01 · Controller
D.CRAMER ESOLUTIONS LTD
Istanbul 10, Athanasia Court, Office No. 6
CY-6025 Larnaca
Cyprus
Email: hello@nexport-consulting.com
Represented by its director Daniel Cramer. For any data protection question, contact us at the same address.
02 · Visiting this website
This website is delivered through Cloudflare (Cloudflare, Inc., USA). Cloudflare processes technically necessary data such as IP address, time, requested page and browser identifier to deliver the site and protect it against attacks. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework.
We use no analytics and no advertising tools. Fonts and images are served from our own server. If you choose between the page for manufacturers and the page for companies in Germany on your first visit, your browser stores that choice locally for 30 days (local storage) so the choice window does not appear again. This storage is strictly necessary for the function you requested (Section 25(2) no. 2 German TDDDG) and is not transmitted to us.
Language. When you open the homepage for the first time, Cloudflare derives your country from your IP address and redirects visitors from Italy, Spain, Poland, Czechia or Turkey to the page in their language. The country is evaluated only at that moment and not stored. If you choose a language in the language menu, your browser sets a single cookie (nx-sprache, containing only the language code, valid for one year) so the redirect does not override your choice. This cookie is strictly necessary for the function you requested (Section 25(2) no. 2 German TDDDG); the legal basis for the redirect is our legitimate interest in showing visitors the right language (Art. 6(1)(f) GDPR).
03 · Contact form and email
The contact form transmits your name, company, email address, country or demand, norms and your message to our system (Supabase, data centre in the EU). We process these details to answer your request and to arrange an introduction (Art. 6(1)(b) GDPR). To prevent abuse, we store your IP address only as a hash and use it to limit the number of requests (Art. 6(1)(f) GDPR).
When you write to us by email, we process your details to answer your request and, where applicable, to prepare a contract (Art. 6(1)(b) GDPR) or on the basis of our legitimate interest in handling business enquiries (Art. 6(1)(f) GDPR).
04 · Business outreach
We contact businesses by email for which our service may be relevant (manufacturers abroad and companies in Germany). For this we process business contact data: company name, name and role of the contact person, business email address and public information about the company. The data comes from publicly available sources such as company websites, industry directories and trade fair exhibitor lists, partly via service providers for data research and email delivery.
The legal basis is our legitimate interest in business outreach (Art. 6(1)(f) GDPR). You can object at any time, most simply by replying “no” or using the unsubscribe link. We then keep your address only on a suppression list so that you receive no further messages.
05 · Profiles and introductions
If you send us a capability or requirement profile, we process it to find suitable partners and to make the introduction (Art. 6(1)(b) GDPR). We use AI-assisted analysis to assess the fit. Every proposal is reviewed and approved by a person; no decision based solely on automated processing within the meaning of Art. 22 GDPR takes place.
Before an introduction, manufacturers receive only an anonymised summary of the requirement profile. We pass on the company name and the contact details of the named contact person of a company in Germany only with that company's consent (Art. 6(1)(a) GDPR), including to manufacturers outside the EU; for this transfer to a third country, the consent is also the basis under Art. 49(1)(a) GDPR. Third countries may not offer a level of data protection equivalent to the EU. Consent can be withdrawn at any time with effect for the future. The company in Germany receives the manufacturer's contact details to carry out the introduction (Art. 6(1)(b) GDPR).
06 · Service providers and transfers to third countries
We use processors that handle data only on our instructions:
- Cloudflare (delivery of the website and of our internal system)
- Supabase (database, data centre in the EU)
- Resend (sending emails from our system)
- Anthropic (AI-assisted analysis of profiles)
- Stripe (payment processing for manufacturers)
- Service providers for data research and email delivery in business outreach
Where providers are located in the USA or other third countries, transfers are based on an adequacy decision (such as the EU-US Data Privacy Framework) or the EU Standard Contractual Clauses.
07 · Retention
We delete personal data as soon as it is no longer needed for its purpose. Contact data from business outreach without a response is deleted after twelve months at the latest. Suppression list entries are kept as long as needed to respect your objection. Invoices and contract documents are kept for the statutory retention periods.
08 · Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time. An email to us is enough.
You may lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the authority responsible for us in Cyprus (Commissioner for Personal Data Protection) or the authority where you live or work.
09 · Obligation to provide data
You are not obliged to provide us with data. Without a profile and without consent to share it, however, we cannot make an introduction.