Privacy Policy

Controller and Contact

The controller responsible for data processing is Steelhaul Co., Freiheitstraße 124/126, 15745 Wildau, Germany, email sales@steelhauleu.com, phone sales@steelhauleu.com. You can contact us at any time regarding data protection using these details.

What Data We Process and Why

When you place an order we process the data necessary to perform the contract, such as your name, delivery and billing address, email, phone number and payment details, on the basis of Art. 6(1)(b) GDPR (performance of a contract).

We process data to comply with legal obligations, for example tax and commercial-law retention duties, on the basis of Art. 6(1)(c) GDPR. We may process data for our legitimate interests, such as fraud prevention, network security and improving our services, on the basis of Art. 6(1)(f) GDPR. Where you have given consent, for example for a newsletter or non-essential cookies, processing is based on Art. 6(1)(a) GDPR.

In accordance with Arts. 13 and 14 GDPR we provide this information at the point of collection. Providing certain data is necessary to conclude a contract; without it we cannot process your order.

Your Rights as a Data Subject

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing (Art. 21). Where processing is based on consent, you may withdraw that consent at any time with effect for the future (Art. 7(3)).

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR), in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement. To exercise your rights, contact us at sales@steelhauleu.com.

International Transfers

Where we transfer personal data to recipients in countries outside the EU/EEA, we ensure an adequate level of protection through an EU adequacy decision, the EU Standard Contractual Clauses (SCC) under Art. 46 GDPR, the EU-US Data Privacy Framework (DPF) where applicable, or another appropriate safeguard. You may request a copy of the relevant safeguards from us.

Retention Periods

We retain personal data only as long as necessary for the purposes described or as required by law. Accounting and business records, including invoices, are retained for the statutory periods of 6 to 10 years under §257 HGB and §147 AO. Once retention obligations lapse and no other legal basis applies, the data is erased or anonymised.

Cookies and Tracking

We use cookies and similar technologies as described in our Cookie Policy. Non-essential cookies are set only with your prior consent in accordance with §25 TDDDG.