Privacy Policy
1. Controller
Grüner Weg Handelsgesellschaft mbH, Werkstattstr. 110, 50733 Köln, Germany, email: info@gruenerweg.gmbh. A data protection officer is [appointed / not appointed — verify].
2. Hosting and server log files
When you visit this website, our hosting provider A2 Hosting, Inc. (Ann Arbor, Michigan, USA) automatically processes technical access data (IP address, date and time, page accessed, referrer, browser and operating system identifiers). Legal basis: Art. 6(1)(f) GDPR (secure and stable operation). As the provider is located in the USA, transfers are based on appropriate safeguards pursuant to Art. 44 et seq. GDPR (EU Standard Contractual Clauses / EU-US Data Privacy Framework); a data processing agreement (DPA) is concluded. Log files are deleted after [retention period per cPanel/server configuration].
3. Contact form and email contact
When you use the contact form, we process the name, company, country, email address, optional phone number, inquiry type, and message you provide — solely to handle your inquiry and initiate a business relationship (Art. 6(1)(b) and (f) GDPR). Your submission is delivered to our responsible business email address via the server-side email/SMTP infrastructure. Two additional technical form fields (one not visible to visitors, and the time the form was displayed) are used exclusively for automated spam detection and are not otherwise processed or forwarded. The same applies to inquiries by email. Inquiry data is deleted once no longer required for this purpose, unless statutory retention obligations apply.
4. File upload
The contact form includes an optional file-attachment field. This field does not currently transmit any file to our server — no file attachments are received, stored, or processed through the form. Please send files separately by email to the address above.
5. Phone
Providing a phone number in the contact form is voluntary and is used solely for follow-up questions regarding your inquiry.
6. Cookies, analytics and third-party services
This website uses no non-essential cookies and no analytics or tracking services. No external fonts are loaded; text is displayed exclusively using the system fonts installed on your device. No external map, video, or widget services are loaded. [Verify before publication: implement local font hosting; if analytics/embeds are added, add a consent banner and a section here]
7. Recipients and third-country transfers
Personal data is shared only where required to handle your inquiry (e.g. hosting, email service providers) or where legally obliged. Transfers to third countries take place only if the requirements of Art. 44 et seq. GDPR are met.
8. Storage period
We store personal data only as long as required for the stated purposes or as mandated by statutory retention periods (in particular § 147 AO, § 257 HGB).
9. Your rights
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21 GDPR), as well as the right to lodge a complaint with a supervisory authority (Art. 77 GDPR) — competent authority: the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW).
[Placeholder — have the full privacy policy legally reviewed before publication]