatically collects and stores information that your browser transmits to us. This includes: IP address, date and time of the request, the page accessed, referrer URL, browser type and version, and operating system. This data is technically necessary to display the website and to ensure stability and security.

Legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the secure and stable operation of the website). This data is not merged with other data sources.

4. Contact form and e-mail inquiries

When you contact us via one of our inquiry forms or by e-mail, we process the data you provide in order to handle your inquiry. Via the forms this includes in particular: name, e-mail address, company, country and the content of your message, and, depending on the form, the product, material, segment, approximate quantity, planned repeat orders, available documents, your area of interest and how you found us. Mandatory fields are name and e-mail address, in the contact form also the message and the information on segment and quantity.

You can optionally upload a file (e.g. a tech pack, sketch or photos, max. 10 MB). The file is sent to us as an attachment to the inquiry e-mail and stored in our e-mail mailbox (Google Workspace). Please only upload files that do not contain personal data of third parties, or only where you are entitled to share them. We use the file solely to assess and calculate your inquiry and delete it under the same rules as the inquiry itself.

To handle inquiries in an organised way, we also record form inquiries in our customer management system (CRM) HubSpot: as a contact (name, e-mail address, company, country), where applicable as a company, as an inquiry (deal) and as a note with the details you provided. The uploaded file itself is not transferred to HubSpot, only its file name. Details on HubSpot can be found in section 6.

The legal basis is Art. 6 (1) (b) GDPR if the inquiry relates to the initiation or performance of a contract, otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering inquiries and in organising them in a CRM). After submitting the form you automatically receive a confirmation e-mail. It only confirms receipt and repeats your details; it contains no advertising.

We store the data until your inquiry has been fully processed and, if a business relationship results from it, for as long as that relationship requires, unless statutory retention obligations require longer storage (e.g. § 257 HGB, § 147 AO – 6 or 10 years for business correspondence relevant to commercial or tax law).

WhatsApp and WeChat

On our website we link to WhatsApp and name our WeChat IDs. If you contact us via one of these messengers, the provider processes your phone number or user ID, the content of your messages and usage data. WhatsApp is provided in the EU by WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland; data may also be transferred to Meta Platforms, Inc. in the USA (certified under the EU-US Data Privacy Framework). WeChat is provided to users outside mainland China by WeChat International Pte. Ltd., Singapore; data may be processed in the People’s Republic of China, for which there is no EU adequacy decision.

The use of these messengers is voluntary; you can reach us at any time by e-mail or phone instead. If you choose a messenger, we process your messages on the basis of Art. 6 (1) (b) GDPR (pre-contractual measures) or Art. 6 (1) (f) GDPR (legitimate interest in communicating via the channel you have chosen). For WeChat, the transfer to a third country is based on Art. 49 (1) (b) GDPR, because you choose this channel yourself to contact us.

Market data and fonts

The freight rates, exchange rates and raw material prices shown on our website are retrieved by our server from the respective sources and delivered to you from there. Your browser does not connect to these sources. The fonts used on this website are also delivered from our own server; no connection to Google Fonts is established.

5. Cookies and local storage

With your consent, we use Google Analytics 4 (see section 6). For this purpose, Google Analytics sets cookies or uses comparable storage technologies in your browser. Without your consent, no analytics storage is used and no analytics data is collected. The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. You can withdraw your consent at any time with effect for the future via the "Cookie settings" link in the footer of every page.

In addition, we use the technical storage of your browser (local storage) to remember your selected language. This storage is technically necessary to provide the requested function (§ 25 (2) no. 2 TDDDG); no consent is required for it.

6. Processors and third-party services

We use the following service providers, with whom data processing agreements pursuant to Art. 28 GDPR exist:

Hosting – Vercel

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Vercel processes the access data described in section 3 on our behalf in order to deliver the website.

E-mail delivery – Resend

Messages sent via the contact form (including the confirmation e-mail to you) are delivered using the service Resend (Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA). The data you enter is transmitted to Resend for the purpose of sending the e-mail.

E-mail mailbox – Google Workspace

Our e-mail correspondence is handled via Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When you contact us by e-mail, the content of the communication is processed there.

Customer management (CRM) – HubSpot

We manage inquiries and customer relationships with HubSpot, a service of HubSpot Ireland Limited, One Sir John Rogerson’s Quay, Dublin 2, Ireland. When you send an inquiry via one of our forms, the data described in section 4 is transmitted to HubSpot and stored there as a contact, company, inquiry and note. Data may also be processed by HubSpot, Inc. in the USA; HubSpot, Inc. is certified under the EU-US Data Privacy Framework, and EU Standard Contractual Clauses are also in place.

Web analytics – Google Analytics 4

With your consent we use Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). We use it to measure the reach and usage of our website (e.g. which pages are visited and how) in order to improve the site.

The data processed for this purpose includes: a shortened (truncated) IP address, a pseudonymous client identifier, and event parameters (in particular the page path, the selected language, and the product and quantity class from interactions with our contact form). We have activated IP truncation; a merging of this data with other data sources does not take place on our part.

In the course of this processing, data is transmitted to Google LLC in the USA. The transfer is safeguarded by the EU Standard Contractual Clauses and Google’s certification under the EU-US Data Privacy Framework. A data-processing agreement pursuant to Art. 28 GDPR is in place with Google.

Retention period: 14 months.

The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. You can withdraw your consent at any time with effect for the future via the "Cookie settings" link in the footer. In addition, you can prevent the collection of your data by Google Analytics by installing the browser opt-out add-on: https://tools.google.com/dlpage/gaoptout

Further information can be found in Google’s privacy policy: https://policies.google.com/privacy

7. Transfer to third countries

Some of the providers named above (Vercel, Resend, HubSpot, Inc., Google LLC in connection with Google Analytics and Meta Platforms, Inc. in connection with WhatsApp) are based in the USA. Where personal data is transferred to a third country, this is done on the basis of appropriate safeguards within the meaning of Art. 44 ff. GDPR – in particular the EU Standard Contractual Clauses and, where applicable, certification under the EU-US Data Privacy Framework. For contact via WeChat, see section 4.

8. Your rights

You have the right to information (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21 GDPR). Where processing is based on consent, you may withdraw it at any time with effect for the future. To exercise your rights, please contact info@detertsander-trading.com.

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for us is:

9. Changes to this policy

We adapt this privacy policy as soon as changes to our processing activities, the tools used, or the legal situation make it necessary.