Legal
Privacy Policy
This policy explains which personal data 1heiz Wood Pellets processes when you use this website or contact us, why we do so, and the rights you have.
Last updated: 13 October 2026
1.Controller and contact details
1heiz Wood Pellets processes personal data in accordance with the EU General Data Protection Regulation (GDPR). The controller responsible for this website is:
1heiz Wood PelletsDiezmannstraße 12 04207 Leipzig Germany
Phone: +49 163 6468934
Email: info@1heizwoodpellets.com
2.Purpose and legal basis
We process personal data for the following purposes:
- Contracts and pre-contractual steps. To prepare quotes, fulfil orders and issue invoices. Legal basis: Art. 6(1)(b) GDPR, and Art. 6(1)(c) GDPR where tax and commercial law require us to keep records.
- Enquiries. To answer questions you send through the enquiry form, by email, by phone or by post. Legal basis: Art. 6(1)(b) GDPR where your enquiry relates to a possible order, your consent under Art. 6(1)(a) GDPR, and otherwise our legitimate interest in answering you under Art. 6(1)(f) GDPR.
- Operating the website. To deliver the pages you request and to detect faults and misuse. Legal basis: our legitimate interest in a stable and secure website under Art. 6(1)(f) GDPR.
3.Recipients
We do not sell personal data. It is passed on only where that is necessary for the purposes above.
3.1 Contract performance or pre-contractual measures
To prepare and deliver an order, the data needed for that step may be passed to suppliers and carriers involved in the delivery, to our email and telephone providers, to the provider that hosts this website, and to tax advisers or authorities where the law requires it.
3.2 Enquiry form or other contact
- Enquiry form: the website host and the service that delivers form submissions to us.
- Email: our email provider.
- Phone and messaging: our telephone provider and, if you choose to message us, the operator of the messaging service, which processes your data under its own privacy terms.
- Post: the postal operator.
Service providers acting on our behalf process data only on our instructions. If one of them processes data outside the European Economic Area, we make sure an adequate level of protection applies, for example through an adequacy decision of the European Commission or standard contractual clauses.
3.3 Data analysis by third-party providers
None. This website does not use analytics, advertising or tracking services, and does not embed social media plugins, maps or videos from third parties. The fonts are served from our own website, so no font provider receives your IP address.
5.Storage period
We keep enquiry data for as long as it takes to deal with your request and any follow-up questions. If an enquiry does not lead to an order, we delete it once it is no longer needed.
Where an order is placed, we keep the related records for the periods required by German commercial and tax law. Server log data is kept only for as long as needed to operate and secure the website.
6.Data protection rights
Under the GDPR you have the right to:
- information about the personal data we hold on you (Art. 15);
- correction of inaccurate data (Art. 16);
- deletion of your data (Art. 17);
- restriction of processing (Art. 18);
- receive your data in a portable format (Art. 20);
- lodge a complaint with a data protection supervisory authority (Art. 77).
To exercise these rights, write to the address in section 1 or to info@1heizwoodpellets.com.
7.Right of objection and other rights
Withdrawing consent. Where processing is based on your consent, you can withdraw it at any time with effect for the future (Art. 7(3) GDPR). Processing carried out before the withdrawal remains lawful.
Objecting to processing. Where processing is based on our legitimate interests under Art. 6(1)(f) GDPR, you can object to it at any time on grounds relating to your particular situation (Art. 21 GDPR).
Supervisory authority. You may complain to any data protection authority, in particular in the EU member state where you live or work. The authority responsible for our registered address is the Saxon Data Protection and Transparency Commissioner (Sächsische Datenschutz- und Transparenzbeauftragte), Dresden.
8.Mandatory data provision
You are not obliged to give us personal data. Without the details below, however, we cannot provide the service concerned.
8.1 Contract performance
To prepare a quote and carry out an order we need your name, a way to reach you, the product and quantity, and the delivery address. Invoices additionally require the billing details the law prescribes.
8.2 Enquiry form or other enquiries
The enquiry form requires your name, email address, the type of enquiry and your message. Company, phone number, product, estimated quantity and delivery location are optional.
8.3 Website operation and fault detection
When you open a page, the hosting server automatically receives the technical data your browser sends: IP address, date and time of the request, the page requested, the referring page, and browser and operating system. This is needed to deliver the page and to trace faults.
9.Customer account, newsletter and price alerts
This website has no customer accounts, newsletter or price-alert service, so no data is collected for these purposes.
10.Automated decision-making
We do not make decisions about you by automated means and do not carry out profiling.
