LEGAL

Privacy policy

This policy explains which personal data we process when you visit traderoute-eu.com or contact us, for what purpose and on which legal basis. Last updated: October 2026.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

TradeRoute EU
Hamburg, Germany
Email: info@traderoute-eu.com

2. Hosting and server log files

This website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. Hostinger processes data on our behalf as a processor.

Each time a page is requested, the server records the following in log files: IP address, date and time of the request, the page requested, the browser used and the referrer (the page you came from). We process this data to operate the website and keep it secure. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the stable and secure operation of the website.

3. Quote and contact form

If you send us a request through the form, we process the following data: name, company, email address, phone number (optional), the shipment details you enter (origin, destination, mode of transport, cargo description, weight or volume), the page from which the form was sent and campaign parameters (information in the link that shows which advertisement or campaign led you to us).

We use this data to prepare a quote and to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR (steps taken at your request before entering into a contract).

Enquiries are stored in the database of this website and sent by email to our staff. They may also be processed in our internal enquiry management tools.

To protect the form against spam we use a hidden field, a timing check and a rate limit based on a short-lived hashed IP address. We do not use a third-party captcha service.

4. Contact by email

If you write to us by email, we process your message and the details in it in order to answer you. The legal basis is Art. 6(1)(b) GDPR where your message relates to a contract or a quote, and otherwise Art. 6(1)(f) GDPR.

5. Cookies and analytics


By default, this website does not set cookies. Visits are counted with a cookie-free analytics service, described below. If you accept analytics in our cookie banner, we also use Google Analytics and Microsoft Clarity, both described below. Apart from that, the only records of your visit are the server log files described in section 2.

Fonts are served from our own server. The website makes no requests to Google Fonts and contains no social media plugins, no advertising trackers and no embedded third-party maps or videos. Details are in our cookie policy.

We measure how the site is used with Umami, a privacy-friendly analytics service. It sets no cookies and stores no information on your device. It records page views, the referring site, browser and device type and the country, and it counts events such as a quote form being sent or a calculator being used. Your IP address is not stored and visitors are not followed across sites or over time. The legal basis is our legitimate interest in improving the site (Art. 6(1)(f) GDPR). The provider is Umami Software, Inc.


Google Analytics (only with your consent)

If you click “Accept” in our cookie banner, we use Google Analytics 4 to understand how visitors use this website, for example which pages are read and how people arrive. The service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We load it through Google Tag Manager, a service of the same company, and only after you click “Accept”. Tag Manager sets no cookies of its own, but loading it sends your IP address to Google like any other Google service. We use the Google Site Kit plugin only to view the statistics in our website dashboard.

Google Analytics sets cookies in your browser (_ga and a cookie whose name starts with _ga_, each valid for up to two years) and sends usage data to Google. This can include technical details such as your IP address, browser and device. Google may process this data on servers outside the EU, including in the United States, where Google LLC takes part in the EU-U.S. Data Privacy Framework. We do not use Google Analytics for advertising and we do not switch on advertising features.

Legal basis. Your consent under Art. 6(1)(a) GDPR and section 25(1) TDDDG. Until you accept, the Google tag is not loaded and no data is sent to Google.

Withdrawing consent. You can change your choice at any time with the “Cookie settings” link in the footer of every page. If you decline or withdraw, the Google Analytics cookies are deleted from your browser and no further data is sent. Withdrawal does not affect the lawfulness of processing before it.

Storing your choice. Your choice is saved in your browser’s local storage for 180 days, then we ask again. This record is technically necessary and contains no personal data.

Microsoft Clarity (only with your consent)

If you click “Accept” in our cookie banner, we also use Microsoft Clarity, a service of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland. Clarity records how visitors use our pages, for example clicks, scrolling, mouse movements and page views, and shows them as heatmaps and session recordings. We use this to find pages and forms that are hard to use and to improve them. Text typed into form fields is masked and is not visible to us in the recordings.

Clarity sets the cookies _clck and _clsk on this website and may set further cookies of Microsoft (CLID, ANONCHK, MR, MUID, SM). They store a pseudonymous ID and are listed in our cookie policy. Clarity processes technical data such as your IP address, browser, device, approximate location and the pages you visit. The data is stored in the Microsoft Azure cloud. Microsoft Ireland Operations Limited is our contract partner. Microsoft Corporation in the United States may process data as well, and the transfer between the two Microsoft companies is covered by Standard Contractual Clauses. We do not use Clarity for advertising and we switch off its advertising storage.

Legal basis. Your consent under Art. 6(1)(a) GDPR and section 25(1) TDDDG. Until you accept, the Clarity script is not loaded and no data is sent to Microsoft.

Withdrawing consent. You can change your choice at any time with the “Cookie settings” link in the footer of every page. If you decline or withdraw, the Clarity cookies on this website are deleted and Clarity stops recording. Withdrawal does not affect the lawfulness of processing before it.

More information. Microsoft Privacy Statement.

6. Recipients and processors

Within our company, your data is available to the staff who handle enquiries. Hostinger International Ltd. receives data as our hosting processor, as described in section 2. We do not sell personal data and do not pass it on for advertising purposes. If you accept analytics in our cookie banner, Google Ireland Limited and Microsoft Ireland Operations Limited also receive usage data, as described in section 5.

7. Retention

We delete enquiry data when it is no longer needed for handling the enquiry. If statutory retention periods under commercial and tax law apply, for example to business correspondence and accounting records, we keep the data until those periods have ended.

Google Analytics data is kept for the retention period set in our Analytics account, which is never longer than 14 months. Microsoft Clarity keeps session recordings for 30 days, and a random sample of recordings can be kept for up to nine months. Your cookie choice is stored in your browser for 180 days.

8. Your rights

Under the GDPR you have the following rights regarding your personal data:

  • access to the data we hold about you (Art. 15)
  • rectification of inaccurate data (Art. 16)
  • erasure (Art. 17)
  • restriction of processing (Art. 18)
  • data portability (Art. 20)
  • objection to processing that is based on Art. 6(1)(f) GDPR, on grounds relating to your particular situation (Art. 21)

Where processing is based on your consent, you can withdraw it at any time with effect for the future. To exercise your rights, write to info@traderoute-eu.com.

9. Supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority. The authority competent for us is:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig-Erhard-Str. 22
20459 Hamburg

10. Changes and language versions

We update this policy when the website or the legal requirements change.

This website is offered in several languages. Where the versions differ, the English and German legal texts apply.