Privacy
This privacy policy explains which personal data we process when you visit our website or use our forms, for what purpose and on which legal basis. The German version is legally binding.
1. Controller
Hero Trading GmbH
Waldstraße 10, 65451 Kelsterbach, Germany
Represented by the Managing Director Ahmet Koc
Phone: +49 (0) 163 3564991
Email: [email protected]
2. Hosting
Our website is delivered via Cloudflare Pages (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). Cloudflare processes technically necessary data such as IP address, time of access, requested page, browser and operating system information and referrer to deliver and protect the website (Art. 6(1)(f) GDPR). A data processing agreement is in place. Cloudflare is certified under the EU-US Data Privacy Framework (Art. 45 GDPR), supplemented by EU Standard Contractual Clauses.
3. Analytics (Cloudflare Web Analytics)
We use Cloudflare Web Analytics to understand how often pages are visited. It works without cookies and without cross-site tracking; no user profiles are created (Art. 6(1)(f) GDPR).
4. Contact, request, sell-to-us and trade access forms
When you use one of our forms, we process the data you enter (e.g. company, contact person, email, phone, VAT ID, delivery location, message, requested products, uploaded files) to handle your request and to prepare or perform a contract (Art. 6(1)(b) GDPR; otherwise Art. 6(1)(f) GDPR). You automatically receive a confirmation email. We delete the data once it is no longer required, unless statutory retention periods apply (up to 10 years under German commercial and tax law).
5. Clearance newsletter
For the newsletter we process your email address and voluntary details (company, name, customer type, interests, language). Subscription uses a double opt-in procedure. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the unsubscribe link in every email.
6. Email delivery via Brevo
Form emails, confirmations and the newsletter are sent via Brevo (Brevo SAS, 9–17 rue Salneuve, 75017 Paris, France), which processes data in the EU on our behalf under a data processing agreement (Art. 28 GDPR).
7. Spam protection (Cloudflare Turnstile)
We use Cloudflare Turnstile to protect our forms from bots. It checks technical browser characteristics without advertising cookies (Art. 6(1)(f) GDPR).
8. Request list in your browser
Your request list is stored only locally in your browser (local storage) and is sent to us only when you submit the form. We do not use tracking or advertising cookies.
9. Fonts
Fonts are served locally from our server; no connection to Google or other third parties is made.
10. Contact via WhatsApp
You can contact us via WhatsApp. The WhatsApp button is a plain link; no data is sent to WhatsApp until you click it. Provider: WhatsApp Ireland Limited, Merrion Road, Dublin 4, Ireland (Meta group). If you message us, WhatsApp and we process your phone number, profile name and message content; a transfer to the USA cannot be ruled out (Meta is certified under the EU-US Data Privacy Framework). We use WhatsApp only to answer your enquiry (Art. 6(1)(b) and (f) GDPR). Alternatively, reach us by phone, email or form.
11. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability, objection (Art. 21 GDPR) and to withdraw consent at any time. Simply contact [email protected]. You also have the right to lodge a complaint with a supervisory authority, e.g. the Hessian Commissioner for Data Protection and Freedom of Information, Wiesbaden.
Last updated: 06.11.2026 · German version