Privacy policy

1. Data controller

The data controller for this website is:
Hanse Textilvertrieb GmbH
Boschstraße 16
24568 Kaltenkirchen
Germany
Telephone: +49 4191 99760
Email: sales@hansetextil.de

Represented by: Christoph Habertag

2. Overview

We process personal data only to the extent necessary for the operation of this website and for handling your enquiries. This website does not use cookies, analytics or tracking tools, nor does it embed any third-party content. Fonts and images are loaded from our own server.

3. Hosting

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The servers are located in Germany. A contract has been entered into with Hetzner regarding data processing on behalf of the controller in accordance with Article 28 of the GDPR.

4. Server log files

Every time you visit this website, our web server automatically stores information transmitted by your browser: IP address, date and time of access, URL accessed, amount of data transferred, status code, referrer URL, browser type and operating system.

This data is used for the delivery of the website, to ensure its secure operation and for error analysis. The legal basis is Article 6(1)(f) of the GDPR; our legitimate interest lies in ensuring secure and stable operation. The log files are deleted after 14 days at the latest. They are not combined with any other data sources.

5. Contact form

If you send us an enquiry via the contact form, we will process the details provided in the form: name, hotel or company, email address, message and, where provided, job title, telephone number and number of rooms. We also record the language of the page and the time of the enquiry.

We use the data solely to process your enquiry and to contact you. The legal basis is Article 6(1)(b) of the GDPR, insofar as your enquiry is aimed at concluding a contract; otherwise, it is Article 6(1)(f) of the GDPR; our legitimate interest lies in responding to enquiries.

The enquiry is sent to our mailbox via Microsoft 365. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. We have a data processing agreement in place with Microsoft. Data transfer to the USA cannot be ruled out; this takes place on the basis of the European Commission’s adequacy decision regarding the EU-US Data Privacy Framework and the EU Standard Contractual Clauses.

To ensure that no enquiry is lost, we also store a backup copy on our server. This is automatically deleted after 30 days. To protect against misuse, we limit the number of enquiries per sender. To this end, your IP address is not stored in plain text, but only as a hash value for a maximum of 10 minutes. An invisible verification field and a time check also help to prevent automated enquiries; no cookies are set for this purpose.

6. Contact by email or telephone

If you contact us by email or telephone, we will process your details in order to deal with your enquiry. The legal basis for this is Article 6(1)(b) of the GDPR, provided your enquiry relates to a contract; otherwise, it is Article 6(1)(f) of the GDPR.

7. Retention period

We only retain personal data for as long as is necessary for the relevant purpose. We delete enquiries as soon as they have been fully processed, unless this is prevented by statutory retention obligations, such as those relating to commercial and business correspondence under the German Commercial Code and the German Fiscal Code (six and ten years respectively).

8. Your rights

You have the right to access your stored data (Art. 15 GDPR), to have it rectified (Art. 16 GDPR), to have it erased (Art. 17 GDPR), to restrict processing (Art. 18 GDPR) and to data portability (Art. 20 GDPR).

Right to object: Where we process data on the basis of Article 6(1)(f) of the GDPR, you may object to such processing at any time on grounds relating to your particular situation (Article 21 of the GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority (Article 77 of the GDPR).

To exercise your rights, simply send a message using the contact details given above.

9. Encryption

For security reasons, this website uses TLS encryption. You can recognise an encrypted connection by the ‘https://’ in your browser’s address bar.

10. Last updated

Date of this privacy policy: October 2026.