Privacy policy

Controller

Hummingbird Branding Solutions e.U., Dampfgasse 3/6, 1100 Vienna, Austria, team@source387.com. Data protection contact: team@source387.com.

Enquiries and sourcing requests

When you send a request we store your name, company, e-mail, optional phone number, country and message, and pass them to the supplier you contacted. A sourcing request stays with our team; suppliers receive your contact details only once we forward their reply to you.

Legal basis: steps prior to a contract at your request (Art. 6(1)(b) GDPR). Retention: [period].

Supplier accounts

We store account and company data to run the membership, issue invoices and publish the profile (Art. 6(1)(b) GDPR). Invoices are kept for the statutory period: [period].

Newsletter

We send the newsletter only after you confirm your address through the link we e-mail you (double opt-in), and you can unsubscribe from any issue. Legal basis: your consent (Art. 6(1)(a) GDPR).

Statistics without cookies

To show suppliers how often their profile is seen, we count visits without cookies. Your IP address and browser identifier are combined into a keyed hash that changes every day and cannot be reversed; neither is stored. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

Spam protection

Forms are protected by a bot check that runs entirely on our own servers: your browser solves a small computing task before sending. No third party is involved and no cookie is set.

E-mails we send

Every e-mail the platform sends (confirmations, invoices, notices) is kept for up to 30 days after sending, so failed deliveries can be retried and problems traced, and is then deleted.

E-mail is delivered through [mail provider] in [location].

Hosting and your rights

The platform is hosted by [hosting provider] in [location].

You have the right to access, rectification, erasure, restriction, portability and objection, and to lodge a complaint with a supervisory authority.