1. Controller
The controller for this website within the meaning of the General Data Protection Regulation (GDPR) is:
Nico HellerSole trader
Hasseler Straße 20
40822 Mettmann
Germany
Email: info@cbdgrosshandel.de
Telephone: +49 174 780 4937
2. Website delivery and server logs
When you visit our website, access data is processed to deliver the pages and ensure secure operation. This may include:
- the IP address of the requesting device,
- the date and time of access,
- pages and files accessed and the requested URL,
- HTTP status code and volume of data transferred,
- browser type and version and operating system,
- where applicable, the referrer URL (previously visited page).
This information is used for website delivery, stability, troubleshooting, detection of abusive access and IT security. We do not combine it with other visitor profiles.
Legal basis: Article 6(1)(f) GDPR. Our legitimate interest is the secure, uninterrupted operation of our website.
Retention period: Log data is processed for as long as necessary to maintain technical operation and IT security, then deleted or anonymised unless further retention is required to investigate specific security incidents. The exact retention period applicable to our hosting plan is determined by the hosting provider's technical deletion schedules. You may contact us for details.
3. Hosting with Alfahosting
Our website is hosted by Alfahosting GmbH, Edmund-von-Lippmann-Straße 13–15, 06112 Halle (Saale), Germany.
Alfahosting provides server capacity, storage and the technical infrastructure for this website. Personal data such as IP addresses and technical access logs may be processed as part of these services.
Hosting is used on the basis of our legitimate interest in providing this website securely and reliably (Article 6(1)(f) GDPR). Where Alfahosting processes personal data on our behalf, the statutory requirements for processing under Article 28 GDPR apply.
According to Alfahosting, its hosting servers are operated in Germany. Further information is available in the Alfahosting privacy policy.
4. Contact by form, email or telephone
If you contact us using the contact form, by email or by telephone, we process the information you provide (first name, last name, subject, email address and message) to handle your enquiry. The contact form sends your information server-side as an email to info@cbdgrosshandel.de. Contacting us does not, in itself, result in use for advertising purposes.
To protect the form from abuse, we use a technically necessary session with a security token, valid only for the session, and a simple time-based attempt limit. This session is not used for tracking. We also limit technically valid sending attempts independently of the session over a ten-minute window. Only an identifier derived from the IP address using a secret key and timestamps are processed in protected temporary server storage. Form data and plain-text IP addresses are not stored there; expired entries are removed on the next form submission. Transport is encrypted via HTTPS where the website is configured accordingly. Enquiry content is not additionally stored in a website database; email accounts and hosting systems process it for delivery and handling.
Legal bases: Article 6(1)(b) GDPR where your enquiry is necessary for steps prior to entering into a contract or for performing a contract with you. Otherwise, we process data under Article 6(1)(f) GDPR (legitimate interest in responding to business enquiries and communicating with company contacts).
Your enquiry is not forwarded to a particular supplier or business partner simply because you visit the website. If such a referral function is introduced, we will explain the associated data processing before forwarding any information.
Data is deleted once the enquiry has been fully handled, unless further legitimate purposes or statutory retention duties prevent deletion.
6. Data recipients and external links
Our hosting provider may access data necessary for the technical delivery of the website. Any further disclosure occurs only where necessary to handle an enquiry, meet legal duties or on another lawful basis.
Our pages may link to third-party websites. Clicking such a link opens the other website. The respective operator is generally responsible for its data processing. Our current website does not embed videos, maps or social-media content that automatically sends data to those operators when our pages load.
7. General retention criteria
We retain personal data only for as long as required for the respective processing purposes or statutory retention duties. Business correspondence and documents relevant for tax or commercial law may therefore be retained beyond the handling of an enquiry. Data is then deleted unless legal grounds prevent this.
8. Your rights
Subject to statutory conditions, you have the following rights in particular:
- access to personal data being processed (Article 15 GDPR),
- rectification of inaccurate data (Article 16 GDPR),
- erasure (Article 17 GDPR),
- restriction of processing (Article 18 GDPR),
- data portability (Article 20 GDPR),
- objection to processing under Article 6(1)(f) GDPR (Article 21 GDPR).
Where processing is based on consent, you may withdraw that consent at any time with future effect (Article 7(3) GDPR).
You may also lodge a complaint with a competent data protection supervisory authority (Article 77 GDPR). For North Rhine-Westphalia, this includes the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.
To exercise your rights, please contact info@cbdgrosshandel.de .
9. Automated decisions
This website currently makes no solely automated decisions with legal or similarly significant effects within the meaning of Article 22 GDPR.
10. Updates to this privacy information
We update this information when the technologies used, the functions of our B2B portal or legal requirements change.