Privacy Policy

1. Data Controller

The responsible entity for data processing on this website is:

2. General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you.

This Privacy Policy complies with the requirements of the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and the German Telemedia Act (TMG).

Important Note: This website is operated for business-to-business (B2B) purposes only. We do not offer products or services to consumers.

3. Data Collection on This Website

3.1 Server Log Files

The website provider automatically collects and stores information in server log files that your browser automatically transmits to us. These include:

• Browser type and version
• Operating system used
• Referrer URL (previously visited page)
• Hostname of the accessing computer
• Time of server request
• IP address (anonymized)

Legal Basis: Art. 6(1)(f) GDPR (legitimate interest in system security)
Retention Period: 7 days, then automatic deletion
Purpose: Ensuring system security and detecting abuse

3.2 Contact Form

When you submit inquiries via our contact form, the data you provide in the form, including the contact details you provide, will be stored for the purpose of processing your inquiry and in case of follow-up questions.

Data Collected: Name, company name, email address, phone number, message content
Legal Basis: Art. 6(1)(b) GDPR (contract initiation) and Art. 6(1)(f) GDPR (legitimate interest)
Retention Period: Until complete processing of your inquiry; for contract initiation up to 10 years pursuant to tax retention obligations
Disclosure: No disclosure to third parties except service providers necessary for contract fulfillment

3.3 Email Communication

When you contact us by email, the data you transmit (email address, name, message content) will be stored to process your inquiry.

Legal Basis: Art. 6(1)(b) GDPR (contract initiation) or Art. 6(1)(f) GDPR (legitimate interest)
Retention Period: Until completion of the inquiry or statutory retention obligations (up to 10 years)

4. Cookies and Tracking Technologies

This website currently does not use cookies or third-party tracking technologies. We do not employ analytics tools such as Google Analytics, Facebook Pixel, or similar services.

Should cookies be used in the future, you will be informed in advance and asked for your consent (Art. 6(1)(a) GDPR).

5. Disclosure of Data to Third Parties

We do not transfer your personal data to third parties for purposes other than those listed below. We only disclose your personal data to third parties if:

• You have given your express consent (Art. 6(1)(a) GDPR)
• The disclosure is necessary for the fulfillment of our contractual obligations (Art. 6(1)(b) GDPR)
• There is a legal obligation to disclose (Art. 6(1)(c) GDPR)
• The disclosure is necessary for the assertion, exercise, or defense of legal claims (Art. 6(1)(f) GDPR)

5.1 Web Hosting and Content Delivery

This website is hosted externally. Personal data collected on this website is stored on the servers of the host. This may include IP addresses, contact requests, meta and communication data, contract data, and contact information.

The use of the host is for the purpose of contract fulfillment with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of secure, fast, and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR).

Our host will only process your data to the extent necessary to fulfill its service obligations and follow our instructions regarding this data. We have concluded a Data Processing Agreement (DPA) with our host.

5.2 Business Partners and Service Providers

In the course of our business activities in international commodity and medical supply trading, your data may be disclosed to the following categories of recipients:

• Banks and financial institutions (for processing payments and letters of credit)
• Quality inspection companies (SGS, Bureau Veritas) for product inspections
• Logistics service providers (for order fulfillment)
• Legal and tax advisors (for legal or tax matters)
• Insurers (for cargo and liability insurance)

This disclosure is made exclusively for contract fulfillment (Art. 6(1)(b) GDPR) or due to legal obligations (Art. 6(1)(c) GDPR).

6. International Data Transfers

In the course of our international business activities, it may be necessary to transfer personal data to countries outside the European Union (third countries), particularly:

• South Korea (EU Commission adequacy decision pursuant to Art. 45 GDPR)
• Chile (Standard Contractual Clauses pursuant to Art. 46 GDPR)
• Other African and Asian countries (Standard Contractual Clauses or consent)

We ensure that an adequate level of data protection is guaranteed for all transfers to third countries through:

• Use of EU Standard Contractual Clauses (Art. 46(2)(c) GDPR)
• EU Commission adequacy decisions (Art. 45 GDPR)
• Your express consent (Art. 49(1)(a) GDPR)

Where necessary for contract performance, data may be transferred to countries without adequacy decisions. In such cases, we implement appropriate safeguards including Standard Contractual Clauses and additional security measures to protect your data.

7. Your Rights as a Data Subject

You have the following rights regarding your personal data:

7.1 Right of Access (Art. 15 GDPR)

You have the right to obtain information about your personal data processed by us at any time. This includes information about processing purposes, categories of data, recipients, retention period, and origin of the data.

7.2 Right to Rectification (Art. 16 GDPR)

You have the right to request the correction of inaccurate personal data or the completion of incomplete personal data.

7.3 Right to Erasure (Art. 17 GDPR)

You have the right to request the immediate deletion of your personal data, provided one of the statutory grounds applies and processing is no longer necessary.

7.4 Right to Restriction of Processing (Art. 18 GDPR)

You have the right to request the restriction of processing of your personal data when certain conditions are met.

7.5 Right to Data Portability (Art. 20 GDPR)

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit this data to another controller.

7.6 Right to Object (Art. 21 GDPR)

7.7 Right to Withdraw Consent (Art. 7(3) GDPR)

If processing is based on your consent, you have the right to withdraw your consent at any time. The lawfulness of processing based on consent before its withdrawal is not affected by the withdrawal.

7.8 Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR)

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data by us.

8. Data Security

We use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures include:

• SSL/TLS encryption for data transmission
• Encrypted data storage
• Access restrictions and authorization concepts
• Regular security updates and backups
• Employee training in data protection
• Secure password policies
• Firewall and intrusion detection systems

Our security measures are continuously improved in accordance with technological developments.

9. Retention Period

We store personal data only as long as necessary for the respective purpose or as required by statutory retention obligations:

• Contact inquiries without contract: 6 months after completion of correspondence
• Contract-relevant data: 10 years (§ 147 AO, § 257 HGB)
• Commercial and business letters: 6 years (§ 257(4) HGB)
• Server log files: 7 days
• Accounting documents: 10 years (§ 147(3) AO)
• Tax-relevant documents: 6-10 years depending on document type

After the retention period expires, data is routinely deleted unless there is still a retention obligation or necessity for further storage.

10. Protection of Minors

Our services are not directed at persons under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that a minor has transmitted personal data, we will delete this data immediately.

11. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy to ensure it always complies with current legal requirements or to implement changes to our services in the Privacy Policy, such as when introducing new services.

The new Privacy Policy will apply to your next visit. We recommend that you regularly review this Privacy Policy to stay informed about the protection of your personal data.

Last updated: February 1, 2026

12. Data Protection Contact

If you have questions about data protection, the exercise of your rights, or complaints, you can contact us at any time:

We will respond to your inquiry as quickly as possible, but no later than one month.