Privacy Policy

The controller responsible for the processing of personal data in connection with this website and the business communications described below is:

Alexander Bach-Hatjievangelu and Mouwad Idrissou, Dachau Commodities, Herzogstraße 89, 80796 Munich, Germany

Email: info@dachaucommodities.com. Telephone: +49 89 12503336.

Dachau Commodities is currently operated as a business and trading project by the individual named above.

We process personal data where necessary to operate this website, respond to business inquiries, conduct commercial communications, assess potential business relationships and comply with applicable legal obligations.

Personal data may include names, professional contact details, company affiliations, communication content and technical information generated when accessing this website.

Depending on the circumstances, the legal bases for processing include: Article 6(1)(b) GDPR, where processing is necessary for a contract or pre-contractual measures involving the data subject; Article 6(1)(f) GDPR, where processing is necessary for legitimate interests, including operating the website and maintaining relevant business communications; Article 6(1)(c) GDPR, where processing is required to comply with legal obligations; and Article 6(1)(a) GDPR, where a specific processing activity is based on consent.

Where we rely on legitimate interests, these include operating a secure website, responding to business inquiries, maintaining professional communications and assessing potential commercial transactions.

This website is created and hosted using the Onepage website platform.

When visitors access the website, technical information may be processed to deliver the requested pages and maintain website functionality and security. Depending on the technical configuration, this may include the IP address, date and time of access, requested pages and resources, browser type and version, operating system, referrer information where transmitted, and technical request and response information.

The purpose of this processing is to provide the website, maintain its functionality, identify technical errors and support system security. The legal basis is Article 6(1)(f) GDPR.

Technical information is retained only for the period necessary for these purposes, according to the applicable hosting arrangements and retention requirements. The precise hosting infrastructure and server-log retention criteria are determined by the relevant provider information and contractual documentation.

We use business email accounts hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany.

When you contact us by email, or when we correspond with you regarding business matters, we may process your name and professional contact details, email address, company affiliation, the subject and content of the correspondence, attachments and the relevant communication history.

Processing takes place for purposes such as responding to inquiries, evaluating potential commercial relationships, discussing commodity sourcing or trading opportunities and managing business correspondence.

The legal basis is Article 6(1)(b) GDPR where applicable to contractual or pre-contractual measures involving the data subject. For other legitimate business communications, particularly communications with representatives of companies, the legal basis is Article 6(1)(f) GDPR. Where retention is necessary to comply with statutory obligations, Article 6(1)(c) GDPR may also apply.

Emails are retained for as long as necessary for the relevant business purpose and any applicable legal retention obligations.

For business telephone communications, we use the services of Gamma Placetel GmbH, Lothringer Straße 56, 50677 Cologne, Germany.

When you contact us by telephone, telephone connection data such as the calling number, date and time of the call may be processed. Information voluntarily provided during a telephone conversation may also be processed where necessary to respond to the inquiry.

If a caller leaves a voicemail message, the message and related contact information may be stored and made available through the telephone service. Voicemail notifications may also be delivered to our business email account.

The purposes are to manage incoming business calls, process inquiries and maintain relevant commercial communications. Processing is based on Article 6(1)(b) or Article 6(1)(f) GDPR, depending on the circumstances.

Where applicable, information is retained for as long as necessary to process the inquiry, subject to legal retention obligations and the provider's applicable technical arrangements.

Visitors may voluntarily contact us through an external WhatsApp link. The WhatsApp service is provided in the European Region by WhatsApp Ireland Limited.

The website does not intentionally embed a WhatsApp chat widget or automatically load WhatsApp communication functionality. When a visitor clicks the WhatsApp link, they may be redirected to WhatsApp or a WhatsApp-related service. The processing of data by WhatsApp is governed by the provider's own privacy information.

When you communicate with us through WhatsApp, we may process your telephone number, name, messages and information you voluntarily provide for the purpose of responding to your inquiry. The relevant legal basis is Article 6(1)(b) or Article 6(1)(f) GDPR, depending on the circumstances.

WhatsApp may process personal data using international infrastructure, including transfers outside the European Economic Area, under its applicable privacy arrangements.

Communication through WhatsApp is voluntary. You may alternatively contact us by email or telephone.

The website currently does not operate a server-side contact form for submitting inquiries. Commercial inquiries are submitted through email links or the other contact channels described in this policy.

If an online inquiry form is introduced in the future, the privacy information will be updated to reflect the actual data-processing arrangements before the form is activated.

The website is currently configured without the following optional analytics or advertising integrations: Google Tag, Facebook Pixel, TikTok Pixel, LinkedIn Insight Tag, Hotjar and Onepage Analytics. Google Maps and Google reCAPTCHA are also disabled in the Onepage integration settings. We do not currently intend to use advertising or analytics tracking technologies.

Technically necessary storage or access technologies may be used where required to provide the website and its requested functions. Where such technologies are strictly necessary, consent is not required under Section 25(2) of the German Telecommunications and Digital Services Data Protection Act (TDDDG).

If optional technologies requiring consent are introduced, they will be activated only where the applicable legal requirements, including valid consent where necessary, have been satisfied.

Personal data may be processed by technical and communications service providers to the extent necessary for the services described in this policy. These may include Onepage, for website hosting and related technical operations; ALL-INKL.COM, for business email hosting; and Gamma Placetel GmbH, for business telephone and voicemail services.

Where appropriate, processing is governed by applicable contractual and data-protection arrangements. WhatsApp operates under its own applicable privacy framework when users voluntarily access the service.

Personal data may also be disclosed where necessary to comply with applicable legal obligations or lawful requests.

Some third-party communication services may process personal data outside the European Economic Area. In particular, the use of WhatsApp may involve international data processing under the provider's privacy framework.

Where personal data is transferred outside the European Economic Area in connection with our own processing activities, applicable GDPR requirements and appropriate safeguards must be considered.

Further information about relevant third-party processing is available through the providers' privacy policies.

Personal data is retained only for as long as necessary for the purpose for which it was processed or as required by applicable law.

Relevant factors include the nature and duration of an inquiry or commercial relationship, the need to document business communications, applicable contractual obligations, statutory retention requirements, the resolution of disputes or legal claims, and relevant technical service-provider arrangements.

Where data is no longer necessary and no legal grounds for retention remain, it is deleted in accordance with the applicable deletion procedures.

Subject to the applicable legal requirements, you have the right to obtain information about the processing of your personal data (Article 15 GDPR); to request rectification of inaccurate personal data (Article 16); to request erasure (Article 17); to request restriction of processing (Article 18); to receive applicable personal data in a portable format (Article 20); to object to certain processing activities (Article 21); and to withdraw consent at any time where processing is based on consent under Article 6(1)(a) GDPR.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. Where processing is based on legitimate interests, you may object on grounds relating to your particular situation, subject to the applicable statutory requirements.

You also have the right to lodge a complaint with a competent data protection supervisory authority. For private-sector data processing in Bavaria, the relevant supervisory authority is generally the Bavarian State Office for Data Protection Supervision (BayLDA).

For questions or requests regarding your personal data, please contact info@dachaucommodities.com.

Providing personal data is not generally required merely to visit this website. However, certain contact information may be necessary for us to respond to your inquiry or carry out requested pre-contractual communications. Without sufficient contact information, we may be unable to respond to a request.

We do not currently use automated decision-making, including profiling, that produces legal effects or similarly significant effects on visitors in connection with this website.

We may update this Privacy Policy where necessary to reflect changes in our business activities, technical website configuration, service providers or applicable legal requirements. The current version will be made available on this page.