Privacy policy

Controller and contact

Hansa Gastro Service GmbH
Burgwedelkamp 8a
22457 Hamburg
Germany
Represented by Managing Director Özlem Yamandag
Phone: +49 176 41233233
Email: hansa.gastro.service@gmail.com

You can contact us using these details with questions about data protection or to exercise your rights.

Website provision and hosting with Framer

We use Framer to provide and deliver our website technically. The provider is Framer B.V., Rozengracht 207B, 1016 LZ Amsterdam, Netherlands. Framer processes data on our behalf in operating the website and also uses technical subprocessors. Framer’s data processing agreement applies to this processing.

When you access our website, technical data required for connection and delivery is processed. This includes in particular your IP address, browser and device information, the pages and files accessed, and connection and access data. This processing serves to display the website, maintain its operation and identify technical faults or abusive access.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is in a secure and functional website. Technical data is processed in personally identifiable form only for as long as necessary for delivery, operational and security purposes, or investigation of a specific incident. Framer’s deletion and retention are governed by the agreed contractual terms and the applicable technical retention and deletion procedures.

Framer may also have data processed by subprocessors outside the European Economic Area. Transfers are governed by Articles 44 et seq. GDPR. Under its data processing agreement, Framer provides for adequacy decisions, including the EU-US Data Privacy Framework for appropriately certified US recipients. Where no adequacy decision applies, the European Commission’s Standard Contractual Clauses are used in particular. Information about subprocessors and transfer mechanisms is available at:

https://www.framer.com/legal/data-processing-addendum
https://trust.framer.com/

Contact form and enquiries by email or telephone

When you contact us through the contact form, by email or by telephone, we process the information you provide. This may include your name, company, email address, telephone number, requested products, cuts and quantities, and the content of your message. Contact form enquiries also involve processing the connection data required for technical transmission.

We use this data to answer your enquiry, clarify questions, prepare quotations and, where applicable, establish or conduct a business relationship. The native contact form is technically processed by Framer. Form messages are forwarded to the receiving address configured by us.

Where your enquiry concerns a contract with you or is intended to lead to one, processing is based on Article 6(1)(b) GDPR. For other enquiries and communication with a company’s contact persons, Article 6(1)(f) GDPR is the legal basis. Our legitimate interest is in handling business matters and communicating with prospective customers and business partners. Where retention is required by law, Article 6(1)(c) GDPR applies.

We delete enquiry data once the matter has been fully dealt with and further retention is no longer necessary for the business relationship, protection of legal claims or statutory retention requirements. Business documents subject to retention obligations are governed in particular by commercial and tax-law retention periods. During retention required solely by law, processing is restricted to those purposes.

Providing your contact details is generally voluntary. However, to process a specific enquiry, we need the content of your request and a suitable means of contacting you. Without this information, we may be unable to answer your enquiry. Information marked as mandatory is required to process the form.

Email communication through Gmail

We use Gmail for the address hansa.gastro.service@gmail.com listed in our legal notice. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is generally responsible for Google services in the European Economic Area.

When messages are sent to this address, the message, sender and recipient details, and technical metadata are also processed by Google. Our purposes and legal bases are those set out in the contact section. Google’s processing is additionally governed by the contractual terms and privacy notices applicable to the respective Gmail service.

Google also processes data in the USA and other countries. Google identifies adequacy decisions, Google LLC’s certification under the EU-US Data Privacy Framework and, where necessary, Standard Contractual Clauses as safeguards. Further information is available at:

https://policies.google.com/privacy?hl=en
https://policies.google.com/privacy/frameworks?hl=en

Usage statistics with Framer Analytics

We use the Framer Analytics feature included in Framer to analyse website usage statistically. This includes in particular page views, frequently visited pages and visit referral sources. This information helps us improve content and navigation.

According to Framer, the feature uses no analytics cookies and no persistent visitor identifiers. To calculate daily visitor numbers, the IP address and browser identifier are hashed with a secret value that changes daily. This secret value is reset and deleted each day. Framer provides results as aggregated statistics. We do not combine statistical visit data with contact enquiries or customer data.

Insofar as personal data is processed to technically generate these statistics, processing is based on Article 6(1)(f) GDPR. Our legitimate interest is in understanding website usage and improving the information we provide.

Further information on how this works: https://www.framer.com/help/articles/gdpr-and-cookies/

Cookies and similar storage technologies

Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG) applies to storing information on your device or accessing information stored there. Technologies strictly necessary to provide a service expressly requested by you may be used without consent under the conditions of Section 25(2) TDDDG. Processing of personal data arising in this context is based, depending on its purpose, in particular on Article 6(1)(f) GDPR.

For storage or access that is not necessary, we obtain your consent before use in accordance with Section 25(1) TDDDG. Where personal data is processed in connection with this, Article 6(1)(a) GDPR is the legal basis. You may withdraw consent with effect for the future. The lawfulness of processing up to withdrawal remains unaffected.

Recipients and transfers

Within our company, only persons who need data for the relevant purpose receive access. The technical service providers mentioned in this policy and their lawfully appointed subprocessors may also receive data. Disclosure to other recipients takes place only where necessary to handle your request, where there is a legal basis, or where you have consented. In a business relationship, this may include competent authorities or legal and tax advisers where necessary.

For transfers outside the European Economic Area, the requirements of Articles 44 et seq. GDPR must be met in addition to a legal basis for processing. Further details about transfers associated with the services used here are provided in the respective provider sections. You can also ask us for information about the applicable safeguards.

Retention period

We process personal data for as long as necessary for the relevant purpose. It is then deleted or anonymised unless a statutory obligation or another lawful reason requires continued retention in personally identifiable form. The relevant criteria are handling the matter, the duration of a business relationship, statutory retention requirements and, where necessary, the assertion or defence of legal claims. Different service-specific retention and deletion procedures are explained in the sections above.

Your rights

Subject to the applicable statutory conditions, you have the following rights:

Access to information about the processing of your personal data and a copy of that data under Article 15 GDPR.

Rectification of inaccurate data and completion of incomplete data under Article 16 GDPR.

Erasure of your data under Article 17 GDPR, unless statutory exceptions apply.

Restriction of processing under Article 18 GDPR.

Data portability under Article 20 GDPR for automated processing based on consent or a contract.

Objection to certain processing under Article 21 GDPR.

Withdrawal of consent with effect for the future under Article 7(3) GDPR.

You can contact us using the details above to exercise your rights. Where there are reasonable doubts about your identity, we may request additional information necessary to confirm it.

Right to object

Where processing is based on Article 6(1)(e) or (f) GDPR, you may object at any time on grounds relating to your particular situation. This also applies to profiling based on those provisions. We will no longer process the data concerned unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

You may object at any time, without giving reasons, to the processing of your data for direct marketing. This also applies to related profiling. The data concerned will then no longer be processed for that purpose.

Complaint to a data protection supervisory authority

Under Article 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. For companies registered in Hamburg, the following authority is particularly relevant:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig-Erhard-Straße 22
20459 Hamburg
Email: mailbox@datenschutz.hamburg.de
Website: https://datenschutz-hamburg.de

Automated decisions

In the website processing described here, we do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.

Security and changes

Our website is provided over an encrypted HTTPS connection. We also implement appropriate technical and organisational measures to protect personal data. When our website or the services used change, we update this policy accordingly.

Last updated: 14 October 2026