Privacy Policy

Datenschutzerklärung pursuant to GDPR (EU) 2016/679 and BDSG (German Federal Data Protection Act)

1. Data Controller

The controller responsible for data processing on this website pursuant to Art. 4(7) GDPR is:

GermanExportPro
WissenStadt Göttingen, Germany
Email: admin@germanexport.de

2. Data We Collect and Why

We collect the following personal data for the stated purposes:

Data	Purpose	Legal Basis
Name, email, phone, company	Processing orders and quotes	Art. 6(1)(b) GDPR — contract performance
Email address	Sending order confirmations, invoices, notifications	Art. 6(1)(b) GDPR — contract performance
Company registration documents, ID card, photo	KYC verification and compliance	Art. 6(1)(c) GDPR — legal obligation
Payment and banking details	Invoice and payment processing	Art. 6(1)(b) GDPR — contract performance
IP address, browser data	Security, fraud prevention, server logs	Art. 6(1)(f) GDPR — legitimate interest
Order history and correspondence	Contract documentation and customer service	Art. 6(1)(b) GDPR — contract performance

3. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law:

Order and invoice data: 10 years (§ 147 AO — German Tax Code)
Customer correspondence: 6 years (§ 257 HGB — German Commercial Code)
Account data: until account deletion requested + 30 days
Server logs: 30 days

4. Third-Party Services

We use the following third-party services that may process your data:

Supabase Inc. (USA) — Database and authentication infrastructure. Data is stored in EU region servers. Privacy Policy: supabase.com/privacy
Resend Inc. (USA) — Transactional email delivery. Used to send order confirmations and notifications. Privacy Policy: resend.com/legal/privacy-policy

Data transfers to the USA are made on the basis of Standard Contractual Clauses (SCC) pursuant to Art. 46(2)(c) GDPR.

5. Your Rights Under GDPR

You have the following rights regarding your personal data:

Art. 15 GDPR — Right of access: request a copy of all data we hold about you
Art. 16 GDPR — Right to rectification: correct inaccurate personal data
Art. 17 GDPR — Right to erasure ("right to be forgotten")
Art. 18 GDPR — Right to restriction of processing
Art. 20 GDPR — Right to data portability
Art. 21 GDPR — Right to object to processing
Art. 77 GDPR — Right to lodge a complaint with a supervisory authority

To exercise your rights, contact us at: admin@germanexport.de

6. Supervisory Authority

You have the right to lodge a complaint with the competent data protection supervisory authority. The authority responsible for Lower Saxony (Niedersachsen), where we are located, is:

Die Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstraße 5, 30159 Hannover
Phone: +49 511 120-4500
Email: poststelle@lfd.niedersachsen.de

7. Cookies

This website uses only technically necessary cookies required for authentication and session management. No tracking, advertising, or analytics cookies are used. No cookie consent banner is required for technically necessary cookies pursuant to § 25 Abs. 2 TTDSG.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, and destruction. All data is transmitted using TLS encryption. Access to personal data is restricted to authorised personnel only.

Last updated: April 2026