Privacy notice
What happens to personal data when you visit this website or send us an enquiry, under the EU General Data Protection Regulation (GDPR).
1. Controller
C & E Handels GmbH, Toyota-Allee 35, 50858 Köln, Germany, represented by Anna Saveleva. Email: sales@cehandels.com.
We have not appointed a data protection officer; questions about data protection go to the address above.
2. In short
No cookies are set here, and there is no analytics, advertising or tracking. Every font and picture comes from this website itself, so your browser contacts no other provider. Personal data are processed only to deliver the pages, to keep them secure and to answer enquiries.
3. Visiting the website
The pages are delivered through the network of Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, which also protects the website against attacks. To deliver a page, Cloudflare and our web server process the connection data that comes with every request: your IP address, the time of the request, the page asked for, the page you came from, browser and operating system, the response status and the number of bytes sent.
Our web server writes these data to an access log, which is used to keep the service running and to find faults and misuse. The log files are deleted automatically after 90 days.
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is to deliver the website reliably and securely.
4. Enquiry form and email
When you send the enquiry form, we receive your company name, contact person, work email, delivery country, product line and quantity. Optional details include your phone or WhatsApp number, model, capacity or memory, colour, condition grade and notes. The form also sends the page it was sent from and the time it took to fill in, which helps to filter automated spam.
The form is processed by a Cloudflare Worker that passes the enquiry on as an email to our business mailbox through Cloudflare Email Routing. Nothing from the form is stored on the website. Two short-lived records exist only to prevent misuse: your IP address is used to count requests for one minute, and a hash value of the enquiry is kept for 30 minutes so that the same enquiry sent twice is delivered only once. Neither can be read back as your details.
If you write to us by email, we receive your address and the content of your message.
We use these data to answer your enquiry and prepare a quotation, to check before a first order that your company is a registered business with a valid VAT number, to arrange delivery and, if you place an order, to carry out the contract. Legal basis: Art. 6(1)(b) GDPR for steps taken at your request before a contract and for the contract itself, and Art. 6(1)(f) GDPR for business correspondence with you as a contact person of a company and for the customer check; our legitimate interest is to deal only with genuine business customers. Screening against EU sanctions lists is a legal obligation (Art. 6(1)(c) GDPR).
We never sell or rent your data, and we do not use them for advertising.
Giving us these details is voluntary; an enquiry that lacks the required fields cannot be answered.
5. Recipients and transfers outside the EU
Cloudflare, Inc. acts as our processor under a data processing agreement. Data may be processed in the USA. Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision (Art. 45 GDPR); the standard contractual clauses in Cloudflare's data processing agreement apply as well.
If an order follows, we pass on only what each party needs to carry it out: delivery details to the freight carrier and, for exports, to the customs broker, and payment details to our bank. These recipients are bound to confidentiality. Apart from that, your data go to no other recipient unless a statute compels us to hand them over.
6. Storage periods
| Data | Kept for |
|---|---|
| Access log of our web server | 90 days, then deleted automatically |
| Request count per IP address | one minute |
| Hash value of an enquiry | 30 minutes |
| Enquiries and correspondence | as long as needed to answer the enquiry or for a resulting business relationship; longer only where commercial, tax or export control law requires it (§ 257 HGB, § 147 AO, Außenwirtschaftsverordnung) |
7. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21). To use these rights, contact us at the address in section 1.
You can also complain to a data protection supervisory authority (Art. 77 GDPR), for example the one responsible for us: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.
8. No automated decisions
We do not make decisions based solely on automated processing, and we do not create profiles.
Version: November 2026