Privacy policy

Thank you for your interest in our company. Protecting your personal data is important to us. In accordance with Art. 13 of the General Data Protection Regulation (GDPR), we explain below which data we process when you visit this website and when you contact us, for what purpose and on what legal basis. The German version of this privacy policy is the legally binding version.

1. Controller

The controller responsible for data processing on this website is:

Alen Spahic
Spahic Handelswaren
Oehleckerring 6B
22419 Hamburg, Germany
Phone: +49 (0) 155 11575239
Email: info@spahic-handelswaren.de

No data protection officer has been appointed, as there is no legal obligation to do so. If you have any questions about data protection, please use the contact details above.

2. Summary

This website does not use cookies and does not store any information in your browser.
We do not use any analytics, tracking or marketing services and do not embed content from social networks, map services or video platforms.
Fonts, images and scripts are loaded exclusively from our own web server. No data is transferred to third parties in the process.
We only process personal data to the extent necessary to provide the website and handle your inquiries.

3. Hosting and server log files

This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. The servers are located in the European Union. We have concluded a data processing agreement with IONOS in accordance with Art. 28 GDPR, which ensures that your data is processed only on our instructions and in compliance with the GDPR.

Each time this website is accessed, the web server automatically records information transmitted by your browser and stores it in server log files:

IP address of the requesting device
date and time of access
page or file accessed
amount of data transferred and status code (e.g. whether the page was found)
previously visited page (referrer), if transmitted by your browser
browser and operating system used

Purpose: This processing is technically necessary to display the website to you and serves the stability and security of its operation, for example to fend off attacks and analyse errors.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in providing the website securely and without errors.

Retention: The log files are stored only for as long as necessary for these purposes and are then deleted or anonymised. They are not combined with other data sources.

4. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar and the padlock symbol. This means that data you send to us cannot be read by third parties.

5. No cookies and no storage on your device

This website does not set cookies, and it does not access or store information on your device beyond what is technically necessary to display the page. Consent under Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG) is therefore not required, and we do not display a cookie banner.

To speed up navigation, your browser may load subpages of this website from our server in advance when you hover over a link. This involves the same data as a normal page visit (see section 3), and no data is transferred to third parties.

6. Sell-through check

The sell-through check on the “Consulting” page is calculated entirely in your browser. Your answers are neither transmitted to us or to third parties nor stored. If you wish, the check copies the open topics as text into the contact form. Section 7 only applies once you send this message yourself.

7. Contact by email, phone or contact form

You can reach us by email, by phone or via the contact form. The contact form does not send any data to our server: when you submit it, your own email program opens with a prepared message that you can review and edit before sending. It is then transmitted as a normal email via your email provider.

Data processed: The information you provide, usually your name, company, email address, phone number if applicable, and the content of your inquiry.

Purpose: Handling and answering your inquiry and, where applicable, initiating and performing a contract.

Legal basis: Art. 6(1)(b) GDPR if your inquiry relates to the performance of a contract or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in handling inquiries effectively (Art. 6(1)(f) GDPR).

Retention: We delete your inquiry once it has been fully dealt with and no further communication is expected. If a business transaction results, we retain business-relevant correspondence in accordance with statutory retention obligations, generally six years for commercial and business letters (Section 257 German Commercial Code, HGB) and up to ten years for tax-relevant documents (Section 147 German Fiscal Code, AO). The legal basis for this is Art. 6(1)(c) GDPR.

Our mailbox is operated via Google Workspace, a service of Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland, which we obtain through Squarespace. Google processes emails on our behalf (Art. 28 GDPR).

8. Recipients and transfers to third countries

Your data is only received by us and by the service providers mentioned above (hosting provider IONOS and email provider Google), who act on our behalf and on our instructions. Beyond this, we only disclose your data if we are legally obliged to do so. The website itself is operated exclusively within the European Union.

With our email provider Google, it cannot be ruled out that data is also transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, so an adequacy decision of the European Commission applies to this transfer (Art. 45 GDPR). In addition, Google has concluded the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR).

9. Obligation to provide data and automated decision-making

You are not obliged to provide us with personal data. However, the website cannot be displayed without the technical data mentioned in section 3, and we cannot answer your inquiry without contact details. There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

10. Your rights

You have the following rights with regard to your personal data:

right of access (Art. 15 GDPR)
right to rectification (Art. 16 GDPR)
right to erasure (Art. 17 GDPR)
right to restriction of processing (Art. 18 GDPR)
right to data portability (Art. 20 GDPR)

To exercise your rights, an informal message to the contact details in section 1 is sufficient.

Right to object (Art. 21 GDPR): Where we process your data on the basis of Art. 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

Right to lodge a complaint with a supervisory authority (Art. 77 GDPR): You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your data infringes the GDPR. The authority responsible for us is:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (Hamburg Commissioner for Data Protection and Freedom of Information)
Ludwig-Erhard-Str. 22, 20459 Hamburg, Germany

11. Updates to this privacy policy

We update this privacy policy whenever the website or legal requirements change. The version published here applies.

Last updated: November 2026