Data Privacy

Last updated: 03/2026

We take the protection of your personal data very seriously and strive to provide you with comprehensive information about the processing of your personal data. The following privacy policy explains how and for what purposes we process your personal data when you visit our website and/or contact us.

As a rule, the personal data of yours that we collect is obtained directly from you. The statutory basis is, in particular, the EU General Data Protection Regulation (GDPR).

1. Controller within the Meaning of Article 4(7) GDPR

Unless otherwise indicated below, the controller within the meaning of Article 4(7) GDPR responsible for the processing of data described below is:

Schwarz Corporate Affairs GmbH & Co. KG
Stiftsbergstraße 1
74172 Neckarsulm, Germany
Tel.: + 49 (0)7132 – 3078860
E-mail: kontakt@mail.schwarz

2. Communication by E-mail/Telephone/Mail

2.1. Purposes of the Processing/Legal Basis

We treat all personal data that we receive from you by e-mail, telephone or mail confidentially. We use your data solely for the limited purpose of processing your inquiry. The legal basis for the processing is Article 6(1)(f) GDPR. Our legitimate interest arises from the interest in responding to your inquiries so that customer satisfaction is ensured and promoted.

When you send us personal data by contacting us for purposes of initiating or performing an existing contractual relationship, Article 6(1)(b) GDPR is the legal basis for data processing.

2.2. Recipients/Categories of Recipients

As a rule, we do not transfer the data to third parties outside of Schwarz Corporate Affairs GmbH & Co. KG. In exceptional cases, we will have a processor process the data on our behalf. Such processors are carefully selected and bound by contract in accordance with Article 28 GDPR.

Where necessary to process your inquiry, we transfer your data to companies of Schwarz Group, such as Schwarz Corporate Solutions KG and SUPERMARKET LA COCOȘ S.A.

2.3. Obligation to Provide Your Data

You are under no statutory or contractual obligation to provide personal data to us. However, if you do not provide us with the data required to process your request, we will not be able to process or respond to it.

2.4. Storage Time/Criteria for Determining Storage Time

We delete or securely anonymize all information we receive from you when you make inquiries no later than 90 days after the final response is sent to you. The information is retained for 90 days in case you contact us again after receiving a response from us on the same matter and we need to refer to our previous correspondence. Based on experience, we generally do not receive any questions concerning our responses after 90 days. If you assert your rights as a data subject, your personal data will be stored for three years after the final response in order to document the fact that we provided you with comprehensive information and that the legal requirements have been met.

Personal data that you send to us as part of initiating or performing a contract will be deleted after no more than 12 years.

3. Data processed when you visit this website

3.1. Purposes and Legal Basis of Data Processing

When you visit this website, log files are generated containing the following information:

  • the website from which you visit our site;
  • the date and time of access;
  • the client request;
  • the browser you use to access our website;
  • the http response code;
  • the data volume transmitted;
  • the operating system.

The legal basis for the processing is Article 6(1)(f) of the EU General Data Protection Regulation (GDPR). Our legitimate interest arises from our interest in protecting our systems and preventing improper and/or fraudulent activity each time that a user accesses this website.

3.2. Recipients/Categories of Recipients

In exceptional cases, your personal data may be accessible to Schwarz IT KG, Stiftsbergstraße 1, 74172 Neckarsulm, Germany, for support and maintenance purposes because the website is hosted on our behalf on servers provided and operated by Schwarz IT KG.

3.3. Obligation to Provide Your Data

You are under no statutory or contractual obligation to provide personal data to us. However, such data will be processed for technical reasons as soon as you access our site. The only way to prevent your data from being processed is to stop using our website.

3.4. Duration of Storage

We retain said data for a period of 7 days.

4. Your Rights as Data Subject

Under Article 15(1) GDPR, you have the right to access information, free of charge, on the personal data stored about you.

If the statutory requirements are met, you also have a right to rectification (Article 16 GDPR), erasure (Article 17 GDPR) and restriction of processing (Article 18 GDPR) of your personal data.

If the basis of processing is Article 6(1)(e) or (f) GDPR, you have a right to object under Article 21 GDPR. If you object to processing, your data will no longer be processed thereafter, unless the controller demonstrates compelling legitimate grounds for the processing which override the interests of the data subject in the objection.

If you have provided the processed data yourself, you have a right to data portability under Article 20 GDPR.

In the above-mentioned cases, or if you have questions or complaints, please write to or e-mail the data protection officer. You also have a right to lodge a complaint with a data protection supervisory authority. The data protection supervisory authority located in the state in which you live or where the controller is domiciled has jurisdiction.

5. Data protection officer

For further questions concerning the processing of your data or the exercise of your rights, please contact the data protection officer of the respective controller.

Schwarz Corporate Affairs GmbH & Co. KG
- Data Protection Officer -
Stiftsbergstraße 1
74172 Neckarsulm, Germany
datenschutz@mail.schwarz