Privacy policy

Who is responsible for the processing

Dr. Eissing & Sohn Handel & Spedition KG, Erdbeerfeld 20, 26899 Rhede (Ems).

Telephone +49 160 636 2588, email info@eissing-sohn.de.

Please send any questions about data protection to this email address.

What happens when you open the site

This site consists of pre-built HTML files. They are delivered on our behalf through Cloudflare Pages. Log files arise at Cloudflare in the process, as they do with every request on the internet. Among other things, they contain the IP address of your device.

Logs of this kind cannot be switched off technically. We base them on our legitimate interest under Art. 6(1)(f) GDPR in operating the site securely and without disruption and in fending off attacks against it.

Cloudflare Pages is a service of Cloudflare, Inc., 101 Townsend Street, San Francisco, California 94107, USA. We have a contract with that company on processing on our behalf under Art. 28 GDPR. It is called the Data Processing Addendum, it is incorporated into Cloudflare's terms of service, and it therefore applies without being signed separately.

Cloudflare describes the data that arise as IP addresses, traffic routing data, system configuration information and further information about traffic to and from its customers' websites. Which individual entries a log for Cloudflare Pages contains is not published by the company. Nor does it state a period after which it deletes these logs.

By its own account, Cloudflare processes this information in data centres in the United States and in Europe. Cloudflare may also involve companies of its own group, inside the European Union as well as outside it. Which ones these are is set out by Cloudflare in a published list. Data therefore also reach countries outside the European Union, and separate rules apply to that (Art. 44 et seq. GDPR).

For transfers to the United States, that contract relies first on the EU-US Data Privacy Framework. Cloudflare, Inc. is listed there under participant number 5666. Should the company lose that certification, the same contract provides for the European Commission's standard contractual clauses (Implementing Decision (EU) 2021/914).

Content from cdn.sanity.io

We maintain the content of this site in Sanity. When a page is displayed, your browser fetches images and files directly from the address cdn.sanity.io. The operator of that address thereby learns the IP address of your device. Sanity states that uploaded files can only be retrieved through this delivery network.

Apart from the machine that delivers the site itself, your browser contacts no other third-party machine on this site. The legal basis for the retrieval is our legitimate interest under Art. 6(1)(f) GDPR in delivering the product images reliably and without long loading times.

Sanity is run by two companies, both of which Sanity names as controllers in its own privacy policy: Sanity AS, Trondheimsveien 2K, 0560 Oslo, Norway, and Sanity US Inc., 351 California Street, Suite 650, San Francisco, California 94104, USA. For the content we maintain there, Sanity is our processor. The contract covering this incorporates the European Commission's standard contractual clauses.

By Sanity's own description, the delivery network behind the address cdn.sanity.io is based on Google's global delivery network. A file is processed when it is first requested and is then cached on servers located near the people requesting it. Which companies Sanity involves is set out in a published list.

Where an individual request ends up is not published by Sanity. We therefore cannot rule out that data reach a country outside the European Union in the process. Separate rules apply to such transfers (Art. 44 et seq. GDPR); our contract with Sanity provides for the European Commission's standard contractual clauses.

What Sanity records in detail when something is retrieved via cdn.sanity.io, and how long it keeps that record, does not follow from the information the company publishes about this address. We are therefore unable to give you a period. As soon as Sanity publishes something on this or tells us, it will be stated here.

The quote request form

The quote request form on the home page and on the contact page sends nothing. When you submit it, your browser assembles an email from your entries and hands it over to the program set up for email on your device. If that is a service on the internet, the draft is created at the provider of that service. Nothing reaches us until you send the message yourself.

Four entries in the form carry an asterisk and are mandatory: what you need, surname, first name and email address. They are required neither by law nor by contract, but without them we cannot answer your request. All other fields are voluntary, including the place of delivery.

Emails to us

If you write to us, your message sits in our mailbox info@eissing-sohn.de, and it is read and answered there. What we process is what you write in it yourself.

Where the matter concerns the initiation or the performance of a contract, Art. 6(1)(b) GDPR is the basis. In all other cases, handling your message rests on our legitimate interest under Art. 6(1)(f) GDPR in replying to correspondence.

How long we keep things

• Log files at Cloudflare: Cloudflare does not publish a period after which it deletes these logs. We are therefore unable to state one.
• Requests and emails: deleted as soon as the matter is closed and no retention obligation remains.
• Where a request becomes a business transaction, the commercial and tax retention obligations under § 257 HGB (German Commercial Code) and § 147 AO (German Fiscal Code) apply. The legal basis is then Art. 6(1)(c) GDPR. Which period applies in the individual case, and when it starts, we will enter here.

Storage in your browser

This site stores nothing on your device. No cookie, no browser storage, no identifier. That is why no window here asks you for consent.

§ 25 TDDDG, the German act governing storage on terminal equipment, permits storage on your device without your consent only where it is strictly necessary for the service you have asked for. We therefore store nothing at all. The heading on the home page changes on every visit, chosen at random in your browser, with nothing left behind.

What does not happen on this site

Many privacy policies describe things that the site in question does not do at all. So that you do not have to look for them, here is what we expressly do not use:

• No audience measurement and no visitor counter. No Google Analytics, no Matomo, no tracking pixel.
• No fonts, maps or videos from third-party machines. The site uses the fonts on your device.
• No newsletter and no sign-up for one.
• No customer account, no basket, no checkout. Nobody can order or pay through this site; every product is available on request.
• No payment service provider and no connected shipping service provider.
• No automated decision-making within the meaning of Art. 22 GDPR and no profiling.
• No data from outside sources. Everything we process comes from you.

Your rights

You have the following rights in relation to us:

• Access to the data we process about you, Art. 15 GDPR.
• Rectification of inaccurate data, Art. 16 GDPR.
• Erasure, Art. 17 GDPR.
• Restriction of processing, Art. 18 GDPR.
• Receipt of the data you have given us, in a commonly used file format, Art. 20 GDPR.

An email to info@eissing-sohn.de is enough.

Your right to object

You have the right to object at any time, on grounds relating to your particular situation, to processing of personal data concerning you that is based on Art. 6(1)(f) GDPR. On this site that means the log files at Cloudflare, the retrieval of images and files via cdn.sanity.io, and the handling of your emails, in so far as it does not serve the initiation or the performance of a contract.

We examine your objection and tell you the outcome. If the examination shows no compelling legitimate grounds on our side that override your interests, rights and freedoms, we will no longer process the data concerned. The outcome is also different where the processing serves the establishment, exercise or defence of legal claims.

With Cloudflare's logs and with the retrieval via cdn.sanity.io, the processing cannot be switched off technically for individual visitors. There we weigh your grounds against our interest in operating the site securely.

An objection is not bound to any particular form. Send it to info@eissing-sohn.de.

Complaint to a supervisory authority

If you consider that we are not processing your data properly, you can lodge a complaint with a data protection supervisory authority under Art. 77 GDPR. You may turn to a supervisory authority in the country where you usually reside, where you work, or where the suspected infringement took place.

Date of this policy

This version is dated 27 September 2026. If what the site does technically changes, we will change this policy before the change takes effect. That applies as well should it become possible to buy something through the site later on.