Privacy Policy
Last updated: February 2026
1. Controller
Berlin Headquarters
KWR Customs GmbH
Pankstr. 8 / Entrance B
13127 Berlin
Germany
Hamburg Location
KWR Customs GmbH
Borstiger Bogen 27 A
22453 Hamburg
Germany
Managing Director: Benjamin Weber
Email: info@kwr-customs.com
Phone: 040 524750222
2. Overview of Processing Activities
The following overview summarizes the types of data processed and the purposes of their processing, and refers to the data subjects concerned.
Types of data processed:
- Master data (e.g. names, addresses)
- Contact data (e.g. email, telephone numbers)
- Content data (e.g. entries in forms)
- Usage data (e.g. pages visited, access times)
- Meta/communication data (e.g. IP addresses, device information)
- Contract data (e.g. subject matter of contract, term)
- Payment data (e.g. bank details, invoices)
3. Relevant Legal Bases
Below you will find an overview of the legal bases of the GDPR on the basis of which we process personal data:
Consent (Art. 6 (1) sentence 1 lit. a) GDPR) – The data subject has given their consent to the processing of their personal data for one specific purpose or several specific purposes.
Performance of a contract and pre-contractual inquiries (Art. 6 (1) sentence 1 lit. b) GDPR) – Processing is necessary for the performance of a contract to which the data subject is a party, or in order to carry out pre-contractual measures taken at the data subject’s request.
Legitimate interests (Art. 6 (1) sentence 1 lit. f) GDPR) – Processing is necessary to safeguard the legitimate interests of the controller or a third party, provided that the interests or fundamental rights and freedoms of the data subject do not override those interests.
4. Security Measures
In accordance with the legal requirements, and taking into account the state of the art, the costs of implementation, and the nature, scope, circumstances, and purposes of the processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons, we take appropriate technical and organizational measures to ensure a level of protection appropriate to the risk.
These measures include, in particular, safeguarding the confidentiality, integrity, and availability of data by controlling physical and electronic access to the data as well as the access, input, disclosure, availability, and separation of the data. Furthermore, we have established procedures that ensure the exercise of data subjects‘ rights, the erasure of data, and responses to threats to the data.
SSL/TLS encryption: To protect the security of your data during transmission, we use encryption methods (e.g. TLS) that correspond to the current state of the art via HTTPS.
5. Transfer of Personal Data
In the course of our processing of personal data, it may occur that the data is transferred to, or disclosed to, other bodies, companies, legally independent organizational units, or persons. Recipients of this data may include, for example, IT service providers or providers of services and content that are integrated into a website.
Insofar as we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)), or if this occurs in the context of using third-party services or disclosing or transferring data to other persons, bodies, or companies, this only takes place in accordance with the legal requirements.
6. Rights of Data Subjects
As a data subject, you are entitled to various rights under the GDPR, which arise in particular from Art. 15 to 21 GDPR:
Right to object: You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you that is carried out on the basis of Art. 6 (1) lit. e or f GDPR.
Right to withdraw consent: You have the right to withdraw consent granted at any time.
Right of access: You have the right to request confirmation as to whether data concerning you is being processed and to information about this data, as well as to further information and a copy of the data in accordance with the legal requirements.
Right to rectification: You have the right to request the completion of data concerning you or the rectification of inaccurate data concerning you.
Right to erasure and restriction of processing: You have the right to request that data concerning you be erased without delay, or alternatively to request the restriction of the processing of the data.
Right to data portability: You have the right to receive data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, or to request its transmission to another controller.
Complaint to a supervisory authority: You have the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace, or of our company’s registered office. The competent supervisory authority is:
Berlin Commissioner for Data Protection and Freedom of Information
Friedrichstr. 219, 10969 Berlin
Phone: 030 13889-0
Email: mailbox@datenschutz-berlin.de
7. Provision of the Online Offering and Web Hosting
We process users‘ data in order to be able to provide them with our online services. For this purpose, we process the user’s IP address, which is necessary to transmit the content and functions of our online services to the user’s browser or device.
Types of data processed
Usage data (e.g. websites visited, access times); meta/communication data (e.g. IP addresses, device information); content data (e.g. entries in online forms).
Legal bases
Legitimate interests (Art. 6 (1) sentence 1 lit. f) GDPR).
Server Log Files
Each time our server is accessed, data is automatically transmitted by the respective internet access provider. These so-called server log files generally include the address and name of the accessed web page, the date and time of access, the IP address, the amount of data transferred, and the requesting provider.
The server log files are stored for a maximum of 30 days and then deleted. The data is stored for security reasons, for example in order to be able to investigate cases of misuse.
8. Contacting Us
When you contact us (e.g. by email, telephone, or via the contact form), the information provided by the inquiring persons is processed insofar as this is necessary to respond to the contact inquiries and any requested measures.
Types of data processed
Contact data (e.g. email, telephone numbers); content data (e.g. entries in online forms); usage data; meta/communication data.
Legal bases
Performance of a contract and pre-contractual inquiries (Art. 6 (1) sentence 1 lit. b) GDPR); legitimate meta/communication data.
Legal bases
Performance of a contract and pre-contractual inquiries (Art. 6 (1) sentence 1 lit. b) GDPR); legitimate interests (Art. 6 (1) sentence 1 lit. f) GDPR).
9. Use of Cookies
Cookies are small text files or other storage records that store information on end devices and read information from the end devices. For example, to store the login status in a user account, the contents of a shopping cart in an e-shop, the content accessed, or the functions used in an online offering. Cookies can also be used for various purposes, for example for the functionality, security, and convenience of online offerings, as well as for creating analyses of visitor flows.
Information on consent: We use cookies in accordance with the legal provisions. We therefore obtain prior consent from users, except where this is not required by law. Consent is not necessary, in particular, where the storage and reading of information, including cookies, is strictly necessary in order to provide users with a telemedia service that they have expressly requested.
Withdrawal and objection (opt-out): You can withdraw your consent and object to processing at any time. This can be done via your browser settings by disabling the storage of cookies (although this may also limit the functionality of our online offering).
Legal bases
Legitimate interests (Art. 6 (1) sentence 1 lit. f) GDPR); consent (Art. 6 (1) sentence 1 lit. a) GDPR).
10. Amendment and Update of the Privacy Policy
We ask you to inform yourself regularly about the content of our privacy policy. We adapt the privacy policy as soon as changes to the data processing we carry out make this necessary. We will notify you as soon as the changes require an action on your part (e.g. consent) or any other individual notification.