Skip to content

Privacy Policy

Draft for review: this policy must be checked by a lawyer before launch, and every value marked in square brackets must be replaced with the real company data.

How we handle personal data on this website.

Version: September 2026 β€” draft

1. Who is responsible

The controller for the processing of personal data on this website is the operator named in the Imprint, based in Berlin, Germany. Tradepoint-World is a brand of Internationaler Wirtschaftsrat e.V.

Postal address, legal name and telephone number are listed in full on the Imprint page. You can reach us by e-mail at info@tradepointworld.com.

2. Contact for data protection questions

For any question about your data, or to exercise your rights, contact: [ TO BE SUPPLIED β€” data protection contact / DPO, e-mail address ].

You will normally receive a reply within one month, as required by Article 12(3) GDPR.

3. When you visit this website

Each time a page is requested, our hosting provider automatically records technical data in server log files: your IP address, the date and time, the page requested, the referring page, the HTTP status, the amount of data transferred, and your browser and operating system version.

Purpose: operating the site securely and stably, and detecting and tracing attacks. Legal basis: Article 6(1)(f) GDPR β€” our legitimate interest in a secure and functioning website.

Retention: log data is deleted after 7 days, unless a specific security incident requires it to be kept longer for evidence.

This data is not used to identify you personally and is not combined with any other data.

4. When you use the contact form

We collect: your name, e-mail address, the country or Tradepoint you are interested in, the type of enquiry and your description of the project β€” these are required. Optionally you may also give your company or organisation, your position, your telephone number and your industry. We additionally store the interface language you used, the page you sent the form from, and the fact, time and wording version of your consent.

Purpose: to answer your enquiry and, where relevant, to forward it to the appropriate local Tradepoint.

Legal basis: your consent under Article 6(1)(a) GDPR, given by ticking the consent box, and Article 6(1)(b) GDPR for steps taken before entering into a contract where your enquiry concerns a possible business relationship.

Recipients: our own staff in Berlin, the local Tradepoint relevant to your enquiry, our hosting and database provider and our e-mail provider (both named below as processors). We do not sell or otherwise pass on your data.

Retention: enquiries are stored for 24 months and then deleted automatically by a scheduled job. If you ask us to delete them earlier, we do so unless we are legally required to keep them.

Providing the data is voluntary; without the required fields we cannot process your enquiry.

5. Language preference stored on your device

When you choose an interface language, we store that choice in your browser under the key "tpw-language" in localStorage, so the site opens in your language next time.

This is not a tracking technology: it holds no identifier, it is never transmitted to us, and it is not used to recognise you. Because it is strictly necessary to deliver the language function you explicitly requested, it is exempt from the consent requirement of Β§ 25(2) no. 2 TDDDG.

Our router additionally keeps your scroll position for the current tab in sessionStorage ("tsr-scroll-restoration-v1_3"). It contains no personal data, is cleared when you close the tab and is likewise strictly necessary for the navigation you requested.

You can delete it at any time in your browser settings. This website sets no cookies for analytics, advertising or profiling, which is why it presents no cookie banner.

6. Processor: Supabase (hosting and database)

Enquiries submitted through the contact form are stored in a database operated by Supabase, Inc. acting as our processor under Article 28 GDPR.

Storage location: the European Union β€” region eu-central-1, Frankfurt am Main, Germany.

A data processing agreement is in place with Supabase, and the data does not leave the European Union in the ordinary course of processing.

7. Processor: e-mail provider

A notification about each new enquiry is sent to our own mailbox by e-mail. Our e-mail provider [ TO BE SUPPLIED β€” name and registered office of the e-mail/SMTP provider ] acts as a processor under Article 28 GDPR on the basis of a data processing agreement.

E-mail transport is encrypted in transit. Please avoid sending special categories of data by e-mail.

8. No tracking, no advertising, no profiling

This website uses no analytics, no advertising networks, no social media plug-ins, no embedded videos or maps and no external fonts. All fonts, scripts, styles, images and the map geometry of the globe are served from our own domain.

We carry out no profiling and no automated decision-making within the meaning of Article 22 GDPR.

9. Your rights

You have the right of access (Article 15 GDPR), to rectification (Article 16), to erasure (Article 17), to restriction of processing (Article 18), to data portability (Article 20) and to object to processing based on legitimate interests (Article 21).

Where processing is based on your consent, you may withdraw it at any time under Article 7(3) GDPR, with effect for the future; withdrawal does not affect processing carried out before it. A short e-mail is enough.

You also have the right to lodge a complaint with a supervisory authority under Article 77 GDPR. The authority competent for us is the Berliner Beauftragte fΓΌr Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin, Germany.

10. Changes to this policy

We update this policy when the website or the legal situation changes. The version and date are shown above.