fulfy
Get a quote
Menü

Privacy policy

Last updated: October 2026 · English translation for your convenience. The German version is legally binding.

1) Introduction and controller

1.1 Thank you for visiting our website. Below we explain how we handle your personal data when you use our website. Personal data is any data that can be used to identify you personally.

1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is FulFy Logistics GmbH, Weimarer Str. 6, 24106 Kiel, Germany, phone: +49 431 55699596, email: datenschutz@fulfy.de. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2) Hosting and data collected when you visit our website

2.1 Our website is hosted by Webflow, Inc., 398 11th Street, Floor 2, San Francisco, CA 94103, USA. Webflow processes the data generated when the website is accessed on our behalf (Art. 28 GDPR). This may involve a transfer of data to the USA. The transfer is based on the EU-US Data Privacy Framework or on standard contractual clauses of the European Commission.

2.2 If you use our website for information purposes only, i.e. you do not register or otherwise send us information, we only process the data your browser transmits to the server (so-called “server log files”). This comprises:

  • the page accessed
  • date and time of access
  • the amount of data sent in bytes
  • the source or referrer from which you reached the page
  • the browser used
  • the operating system used
  • the IP address used

Processing is carried out under Art. 6(1)(f) GDPR on the basis of our legitimate interest in a stable, secure and functional operation of the website. The data is not passed on or used in any other way. We reserve the right to check the server log files retrospectively if there are specific indications of unlawful use.

2.3 For security reasons and to protect the transmission of confidential content (e.g. enquiries to us), this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” and the padlock symbol in your browser bar.

3) Cookies and local storage

3.1 We store information on your device or access information stored there (e.g. cookies or your browser’s local storage). Technically necessary storage is carried out under § 25(2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act), because it is strictly necessary for the service you have requested. All other storage only takes place with your consent under § 25(1) TDDDG and Art. 6(1)(a) GDPR.

3.2 On your first visit, we let you know that this website only uses technically necessary storage. If you click “Got it”, we store the entry “cookiesAccepted” in your browser’s local storage so that the notice does not reappear on every page. The entry contains no information about you and remains stored until you delete the website data in your browser. The legal basis is § 25(2) no. 2 TDDDG. We do not use any tracking or advertising cookies.

3.3 You can delete stored entries at any time by deleting the website data in your browser. You can also set your browser to block cookies and local storage. In that case, the website may not work fully.

4) Contacting us

4.1 Contact and quote forms, email and phone

If you contact us via the contact form, the quote form, by email or by phone, we process the details you provide. You can see which details these are in the respective form. The forms are technically transmitted and stored via our host Webflow (see section 2.1); we receive a notification by email.

We use the data exclusively to respond to your request or to prepare a quote for you. The legal basis is Art. 6(1)(b) GDPR insofar as your enquiry is aimed at concluding a contract, and otherwise Art. 6(1)(f) GDPR on the basis of our legitimate interest in responding to your enquiry. We delete the data once your enquiry has been fully dealt with and no statutory retention obligations prevent this.

4.2 WhatsApp Business

You can contact us via the WhatsApp messaging service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. We use the business version of WhatsApp for this. The WhatsApp button on our website is a simple link: WhatsApp only opens when you click it. No data is transferred to WhatsApp before that.

If you contact us about a specific order, we process the mobile number you use on WhatsApp and, if provided, your first and last name under Art. 6(1)(b) GDPR in order to deal with your request. On the same basis, we may ask you for further details (e.g. order number, customer number, address or email address) so that we can match your enquiry to a case. For general enquiries, processing is carried out under Art. 6(1)(f) GDPR on the basis of our legitimate interest in responding quickly.

We only use your data to respond to your request; it is not passed on to third parties. WhatsApp Business has access to the address book of the device we use and transfers phone numbers stored there to servers of Meta Platforms Inc. in the USA. In this address book we only store the contact details of people who have contacted us via WhatsApp themselves. For transfers to the USA, the provider has joined the EU-US Data Privacy Framework. You can find more information in WhatsApp’s privacy notice: whatsapp.com/legal/privacy-policy-eea.

4.3 Booking appointments via Google Calendar

For intro calls, we embed Google Calendar appointment booking on our contact page, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The calendar is only loaded when you click “Show calendar”. Only then is data such as your IP address and information about your browser transmitted to Google. The legal basis for this is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). If you choose “Show directly in future”, we store this decision in your browser’s local storage. You can withdraw it at any time by clicking “Stop loading automatically” below the calendar or by deleting your browser data. Alternatively, you can open the booking page directly at Google via a link. When booking, you provide your name, email address and preferred time. We use this data to prepare and hold the call (Art. 6(1)(b) GDPR). Google also processes the data on servers in the USA; Google is certified under the EU-US Data Privacy Framework.

4.4 Spam protection with Cloudflare Turnstile

To protect our forms against spam and automated submissions, our host Webflow uses Cloudflare Turnstile from Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. On pages with a form, technical data such as your IP address, browser and device information and characteristics of your interaction are transmitted to Cloudflare to check whether the input comes from a human. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in protecting our website against misuse and spam. Cloudflare has joined the EU-US Data Privacy Framework. More information: https://www.cloudflare.com/privacypolicy/

5) Fonts

The fonts used on this website are delivered by our host (see section 2.1). No connection is made to servers of Google or other font providers.

6) Your rights

6.1 Under the GDPR, you have the following rights in relation to us:

  • Access to the data we process about you (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure of your data (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Notification of rectification, erasure or restriction (Art. 19 GDPR)
  • Data portability (Art. 20 GDPR)
  • Withdrawal of consent given, with effect for the future (Art. 7(3) GDPR)
  • Complaint to a supervisory authority (Art. 77 GDPR), e.g. the Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein, Holstenstraße 98, 24103 Kiel, Germany

6.2 Right to object: If we process your data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation (Art. 21(1) GDPR). We will then no longer process your data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims. If we process your data for direct marketing, you can object to this at any time without giving reasons (Art. 21(2) GDPR).

6.3 For any questions about your data, you can reach us at datenschutz@fulfy.de.

7) Storage period

Unless otherwise stated in this policy, we only store personal data for as long as is necessary for the respective purpose and then delete it, unless statutory retention obligations (e.g. under commercial and tax law) prevent this.