KOVANCI TEXTILES

Privacy notice

Draft: Complete the operator details and marked required information before publication. Review conditional information against the actual legal structure of the business.

1. Data controller

[ADD FULL LEGAL OPERATOR NAME]
[ADD STREET AND NUMBER]
[ADD POSTCODE AND CITY]
[ADD COUNTRY]

[ADD BUSINESS EMAIL]
[ADD PHONE NUMBER]

This privacy notice describes the supplied website and its prepared enquiry form. Before enabling submission, review the actual hosting and email settings and retention rules, and complete the marked details.

2. Hosting and access data

STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, is the intended hosting provider. Serving the website requires connection data, which may include the IP address, time of access, requested address, response status, browser/system information and referring page.

The purpose is to operate and secure the website. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is a reliable and secure website. STRATO states a maximum retention of seven days for full IP addresses used to detect and defend against attacks. Other available logs are governed by the actual hosting package settings and retention rules.

[VERIFY AND COMPLETE ACTUAL LOGGING, RETENTION PERIODS AND THE DATA PROCESSING AGREEMENT WITH STRATO BEFORE PUBLICATION.]

3. Business enquiries and contact

When you enquire, we process the information you provide: company, contact person, country, email address, any phone number, product group, size/specification, approximate and any more precise quantity, type of requirement, delivery timeframe, message and specific requirements. Required fields are needed to identify and handle your enquiry; the form cannot be submitted without them. Additional details are voluntary.

We use these data to handle your enquiry, prepare a quotation and conduct necessary follow-up communication. For representatives of business customers, the basis is Article 6(1)(f) GDPR; our legitimate interest is handling the business communication you requested. Where you personally are the prospective contracting party, Article 6(1)(b) GDPR applies to pre-contractual steps.

Once enabled, the form forwards your enquiry by email to the business contact address. The responsible people at Kovanci Textiles and the hosting and email providers receive the data necessary for this purpose. The form does not maintain its own database of enquiry messages. Emails are processed and stored in the mailbox used.

4. Protection against abusive submissions

When submission is enabled, a keyed hash of the IP address, a timestamp and a counter are stored on the server to limit repeated enquiries. The window is 15 minutes, with a maximum of three validated enquiries processed per window. These records do not contain the raw IP address or enquiry text. Records last modified more than 15 minutes ago are removed on the next validated form request and may remain until then. The legal basis is Article 6(1)(f) GDPR; the legitimate interest is protecting the form and email service against misuse.

5. Cookies, analytics and external content

The supplied website does not itself set cookies and does not use analytics or advertising services. The language choice is not stored in the browser. Fonts come from the visitor’s system; images and other website files are served from the site’s own webspace. This notice must be updated if additional services are introduced.

6. Retention

We delete enquiry data once handling and necessary follow-up communication are complete, unless legal retention duties or necessary grounds for safeguarding legal claims require further storage. The specific retention period depends on the purpose, progress of the enquiry and any applicable statutory duties.

[ADD ACTUAL DELETION RULES FOR THE MAILBOX, ENQUIRY DATA AND BACKUPS, AND APPLICABLE RETENTION DUTIES.]

7. Your rights

Subject to the statutory conditions, you have rights of access, rectification, erasure, restriction of processing and data portability. Where we process data on the basis of legitimate interests, you may object on grounds relating to your particular situation. Contact the controller listed above to exercise these rights.

You may lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement.

[ADD THE COMPETENT SUPERVISORY AUTHORITY AND CONTACT; ADD A DATA PROTECTION OFFICER’S CONTACT ONLY IF ONE HAS BEEN APPOINTED.]

8. Further processing

The website does not provide for automated decision-making or profiling. The supplied form does not integrate additional services beyond the intended hosting and email operation.

[VERIFY ACTUAL RECIPIENTS, EMAIL SERVICES AND ANY INTERNATIONAL TRANSFERS BEFORE ENABLING SUBMISSION, AND UPDATE THIS NOTICE.]