Privacy notice

1. Controller

ZWOD Vertriebs und Logistik GmbH
Ferdinand-Schultze-Str. 91, 13055 Berlin, Germany
Mobile: +49 170 4630876
Landline: +49 30 82071039
Email: post@zwodltd.de

2. Hosting and server logs

This website is hosted by a hosting service provider. When the website is accessed, technically necessary server-log data may be processed, including IP address, date and time, requested URL, referrer, browser and operating-system information. This processing supports secure and stable operation and troubleshooting. The legal basis is Art. 6(1)(f) GDPR.

3. Technically necessary session data and abuse protection

The website uses technically necessary session data for secure form processing, including CSRF protection and controls against abusive repeated submissions. When the order or inquiry form is submitted or the discontinuation alert is signed up for, we also count the accepted submissions per connection to prevent abusive bulk sending. For this we do not store your IP address in plain text, only a shortened check value (hash) formed from it with a secret random value generated on our server, together with the time; for IPv6 addresses only the network part is used. This check value is pseudonymised, not anonymous. Entries older than 24 hours are deleted with the next checked submission of the same form. These functions are necessary for secure operation. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the security of our forms and in protecting third parties from unwanted e-mails).

4. Contact, quotation requests and orders

Orders of stock items via the order form are processed to fulfil the contract (Art. 6(1)(b) GDPR): company, contact person, address, e-mail, phone, VAT ID, ordered item, quantity and payment method; retained for the periods required by commercial and tax law. When you contact us through the form, by email or by phone, we process the information you provide in order to handle your request. This may include company, name, email address, phone number, country, manufacturer, part number, quantity, message and files voluntarily submitted. The legal basis is Art. 6(1)(b) GDPR where the request concerns pre-contractual or contractual measures, and otherwise Art. 6(1)(f) GDPR.

WhatsApp: If you contact us via WhatsApp, WhatsApp Ireland Ltd. (Meta) processes your phone number, message content and metadata under the WhatsApp privacy policy; data may be transferred to the USA. We use WhatsApp only when you start the conversation there and store your number solely to handle the request. The legal basis is Art. 6(1)(b) GDPR and otherwise Art. 6(1)(f) GDPR. Quotations are additionally sent by email.

Discontinuation alert and BOM check: For the discontinuation alert we store your e-mail address, the part number and the time after you click the link in the confirmation e-mail (double opt-in), until you unsubscribe; the unsubscribe link is included in every message. The legal basis is your consent, Art. 6(1)(a) GDPR. For the BOM check, pasted or uploaded lists are processed for the immediate check and are not stored permanently; so that you can carry the checked list over into an inquiry, it remains in the session data until your session ends. Only the number of checked lines is counted.

5. File uploads / BOMs

BOMs, technical documents and other attachments are used to process the relevant request. File type and file size are checked for security reasons. Uploaded files are not published as publicly accessible files on the web server.

6. Google Maps on explicit request

A Google Maps frame is not loaded automatically. Only after you actively click “Load map” is a connection to Google established. This may transmit your IP address and technical usage information to Google. Loading the map is based on your consent under Art. 6(1)(a) GDPR. You can alternatively use the external directions link.

7. No third-party analytics; our own counting and source measurement

This website does not use third-party web-analytics, advertising or marketing-tracking services. No cookie banner is shown because no consent-requiring cookies or storage technologies are used; a session cookie is created only when the inquiry or order form is opened and when the BOM check is submitted, so that your list can be carried over into the inquiry form. We count how often the inquiry and order forms, the BOM check, the discontinuation alert and the WhatsApp, phone and e-mail links are used; we do not store your IP address or browser or device characteristics for this and set no cookies. When the inquiry or order form is submitted, we additionally record for this statistic the language, country, manufacturer, part number, quantity, company and the domain of your e-mail address, not the address itself. If you reach us through a link on another website or through a link with a campaign tag (for example “utm_source”), we also store the domain name of the referring website (for example “google.com”, without the exact address), the campaign tag, the page visited, the language and the time. This shows us which routes customers use to find us. These entries contain neither your IP address nor browser or device characteristics; we do not combine them with inquiries, orders or other information about you and delete them after 13 months at the latest. Insofar as this constitutes personal data in an individual case, the legal basis is Art. 6(1)(f) GDPR (legitimate interest in knowing which routes lead to our offer).

8. Retention

Personal data is retained only for as long as necessary to handle the request, perform the business relationship, comply with statutory retention duties or protect legitimate interests. It is then deleted or restricted in accordance with applicable law.

9. Recipients

Where necessary, data may be shared with technical, hosting and email service providers and, where required for a request or order, with manufacturers, suppliers, logistics, customs or transport partners. Data is shared only where a legal basis exists.

10. Your rights

Subject to the statutory requirements, you have rights including access, rectification, erasure, restriction of processing, data portability and objection. Consent may be withdrawn at any time with effect for the future. You also have the right to lodge a complaint with a competent data-protection supervisory authority.

11. Security

We use appropriate technical and organisational measures to protect the website and submitted data against loss, manipulation and unauthorised access. Data transmission is encrypted via HTTPS.

12. Business contacts and prospects

This section informs companies under Art. 14 GDPR that we contact by e-mail for the first time without their having approached us before, in particular dealers and distributors abroad. We write to contact addresses that the company has published itself. Where the company is a sole proprietorship or the address names a person, the information relates to a person.

Controller: ZWOD Vertriebs und Logistik GmbH as named in section 1, where you will find our address and contact details.

Purpose and legal basis: We process the information in order to establish business relationships with dealers. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the sale of our products (direct marketing, Recital 47 GDPR).

Categories of data: company name, the e-mail contact address published by the company, where we found it and the date we retrieved it, the sending data of our e-mails (date and text) and the reply status (no reply, reply or objection).

Source: information the company has published itself: its own website and its entries in trade fair, chamber, association and industry directories and on B2B platforms. In our first e-mail we say where we found the address (for example on your website).

Recipients: Our e-mail service provider processes the e-mails on our behalf as a processor (Art. 28 GDPR). For research and drafting we also use IT service providers, including an AI service from a provider based in the USA; in this context the information listed may be transferred to the USA (Art. 44 et seq. GDPR).

Retention: If you do not reply, we delete your information 30 days after our last e-mail to you. We keep a sending log with company, address, date and text for up to three years so that we can prove when and with which text we contacted you (Art. 6(1)(f) GDPR). If you object, we no longer use your information for this outreach and delete the rest of your information, with two exceptions: your address and the date of your objection remain permanently on a do-not-contact list so that we continue to respect your objection (Art. 6(1)(c) in conjunction with Art. 21(3) GDPR), and the sending log remains until the end of the period stated above. If you reply to us, section 4 applies to the further correspondence.

Right to object: You may object at any time and without giving reasons to the processing of your information for this outreach (Art. 21(2) GDPR). A reply to our e-mail saying “unsubscribe” or “no”, or any refusal to the same effect, is enough; we will then not write to you for this purpose again.

Other rights: You also have the right of access, rectification, erasure and restriction of processing (Art. 15 to 18 GDPR) and the right to lodge a complaint with a data-protection supervisory authority (Art. 77 GDPR); the authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information. A reply to our e-mail or a message through the contact details in section 1 is enough.

No tracking, no automated decision-making: These e-mails contain no tracking pixels and no open tracking; links to our website carry no identifier that reveals your company or you as a person. No automated individual decision-making, including profiling (Art. 22 GDPR), takes place.

13. Version

Version: October 2026. We update this privacy notice when services used by the website or legal requirements change.