Privacy Policy

Controller

The controller responsible for the processing of personal data described in this policy is:

• Reqora Ltd.
• Sachsenstraße 8, 02708 Löbau, Germany
• Represented by: Jürgen Truskat
• Email: info@reqora.ch
• Phone: +41 79 749 76 88
• Website: www.reqora.com

Full provider identification is available in our Imprint.

Scope

This policy applies to personal data processed through our website, including the contact and quote request forms, email correspondence and other business inquiries. It does not apply to third-party websites that may be linked from our site.

Personal data we process

Depending on how you interact with us, we may process the following categories of data:

• Contact details you provide: name, company name, email address, phone number and country
• Inquiry content: your message, preferred contact time and the source page of your request
• Specification data: timber species, dimensions, grade, moisture content, drying method, volume, shipment frequency, certification, destination and Incoterms
• Technical data automatically collected: IP address, browser and device information, and server log files
• Consent and communication records: your cookie preferences and the history of our correspondence

Purposes of processing

• Responding to your inquiries and preparing non-binding quotations
• Coordinating with sawmill, supplier and logistics partners to assess your request
• Communicating with you about products, orders and our business relationship
• Operating, securing and improving the website and preventing abuse
• Producing aggregated, anonymous usage statistics
• Complying with legal, commercial and tax obligations

Legal bases (Art. 6 GDPR)

• Art. 6(1)(b) GDPR — to take steps at your request prior to entering into a contract and to perform a contract (handling inquiries and quotations)
• Art. 6(1)(f) GDPR — our legitimate interests in B2B communication, website security and aggregated analytics
• Art. 6(1)(a) GDPR — your consent, where we ask for it (e.g. optional non-essential cookies); you may withdraw consent at any time with effect for the future
• Art. 6(1)(c) GDPR — compliance with legal obligations, in particular statutory retention duties

Contact and quote forms

Data you submit through our forms is used to process your inquiry and prepare a quotation. Where necessary to do so, it may be shared internally and with the relevant sawmill, supplier or logistics partners involved in fulfilling your request. We do not sell your personal data.

Hosting

Our website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA, which processes data on our behalf as a processor under a data processing agreement. When the site is accessed, technical data (such as your IP address and request metadata) is processed by Vercel to deliver and secure the site. This may involve a transfer of data to the United States, which is safeguarded by EU Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework.

Database and storage

Inquiry and contact data submitted through our forms is stored in a PostgreSQL database hosted in the European Union (Supabase). The database provider acts as a processor on our behalf under a data processing agreement.

Email communication

Notification and transactional emails relating to your inquiry are sent using the email delivery service Resend (Resend, Inc., USA), acting as a processor under a data processing agreement. Such transfers to the United States are safeguarded by EU Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework.

Analytics

We use Vercel Web Analytics to understand how our website is used. This tool is privacy-friendly and cookieless: it does not set cookies, does not create persistent identifiers and does not track you across other websites. It collects aggregated, anonymous usage data only. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR) in measuring and improving the performance of our website.

International transfers

Some of our processors are located in the United States. Where personal data is transferred outside the EU/EEA, we ensure an adequate level of protection through appropriate safeguards, in particular EU Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework.

Retention

We retain personal data only for as long as necessary for the purposes described above. Inquiry and business communication data is kept for the duration of the inquiry and any resulting business relationship. Where statutory retention periods apply (for example under German commercial and tax law), the relevant data is retained for the legally required period and then deleted or anonymised.

Your rights

Subject to the conditions of the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing based on legitimate interests (Art. 21 GDPR)
• Right to withdraw consent at any time with effect for the future
• Right to lodge a complaint with a competent data protection supervisory authority

Data security

We use appropriate technical and organisational measures to protect personal data, including transport encryption (TLS) for data transmitted via our website and access controls for our internal systems.

Cookies

For information about cookies and similar technologies used on this website, please see our Cookie Policy.

Contact

For any privacy-related request or question, please contact us at info@reqora.ch.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our processing activities or legal requirements. The current version is always available on this page, with the date of the last update shown below.