Privacy Policy

1. Controller

Represented by: Nihal El-Sady
Email: info@topsafe1gmbh.com

No Data Protection Officer has been confirmed for this website.

2. Hosting and technical delivery

This website is hosted by Hostinger. When the website is accessed, the hosting infrastructure may process technically required data such as IP address, date and time, requested URL or resource, HTTP status, browser/user-agent, referrer information where transmitted and technical server or security log information. The website application itself does not create a separate visitor database for this.

3. Contact and quote forms

The contact form and quote request form are active. Submitted data is processed to handle and respond to enquiries and for business communication.

Contact enquiries may include name, company, email address, phone number, subject, message, privacy acknowledgement and technical metadata required for form security and transmission. Quote requests may include company, contact person, email, phone, starting location/site, destination/service area, requested service, estimated shipment volume, preferred start period, project description and privacy acknowledgement.

Submissions are sent server-side through the Titan Email infrastructure configured by Top Safe 1 GmbH to info@topsafe1gmbh.com. No permanent website database storage of these form submissions is currently implemented.

4. Careers and CV attachments

The careers form is active. Data may include full name, phone, email, city, message, privacy acknowledgement and an optional CV.

Optional CVs are accepted as PDF files only, with a maximum size of 5 MB. The file is processed in memory for email attachment, sent by email and not intentionally stored permanently by the website application.

Application data is processed for handling the application. Depending on the context, the relevant legal basis may include Art. 6(1)(b) GDPR and German employment data protection law, especially Section 26 BDSG.

5. Email and Titan Email

Form submissions are sent via Titan Email, the email hosting service used by Top Safe 1 GmbH. The public policy does not expose SMTP servers, usernames, passwords or infrastructure secrets. Direct emails to info@topsafe1gmbh.comare processed to answer and manage the communication.

6. External links, media, fonts and cookies

WhatsApp links and the Google Maps route/search link are external links. No WhatsApp widget, WhatsApp tracking script or Google Maps iframe is loaded merely by viewing the website. Those external environments open only after the visitor actively follows the link.

Images and videos are served locally by the website. The website uses system/local CSS font families and does not load Google Fonts or another remote font service.

The code audit found no non-essential cookies, no document.cookie, no localStorage or sessionStorage use and no analytics or tracking scripts. Therefore no cookie banner is currently used.

7. Form security

The active forms use privacy-friendly protection measures such as server-side validation, payload limits, unobtrusive spam checks and a lightweight server-side limit for unusual request volume. Google reCAPTCHA is not used.

8. Legal bases, retention and recipients

Depending on the enquiry, processing may be based on Art. 6(1)(b) GDPR for contractual or pre-contractual communication and Art. 6(1)(f) GDPR for legitimate business communication. Data is retained only as long as necessary for the relevant purpose and then according to applicable legal obligations. Recipients may include authorised internal personnel, the hosting provider and the email hosting service. Provider-specific international transfer details should be reviewed against the actual service agreements.

9. Your rights

Data subjects may have rights of access, rectification, erasure, restriction, objection, portability, withdrawal of consent where consent is used, and complaint to a supervisory authority. For North Rhine-Westphalia, the competent authority is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, www.ldi.nrw.de/kontakt.

10. No automated decision-making

The current code review found no automated decision-making or profiling in the contact, quote or careers forms.