Privacy Policy
This English version is provided for convenience. The German version is legally binding. Deutsche Fassung
In short: This website sets no cookies and uses no tracking, analytics, embedded maps or videos. It loads no fonts or scripts from third-party servers. We only process personal data when you contact us or send a request.
1. Controller
Nile Harvest Import & Export, owner Nourhan SalheenWakendorfer Weg 14, 22417 Hamburg, Germany
Phone: +49 40 71636349 · Email: info@nileharvest.de
We have not appointed a data protection officer as the legal requirements for doing so are not met.
2. Hosting and server log files
This website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus, under a data processing agreement pursuant to Art. 28 GDPR. The servers are located in the European Union.
When you visit the website, the server automatically processes information transmitted by your browser: IP address, date and time, page requested, referrer URL, browser type and operating system. This is technically necessary to deliver the website and keep it secure. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and stable operation of the website). The host deletes log files automatically after a short period. The connection is encrypted with TLS.
3. Requests via forms, email and phone
When you contact us via a form (quote list, contact, trade account), by email or by phone, we process the data you provide: company name, contact person, email, phone number, address, VAT ID, type of business, requested products, quantities and your message.
Purpose: handling your request, preparing quotes, initiating and performing contracts, and verifying your status as a business.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures and contract performance) and Art. 6(1)(f) GDPR (legitimate interest in handling business enquiries efficiently).
Form submissions are sent to our mailbox via our host's mail server, and you receive an automatic confirmation. To prevent spam we check submissions technically (hidden field, timing check, limit per IP address). For this, a shortened, hashed form of your IP address is stored for no longer than one hour. Fields marked as required are necessary to process your request.
For processing, a copy of your details is stored in a protected table on our web server and in a spreadsheet in our Google account (Google Sheets, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Google may transfer data to the USA and is certified under the EU-US Data Privacy Framework. Legal basis: Art. 6(1)(b) and (f) GDPR. For internal push notifications (Telegram) we only use the reference number, request type and products – no personal data.
4. Contact via WhatsApp
We link to WhatsApp. This is a plain link: no data is sent to WhatsApp when our pages load. Only when you click it does WhatsApp open, a service of WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. WhatsApp's privacy terms apply; data may be transferred to its parent company Meta Platforms Inc. in the USA, which is certified under the EU-US Data Privacy Framework. If you message us on WhatsApp, we process your phone number, name and message content to handle your request (Art. 6(1)(b) and (f) GDPR). You can always reach us by phone, email or form instead.
5. Local browser storage (quote list)
To keep your quote list while you browse, we store the selected products, quantities and pack sizes in your browser's local storage (localStorage). We also remember there whether you dismissed the language hint. This data stays on your device until you send a request. Storage is strictly necessary for the service you explicitly requested (§ 25(2) no. 2 TDDDG). We do not set cookies.
6. Recipients
Only staff who need your data to process your request have access. External recipients are our host (processor), for orders the logistics providers we instruct (name, delivery address, phone), and our tax adviser for statutory obligations. This website does not transfer data to third countries (for WhatsApp see section 4).
7. Retention
We delete your data once it is no longer needed. Enquiries that do not lead to a contract are deleted no later than twelve months after the last contact. Statutory retention periods under German commercial and tax law remain unaffected (six, eight or ten years depending on the document, § 257 HGB, § 147 AO).
8. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20), and you may withdraw any consent at any time with effect for the future (Art. 7(3)). An email to info@nileharvest.de is sufficient.
Right to object (Art. 21 GDPR): Where we process data based on Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation.
You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for us is the Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany.
9. Automated decision-making
We do not use automated decision-making or profiling under Art. 22 GDPR.
Last updated: September 2026