Privacy Policy
Status: July 2026
1. Controller
Dried Ingredients Int GmbH
Am Windhukkai 5
20457 Hamburg
Germany
Telephone: +49 (0)40 209334800
Email: info(at)dried-ingredients.de
2. Hosting and server log files
When this website is accessed, the hosting provider processes technically necessary connection data, in particular the IP address, date and time, requested file, transferred data volume, referrer, browser and operating system. Processing serves the secure and stable operation of the website. The legal basis is Article 6(1)(f) GDPR. Where the website is hosted by IONOS, hosting is provided by IONOS SE or by service providers used under the applicable hosting contract.
3. Cookies, sessions and local storage
The public website does not use analytics or marketing cookies. Technically necessary storage may be used to retain the selected language, essential website functions and security settings. A technically necessary session cookie is set when logging into protected areas. The legal basis is Article 6(1)(f) GDPR in conjunction with Section 25(2) TDDDG.
4. Contact
When you contact us by email or telephone, we process the information provided to handle your request. The legal basis is Article 6(1)(b) GDPR for pre-contractual or contractual communication and otherwise Article 6(1)(f) GDPR.
5. Use of the supplier portal
When registering for and using the supplier portal, we process in particular company information, names and roles of contact persons, business contact details, questionnaire responses, signatures, certificates, evidence, photographs, videos, documents, supply-chain information and technical log data. Processing is carried out for supplier qualification and management, initiating, carrying out and documenting the business relationship, quality assurance, traceability, audits, compliance checks, management of certificates and evidence and business communication.
The legal bases are, where applicable, Article 6(1)(b), Article 6(1)(c) and Article 6(1)(f) GDPR. Where consent is required for a specific use, processing is based on Article 6(1)(a) GDPR.
6. Sharing and publication of photographs, certifications and supply-chain information
As part of our transparency commitment, selected photographs, certificates, supporting documents and supply-chain information provided by suppliers or business partners may be processed and shared with our business customers. This may include photographs of fields, farms, production, processing and storage sites, products, packaging and process steps, as well as information on origin, processing, quality assurance, certifications and traceability.
The materials may be used for the following purposes:
- documenting and evidencing the supply chain, origin and processing of products,
- fulfilling our transparency commitment to customers,
- quality assurance, traceability and supplier documentation,
- product-related customer information and B2B communication,
- creating transparency and traceability presentations, PDFs, websites and QR-code pages,
- product-related advertising and information by us or our customers.
Recipients may include our business customers, retailers, brand owners, their appointed service providers and - where materials are made available through websites, QR codes or on final packaging - end consumers and the general public. Our customers may use selected materials for documentation and product-related advertising and may make them available to their customers and end consumers via a QR code on final packaging or through their own digital services.
Where content is made publicly available on the internet or through a QR code, it may generally be accessed, stored, copied or redistributed worldwide. Complete control over further use by third parties or copies stored in search-engine, archive or cache systems is not always technically possible.
The legal basis for sharing and using the materials is Article 6(1)(b) GDPR where processing is necessary for performing or documenting the business relationship. Otherwise, processing is generally based on Article 6(1)(f) GDPR. Our legitimate interests include maintaining a transparent and traceable supply chain, documenting quality and sustainability information, informing customers and product-related corporate communication. Where individuals are identifiable in photographs or publication otherwise requires consent, publication takes place only on an appropriate legal basis, generally documented consent under Article 6(1)(a) GDPR.
Personal data that are not required should be avoided or redacted before materials are shared or published. This applies in particular to private contact details, signatures, identity-document information and other personal data that are not necessary for the transparency purpose. Certificates and documents may therefore be shortened or partially redacted before publication.
Suppliers and other uploading persons may provide only content for which they hold the necessary rights of use, disclosure and publication. They must inform affected and identifiable persons of the intended use and, where required, obtain their consent or ensure another appropriate legal basis.
Consent may be withdrawn at any time with effect for the future. An objection to processing based on Article 6(1)(f) GDPR may be made in accordance with Article 21 GDPR. Following a valid withdrawal or objection, we will discontinue future use unless another legal basis or overriding grounds apply. Packaging already printed or documents already provided to customers cannot always be recalled retrospectively; online content under our control will, however, be adapted or removed where technically and legally possible.
7. Applications submitted through an online form
Where an application form is offered on a website connected with this system, contact details, messages and uploaded application documents are processed for the recruitment procedure. The legal basis is Section 26 BDSG in conjunction with Article 6(1)(b) GDPR and, where express consent is provided, Article 6(1)(a) GDPR. Application data are deleted when no longer required for the recruitment procedure unless statutory reasons or valid consent justify longer retention.
8. Recipients, processors and third-country access
Data may be transferred to hosting, IT, maintenance and other service providers insofar as this is necessary for secure operation, provision of functions or the purposes described above. The recipients stated in Section 6 also apply to photographs, certifications and supply-chain information. Transfers to third countries take place only in compliance with applicable data protection requirements. However, publicly available content may also be accessed from third countries.
9. Retention period
Personal data are stored only for as long as required for the respective purpose, the business relationship, supplier documentation, traceability or statutory retention periods. Content made available publicly or to customers is reviewed and removed or replaced when the purpose no longer applies, the underlying rights expire or a valid withdrawal or objection is received and no other legal basis applies. Technical backup copies may remain for a limited period.
10. Your rights
Subject to the statutory requirements, you have rights of access, rectification, erasure, restriction of processing and data portability. You may object, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR. Consent may be withdrawn at any time with effect for the future. Privacy requests may be sent to info(at)dried-ingredients.de.
11. Right to lodge a complaint
You may lodge a complaint with a data protection supervisory authority. The Hamburg Commissioner for Data Protection and Freedom of Information is generally competent for the registered office of the company.
12. SSL/TLS encryption
The website should be operated exclusively via an encrypted HTTPS connection. The SSL certificate must be activated in the IONOS customer account.
Note: This privacy policy describes the intended technical and organisational scope of the portal, including the sharing and possible publication of selected transparency information. It should be legally reviewed before publication and updated to reflect the processes, contracts and consents actually used and any subsequent extensions.