Privacy Policy

1. Responsible operator

Pooja Chandra, trading as HAPV CONSULTING, is responsible for personal-data processing by HAPV. Business address: Hohe Strasse 36, 44139 Dortmund, Germany. Email: business@hapvconsulting.de.

2. Website delivery and security

Vercel, Inc., United States, hosts this website. Technical requests can include your IP address, requested page or file, time, browser information and referring page. This processing delivers the website and helps identify errors, prevent misuse and maintain availability.

Our legal basis is our legitimate interest in operating a reliable and secure business-information website, Article 6(1)(f) GDPR. Technical information is retained according to its operational, security and legal purpose; HAPV does not maintain a separate archive of visitor-level server logs. The enquiry retention period below does not apply to hosting records.

3. Email enquiries

We use your email address, message and any name, company details or attachments you provide to answer and follow up on your enquiry. Providing this information is voluntary; without a reply address and sufficient information, we may be unable to respond. We do not use enquiries for newsletters or general promotional mailing lists.

Our mailbox, business@hapvconsulting.de, uses Namecheap’s PrivateEmail service. Messages are handled by the proprietor and authorised HAPV staff, with email providers processing them for delivery and storage. We do not forward enquiries to manufacturers, suppliers or external agents.

Depending on the enquiry, processing is based on requested pre-contractual steps under Article 6(1)(b) GDPR or our legitimate interest in answering business correspondence under Article 6(1)(f). Statutory privacy requests are handled under Article 6(1)(c).

The website does not send enquiry messages directly. Contact tools open your email application or prepare a Gmail/Outlook draft. Choosing a webmail provider passes the prepared subject and message to that provider; you review and send it there.

4. Language cookie and locally hosted media

The first-party cookie hapv-language stores en or de to display English or German. Selecting EN/DE saves the choice for up to 365 days. A fresh visit to the home address starts in English and sets a session cookie, replacing an earlier saved choice. The cookie contains no advertising identifier. You can change languages using EN/DE or delete the cookie in your browser.

The purpose is to provide the website’s language functionality; related personal-data processing is based on Article 6(1)(f) GDPR. We use no advertising cookies. Font files, product artwork, downloads and podcast audio are served through the website’s hosting. The podcasts load when you choose to play them, without an embedded third-party podcast player.

5. Visitor statistics

We use Vercel Web Analytics to understand aggregate website use and improve our content. It records page visits, referral information, approximate location and browser/device information. Vercel describes a request-derived visitor identifier whose session is discarded after 24 hours, rather than advertising cookies or cross-site visitor profiles. Aggregate reports can remain available longer; 24 hours is not the retention period for every statistic.

Where personal data is processed for these statistics, we rely on our legitimate interest in understanding and improving website use under Article 6(1)(f) GDPR. We do not add enquiry messages or email addresses as custom analytics events. HAPV does not use the statistics to make automated decisions with legal or similarly significant effects. You may object as explained under “Your rights”.

6. Retention of enquiries

For closed enquiries that do not result in business, our retention period is up to 24 months after the last substantive exchange. We delete information earlier when it is no longer needed, unless a legal retention duty or a specific need to establish, exercise or defend legal claims requires longer retention.

Pooja Chandra is responsible for reviewing enquiry retention and deletion. Records resulting from a business relationship are assessed separately under applicable retention requirements. Provider security records and backups have their own purposes and retention arrangements; deleting an email is not a promise of immediate removal from every backup.

7. Providers and international processing

Vercel and Namecheap provide the hosting and email services described above. Their services can involve processing in the United States and other countries outside the EU/EEA. Provider information about international processing and safeguards is available through the links below; we do not represent that all processing takes place in Germany or the EU.

Vercel’s privacy notice describes its participation in the EU–US Data Privacy Framework for covered transfers. Namecheap publishes data-processing terms including standard contractual clauses. You can contact HAPV to request information about the safeguards relevant to your data.

The proprietor and HAPV staff normally access enquiries within the EU and may access them during business travel, including in India, the UAE and CIS countries. Such internal access does not give independent overseas agents or partner companies access to enquiries.

• Vercel: international processing ↗
• Namecheap: data-processing terms ↗

8. Your rights

Subject to the conditions in the GDPR, you may request access, correction, deletion, restriction of processing and data portability. Where we rely on legitimate interests, you may object on grounds relating to your particular situation. Where processing relies on consent, you may withdraw it for the future without affecting earlier lawful processing.

Send requests to business@hapvconsulting.de. We may need proportionate information to verify your identity. You may complain to a competent supervisory authority, including where you live or work. The authority for North Rhine-Westphalia, where HAPV is based, is LDI NRW.

9. Updates

Last updated: 16 September 2026. We update this notice when relevant processing practices or requirements change.