1. General Information

The protection of your personal data is important to us. This website processes personal data exclusively in accordance with the applicable data protection regulations, in particular the EU General Data Protection Regulation (GDPR).

2. Controller

3. Collection of Personal Data

When you contact us via contact forms, email, WhatsApp or quote requests, the following data may be collected:

  • Name
  • Company name
  • Email address
  • Phone number
  • Shipment information
  • Uploaded documents

This data is processed exclusively for preparing quotations, logistics coordination, customer communication and operational purposes.

4. Purpose of Data Processing

Your data is processed for:

  • Quote requests
  • Shipment coordination
  • Customs and logistics documentation
  • Communication regarding our services
  • Invoicing and operational handling

5. Disclosure of Data

Where operationally necessary, personal data may be shared with the following parties:

  • Shipping lines
  • Airlines
  • Transport service providers
  • Customs authorities
  • Logistics partners

6. Storage & Security

We use digital tools and cloud-based platforms to securely manage operational and customer-specific data. Appropriate technical and organisational measures are in place to protect stored information.

7. Login Portal

We operate a password-protected login portal for business customers. Access is granted by invitation only. In the portal we process:

  • name, email address and company affiliation of the user account
  • shipment, invoice and document data of your company
  • uploaded documents and messages to our team
  • technical sign-in data (e.g. time of last sign-in)

If you request access via the 'Request access' form, we store your details in order to process the request. If no access is set up, we delete them once the request has been completed.

Legal basis is Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures).

Hosting: Portal data is stored with Supabase (Supabase Inc.) on servers in Frankfurt am Main (EU). Supabase processes the data solely on our behalf and on our instructions under a data processing agreement pursuant to Art. 28 GDPR. As Supabase Inc. is based in the USA, access from a third country for maintenance and support cannot be entirely ruled out; this is covered by the EU Standard Contractual Clauses. More information: supabase.com/privacy

Retention: Your data is stored for as long as your customer account exists. After the account is deleted, it is erased unless statutory retention obligations apply (e.g. 6 or 10 years for commercial and tax records under German law).

Sign-in in the browser: To keep you signed in, the portal stores a session token in your browser's local storage. This is strictly necessary (Section 25(2) No. 2 TDDDG) and is deleted when you sign out. See our Cookie Policy for details.

8. Cookies & Analytics Tools

This website may use cookies and analytics tools to improve the usability and performance of the website. Users can disable cookies via their browser settings.

For detailed information, please see our Cookie Policy; you can also adjust or withdraw your selection at any time via the 'Cookie Settings' button in the footer.

9. Your Rights

Under the GDPR, you have the right to:

  • Access to your stored data
  • Rectification of inaccurate data
  • Erasure of your data
  • Restriction of processing
  • Objection to processing
  • Data portability

Requests can be sent to the following email address: info@hfs-global.de

10. Contact

For any questions relating to data protection, please contact us at: info@hfs-global.de