1. Who is responsible
Controller within the meaning of the GDPR is Food-Stock — owner Jewgeni Kazatchkov, Sybelstrasse 67, 10629 Berlin, Germany · +49 163 2555 332 · info@food-stock.de. Full provider details are in our Impressum.
Write to that address for anything concerning your data — access, correction, deletion, objection or the withdrawal of a consent.
2. Visiting the website
You can browse our public pages without telling us who you are. Each request writes a server log entry with your IP address, the date and time, the requested file, the amount of data transferred, the referring page and your browser and operating system. We need this for secure, error-free operation and to defend against attacks — our legitimate interest under Art. 6 (1) (f) GDPR. Log entries are deleted after seven days at the latest.
3. Account, requests, deals and invoices
To register you and to trade with you we process your company name and address, contact name, e-mail, phone number, VAT identification number, business type and the interests you tell us about, plus everything that belongs to a deal: requests, quantities, prices, order confirmations, delivery and pickup details, invoices and payments. Legal basis: performance of the contract and pre-contractual steps, Art. 6 (1) (b) GDPR.
The VAT identification number is transmitted to the VIES service of the European Commission for validation, because we have to establish whether a supply is exempt as an intra-Community supply (Art. 6 (1) (c) GDPR).
Invoices, order confirmations and booking documents are kept for the statutory retention periods of six and ten years (§ 257 HGB, § 147 AO) — Art. 6 (1) (c) GDPR. During that time the data is restricted to that purpose.
4. E-mail and messages
Mail you send to info@food-stock.de or sale@food-stock.de is stored on our mail servers in Germany and mirrored into the platform inbox, together with attachments, so that any colleague can pick up the thread and so that the history of the business relationship stays complete. The same applies to the chat and the messages inside your account. Legal basis: Art. 6 (1) (b) GDPR for contractual communication and Art. 6 (1) (f) GDPR for our interest in an orderly, documented sales process.
If you write to us without an existing business relationship — for example through the contact form — we use your data only to answer you and delete it when the enquiry is finished and no retention period applies.
5. AI-assisted processing
We use large language models operated by Anthropic PBC to support our team: sorting and summarising incoming mail, translating it, suggesting prices from comparable historical deals, and drafting replies. For this, the content of messages and the related product and deal data can be transmitted to that processor.
A human always decides. Nothing is sent, published, priced or confirmed automatically; there is no automated decision-making producing legal effects within the meaning of Art. 22 GDPR. Legal basis is our legitimate interest in an efficient and consistent sales process, Art. 6 (1) (f) GDPR. Model output is stored with the message so that we can trace how a suggestion came about; the processor is contractually barred from using the content to train its models.
8. Processors and transfers to third countries
We work with a small number of carefully selected providers, each under a data processing agreement:
| Provider | What they do for us | Location |
|---|---|---|
| Hetzner Online GmbH | Servers, database and backups of the platform | Germany |
| NEUE MEDIEN MÜNNICH GmbH (ALL-INKL) | Mail hosting for our mailboxes | Germany |
| Anthropic PBC | AI assistance as described in section 5 | USA — EU standard contractual clauses |
| European Commission (VIES) | Validation of VAT identification numbers | EU |
Fonts and all other design assets are served from our own servers; no data is sent to a font or CDN provider when you visit us. Beyond the table above we pass your data on only where we must: to the carrier that collects or delivers your goods, to our tax adviser and bank, and to authorities where the law requires it.
9. How long we keep data
Server logs seven days · contact enquiries until the matter is closed · account and communication data for the duration of the business relationship · commercial letters six years · invoices and booking documents ten years. After that the data is deleted or irreversibly anonymised.
10. Your rights
You have the right, under the conditions of the GDPR, to:
- access the data we hold about you (Art. 15);
- have incorrect data corrected (Art. 16) and data deleted (Art. 17);
- have processing restricted (Art. 18);
- receive the data you gave us in a machine-readable format (Art. 20);
- object to processing based on legitimate interests, including direct marketing (Art. 21);
- withdraw a consent at any time with effect for the future (Art. 7 (3));
- complain to a supervisory authority (Art. 77). Ours is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin. You may also contact the authority where you live or work.
Write to info@food-stock.de and we will answer within one month.
11. Changes to this policy
We update this policy when the platform changes — a new processor, a new function. The version and date at the top of the page always show which text is in force.