Our shop is primarily aimed at businesses, companies and public authorities. All prices subject to change. Contract binding only upon our order confirmation.
Go to homepage
€0.00
privacy policy

Privacy Policy

Thank you for your interest in our website. Protecting your personal data is important to us. Below we inform you in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR) about which data we collect, for which purposes we process it and which rights you have.

1. Controller

The controller within the meaning of Article 4(7) GDPR is:

AAAgiler GmbH
represented by its Managing Director Martin Thöle
Heinrich-Hertz-Str. 6
64295 Darmstadt
Germany
Phone: +49 (0) 6151 7877 805
E-mail: info@hansehandel.com

2. Data Protection Officer

We are not legally required to appoint a data protection officer. For all questions concerning data protection and for exercising your rights, please contact us using the details above.

3. Legal bases for processing

Where we obtain your consent for the processing of personal data, Article 6(1)(a) GDPR serves as the legal basis. Where processing is necessary for the performance of a contract or in order to take steps prior to entering into a contract, the legal basis is Article 6(1)(b) GDPR. Processing necessary for compliance with a legal obligation is based on Article 6(1)(c) GDPR. Where processing is necessary for the purposes of the legitimate interests pursued by us or by a third party and your interests and fundamental rights do not override those interests, we process data on the basis of Article 6(1)(f) GDPR. We state the applicable legal basis again for each individual processing activity.

4. Hosting and server log files

Our website is hosted by an external service provider:

Mittwald CM Service GmbH & Co. KG
Königsberger Straße 4–6
32339 Espelkamp
Germany

Mittwald processes the data collected via our website exclusively on our instructions; the data is stored on servers located in Germany. This is governed by a data processing agreement pursuant to Article 28 GDPR. The legal basis for this use is our legitimate interest in providing our services securely and efficiently (Article 6(1)(f) GDPR). Further information can be found in Mittwald's privacy policy: https://www.mittwald.de/datenschutz

Server log files

Each time our website is accessed, information is automatically stored in what are known as server log files. The following data is recorded:

  • name of the file requested and volume of data transferred
  • date and time of the request
  • browser type and browser version
  • operating system used
  • referrer URL and hostname accessed
  • HTTP status code
  • IP address of the requesting device in truncated form

Your IP address is already truncated when it is logged by our hosting provider, meaning that the access logs do not allow any conclusions to be drawn about you personally. This processing serves to ensure trouble-free operation of the website, to investigate misuse or fraud and to improve our services. The legal basis is Article 6(1)(f) GDPR. Anonymised access logs are deleted after 60 days and error logs after seven days. It is not possible to configure a different retention period on the hosting platform.

5. Processing for the performance of a contract

We process personal data that you provide to us when placing an order. The data collected in each case is apparent from the respective input forms. In particular, we process your name, billing and delivery address, e-mail address, telephone number, payment data and – in the case of business customers – company name and VAT identification number.

The legal basis is Article 6(1)(b) GDPR. Once the contract has been fully performed, your data will be restricted from further use and deleted after the expiry of the retention periods under tax and commercial law (generally six or ten years pursuant to Section 257 of the German Commercial Code (HGB) and Section 147 of the German Fiscal Code (AO)). Retention during these periods is based on Article 6(1)(c) GDPR.

Customer account

If you open a customer account, we store the data held there until the account is deleted. The legal basis is Article 6(1)(b) GDPR. You may delete your customer account at any time, either using the corresponding function within the account or by sending a message to the contact details above. Statutory retention periods remain unaffected.

Contacting us

If you contact us via our contact form, by e-mail or by telephone, we process the data you provide in order to handle your enquiry. The legal basis is Article 6(1)(b) GDPR where the enquiry relates to entering into a contract, and otherwise Article 6(1)(f) GDPR based on our legitimate interest in responding to enquiries. The data is deleted once your enquiry has been dealt with conclusively and no statutory retention obligations apply.

6. Disclosure of data to third parties

Shipping service providers

In order to deliver the goods you have ordered, we pass your name and delivery address on to the company commissioned with the shipment:

DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany (shipments within Germany)
Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany (international parcel shipments)

The legal basis is Article 6(1)(b) GDPR. Where we pass on your e-mail address or telephone number for shipment notifications, this is done on the basis of your consent (Article 6(1)(a) GDPR). Further information on data processing at DHL is available at https://www.dhl.de/de/toolbar/footer/datenschutz.html

Payment service providers

In order to process payments, we pass the necessary payment data on to the credit institution commissioned and to the payment service provider you selected during the ordering process. The legal basis is Article 6(1)(b) GDPR.

Advance payment by bank transfer
If you choose advance payment, we do not transmit any data to an external payment service provider. You pay by bank transfer to our business account; the data arising from this (name, payment reference or order number, IBAN, amount) is processed by our bank in order to execute the payment transaction. The legal basis is Art. 6(1)(b) GDPR.

Purchase on account
When purchasing on account, payment is made after receipt of the goods within the period stated on the invoice. As we make advance performance in this case, we check your creditworthiness before releasing this payment method; details can be found in section 7. Payment itself is made by bank transfer to our business account; no external payment service provider is involved. The legal basis for processing your payment and invoice data is Art. 6(1)(b) GDPR, and for the credit check Art. 6(1)(f) GDPR. In the event of default, we reserve the right to pass on the data required to enforce our claim to a debt collection agency or a lawyer; the legal basis in this respect is Art. 6(1)(f) GDPR.

PayPal and credit card payment
The provider is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. If you choose to pay by PayPal or by credit card, the data required to process the payment – including your name, address, e-mail address, invoice amount and order number – is transmitted to PayPal. You enter your credit card details directly with the payment service provider; we neither receive nor store complete card data.

PayPal reserves the right to obtain information from credit agencies in order to verify identity and creditworthiness and to pass data on to affiliated companies and service partners. Further information and a list of these recipients can be found in PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

7. Credit assessment

When contracts are concluded, and in certain cases where a legitimate interest exists, we check and monitor information about your previous payment behaviour. For this purpose we work together with:

infoscore Consumer Data GmbH
Rheinstraße 99
76532 Baden-Baden
Germany

For this purpose we transmit your name, address and date of birth to infoscore Consumer Data GmbH and receive the required information from them. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in protecting ourselves against payment defaults when offering payment methods that involve advance performance on our part.

The information required under Article 14 GDPR regarding the processing carried out by infoscore Consumer Data GmbH can be found here: https://www.experian.de/icd-infoblatt

You have the right to object to this processing at any time on grounds relating to your particular situation (see the section "Right to object").

8. Postal advertising

We reserve the right to store your first and last name, your postal address and – insofar as we have received this additional information in the course of our contractual relationship – your title, academic degree, year of birth and occupational, industry or business designation in aggregated lists and to use this data for our own advertising purposes by post. The legal basis is Article 6(1)(f) GDPR; our legitimate interest lies in direct marketing to existing customers.

You may object to the storage and use of your data for this purpose at any time and without giving reasons. A message to the contact details above is sufficient.

9. Cookies

We use cookies and comparable technologies on our website. These are small text files stored on your device. Some cookies are automatically deleted at the end of your browser session (session cookies), while others remain on your device until you delete them (persistent cookies).

Strictly necessary cookies

Strictly necessary cookies are required for our website to function. In particular, they enable the shopping cart function, session management, storage of your language and country selection and security features. The legal basis for storing information on and accessing your device is Section 25(2) no. 2 of the German Digital Services Data Protection Act (TDDDG); the subsequent processing is based on Article 6(1)(b) or (f) GDPR. These cookies cannot be deactivated without impairing the functionality of the shop.

Convenience cookies

We also use cookies that make visiting our website more convenient without being technically necessary. We set these only with your express consent. The legal basis is Section 25(1) TDDDG in conjunction with Article 6(1)(a) GDPR.

Your choice and withdrawal

When you first access our website, you can use our cookie notice to select which categories you wish to allow. Your selection is stored in a cookie. You may withdraw or adjust your consent at any time with effect for the future by opening the cookie settings again or by deleting the cookies stored in your browser.

Independently of this, you can configure your browser to inform you when cookies are set or to refuse cookies generally. If strictly necessary cookies are refused, the functionality of our website may be limited.

10. Web analytics and advertising

We currently do not use any services for web analytics, conversion tracking or the delivery of personalised advertising. In particular, no usage profiles are created and no cross-device recognition for advertising purposes takes place. Should we use such services in future, we will amend this privacy policy beforehand and obtain your consent where this is required.

11. External content and fonts

The fonts used on this website are served exclusively from our own server. As a result, no connection to third-party servers is established when our pages are accessed and your IP address is not transmitted to font providers.

We currently do not embed any other external content such as map services, video players, social media plugins or third-party protection mechanisms in our website.

12. Transfers to third countries

Some of the service providers we use process data outside the European Economic Area. In such cases we ensure that an adequate level of data protection is in place – for example through an adequacy decision of the European Commission (in the case of US providers, in particular certification under the EU-U.S. Data Privacy Framework) or by concluding EU standard contractual clauses pursuant to Article 46(2)(c) GDPR.

We would like to point out that a level of protection comparable to that in the EU cannot be guaranteed in every case in third countries and that authorities may in certain circumstances be able to access data.

Deliveries to countries outside the European Union – such as Norway, Switzerland or the United Kingdom – require your address and order data to be transmitted to the customs and shipping service providers there. This transfer takes place on the basis of Article 49(1)(b) GDPR, as it is necessary for the performance of the contract.

13. Retention periods

We store personal data only for as long as is necessary for the purposes described or as required by statutory retention obligations. Specifically:

  • contract and invoice data: up to ten years (Section 147 AO, Section 257 HGB)
  • customer account data: until the account is deleted, thereafter subject to statutory retention periods
  • server log files: anonymised access logs 60 days, error logs 7 days
  • contact enquiries: until the enquiry has been dealt with conclusively
  • records of consent: up to three years after withdrawal

14. Your rights as a data subject

You have the following rights in relation to us:

  • right of access to the data stored about you (Article 15 GDPR)
  • right to rectification of inaccurate or incomplete data (Article 16 GDPR)
  • right to erasure (Article 17 GDPR)
  • right to restriction of processing (Article 18 GDPR)
  • right to data portability (Article 20 GDPR)
  • right to withdraw consent with effect for the future (Article 7(3) GDPR)
  • right to lodge a complaint with a supervisory authority (Article 77 GDPR)

An informal message to the contact details above is sufficient to exercise your rights. Access to your data is provided free of charge.

15. Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(f) GDPR (Article 21(1) GDPR). This applies in particular to the credit assessment and the evaluation of server log files. We will then no longer process the data concerned unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or unless the processing serves to establish, exercise or defend legal claims.

Where we process your personal data for direct marketing purposes, you have the right to object to such processing at any time and without giving reasons (Article 21(2) GDPR). Following your objection, we will no longer process your data for this purpose.

An objection may be made informally and addressed to the contact details above.

16. Right to lodge a complaint with a supervisory authority

Without prejudice to any other legal remedy, you have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Postfach 3163
65021 Wiesbaden
Germany

17. Obligation to provide data

Providing your personal data is neither required by law nor by contract. However, certain information is necessary in order to conclude a purchase contract – without it we cannot conclude the contract or deliver the goods. The relevant mandatory fields are marked accordingly in the forms.

18. Automated decision-making

As part of the credit assessment described in section 7, the selection of payment methods offered to you may take place automatically. If the outcome of the assessment is negative, payment methods involving advance performance on our part may not be available to you. This does not prevent the conclusion of a contract as such – you can still choose one of the other payment methods offered. You have the right to obtain human intervention, to express your point of view and to contest the decision. To do so, please contact us using the details above.

19. Changes to this privacy policy

We will amend this privacy policy whenever changes to our processing activities or to the legal framework make this necessary. The version available on this page applies in each case.

Last updated: 10 August 2026

This website uses cookies to ensure the best experience possible. More information...