Where we got your address

First things first

You received post from us without knowing us. This page tells you where we got your address, what we hold, and how one sentence from you ends it. It is our notice under Art. 14 GDPR.

Where the address came from

From the imprint on your own website and from publicly accessible directories. We looked it up ourselves.

We bought no address list, compiled nothing from social networks, and took no data from third parties.

What is stored

Your firm’s name, town and address, your website, and the responsible person named in your imprint with their role, along with the business telephone number and email address published there.

If we have spoken, a short note about it and, where relevant, a date to come back to you.

Not stored: private telephone numbers, anything from social networks, credit-scoring or rating data.

What for, and on what basis

We approach trades firms our offer fits — Google Ads campaigns and a system that catches every enquiry with a deadline and a history. We write first, then call.

The legal basis is our legitimate interest in direct marketing to businesses, Art. 6(1)(f) GDPR; recital 47 names direct marketing expressly. What counts in the balance: these are details you published yourself in a business capacity, they go to a business address, and the matter is your trade, not your private life.

No automated assessment

We do not score you. There is no rating, no profile and no automated decision within the meaning of Art. 22 GDPR. A person decides who gets a letter, and the same person makes the call.

Where the data sits

In our own customer system. It runs on Supabase (Supabase Pte. Ltd., Singapore) as our processor, with the database in Frankfurt am Main. A data processing agreement is in place, and any third-country transfer is covered by the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR).

If you reply by email, your message also reaches our mailbox; the privacy policy describes that in detail.

Nothing is passed on. We do not sell addresses and we do not share them.

For how long

If we hear nothing from you, we delete your data 18 months after the day we collected it.

If we have spoken and the timing was wrong, we set a date to come back — after 3, 6 or 12 months, depending on the reason. On that date we decide again: get in touch once more, or delete.

If you object, the only thing that stays is your entry on our suppression list — and it stays precisely so that you do not hear from us again a year later.

If you would rather not hear from us

You may object to this marketing at any time, without giving a reason and at no cost (Art. 21(2) GDPR). An email, or one sentence on the phone, is enough.

We then stop immediately and delete your data apart from the suppression entry.

Your other rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20).

You may also complain to a supervisory authority (Art. 77) — to the Spanish AEPD, which is competent for us, or to the authority where you live or work.

The controller is the company named in the imprint, where you will also find its contact details.