ITEXTRAB

Privacy Policy

1. Controller

The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

ITEXTRAB – IT Equipment Trading & Export
Owner: Gomaa Mostafa
Landsberger Allee 548
12681 Berlin
Germany
Email: Info@itextrab.de
Telephone: +49 176 84814067
Business identification number: DE457251709

We are a business-to-business (B2B) supplier of used and refurbished IT hardware, including wholesale, procurement and export services. This website is aimed exclusively at companies, resellers, distributors and institutional buyers. It is not intended for consumers or private individuals.

2. General information

We process personal data only to the extent necessary to provide a functional website and to carry out our B2B trading and sourcing activities, and in accordance with the GDPR and the German Federal Data Protection Act (BDSG). “Personal data” means any information relating to an identified or identifiable natural person. This privacy policy explains what data we collect, why we collect it, how we use it and what rights you have.

3. Hosting and server log files

This website is hosted on Cloudflare Pages and delivered through the global network of Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA). When you access the website, our hosting infrastructure automatically processes the following data in server log files:

  • the IP address of the requesting device;
  • the date and time of access;
  • the name and URL of the file accessed;
  • the website from which access was made (referrer);
  • the browser type and version, the operating system and other user-agent information;
  • the HTTP status code and the volume of data transferred.

This data is required to display the website, to guarantee its stability and security, and to defend against and analyse attacks. The legal basis is our legitimate interest in a secure and functional website (Art. 6(1)(f) GDPR). This data is not combined with other data sources.

4. Sourcing and enquiry form

You can send us sourcing and business enquiries through the form on this website. We process the information you provide, in particular: your name, company, business email address, telephone number (optional), country, type of business, the products and condition you are looking for, quantity, delivery destination, target price, technical specifications, timeline, Incoterm, order type and your message, together with the language of the website.

In addition, when a form is submitted we process the IP address and the user-agent string of your device. This serves solely to protect our systems against misuse (for example spam and excessive automated requests) and to assign the enquiry. The enquiry is stored in our database and used exclusively to process your request and any resulting business relationship. The legal basis is the performance of a contract or the taking of steps prior to entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in protecting our systems against misuse (Art. 6(1)(f) GDPR).

5. Chat assistant and AI-supported matching

Our website offers an automated chat assistant that provides information about our company, products and processes. The conversation itself does not store any data in your browser. If you use the option to be contacted by a member of our team, we process the name, email address and message you enter, together with the chat transcript, and send them by email to our sales team so that we can respond to your request.

To help us prepare enquiries, we may use AI-supported (machine-learning) analysis to match submitted enquiries against our verified supplier network. This processing supports our staff and does not produce any legal effect on you. The legal basis is our legitimate interest in efficiently handling enquiries (Art. 6(1)(f) GDPR) and, where your request is aimed at a contract, Art. 6(1)(b) GDPR.

6. Email delivery

We use the email delivery service Resend (Resend, Inc., USA) to deliver notification emails relating to enquiries and chat handovers to our own mailboxes. The content of the email is limited to the information required to handle your request. The legal basis is our legitimate interest in reliable, secure transmission of business correspondence (Art. 6(1)(f) GDPR).

7. Cookies and similar technologies

We use only technically necessary cookies and similar technologies:

  • a functional preference that remembers the language version of the website you have chosen;
  • security cookies set by Cloudflare (for example __cf_bm) to distinguish human visitors from bots and to protect the website against attacks.

We do not use advertising cookies, social-media plug-ins or cross-site tracking. Information stored for the duration of your visit in your browser’s session storage (for example, to prevent a form reminder from appearing twice) is deleted when you close the browser tab. You can configure your browser to block or delete cookies; the website will continue to work, although your language preference may not be remembered. The legal basis for the cookies used is our legitimate interest in a secure and user-friendly website (Art. 6(1)(f) GDPR) and, where consent is required, your consent (Art. 6(1)(a) GDPR).

8. Recipients and transfers to third countries

Within our organisation, only those persons who need the data to fulfil their tasks have access to it. We use carefully selected service providers (processors) who process data on our behalf and are bound by contract:

  • Cloudflare, Inc. (hosting, content delivery, database and security);
  • Resend, Inc. (sending notification emails).

These providers are based in the United States. Where personal data is transferred to a third country, we ensure an adequate level of protection by means of the EU Standard Contractual Clauses and/or an adequacy decision of the European Commission, such as the EU–US Data Privacy Framework. We do not sell your personal data.

9. Retention

We store personal data only for as long as is necessary for the purposes described above. Enquiry data is generally kept for as long as is required to process your request and any resulting business relationship, and thereafter for as long as statutory retention obligations apply (under German commercial and tax law, generally six or ten years). Server log data is deleted or anonymised after a short period. Data that is no longer required and is not subject to a retention obligation is deleted.

10. Your rights

Under the GDPR you have the following rights:

  • the right of access to the personal data we process about you (Art. 15 GDPR);
  • the right to rectification of inaccurate or incomplete data (Art. 16 GDPR);
  • the right to erasure (Art. 17 GDPR);
  • the right to restriction of processing (Art. 18 GDPR);
  • the right to data portability (Art. 20 GDPR);
  • the right to object to processing based on our legitimate interests (Art. 21 GDPR);
  • the right to withdraw any consent you have given at any time, with effect for the future (Art. 7(3) GDPR).

To exercise your rights, simply contact us using the details in section 1.

11. Supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61
10555 Berlin
Germany

12. Data security

We use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access. This website is transmitted using SSL/TLS encryption; you can recognise this by the padlock symbol in your browser and by “https://” in the address bar. Access to stored data is restricted to authorised persons.

13. Automated decision-making

We do not use automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you within the meaning of Art. 22 GDPR. AI-supported matching is used only as a preparatory aid for our staff.

14. Changes to this privacy policy

We may update this privacy policy to reflect changes to our services, legal requirements or the way we process data. The version published on this website at the time of your visit applies. Last updated: 1 October 2026.

15. Contact

If you have any questions about data protection or wish to exercise your rights, please contact us at Info@itextrab.de.