Last updated: June 2025
Privacy Policy
This Privacy Policy describes how Valtum Diving collects, uses, processes, and protects personal data when you use our B2B procurement platform. We process personal data in accordance with the GDPR, the German Federal Data Protection Act (BDSG), and other applicable data protection laws.
1. Data Controller
Valtum Diving Sonnenweg 11, 60529 Frankfurt am Main, Germany Email: damrau@valtumdiving.com Phone: +49 1705491060 For data protection enquiries, please contact us marking your correspondence "Data Protection".
2. Personal Data We Collect
Account Registration: Full name, company name and registration details, business email address, phone number, billing and delivery address, VAT identification number. Transaction Data: Order history and details, invoice and payment records, shipping and delivery information. Technical and Usage Data: IP address, browser type, pages visited, device type, cookie identifiers. Communication Data: Messages sent via contact forms or email, support requests and correspondence.
3. Purposes and Legal Basis for Processing
Performance of Contract (Art. 6(1)(b)): Processing your registration, fulfilling orders, processing payments, verifying business identity and VAT status via VIES. Legal Obligation (Art. 6(1)(c)): Compliance with German tax law and VAT regulations, retention of commercial and financial records as required by HGB and AO, anti-fraud obligations. Legitimate Interests (Art. 6(1)(f)): Improving platform functionality and security, fraud prevention, responding to legal claims. Consent (Art. 6(1)(a)): Sending optional marketing communications where you have opted in, setting non-essential cookies.
4. Data Retention
Account data: Duration of account plus 3 years after closure. Transaction and invoice records: 10 years as required by German tax law (AO §147). Communication records: 3 years. Technical and usage data: 12 months.
5. Sharing of Personal Data
We do not sell your personal data. We may share your data with: payment processors (e.g. Stripe), shipping and logistics providers, IT service providers and cloud hosting partners operating under data processing agreements, tax and legal advisors, and public authorities where required by law. All third parties are bound by data processing agreements in accordance with GDPR Article 28.
6. International Data Transfers
We primarily process your data within the EEA. Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission.
7. Your Rights Under GDPR
You have the following rights: - Right of access (Art. 15): Request a copy of your personal data. - Right to rectification (Art. 16): Correct inaccurate or incomplete data. - Right to erasure (Art. 17): Request deletion, subject to legal retention obligations. - Right to restriction (Art. 18): Restrict processing in certain circumstances. - Right to data portability (Art. 20): Receive your data in a machine-readable format. - Right to object (Art. 21): Object to processing based on legitimate interests. - Right to withdraw consent: Withdraw at any time without affecting prior processing. Contact us at damrau@valtumdiving.com to exercise these rights. You may also lodge a complaint with: Hessischer Beauftragter fuer Datenschutz und Informationsfreiheit (HBDI) Postfach 3163, 65021 Wiesbaden, Germany www.datenschutz.hessen.de
8. Data Security
We implement appropriate technical and organisational measures including TLS/SSL encryption, access controls, regular security audits, and staff training. In the event of a personal data breach posing a risk to your rights and freedoms, we will notify you and the relevant supervisory authority as required by GDPR.
9. Automated Decision-Making
We use automated processes to verify VAT numbers via VIES. This determines whether reverse charge VAT treatment applies to your account. If you believe this determination is incorrect, you have the right to request human review by contacting us.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on our platform or by email.
11. Contact
For any questions about this Privacy Policy: Valtum Diving Sonnenweg 11, 60529 Frankfurt am Main, Germany Email: damrau@valtumdiving.com Phone: +49 1705491060