Privacy policy

Controller and contact

Hansa Gastro Service GmbH

Burgwedelkamp 8a

22457 Hamburg

Germany

Represented by Managing Director Özlem Yamandag

Phone: +49 176 41233233

Email: hansa.gastro.service@gmail.com

You can contact us using these details with questions about data protection or to exercise your rights.

Website provision and hosting

Our website is served from webspace provided by Plambee.de Webhosting, operated by Denis Ardelmann, Oranienstraße 98, 46147 Oberhausen, Germany. The website was designed in Framer and then exported; Framer does not host this domain.

When you access our website, technical data required for connection and delivery is processed. This includes in particular your IP address, browser and device information, the pages and files accessed, and connection and access data. This processing serves to display the website, maintain its operation and identify technical faults or abusive access.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is securely delivering the website and preventing disruption or abuse. Technical access and security data are processed only for as long as required for these purposes or to investigate a specific incident. Retention depends on the logging and deletion arrangements configured for the hosting service; further information is available using the contact details above.

Hosting provider privacy information: https://www.plambee.de/datenschutz/

Contact form and enquiries by email or telephone

When you contact us through the contact form, by email or by telephone, we process the information you provide. This may include your name, company, email address, telephone number, requested products, cuts and quantities, and the content of your message. Contact form enquiries also involve processing the connection data required for technical transmission.

We use this data to answer your enquiry, clarify questions, prepare quotations and, where appropriate, establish or perform a business relationship. Our contact form is processed on our own webspace. The information is sent through the hosting provider’s email service to hansa.gastro.service@gmail.com. Form submissions are not sent to Framer. Processing in the Gmail inbox is described below.

Preventing abuse of the contact form

To limit automated requests, the server processes an identifier derived from the IP address together with the time and number of submission attempts. This identifier is used solely to limit requests within a ten-minute window and is not combined with message contents. Expired limit files are cleaned up on subsequent valid form submissions. Invisible input fields also help identify automated submissions. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is protecting the form against spam and abuse.

Where your enquiry concerns a contract with you or is intended to lead to one, processing is based on Article 6(1)(b) GDPR. For other enquiries and communication with a company’s contact persons, Article 6(1)(f) GDPR is the legal basis. Our legitimate interest is in handling business matters and communicating with prospective customers and business partners. Where retention is required by law, Article 6(1)(c) GDPR applies.

We delete enquiry data once the matter has been fully dealt with and further retention is no longer necessary for the business relationship, protection of legal claims or statutory retention requirements. Business documents subject to retention obligations are governed in particular by commercial and tax-law retention periods. During retention required solely by law, processing is restricted to those purposes.

Providing your contact details is generally voluntary. However, to process a specific enquiry, we need the content of your request and a suitable means of contacting you. Without this information, we may be unable to answer your enquiry. Information marked as mandatory is required to process the form.

Email communication through Gmail

We use Gmail for the address hansa.gastro.service@gmail.com listed in our legal notice. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is generally responsible for Google services in the European Economic Area.

When messages are sent to this address, the message, sender and recipient details, and technical metadata are also processed by Google. Our purposes and legal bases are those set out in the contact section. Google’s processing is additionally governed by the contractual terms and privacy notices applicable to the respective Gmail service.

Google also processes data in the USA and other countries. Google identifies adequacy decisions, Google LLC’s certification under the EU-US Data Privacy Framework and, where necessary, Standard Contractual Clauses as safeguards. Further information is available at:

https://policies.google.com/privacy?hl=en

https://policies.google.com/privacy/frameworks?hl=en

No analytics or advertising trackers

Framer Analytics, Google Analytics and advertising pixels are not integrated in this version of the website. The Framer editor and persistent storage of Framer runtime data have been disabled. No usage profiles are created for advertising or analytics purposes.

Cookies and similar storage technologies

This version does not set optional analytics or marketing cookies or use persistent local storage for these purposes. Pages, images and fonts are served from our own webspace. Processing technically necessary to deliver and display requested pages or protect the contact form must be distinguished from optional tracking.

Section 25 TDDDG governs storage on, and access to information on, end devices. Where a technology is strictly necessary to provide a service expressly requested by the user, the exception in Section 25(2) TDDDG applies. This version does not use additional services requiring consent. Before introducing such services, we will adapt the website and privacy information.

External link to Google Maps

The contact page contains a link to Google Maps, rather than an embedded map. Only when you open the link do you leave our website and access Google’s service. Google’s privacy information applies to processing on that service.

Recipients and transfers

Within our company, only persons who need data for the relevant purpose receive access. The technical service providers mentioned in this policy and their lawfully appointed subprocessors may also receive data. Disclosure to other recipients takes place only where necessary to handle your request, where there is a legal basis, or where you have consented. In a business relationship, this may include competent authorities or legal and tax advisers where necessary.

For transfers outside the European Economic Area, the requirements of Articles 44 et seq. GDPR must be met in addition to a legal basis for processing. Further details about transfers associated with the services used here are provided in the respective provider sections. You can also ask us for information about the applicable safeguards.

Retention period

We process personal data for as long as necessary for the relevant purpose. It is then deleted or anonymised unless a statutory obligation or another lawful reason requires continued retention in personally identifiable form. The relevant criteria are handling the matter, the duration of a business relationship, statutory retention requirements and, where necessary, the assertion or defence of legal claims. Different service-specific retention and deletion procedures are explained in the sections above.

Your rights

Subject to the applicable statutory conditions, you have the following rights:

Access to information about the processing of your personal data and a copy of that data under Article 15 GDPR.

Rectification of inaccurate data and completion of incomplete data under Article 16 GDPR.

Erasure of your data under Article 17 GDPR, unless statutory exceptions apply.

Restriction of processing under Article 18 GDPR.

Data portability under Article 20 GDPR for automated processing based on consent or a contract.

Objection to certain processing under Article 21 GDPR.

Withdrawal of consent with effect for the future under Article 7(3) GDPR.

You can contact us using the details above to exercise your rights. Where there are reasonable doubts about your identity, we may request additional information necessary to confirm it.

Right to object

Where processing is based on Article 6(1)(e) or (f) GDPR, you may object at any time on grounds relating to your particular situation. This also applies to profiling based on those provisions. We will no longer process the data concerned unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

You may object at any time, without giving reasons, to the processing of your data for direct marketing. This also applies to related profiling. The data concerned will then no longer be processed for that purpose.

Complaint to a data protection supervisory authority

Under Article 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. For companies registered in Hamburg, the following authority is particularly relevant:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit

Ludwig-Erhard-Straße 22

20459 Hamburg

Email: mailbox@datenschutz.hamburg.de

Website: https://datenschutz-hamburg.de

Automated decisions

In the website processing described here, we do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.

Security and changes

Our website is provided over an encrypted HTTPS connection. We also implement appropriate technical and organisational measures to protect personal data. When our website or the services used change, we update this policy accordingly.

Last updated: 21 October 2026