Privacy Policy
Effective date: 24 July 2026
1. Controller
The controller responsible for the processing of personal data through this website is:
Smartporters GmbH
Hünninghausenweg 32
45276 Essen
Germany
Managing Director: Farid Zazai
Commercial Register: Amtsgericht Essen, HRB 34804
Email: info@smartporters.com
2. Scope of this Privacy Policy
This Privacy Policy explains how Smartporters GmbH processes personal data when visitors access this website, submit a contact form or communicate with us by email.
Personal data means any information relating to an identified or identifiable natural person.
3. Website Hosting and Technical Access Data
This website is created and hosted using services provided by:
Framer B.V.
Rozengracht 207B
1016 LZ Amsterdam
The Netherlands
When the website is accessed, technical data required to deliver and protect the website may be processed. Depending on the request and device configuration, this may include:
IP address
date and time of access
requested page or file
referring website
browser type and version
device and operating-system information
connection and transmission information
technical security and abuse-prevention information
This processing is necessary to provide the website, maintain its security and stability, detect technical problems and prevent misuse.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are the secure, reliable and efficient operation of this website and the protection of our systems against misuse.
Framer processes personal data on our behalf as a processor in accordance with Article 28 GDPR.
Technical data is deleted or anonymised when it is no longer required for operation, security or troubleshooting, unless further retention is necessary to investigate a security incident or comply with a legal obligation.
4. Framer Analytics
We use the built-in analytics functionality provided by Framer to obtain aggregated information about the use and performance of the website.
According to Framer, its built-in analytics does not use cookies or persistent identifiers and does not store information that identifies an individual visitor. Framer uses a daily rotating technical value to calculate aggregated daily visitor statistics.
We use these statistics to understand general website usage, identify technical problems and improve the structure and content of the website.
The legal basis for any technical processing required to produce these statistics is Article 6(1)(f) GDPR. Our legitimate interest is the analysis and improvement of our website.
We do not currently use Google Analytics, Meta Pixel, LinkedIn Insight Tag or comparable advertising or cross-website tracking tools.
5. Contact Form and Email Enquiries
Visitors may contact us through the contact form on this website or by email.
We may process the following information:
name
email address
company or organisation
type or subject of the enquiry
message content
any other information voluntarily provided
We process this information to:
respond to the enquiry
communicate regarding possible partnerships or business cooperation
prepare or perform pre-contractual measures
manage ongoing business communication
document relevant correspondence
Where an enquiry concerns a possible contract or measures requested before entering into a contract, the legal basis is Article 6(1)(b) GDPR.
For general business, partnership or stakeholder enquiries, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is responding to enquiries and developing legitimate business relationships.
Where processing is necessary to comply with a legal obligation, the legal basis is Article 6(1)(c) GDPR.
Contact-form submissions may be processed by Framer as our technical service provider. They may also be transmitted to and processed by our email and IT service providers.
Framer’s form security and spam-protection functions may process technical information such as verification information, browser or device characteristics, interaction patterns and network signals. This processing serves to detect automated submissions, fraud and misuse. The legal basis is Article 6(1)(f) GDPR.
Providing information through the contact form is voluntary. However, without the information required to identify and respond to the enquiry, we may be unable to process it.
We delete enquiry data when the matter has been conclusively resolved and there is no continuing contractual, legal or legitimate operational reason for storage. Where correspondence is relevant to a contractual relationship, business transaction or statutory retention obligation, it may be retained for the applicable statutory period.
6. Cookies and Similar Technologies
We do not currently use advertising, behavioural-tracking or consent-requiring analytics cookies on this website.
Technically necessary storage or access may be used where required to:
provide a function expressly requested by the visitor
maintain website security
prevent abusive or automated form submissions
ensure the reliable operation of the website
Such technically necessary functions are used in accordance with Section 25(2) TDDDG.
Should we introduce non-essential cookies, advertising technologies or additional analytics services in the future, they will not be activated before any legally required consent has been obtained. This Privacy Policy will then be updated accordingly.
7. Recipients of Personal Data
Personal data is accessible only where necessary for the purposes described in this Privacy Policy.
Possible recipient categories include:
authorised Smartporters personnel
Framer B.V. as website-hosting and form-processing provider
IT, hosting and email service providers
professional advisers where legally or operationally necessary
authorities, courts or other public bodies where disclosure is legally required
We do not sell visitors’ personal data.
Service providers acting on our behalf are contractually required to process personal data only in accordance with our instructions and applicable data-protection law.
8. Processing Outside the European Economic Area
Framer and its approved subprocessors may process personal data in countries outside the European Economic Area.
Where personal data is transferred to a country outside the European Economic Area, the transfer must be based on an applicable adequacy decision or another legally recognised safeguard. This may include the European Commission’s Standard Contractual Clauses.
Additional safeguards are applied where required by applicable data-protection law.
9. Data Retention
We retain personal data only for as long as necessary for the purpose for which it was collected.
The applicable retention period is determined by:
the duration and nature of the enquiry
whether a contractual or business relationship develops
legitimate documentation and defence requirements
technical security requirements
statutory commercial, tax or other retention obligations
applicable limitation periods
When personal data is no longer required and no legal basis for continued storage exists, it is deleted or anonymised.
10. Rights of Data Subjects
Subject to the applicable legal requirements, data subjects have the right to:
obtain information about whether and how their personal data is processed
receive a copy of their personal data
have inaccurate personal data corrected
request the completion of incomplete personal data
request deletion of personal data
request restriction of processing
receive personal data in a structured, commonly used and machine-readable format
have personal data transmitted to another controller where technically feasible
object to certain processing
withdraw consent at any time where processing is based on consent
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Requests may be sent to:
We may request appropriate information to verify the identity of the person making the request.
11. Right to Object
Where personal data is processed on the basis of Article 6(1)(f) GDPR, data subjects have the right to object to the processing at any time on grounds relating to their particular situation.
Following an objection, we will no longer process the relevant personal data unless we demonstrate compelling legitimate grounds that override the interests, rights and freedoms of the data subject, or the processing is required for the establishment, exercise or defence of legal claims.
12. Right to Lodge a Complaint
Data subjects have the right to lodge a complaint with a data-protection supervisory authority.
The supervisory authority responsible for organisations established in North Rhine-Westphalia is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2–4
40213 Düsseldorf
Germany
Telephone: +49 211 38424-0
Email: poststelle@ldi.nrw.de
The right to lodge a complaint is without prejudice to any other administrative or judicial remedy. The authority’s current contact details are confirmed by the LDI NRW. (LDI NRW)
13. Security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, accidental loss or destruction.
No method of internet transmission or electronic storage can guarantee absolute security. We therefore review and adapt our security measures where appropriate.
14. Automated Decision-Making
We do not use personal data collected through this website for automated decision-making or profiling that produces legal or similarly significant effects.
15. Changes to this Privacy Policy
We may update this Privacy Policy where the website, its technical services or applicable legal requirements change.
The version published on this website at the time of access applies.