Privacy Policy

Status: September 2026

1. Controller

Dried Ingredients Int GmbH
Am Windhukkai 5
20457 Hamburg
Germany
Telephone: +49 (0)40 209334800
Email: info(at)dried-ingredients.de

2. Hosting and server log files

The supplier portal is operated on webspace and database systems provided by IONOS. When the portal is accessed, the hosting provider processes technically necessary connection data, in particular the IP address, date and time, requested file, transferred data volume, referrer, browser and operating system. Processing serves the secure, stable and traceable operation of the portal. The legal basis is Article 6(1)(f) GDPR. Our legitimate interests include operational security, error analysis and protection against misuse and attacks.

3. Cookies, sessions and local storage

The portal does not use analytics or marketing cookies. Technically necessary cookies and local browser storage are used for login, security and language settings. The session cookie is configured with HttpOnly, SameSite and, when HTTPS is used, Secure attributes. The legal basis is Article 6(1)(f) GDPR in conjunction with Section 25(2) TDDDG.

4. Additional languages and Google Translate

German and English are provided directly by the portal. Google Translate may be used for additional selectable languages. The Google service is loaded only after you have expressly consented to external translation. Without consent, the portal remains fully usable in German and English.

When Google Translate is enabled, your browser connects to Google servers. In this process, your IP address, browser and device information, the page requested and content technically required for translation may be transmitted to Google. Google may use its own technically related cookies or similar technologies in connection with the translation service. The provider is Google Ireland Limited; other Google entities and processing outside the EU/EEA may also be involved in providing the service.

Activation is based on your consent under Article 6(1)(a) GDPR and, where information on your device is accessed, Section 25(1) TDDDG. You may withdraw your consent at any time with effect for the future through the settings on this privacy page. The portal does not connect to Google Translate before consent is given.

5. Contact

When you contact us by email or telephone, we process the information provided to handle your request. The legal basis is Article 6(1)(b) GDPR for pre-contractual or contractual communication and otherwise Article 6(1)(f) GDPR.

6. Use of the supplier portal

When registering for and using the supplier portal, we process in particular company information, names and roles of business contacts, business contact details, questionnaire responses, signatures, certificates, evidence, photographs, videos, documents, article and farm information, supply-chain information and technical log data. Processing is carried out for supplier qualification and management, initiating, carrying out and documenting the business relationship, quality assurance, traceability, audits, compliance checks, management of certificates and evidence and business communication.

The legal bases are, where applicable, Article 6(1)(b), Article 6(1)(c) and Article 6(1)(f) GDPR. Where consent is required for a specific use, processing is based on Article 6(1)(a) GDPR.

7. Voluntary transparency information, photographs and supply-chain data

Farm lists, farm photographs, geodata and further transparency information are voluntary additional information. Suppliers decide which of these details they wish to provide. Selected information supplied by the supplier may be used for traceability, supplier documentation and - where agreed and legally permissible - transparency information for our business customers.

Where content is to be shared with customers or published, only information for which an appropriate legal basis and the necessary usage rights are available will be used. Personal data that are not required, in particular private contact details, signatures, identity-document information or comparable information, should be avoided or redacted before disclosure. Where individuals are identifiable in photographs, the required rights and legal bases will be taken into account.

8. Technical PDF functions

For certain functions such as PDF previews or local PDF generation, the browser loads the required JavaScript libraries only when the relevant function is used. Where these libraries are provided through cdnjs/Cloudflare, the technical provider receives ordinary connection data such as the IP address when the resource is requested. These libraries are used solely for technical display or PDF generation; the portal does not use them for analytics or marketing. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is providing functional and user-friendly document handling.

9. Recipients, processors and third-country access

Data may be transferred to hosting, IT, maintenance and other service providers insofar as this is necessary for secure operation, provision of functions or the purposes described above. Transfers to third countries take place only in compliance with applicable data protection requirements. Where transparency information is voluntarily made publicly available, worldwide access cannot be technically excluded.

10. Retention period

Personal data are stored only for as long as required for the respective purpose, the business relationship, supplier documentation, traceability or statutory retention periods. Technical backup copies may remain for a limited period. Suppliers can update their current information in the portal using the functions provided.

11. Your rights

Subject to the statutory requirements, you have rights of access, rectification, erasure, restriction of processing and data portability. You may object, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR. Consent may be withdrawn at any time with effect for the future. Privacy requests may be sent to info(at)dried-ingredients.de.

12. Right to lodge a complaint

You may lodge a complaint with a data protection supervisory authority. The Hamburg Commissioner for Data Protection and Freedom of Information is generally competent for the registered office of the company.

13. Transport encryption and technical security

The portal enforces HTTPS. Requests made through unencrypted HTTP are redirected to HTTPS; insecure form submissions are rejected by the server. HSTS is also used so that supported browsers use encrypted connections only after an HTTPS visit. Session data are protected with Secure, HttpOnly and SameSite attributes. Internal diagnostic, installation, SQL and release files are blocked from public web access.

14. Access control and system diagnostics

Suppliers can access only the data belonging to their respective company account. Administrative diagnostic and repair pages are not publicly accessible and require administrator authentication. Files are assigned to the relevant company account on the server and access permissions are checked before a file is returned.