Privacy policy

Translation notice: This English version is provided for convenience. In the event of any discrepancy, the German version prevails.

Controller

Hakuna Kollektiv GmbH
Kaiserin-Augusta-Allee 34
10589 Berlin, Germany
represented by Managing Director Daniel Tran-Thanh
Email: hello@stand-builders-hannover.com

For the Stand Builders Hannover brand, contact us at Günther-Wagner-Allee 13, 30177 Hannover, phone +49 175 5316182.

General information

We take the protection of your personal data seriously and treat it confidentially and in accordance with statutory data protection requirements and this privacy policy. Personal data is any information that can identify you personally.

Collection and storage of personal data

When you visit the website, the following data is processed: IP address, date and time of access, browser type and version, operating system, referrer URL and pages viewed. The legal basis is Article 6(1)(f) GDPR.

When you contact us through the form or by email, we process your name, company name, email address, optional phone number, trade fair, stand size and the content of your enquiry. You may also attach files such as briefs, hall plans or designs; their processing is described under “File attachments” below. The legal basis is Article 6(1)(b) GDPR for enquiries relating to a contract and otherwise Article 6(1)(f) GDPR. The data is deleted once it is no longer needed to process the enquiry and statutory retention obligations no longer apply.

Hosting and website platform

This website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. Server log files are processed there when pages are accessed. Privacy policy: vercel.com/legal/privacy-policy

Contact form

The contact form is not operated by a third party. Your details are sent to a service we operate ourselves on the hosting platform named above; processing takes place in data centres in Frankfurt am Main. The service checks the enquiry for automated submissions and then forwards it to us by email. You also receive a confirmation at the address you provide.

To prevent automated submissions, we check whether a field invisible to human users has been completed and how much time passes between opening and submitting the form. No further behavioural analysis takes place.

File attachments

If you attach files, they are transferred directly from your browser to file storage rather than through the service described above. The storage provider is Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. Files are stored in data centres in Frankfurt am Main. Privacy policy: vercel.com/legal/privacy-policy

The files are not publicly accessible. The email sent to us contains a signed link rather than a direct storage address; the link expires after 30 days. The files themselves are not deleted automatically. We remove them when they are no longer required to handle your enquiry. The legal basis is Article 6(1)(b) GDPR for enquiries relating to a contract and otherwise Article 6(1)(f) GDPR.

Email communication

We use MXroute for email hosting and the processing of incoming and outgoing business email. Provider: MXroute, LLC, USA. Privacy policy: mxroute.com/policy.html

Transfers to third countries

The service providers named above are based in the United States. Although the website, form enquiries and file attachments are processed or stored in data centres in Frankfurt am Main, access from the United States cannot be ruled out. Transfers of personal data to third countries are based on appropriate safeguards under Articles 44 et seq. GDPR, in particular standard contractual clauses or, where the provider is certified, the EU–US Data Privacy Framework.

Cookies and consent management

This website does not use cookies that require consent. No analytics, advertising or recognition services are used, so a consent banner is not currently required. Fonts are served locally and no connection to Google Fonts is made. Map services are not embedded. If services requiring consent are added in future, they will load only after your express consent. The legal basis would then be Article 6(1)(a) GDPR in conjunction with Section 25 TDDDG, and this policy will be updated beforehand.

Audience measurement

This website does not measure reach or usage. If such measurement is introduced in future, processing will take place only after consent under Article 6(1)(a) GDPR.

Disclosure of data

Personal data is disclosed only if you have consented, if disclosure is required to perform a contract, or if there is a legal obligation.

Retention period

Personal data is stored only for as long as required for the relevant purpose. Statutory retention duties remain unaffected. Uploaded attachments are not deleted automatically; we remove them when their purpose no longer applies.

Your rights

Under Articles 15 to 21 GDPR, you have rights of access, rectification, erasure, restriction of processing, data portability and objection to processing.

Right to lodge a complaint

You have the right to lodge a complaint with a competent data protection supervisory authority. For the controller’s registered office, this is the Berlin Commissioner for Data Protection and Freedom of Information.

Data security

We take appropriate technical and organisational measures to protect your data against manipulation, loss, destruction and unauthorised access. Data sent between your browser and the server is encrypted.

Changes to this privacy policy

We update this privacy policy if the legal position or the services used on this website change.