Privacy Policy

Last updated: 3 September 2026

EuroTradeFlow, Vienna, Austria ("we", "us") is the controller for the personal data described in this policy. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG). This policy explains what we collect when you use this website and submit a request, why, how long we keep it, and what rights you have.

1. What we collect

Quote requests and benchmark requests

When you submit a quote request or a benchmark request, we collect the information you enter in the form:

• Company name, contact name, business email address and, optionally, phone number and country
• Details of your requirement: product, specifications, quantities, annual volume, target or current price, customisation needs, required certifications, delivery location and date, current supplier country and current terms
• Files you upload, such as drawings, photos, specifications or existing offers
• The language version of the form you used

Contact messages

When you use the contact form or email us, we collect your name, email address and the content of your message.

Technical data

When you visit the website, our hosting provider automatically processes technical data required to deliver the pages, such as your IP address, browser type, requested page and time of access, in server logs. This website does not use analytics services or tracking cookies.

2. Why we process it and on what legal basis

• Assessing and handling your request (reviewing the requirement, identifying and qualifying manufacturers, preparing comparable offers or a benchmark, coordinating samples, documentation and orders). Legal basis: steps taken at your request prior to entering into a contract and performance of a contract, Art. 6(1)(b) GDPR.
• Replying to contact messages. Legal basis: Art. 6(1)(b) GDPR or our legitimate interest in responding to enquiries, Art. 6(1)(f) GDPR.
• Operating and securing the website (server logs, spam protection). Legal basis: our legitimate interest in a functioning and secure website, Art. 6(1)(f) GDPR.
• Meeting legal obligations, for example commercial and tax record-keeping. Legal basis: Art. 6(1)(c) GDPR.

We do not use the data you submit for advertising, and we do not pass it to third parties for marketing purposes.

3. Who receives your data

• Our hosting and form provider. The website and its forms are operated by a specialised hosting provider that stores form submissions and uploaded files on our behalf as a processor under a data processing agreement. The provider may process data on servers outside the European Economic Area; transfers are covered by the EU Standard Contractual Clauses and the provider's applicable certification.
• Our sourcing team and partners. To handle a request, we share the requirement with the members of our sourcing team, including our partner in Bosnia and Herzegovina, who are bound by confidentiality.
• Candidate manufacturers. To obtain offers, we share the product specification, quantities and delivery requirements with candidate manufacturers. We do not disclose your company name or contact details to a manufacturer unless you agree, typically when you decide to proceed to samples.
• Email and IT service providers we use to communicate and store documents, acting as processors.
• Authorities or advisers where we are legally obliged to disclose data or need to establish, exercise or defend legal claims.

We do not sell personal data.

4. How long we keep it

• Quote and benchmark requests that we decline or that do not lead to a project: deleted within 12 months of our reply, unless you ask us to keep the request open.
• Requests that lead to a project: kept for the duration of the business relationship and thereafter for as long as statutory retention periods require (in Austria generally seven years for business records).
• Contact messages: deleted within 12 months after the enquiry has been dealt with.
• Server logs: deleted by the hosting provider within a short period, generally within 30 days.

5. Your rights

Under the GDPR you have the right to access the personal data we hold about you, to have inaccurate data corrected, to request deletion, to request restriction of processing, to data portability, and to object to processing based on our legitimate interests. Where processing is based on consent, you may withdraw it at any time with effect for the future.

To exercise these rights, write to privacy@eurotradeflow.com. If you believe we process your data unlawfully, you may lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna, www.dsb.gv.at) or with the supervisory authority in your country.

6. Cookies

This website sets no tracking or advertising cookies. Fonts are loaded from a third-party font service; when a page loads, your browser requests the font files from that service, which processes your IP address for delivery. No other third-party content is embedded.

7. Security

The website is served over HTTPS. Form submissions and uploaded files are stored in access-controlled systems limited to the people who need them to handle your request. No transmission over the internet is completely secure, and we cannot guarantee absolute security.

8. Business use only

Our services are aimed at companies and professionals. We do not knowingly collect personal data from persons under 18.

9. Changes to this policy

We may update this policy when our services or legal requirements change. The current version is always available on this page, with the date of the last update shown above.

10. Contact

EuroTradeFlow, Vienna, Austria
Data protection enquiries: privacy@eurotradeflow.com
General enquiries: info@eurotradeflow.com