Privacy Policy (Datenschutz)

The controller responsible for data processing on this digital platform pursuant to Art. 4(7) GDPR is: Darezini Naturdärme GmbH Düsseldorf, Federal Republic of Germany Email: privacy@darezini.com / info@darezini.com Telephone: +49 211 544 762-0 For any inquiries concerning data privacy, personal rights, or corporate confidentiality, you can contact our privacy desk directly at privacy@darezini.com.

We process personal data strictly in compliance with the GDPR and applicable German legislation (BDSG, TDDDG). Depending on the specific interaction, data is processed on the following legal bases: • Consent (Art. 6(1)(a) GDPR): When you grant explicit consent for non-essential cookies, analytics, or marketing pixels. • Contract Performance or Pre-Contractual Steps (Art. 6(1)(b) GDPR): For the processing of wholesale quote inquiries, sample requests, customer account creation, order fulfillment, and logistics dispatch. • Legal Compliance (Art. 6(1)(c) GDPR): To meet statutory retention and commercial accounting obligations under § 147 of the German Fiscal Code (AO) and § 257 of the German Commercial Code (HGB). • Legitimate Interests (Art. 6(1)(f) GDPR): For server security, DDoS defense, fraud prevention, and efficient B2B customer relations.

When accessing our digital platform, our servers automatically record technical data in server log files (IP address in truncated/anonymized form, date and time of the request, browser type, operating system, and requesting URL). This processing is strictly necessary to guarantee stability, system security, and defense against malicious network attacks (Art. 6(1)(f) GDPR). Server logs are automatically purged within 7 to 14 days.

When you submit an inquiry via our commercial quotation form, sample request form, or technical advisory desk, we process your business coordinates (company name, corporate address, contact person, business email, telephone number, requested caliber, quantity, and specific delivery parameters). This processing is based on Art. 6(1)(b) GDPR (pre-contractual measures). We retain business inquiries for the duration of the commercial relationship or in accordance with statutory commercial archiving periods.

Corporate clients can register for a commercial account to access wholesale order history and dedicated tiering. Verification data (such as VAT ID / USt-IdNr. and uploaded trade license documents) is processed exclusively to verify corporate legal status under § 14 BGB. Uploaded documents are stored on encrypted, access-restricted storage and are never exposed to public endpoints or third parties.

If you initiate contact via WhatsApp, we process your message through the WhatsApp Business interface operated by WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). Processing is based on your voluntary initiation and our legitimate interest in direct B2B customer service (Art. 6(1)(f) GDPR). End-to-end encryption applies to the transmission.

Our website uses a GDPR-compliant Cookie Consent Management system. Essential cookies are loaded strictly to maintain site operation and security. Non-essential tracking scripts—including Meta Pixel, TikTok Pixel, and Google Tag Manager—remain blocked by default until you grant explicit, granular consent via our Consent Banner. You may change or withdraw your consent at any time by clicking 'Cookie Settings' in our footer.

Where third-party service providers (such as Meta Platforms Ireland or Google Ireland) process data outside the European Economic Area (EEA), transfers are governed by the EU-U.S. Data Privacy Framework (DPF) adequacy decision or Standard Contractual Clauses (SCCs) approved by the European Commission pursuant to Art. 46 GDPR.

We store personal data only for as long as necessary to achieve the specified purpose or as mandated by European or German statutory retention obligations. Accounting and invoice documents are stored for 10 years pursuant to § 147 AO and § 257 HGB. Commercial correspondence is stored for 6 years. Once statutory retention periods expire, data is routinely deleted.

Under the GDPR, you have the following rights regarding your personal data: • Right of Access (Art. 15 GDPR) • Right to Rectification (Art. 16 GDPR) • Right to Erasure / 'Right to be Forgotten' (Art. 17 GDPR) • Right to Restriction of Processing (Art. 18 GDPR) • Right to Data Portability (Art. 20 GDPR) • Right to Object (Art. 21 GDPR) • Right to Withdraw Consent (Art. 7(3) GDPR) at any time with future effect. To exercise any of these rights, contact privacy@darezini.com.

You possess the right to lodge a formal complaint with a data protection supervisory authority (Art. 77 GDPR). The responsible supervisory authority for our registered office in North Rhine-Westphalia is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW) Kavalleriestraße 2-4, 40213 Düsseldorf, Germany Website: https://www.ldi.nrw.de