Privacy Policy

Effective: September 9, 2026

1. Data Controller

The entity responsible for processing personal data in connection with the services offered by DE2EU Logistik and the website de2eu.com is:

DE2EU Logistik
Owner: Carla Isabel Schneider
Lange Str. 23
37127 Dransfeld
Germany

Email: info@de2eu.com
Phone:+49 5502 7834985

2. General Information on Data Processing

We process personal data exclusively in accordance with applicable data protection regulations, in particular the General Data Protection Regulation (GDPR) and the Telecommunications and Digital Services Data Protection Act (TDDDG).

Personal data is processed, in particular, when you visit our website, create a customer account, have a shipment we’ve received forwarded, contact us, or use our services.

The nature and scope of the processing depend on the specific purpose of the processing. As a general rule, we process only the data necessary for the respective purpose.

3. Visiting Our Website

When you visit our website, the web server we operate processes data that is technically necessary.

This may include, in particular:

IP address,
date and time of access,
pages and resources accessed,
amount of data transferred,
browser and operating system used,
technical information regarding the establishment and maintenance of the connection,
error messages and other technical information necessary for secure operation.

This data is processed to provide the website, ensure secure and uninterrupted operation, detect and analyze technical errors, and prevent misuse and attacks.

The website is hosted on a dedicated server in a Hetzner data center in Germany.

The technical access and log data are stored only for as long as necessary for the purposes stated or as required by statutory retention obligations.

Access to the server and the data stored there is restricted exclusively to DE2EU or to persons authorized by DE2EU for this purpose.

4. Use of Cookies and Similar Technologies

Our website uses cookies and, where applicable, similar technologies.

We distinguish between technically necessary technologies and those that require consent.

Technically necessary cookies and similar technologies are used to the extent that they are necessary to provide the functions you have expressly requested or to ensure the technically secure operation of the website.

For cookies or similar technologies that do not fall under a legal exception to the consent requirement, we will obtain your consent before using them.

The legal basis for accessing information on your device is § 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR.

Consent Management with PRIVE

We use PRIVE’s consent management system to manage and document your consent decisions.

We use PRIVE exclusively for cookie consent management.

In particular, the system allows us to record and manage your selections regarding the cookies and similar technologies used, as well as to enable you to change your selections at any time.

The specific processing depends on the technical configuration of the consent tool used by DE2EU.

You can change or withdraw your consent decisions at any time using the corresponding settings on our website.

5. Customer Account

To use the package forwarding services, you must create a customer account.

During registration, we process the following data in particular:

First and last name,
Address,
Email address,
phone number,
password or the login credentials required for this purpose.

Upon successful registration, a unique customer ID is automatically generated.

The processing is carried out to set up and manage the customer account, to identify the customer, and to provide the package forwarding services you have requested.

The legal basis is Article 6(1)(b) of the GDPR, insofar as the processing is necessary for the performance of the contract or for the implementation of precontractual measures.

To the extent that legal obligations or legitimate interests require further processing, such processing is based on Article 6(1)(c) or (f) of the GDPR.

6. Receiving Address and Customer ID

The receiving address provided by DE2EU is used for receiving shipments. Incoming shipments are assigned to your customer account via the customer ID assigned to you.

The customer ID is generated automatically and serves, in particular, to uniquely identify incoming shipments.

This data is processed to perform the package forwarding service you have requested and is therefore based on Article 6(1)(b) of the GDPR.

7. Incoming Shipments

Upon receipt of a shipment, the data necessary for assignment and processing is processed.

This includes, in particular:

Customer ID,
Date of receipt,
weight and dimensions of the shipment,
externally visible information relevant to forwarding,
where applicable, information regarding externally visible damage or other circumstances that may prevent forwarding.

As a general rule, the contents of the shipment are not inspected.

If further documentation is required due to externally visible damage or another obstacle, a photograph of the relevant obstacle or the affected outer packaging may be taken.

Shipping labels are generally not photographed for this purpose.

The processing is carried out to perform the package forwarding service and to document circumstances relevant to the proper execution of the forwarding.

The legal basis is Article 6(1)(b) of the GDPR and, where necessary, Article 6(1)(f) of the GDPR.

8. Forwarding Order

If you wish to have a specific shipment forwarded, we process the data necessary for preparing a quote, placing an order, and carrying out the forwarding.

This includes, in particular:

Shipment or order data,
Customer and recipient data,
Destination address,
country of destination,
selected carrier,
Shipping method,
Weight and dimensions,
Forwarding fee,
Shipping costs,
surcharges for special or non-standard shipments, if applicable,
Payment status,
Date of the forwarding order,
Date of forwarding,
tracking data for the outgoing shipment.

The processing is carried out for the purpose of preparing, executing, and completing the specific forwarding order.

The legal basis is Article 6(1)(b) of the GDPR.

9. Payment Processing

We use external payment service providers for payment processing.

These include:

Stripe,
Mollie,
as well as payment by bank transfer.

Stripe and Mollie process the payment data required for the respective payment method independently as the respective responsible payment service providers or within the scope of their own data protection responsibilities.

DE2EU does not store any complete credit card or other payment data processed by Stripe or Mollie for payment processing.

When paying by bank transfer, the information required for the account entry is recorded on DE2EU’s bank statement as part of the payment transaction. This data is processed for proper accounting purposes.

Processing is carried out for the purpose of executing and fulfilling the respective contract in accordance with Article 6(1)(b) of the GDPR and, to the extent that legal obligations exist, in accordance with Article 6(1)(c) of the GDPR.

Stripe’s and Mollie’s respective privacy policies also apply to the processing carried out by them.

10. Disclosure to Shipping Providers

To carry out the shipment, we transmit the data required for this purpose to the respective shipping service provider.

This may include, in particular:

Recipient’s name,
delivery address,
phone number,
email address,
weight and dimensions of the shipment,
any delivery information required or requested by the customer.

We use the following shipping carriers in particular:

DHL,
UPS,
FedEx,
Spring / PostNL.

Data is transferred only to the extent necessary to carry out the requested shipment.

The legal basis is Article 6(1)(b) of the GDPR.

The respective shipping service providers process the transferred data in accordance with their own data protection responsibilities.

11. Tracking Data

For outgoing shipments, the available shipment and tracking data are processed and stored.

This processing serves, in particular, to carry out and track the shipment, as well as to respond to customer inquiries regarding the shipment status.

The legal basis is Article 6(1)(b) of the GDPR.

12. Communication via Email and Telephone

We primarily use email and telephone to communicate with customers and prospective customers.

Email correspondence takes place via the Proton Mail service.

We do not send newsletters and do not engage in automated email marketing.

Emails related to the performance of our services are triggered by specific operational actions. We carry out the respective action; the resulting email is then sent automatically by the system’s technical functionality.

These emails are used primarily for communication regarding order processing, to provide information on processing and shipping status, and, where applicable, to provide tracking information.

Processing is carried out for the purpose of executing and fulfilling the contract, as well as for necessary communication with the customer.

The legal basis is Article 6(1)(b) of the GDPR or Article 6(1)(f) of the GDPR, to the extent that the processing is based on our legitimate interest in proper communication with customers.

13. Contact Form

A contact form is available on our website.

When using this form, the following data may be collected:

Name,
email address,
Customer ID,
Shipment number,
Subject of the inquiry,
Content of the message.

Providing a customer ID or shipment number is particularly useful if the inquiry relates to an existing customer account or a specific shipment.

The data is processed to handle and respond to the inquiry.

The legal basis is Article 6(1)(b) of the GDPR, provided the inquiry relates to an existing or prospective contractual relationship; otherwise, Article 6(1)(f) of the GDPR based on our legitimate interest in processing incoming inquiries.

14. Bookkeeping and Accounting

We use sevDesk for bookkeeping and invoicing.

In particular, the following data is processed:

Name and address,
invoice data,
invoice and document data,
payment information,
details regarding the underlying business transactions.

This data is processed for the purposes of proper invoicing, bookkeeping, and compliance with tax and commercial law obligations.

The legal basis is Article 6(1)(c) of the GDPR.

The relevant data is stored in accordance with the applicable statutory retention requirements and deleted upon their expiration, unless there is another legal basis for further storage.

15. Storage and Deletion

Personal data is generally stored only for as long as necessary for the respective purpose.

Customer account data is generally stored for an additional three months after the customer account is closed.

This does not apply to data whose continued storage is required due to statutory retention obligations or whose further processing is permitted for other legal reasons.

In particular, invoices, accounting records, and tax-related documents are retained in accordance with the applicable statutory retention periods.

Once the respective purpose for storage no longer applies or the statutory retention periods have expired, the relevant data will be deleted, unless another legal basis permits or requires further storage.

16. Password and Security

A password is used to access a customer account.

Passwords are not stored in plain text but are processed exclusively in a technical format suitable for this purpose.

We take appropriate technical and organizational measures to protect personal data from loss, destruction, alteration, unauthorized access, and other unauthorized processing.

17. No Disclosure for Advertising Purposes

Personal data is not disclosed to third parties for the purpose of selling or renting address data or for similar advertising purposes.

Disclosure occurs only to the extent necessary for the respective purposes specified in this Privacy Policy, where there is a legal obligation, or where another legal basis permits it.

18. Recipients of Personal Data

Depending on the nature of the use, personal data may be processed in particular by the following recipients or categories of recipients:

Hetzner as the hosting or server provider,
PRIVE as the provider of the consent management system used,
Stripe,
Mollie,
DHL,
UPS,
FedEx,
Spring / PostNL,
Proton Mail,
sevDesk.

Data is transferred only to the extent necessary and in accordance with the applicable data protection regulations.

19. Transfer to Third Countries

We strive to process personal data exclusively within the European Union or the European Economic Area.

To the extent that processing or transfer to a third country cannot be ruled out for certain service providers we use, such processing or transfer takes place only under the conditions set forth in Articles 44 et seq. of the GDPR.

The applicable safeguards and legal bases depend on the specific service used and its current configuration.

20. Rights of Data Subjects

You have the following rights in accordance with the statutory requirements:

Right of Access

You have the right to request information about the personal data we process and any other information required by law.

Right to Rectification

You have the right to request the correction of inaccurate personal data and the completion of incomplete data.

Right to erasure

You may request the erasure of your personal data under the conditions provided by law.

Right to Restriction of Processing

You may request the restriction of the processing of your personal data under the conditions provided by law.

Right to data portability

Provided the legal requirements are met, you have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format, or to request that it be transferred to another data controller.

Right to Object

To the extent that we process personal data based on Article 6(1)(e) or (f) of the GDPR, you have the right, under the conditions set forth by law, to object to such processing.

Withdrawal of Consent

If processing is based on your consent, you may withdraw it at any time with future effect. The lawfulness of the processing carried out prior to the withdrawal remains unaffected.

You may change or withdraw your consent to cookies and similar technologies at any time using the settings provided for this purpose on our website.

21. Right to File a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.

The data protection supervisory authority responsible for Lower Saxony is specifically responsible for DE2EU.

However, you may also contact another data protection supervisory authority, in particular the supervisory authority at your usual place of residence or workplace, provided the legal requirements for doing so are met.

22. No Automated Decision-Making

Automated decision-making, including profiling as defined in Article 22 of the GDPR, does not take place.

23. Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy if necessary due to technical changes, changes to our services, or legal or regulatory changes.

The current version published on our website is always the one that applies.