Privacy

1. Name and contact details of the controller

Stoffmarkt Holland GmbH is not legally required to appoint a data protection officer. If you have any questions regarding data protection, please contact the responsible party directly by email at info@stoffmarktholland.de.

2. Overview of legal bases

The processing of personal data on our website is always carried out in accordance with the General Data Protection Regulation (GDPR) and the German Telecommunications Digital Services Data Protection Act (TDDDG). The individual legal bases are: consent (Art. 6 para. 1 lit. a GDPR), performance of a contract and pre-contractual measures (Art. 6 para. 1 lit. b GDPR), legitimate interest (Art. 6 para. 1 lit. f GDPR), and § 25 TDDDG for accessing information on end devices (cookies). The respective legal basis is specified for each processing operation.

3. Hosting

This website is hosted by netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany. The personal data collected on this website is stored on netcup's servers in Germany. This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access data, and other data generated via a website. The use of the hosting provider is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in a reliable presentation of our website. If consent has been requested, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. A data processing agreement (DPA) has been concluded with netcup in accordance with Art. 28 GDPR.

Server log files

The hosting provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• Browser type and browser version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address

This data is not merged with other data sources. The collection of this data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of their website – for this purpose, server log files must be collected.

Server log files are automatically deleted after 7 days, unless retention is required for evidentiary purposes.

4. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, such as contact requests or newsletter sign-ups, this site uses SSL/TLS encryption. You can recognize an encrypted connection by the browser address bar changing from „http://“ to „https://“ and by the lock icon in your browser bar. When SSL/TLS encryption is activated, the data you transmit to us cannot be read by third parties.

5. Cookies and consent management

We use cookies on our site. These are small files that your browser automatically creates and stores on your device when you visit our site. Cookies do not cause any damage to your device and do not contain viruses, Trojans, or other malware.

When you first visit our website, a cookie banner is displayed where you can choose which cookie categories you want to allow. You can choose between necessary, functional, analytical, and external media cookies. Your cookie preference is stored in the cookie „stfmhc“ for 12 months. You can change your settings at any time via the „Cookie Settings“ link in the footer of our website.

The legal basis for the use of technically necessary cookies is § 25 para. 2 TDDDG (no consent required) in conjunction with Art. 6 para. 1 lit. f GDPR (legitimate interest). For all other cookies (functional, analytical, external media), the legal basis is your consent pursuant to § 25 para. 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR.

6. Google Analytics 4

We use Google Analytics 4 on our website, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Google Analytics 4 uses cookies (in particular _ga with a storage period of 2 years and _gid with a storage period of 24 hours) that enable an analysis of your use of our website.

The use of Google Analytics is based exclusively on your consent pursuant to Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TDDDG. The Google Analytics script is only loaded after your explicit consent in the cookie banner. Without your consent, no data collection by Google Analytics takes place.

The information generated by cookies about your use of this website is generally transferred to a Google server in the USA and stored there. Data transfer to the USA is based on the adequacy decision of the EU Commission of 10 July 2023 on the EU-US Data Privacy Framework (DPF). Google LLC is certified under the DPF.

We have concluded a data processing agreement with Google in accordance with Art. 28 GDPR.

Google Analytics 4 does not use full IP addresses by default. IP anonymization is automatic, so your IP address is truncated within the EU/EEA before being transferred to Google servers.

We have configured the retention period for event data in Google Analytics to 2 months. Google Signals and personalized advertising are disabled.

You can revoke your consent at any time with effect for the future by changing your cookie settings via the link in the footer of our website. Upon revocation, the _ga and _gid cookies are automatically deleted. Additionally, you can prevent data collection by Google Analytics by installing the browser add-on for disabling Google Analytics (available at https://tools.google.com/dlpage/gaoptout).

We use Google Consent Mode V2, which communicates the consent decisions from our cookie banner to Google. Without your consent, no analytics cookies are set and no Google Analytics script is loaded.

7. Google Maps

On our market pages, we use Google Maps to display directions. Google Maps is only loaded after you have consented to the „External Media“ category in our cookie banner (two-click solution). Without your consent, no data is transferred to Google.

When Google Maps is loaded, data such as your IP address, location information, and browser data is transferred to Google LLC (USA). Data transfer to the USA is based on the EU-US Data Privacy Framework (DPF). The legal basis is your consent pursuant to Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TDDDG.

You can revoke your consent at any time by deactivating the „External Media“ category in your cookie settings. For more information, see Google's privacy policy at https://policies.google.com/privacy .

8. Newsletter

We offer you the option to subscribe to our newsletter to receive regular updates about fabric market dates and news. To receive the newsletter, you need to provide an email address. Optionally, you can specify your preferred location to receive targeted reminders for markets near you.

We use the so-called double opt-in procedure. This means that after you sign up, we send a confirmation email to the email address you provided. Your subscription only becomes active after you click the confirmation link in this email. This procedure serves as proof of your consent.

During sign-up, we log the time of registration and confirmation as well as your IP address. This data serves exclusively as proof of your consent in accordance with Art. 7 para. 1 GDPR and is deleted after the retention obligation expires (3 years after unsubscribing pursuant to § 195 BGB).

The legal basis for sending the newsletter is your consent pursuant to Art. 6 para. 1 lit. a GDPR.

Newsletter performance measurement

Our newsletter is sent via the email service Amazon SES (see section 10). As part of the delivery process, Amazon SES collects technical delivery information, including whether an email was delivered, opened, or whether a link was clicked. This data is used by us exclusively for optimizing the newsletter and troubleshooting delivery issues. The legal basis is your consent pursuant to Art. 6 para. 1 lit. a GDPR, which you grant when signing up for the newsletter.

Your email address and the optional location selection are stored for as long as you are subscribed to the newsletter. After you unsubscribe, your data is deleted without delay.

You can revoke your consent at any time with effect for the future. Unsubscribing is possible at any time, for example via the unsubscribe link at the end of each newsletter or by email to info@stoffmarktholland.de. The lawfulness of data processing carried out prior to the revocation remains unaffected by the revocation.

9. Contact form

For questions of any kind, we offer you the option to contact us using a form provided on the website. The following data is collected: name, email address, subject, and your message. Providing a valid email address is required so that we can respond to your inquiry.

To protect against automated spam requests, we use Altcha, a proof-of-work method. A small computational task is solved locally in your browser. No personal data is transmitted to external services and no cookies are set.

Data processing for the purpose of contacting us is carried out on the basis of Art. 6 para. 1 lit. b GDPR (pre-contractual measures) and Art. 6 para. 1 lit. f GDPR (legitimate interest in responding to inquiries).

The data transmitted during the contact process is deleted after your inquiry has been fully processed, unless statutory retention periods apply.

10. Email delivery (Amazon SES)

For sending newsletter emails and replies to contact inquiries, we use the service Amazon Simple Email Service (Amazon SES) by Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg (EU subsidiary). The parent company is Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA. We use Amazon SES in the EU region Frankfurt (eu-central-1), so that data processing takes place within the European Union.

As part of email delivery, the following data is processed: recipient email address, email content, and technical metadata (timestamps, delivery status, bounce and complaint information).

We have concluded a data processing agreement (AWS Data Processing Addendum) with Amazon Web Services in accordance with Art. 28 GDPR.

As Amazon Web Services is a US-based company, access from the USA cannot be entirely excluded. In such cases, Amazon.com, Inc. is certified under the EU-US Data Privacy Framework (DPF) (adequacy decision of the EU Commission of 10 July 2023). Additionally, EU Standard Contractual Clauses (SCC) pursuant to Art. 46 para. 2 lit. c GDPR are in place as an additional safeguard.

11. Disclosure of data

Your personal data will not be transmitted to third parties for purposes other than those listed in this privacy policy. We only share your personal data with third parties if:

• you have given your express consent pursuant to Art. 6 para. 1 lit. a GDPR
• the disclosure is necessary for the assertion, exercise, or defense of legal claims pursuant to Art. 6 para. 1 lit. f GDPR and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data
• there is a legal obligation for disclosure pursuant to Art. 6 para. 1 lit. c GDPR
• this is legally permissible and required for the performance of contractual relationships with you pursuant to Art. 6 para. 1 lit. b GDPR

12. Links to social networks

Our website contains links to the social media profiles of Stoffmarkt Holland GmbH on the platforms Facebook, Instagram, and TikTok. These are simple hyperlinks – when you access our website, no data is transmitted to the platform operators. Only when you click on a link are you redirected to the respective platform and subject to their privacy policies.

Privacy policies of the platforms: Facebook , Instagram , TikTok .

13. Data subject rights

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR): You can request information about your personal data processed by us.
• Right to rectification (Art. 16 GDPR): You can request the correction of inaccurate or the completion of incomplete data.
• Right to erasure (Art. 17 GDPR): You can request the deletion of your stored personal data, unless processing is necessary for exercising the right to freedom of expression, for compliance with a legal obligation, or for reasons of public interest.
• Right to restriction of processing (Art. 18 GDPR): You can request the restriction of processing of your personal data.
• Right to data portability (Art. 20 GDPR): You can receive your personal data in a structured, commonly used, and machine-readable format or request the transfer to another controller.
• Right to withdraw consent (Art. 7 para. 3 GDPR): You can withdraw your consent at any time with effect for the future. The lawfulness of processing carried out on the basis of consent prior to the withdrawal is not affected.

Right to lodge a complaint with a supervisory authority

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates the GDPR. The supervisory authority responsible for us is:

14. Right to object (Art. 21 GDPR)

15. Obligation to provide personal data

There is no legal or contractual obligation to provide personal data on our website. However, providing your email address is required for the contact form so that we can process and respond to your inquiry. For the newsletter, providing your email address is necessary. Without providing the respective data, the corresponding service cannot be used.

16. Data security

We employ appropriate technical and organizational security measures in accordance with Art. 32 GDPR to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments. Data transmission is secured via SSL/TLS encryption (see section 4).

17. Validity and changes to this privacy policy

This privacy policy is currently valid as of February 2026. Due to the further development of our website or changes in legal or regulatory requirements, it may become necessary to amend this privacy policy. The current privacy policy can be accessed and printed at any time on the website at stoffmarktholland.de/en/privacy .