SHOP NOW

Phone

+49 2874 942150

Email

[email protected]

Address

Im Geer 15, 46419 Isselburg, Nordrhein-Westfalen, Germany

Privacy Policy

Effective Date: October 26, 2026

1. Introduction

HR Direkt Verkauf GmbH, with its registered address at Im Geer 15, 46419 Isselburg, Nordrhein-Westfalen, Germany, contact phone number +49 2874 942150, and contact email address [email protected] (hereafter referred to as “we”, “us”, or “our”), operates the e-commerce website www.hrdirektverkauf.com, which offers a curated range of desktop organizers, decorative trays, coasters, and desktop lighting products designed to create warm, functional, and budget-friendly workspace solutions for our customers.

We are fully committed to protecting the personal data and online privacy of every visitor and customer who interacts with our platform. This Privacy Policy is formulated in full compliance with the EU General Data Protection Regulation (GDPR, formally known as DSGVO in German), the German Federal Data Protection Act (BDSG), the German Telecommunications, Digital Services and Data Protection Act (TDDDG), and all applicable German and European data protection regulations. This document clearly explains how we collect, process, store, transfer, and protect your personal data, as well as the full set of rights you hold as a data subject under relevant laws. All our data processing activities follow the core GDPR principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, confidentiality, and full accountability.

2. Data Controller Information

For all personal data processing activities conducted through the www.hrdirektverkauf.com platform, the data controller responsible for your data is:
‌HR Direkt Verkauf GmbH‌
Im Geer 15, 46419 Isselburg, Nordrhein-Westfalen, Germany
Contact Phone: +49 2874 942150
Contact Email: [email protected]

You may reach out to us at any time regarding any questions, concerns, or requests related to your personal data and this Privacy Policy.

3. Definition of Personal Data

Under this Privacy Policy and applicable legal regulations, “personal data” refers to any information relating to an identified or identifiable natural person (you, as the data subject). This definition covers not only obvious personal identifiers including your full name, residential address, payment details, and contact email, but also technical identifiers such as your device IP address, browser characteristics, cookie identifiers, and other online markers that can be linked back to your unique identity when you visit our website.

4. Categories of Personal Data We Collect and Legal Basis for Processing

We only collect personal data that is relevant, limited to the specific purposes for which it is processed, and strictly compliant with legal requirements. We collect your personal data through two primary channels: information you voluntarily submit to us, and information we automatically collect when you interact with our website.

4.1 Information You Voluntarily Disclose

When you browse our store, create a customer account, place an order, subscribe to our newsletter, contact our customer support team, or submit inquiry forms on our website, you may voluntarily provide us with the following categories of personal data:

  • Full name, billing address, shipping address, and contact phone number, which we use to process your purchase, verify your identity, complete order fulfillment, arrange delivery, and resolve any post-sales issues related to your order. The legal basis for this processing is Article 6(1)(b) of the GDPR, as such data processing is strictly necessary to perform the sales contract we enter into with you when you place an order on our platform.
  • Your email address, which we use to send you order confirmation updates, shipping status notifications, respond to your support inquiries, and if you have given explicit, opt-in consent, send you occasional newsletters about new product launches, exclusive promotional offers, and desktop styling tips for our home and workspace decor items. The processing of your email for newsletter marketing is based on Article 6(1)(a) of the GDPR, with your explicit, freely given, specific, and informed consent. You retain the full right to withdraw your consent to receive marketing emails at any time, with immediate effect, by clicking the unsubscribe link included in every marketing email we send, or by sending us a notification via our contact email.
  • Payment-related information, including your bank account details, credit card information, or digital payment service identifiers. We do not store complete sensitive payment data on our own servers: all payment processing is conducted through certified, PCI DSS-compliant third-party payment service providers, and we only retain the necessary transaction confirmation information to verify the successful completion of your payment and resolve any payment-related disputes. This processing is also based on Article 6(1)(b) of the GDPR, to fulfill the contractual obligation of completing your purchase transaction.

4.2 Information We Automatically Collect When You Visit Our Website

When you access and browse www.hrdirektverkauf.com, our system automatically collects certain technical data through secure server logs and compliant tracking technologies, which includes:

  • Your device IP address, browser type and version, operating system information, time zone setting, browser plugin details, website access timestamps, page view records, click stream navigation data, and other technical information about your interaction with our website. We process this data to maintain the security and stability of our website, diagnose technical errors, prevent unauthorized access or malicious cyberattacks, and optimize the performance of our platform to ensure our product pages load quickly and display correctly on all your devices. The legal basis for this processing is Article 6(1)(f) of the GDPR, as we have a legitimate interest in protecting the normal, secure operation of our e-commerce platform and providing a smooth browsing experience for all our customers.
  • Cookie and tracking technology data, processed in full compliance with Section 25 of the TDDDG:
    1. ‌Technically necessary cookies‌: These are cookies that are strictly required for our website to function properly, including cookies that retain your shopping cart contents while you browse our product catalog of coasters, decorative trays, and desktop lighting items, and cookies that remember your login status when you access your customer account. We do not need your explicit consent to deploy these necessary cookies, as they are processed under Article 6(1)(b) of the GDPR to perform our service contract with you, and in line with Section 25(2)(2) of the TDDDG.
    2. ‌Non-essential cookies‌: These include analytics cookies that help us understand how visitors interact with our product pages, and marketing cookies that help us present relevant product recommendations to interested users. We will never deploy these non-essential cookies on your device before we receive your explicit, freely given opt-in consent. We do not use pre-ticked consent checkboxes, and we will never seek to obtain your consent through default browser settings, scrolling behavior, or continued browsing of our website. The “Reject All” consent option is presented to you with equal visibility and accessibility as the “Accept All” option on our cookie consent management platform. All processing of non-essential cookie data is based on your explicit consent under Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG.

5. Purposes of Personal Data Processing

We will only use your personal data for the clear, explicitly stated purposes that we have notified you of at the time of collection, and we will never process your data in a way that is incompatible with these original purposes. The core permitted purposes of our data processing activities are as follows:

  1. ‌Order and Contract Fulfillment‌: To process your placed order, arrange the shipment of your purchased desktop accessories, send you real-time updates on your order status, handle returns and refunds in line with our published Refund and Returns Policy, and provide you with full after-sales support for the products you purchase from us.
  2. ‌Website Functionality Optimization‌: To troubleshoot technical errors on our platform, test new features for our product catalog pages, improve the loading speed of our product images, and create a more intuitive, user-friendly browsing experience that makes it easy for you to find the budget-friendly desktop organizers, silicone coasters, decorative resin trays, or table lighting products you are looking for.
  3. ‌Security and Fraud Prevention‌: To protect our website, our customers, and our payment processing systems from unauthorized access, data breaches, fraudulent transaction attempts, and other malicious cyber activities, ensuring that every customer can shop on our platform with full peace of mind.
  4. ‌Regulatory Compliance‌: To comply with our legal obligations under German and EU tax laws, commercial transaction record-keeping requirements, consumer protection regulations, and data protection laws, retaining necessary transaction records for the legally required duration as specified by relevant regulations.
  5. ‌Customer Service Communication‌: To respond to your questions, feedback, and support requests submitted via our contact form, email, or phone line, resolve disputes, and address any concerns you may have about our products or services.
  6. ‌Optional Marketing Communications‌: If you have explicitly opted in to receive our newsletter, we will send you occasional updates about new product launches, limited-time promotional campaigns, and practical home workspace styling tips that match your demonstrated interest in our desktop and tabletop decor products. You may opt out of these marketing communications at any time, free of charge.

6. Third-Party Data Processors and Data Sharing

We will never sell, rent, or trade your personal data to unrelated third parties for commercial purposes without your explicit, separate consent. We only share your personal data with carefully selected third-party service providers who act as our data processors, under the strict conditions of a formal Auftragsverarbeitungsvertrag (Data Processing Agreement) signed in line with Article 28 of the GDPR, to ensure that all these third parties also fully comply with all applicable data protection regulations, and implement strict security measures to protect your personal data. The categories of third-party data processors we may share your necessary personal data with include:

  • Certified logistics and shipping service providers, who only receive your full name, shipping address, and contact phone number for the sole purpose of delivering your ordered products to the address you specified.
  • PCI DSS compliant payment service providers, who process your payment data in line with global strict payment security standards, to complete your purchase transaction.
  • Cloud hosting and website operation service providers, who host our website servers and store encrypted copies of our website operation data, under strict data protection obligations that prohibit them from accessing or using your personal data for any purposes other than providing the hosting services we have contracted for.
  • Website analytics service providers, who we only authorize to process your data in anonymized or pseudonymized form after you have given your explicit consent to non-essential analytics cookies, to help us understand general website usage trends without identifying your specific personal identity.

In the limited scenario where we need to transfer your personal data to a third country outside of the European Economic Area (EEA), we will strictly ensure that such data transfer is fully compliant with GDPR requirements, by implementing appropriate safeguards such as using the standard data protection clauses formally approved by the European Commission, to guarantee that your personal data receives a level of protection equivalent to the standards required under European data protection law. If you wish to obtain a copy of these relevant safeguards for cross-border data transfers, you may contact us at any time using the contact information provided in Section 2 of this Privacy Policy.

7. Your Rights as a Data Subject

Under the GDPR and applicable German data protection laws, you hold a comprehensive set of legally enforceable rights over your personal data, which we will always fully respect and support. These rights include:

  1. ‌Right to Transparent Information / Right to be Informed‌: You have the right to receive clear, easily understandable, fully transparent information about how we process your personal data, which we aim to provide in full through this Privacy Policy, written in plain, non-technical language without hidden ambiguous clauses.
  2. ‌Right of Access‌: You have the right to request a free copy of all the personal data we hold about you, as well as detailed information about the purposes of processing, the categories of data involved, the recipients of the data, the planned storage duration, and all other relevant information about your personal data processing activities.
  3. ‌Right to Rectification‌: If you find that any personal data we hold about you is inaccurate or incomplete, you have the right to request that we immediately correct the inaccurate details or supplement the incomplete information, free of charge.
  4. ‌Right to Erasure (Right to be Forgotten)‌: Under specific conditions stipulated by law, you have the right to request that we delete all your personal data stored on our systems, without undue delay. This right applies when your personal data is no longer necessary for the original purposes for which we collected it, when you withdraw your consent for the data processing that was based on your consent, or when your data has been processed in violation of applicable legal regulations. We will only retain your data after an erasure request if we are legally required to do so for tax, commercial record-keeping, or other legally mandatory purposes.
  5. ‌Right to Restriction of Processing‌: You have the right to request that we restrict the processing of your personal data in scenarios where you contest the accuracy of the data, where the processing is unlawful but you oppose the erasure of the data, where we no longer need the data for our processing purposes but you require the data for the establishment, exercise, or defense of legal claims, or where you have objected to our legitimate interest based data processing, pending the verification of our legitimate grounds for processing.
  6. ‌Right to Data Portability‌: You have the right to receive all the personal data that you have provided to us, in a structured, commonly used, machine-readable format, and you have the right to transmit that data to another data controller without any obstruction from our side, for all data processing activities that are based on your consent or on a contract with you.
  7. ‌Right to Object‌: You have the right to object, at any time, to any processing of your personal data that is based on our legitimate interests as stipulated under Article 6(1)(f) of the GDPR. If you raise such an objection, we will immediately cease the relevant data processing activities, unless we can demonstrate compelling legitimate grounds for the processing that override your rights, freedoms, and interests, or unless the processing is necessary for the establishment, exercise, or defense of legal claims. You also have the absolute right to object at no cost to any processing of your personal data for direct marketing purposes, and we will immediately stop all marketing communications to you after you submit this objection.
  8. ‌Right to Withdraw Consent‌: You have the right to fully withdraw any consent you previously provided to us for processing your personal data, at any time, with future effect. The withdrawal of your consent will not affect the lawfulness of any data processing activities we completed based on your consent before you submitted the withdrawal request.
  9. ‌Right to Lodge a Complaint with a Supervisory Authority‌: If you believe that our processing of your personal data has violated applicable data protection regulations, you have the full right to submit a complaint to the competent data protection supervisory authority in the German federal state of Nordrhein-Westfalen, or to any other EU member state data protection authority that is relevant to your situation.

You may submit any request to exercise the above rights to us at any time, by sending an email to [email protected], or by sending a written request to our registered mailing address. We will respond to your request without undue delay, and at the latest within one month of the date we receive your request. We will not charge you any fees for submitting and processing your legitimate request, unless your request is clearly manifestly unfounded, excessive, or repetitive, in which case we may charge a reasonable administrative fee in line with legal regulations. Before we process your request, we may need to verify your identity to ensure that the request is submitted by the actual data subject, to protect your personal data from unauthorized access by third parties.

8. Data Storage Duration

We will only store your personal data for as long as it is strictly necessary to fulfill the exact purposes for which we originally collected the data. For personal data processed to complete your purchase contract, we will retain the relevant data for the full duration required to fulfill the contract, plus the legally mandatory commercial and tax record retention period specified under German law, which is typically 10 years for official transaction records. For personal data processed based on your explicit consent, we will retain the relevant data until you withdraw your consent, after which we will securely delete the related data without undue delay. For the technical log data that we collect to ensure the security of our website, we will store this data for a maximum period of 30 days, after which it will be automatically anonymized or permanently deleted. Once the original purpose for processing your personal data is fulfilled, and there is no remaining legal obligation that requires us to continue retaining the data, we will permanently delete or anonymize your personal data in a secure, irreversible manner.

9. Data Security Measures

In full compliance with Article 32 of the GDPR, we have implemented comprehensive technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or unlawful processing. These security measures include, but are not limited to: full end-to-end HTTPS encryption for all data transmitted between your browser and our website servers, encryption of all stored sensitive personal data including payment and address information, regular security updates and vulnerability testing of our website systems, strict access control policies that limit access to your personal data only to the small number of authorized staff members who need to process the data to fulfill their work duties, regular staff data protection training, and a documented data breach response plan that requires us to notify the competent data protection supervisory authority of any personal data breach within 72 hours after we become aware of the breach, as required by GDPR regulations. If a personal data breach poses a high risk to your rights and freedoms as a natural person, we will also notify you directly of the breach without undue delay, in full compliance with legal requirements.

10. Minor’s Data Protection

Our e-commerce website www.hrdirektverkauf.com is a general consumer platform, and we do not intentionally collect personal data from any children under the age of 16. If you are a parent or legal guardian and you become aware that a child under your guardianship has provided us with their personal data without appropriate consent, please contact us immediately at [email protected]. We will take immediate steps to permanently delete all such personal data from our servers as soon as we are notified.

11. Updates to This Privacy Policy

We may occasionally update and revise this Privacy Policy in the future, to reflect changes to our website business operations, new legal regulatory requirements, or updates to our data processing practices. When we make material changes to this Privacy Policy, we will clearly post the updated version on the footer section of our www.hrdirektverkauf.com website, update the effective date at the top of the document, and take reasonable measures to notify all our registered customers of the key changes to the policy. We encourage you to review this Privacy Policy periodically whenever you visit our website, to stay fully informed of how we protect your personal data. Any revised version of this Privacy Policy will take effect on the effective date specified in the updated document.

12. Contact Information for Inquiries

If you have any questions, comments, or concerns about this Privacy Policy, our data protection practices, or wish to exercise any of your data subject rights outlined above, please do not hesitate to contact us at:
HR Direkt Verkauf GmbH
Im Geer 15, 46419 Isselburg, Nordrhein-Westfalen, Germany
Phone: +49 2874 942150
Email: [email protected]

We will respond to your inquiries as quickly as possible, within the legally required time frame, to address all your concerns about your personal data protection.