Privacy policy

This is a courtesy translation. Only the German version is legally binding.

1. Controller

REBEL FULFILLMENT GmbH, Auf der Härte 1–3, 72213 Altensteig, Germany
Represented by the Managing Director Melanie Werner
Email: partner@rebel-stock-solutions.de · Phone: +49 157 74113405

2. Data protection officer

Our data protection officer is Melanie Werner, REBEL FULFILLMENT GmbH, Auf der Härte 1–3, 72213 Altensteig.
You can reach her by email: partner@rebel-stock-solutions.de · Phone: +49 157 74113405

3. Hosting

This website is provided via the Lovable platform (Lovable Labs Incorporated) and its infrastructure service providers. When you visit the website, technically necessary data is processed by the hosting provider on our behalf. Where data is transferred to third countries (e.g. the USA), this takes place on the basis of appropriate safeguards, in particular the EU Standard Contractual Clauses or the EU-US Data Privacy Framework. The legal basis is Art. 6(1)(f) GDPR.

4. Server log files

When you visit the website, technically required data such as IP address, date and time, the page accessed and browser information are processed. This data serves exclusively to ensure the secure and stable operation of the website and is not combined with other data sources. The legal basis is Art. 6(1)(f) GDPR.

5. Enquiry forms and file uploads

If you send us a stock offer or enquiry via our forms, we process the data you provide (e.g. company, company type, contact person, email, phone number, product categories, brands, quantity, remaining best-before period and storage location) as well as uploaded files (stock lists, product photos) in order to review your offer and to contact you. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR.

The data and files are stored in a protected database and a non-public file storage of our hosting provider. Access is restricted to authorised employees.

The information contained in the uploaded files (e.g. prices, quantities, product names) is evaluated automatically in order to assess takeover options. The evaluation is performed by AI services of our hosting provider acting on our behalf; our team does not enter any figures manually, and the data is not passed on for advertising purposes. The legal basis is Art. 6(1)(f) GDPR.

Via our partner enquiry form ("Become a partner now"), we process the company data you provide (e.g. company, company type, contact person, email, phone number, company location, brands or range focus, product categories and required solutions) as well as your messages exclusively to handle your partner enquiry and to contact you. No files are uploaded or automatically evaluated via this form. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR.

To inform our team, we send an email notification via an email delivery provider (Resend, data centre in the EU) for each new enquiry. This notification contains only the type and time of the enquiry as well as an internal link; the contact details you provide are not transmitted in it.

Your data are not passed on to third parties unless this is necessary to process your enquiry. The hosting, email delivery and AI services we use act for us as processors and are contractually bound to comply with the GDPR; your data are neither sold nor passed on for advertising purposes. Disclosure to authorities takes place only where we are legally obliged to do so.

Protection of the forms against automatically generated abuse enquiries is implemented technically within the form (a minimum completion time and an additional field that is invisible to you); no profiles of you are created. The legal basis is Art. 6(1)(f) GDPR.

6. Fonts

The fonts used on this website are delivered locally from our own server. No connection to servers of Google or other third-party providers is established.

7. Cookies and tracking

This website does not use any tracking, analytics or marketing cookies. The local storage of your browser merely records that you have acknowledged the cookie notice. This is technically necessary (Section 25(2) TDDDG) and contains no personal data.

8. Storage period

Offer enquiries, uploaded files and the related business correspondence are stored for a period of 6 years (commercial retention period pursuant to Section 257 of the German Commercial Code, HGB) and then deleted, unless longer statutory retention obligations apply.

Partner enquiries that do not lead to a cooperation are deleted as soon as they are no longer required for the decision on a possible partnership; as a rule this happens at the latest one year after the last contact. If a partner enquiry leads to a cooperation, the retention periods stated above apply.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). You also have the right to lodge a complaint with a data protection supervisory authority, e.g. the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.

To exercise your rights, an email to partner@rebel-stock-solutions.de is sufficient.