Privacy Policy

As of: October 1, 2026

1. Person responsible

Responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

RICHFUL International GmbH
Kelvinstr. 29
50996 Cologne
Germany

Represented by: Dr. Yusheng Zhang

Telephone: +49 (0) 2236 87 09 738
Email: info@richful.de
Website: https://richful.de

If you have any questions about data protection and exercising your rights, you can contact the contact details above at any time.

2. General information on data processing

The protection of your personal data is important to us. We process personal data within the framework of the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and the Telecommunications Digital Services Data Protection Act (TDDDG).

Our website serves to present our products and services in the areas of hotel FF&E (Furniture, Fixtures & Equipment) and OS&E (Operating Supplies & Equipment) as well as to establish business contacts.

Personal data is processed in particular when you visit our website, use our contact form and communicate by email or telephone.

The respective purposes, legal bases and recipients of the data processing are explained below.

3. Hosting and server log files

Our website is hosted by the following service provider:

IONOS SE
Elgendorfer Straße 57
56410 Montabaur
Germany

When you visit our website, technically necessary access data can be processed. These include in particular:

• IP address or anonymized IP address
• Date and time of access
• accessed pages and files
• Browser type and browser version
• operating system used
• Referrer URL
• technical information about the server request and response

The processing serves to technically provide our website, to ensure system security, to analyze errors and to protect against unauthorized access.

The legal basis is Article 6 Paragraph 1 Letter f GDPR. Our legitimate interest lies in the secure, stable and functional operation of our website.

The storage period depends on the hosting product used and its configuration.

To the extent that IONOS processes personal data on our behalf, this is done on the basis of an order processing agreement in accordance with Art. 28 GDPR.

Further information can be found at:

https://www.ionos.de/terms-gtc/datenschutzerklaerung/

4. Contact form

We provide a contact form on our website through which you can submit inquiries about our products, services and projects.

Here we process the personal data you provide, in particular:

• Name
• Company
• Email address
• Telephone number
• Subject and message content
• project-related information
• further voluntarily transmitted information and uploaded files

The information transmitted is processed via the technical infrastructure of our website and sent to our business email address.

The processing serves to process your request, business communication and, if necessary, the preparation and implementation of cooperation.

To the extent that processing is necessary to carry out pre-contractual measures or to fulfill a contract with the data subject, it is carried out on the basis of Article 6 (1) (b) GDPR.

For inquiries from contacts of our business customers and other business contacts, processing is carried out on the basis of Article 6 Paragraph 1 Letter f of the GDPR. Our legitimate interest lies in processing business inquiries and maintaining business relationships.

The transmitted data will not be used for general advertising measures solely on the basis of contact.

The form uses a technically necessary session cookie (PHPSESSID), which connects the request with a security token. To protect against misuse, time-limited request stamps are also processed under a pseudonymized identifier.

The data will be deleted as soon as it is no longer required to process your request and any subsequent business relationship, provided there are no legal retention obligations or other lawful reasons for further storage.

5. Contact by email and telephone

If you contact us by email or telephone, we process the personal data you provide, in particular your name, your contact details and the content of your query.

The processing takes place to process your request and for business communication.

Depending on the type of request, the legal basis is Article 6 Paragraph 1 Letter b or Letter f GDPR.

We delete the data as soon as they are no longer required for the stated purposes, provided there are no legal retention obligations or other lawful reasons for further storage.

We use external email services for our business email communication.

6. Processing of business partner data

As part of the initiation, implementation and processing of business relationships, we process personal data from contacts of our customers, suppliers, service providers and other business partners.

This may include, in particular, names, business contact details, functions in the company, communication content as well as project and contract-related information.

The processing takes place in particular for the following purposes:

• Processing business inquiries
• Creation and coordination of offers
• Preparation and execution of contracts
• Coordination of deliveries, projects and services
• Communication with participating companies and contact persons
• Fulfillment of legal documentation and storage obligations

The legal basis is Article 6 (1) (b) GDPR, insofar as the processing is necessary to carry out a contract or pre-contractual measures with the data subject.

When processing personal data from contact persons of legal entities, processing is regularly carried out on the basis of Article 6 Paragraph 1 Letter f of the GDPR. Our legitimate interest lies in the proper implementation and management of business relationships.

To the extent that there are legal obligations, processing is carried out on the basis of Article 6 (1) (c) GDPR.

Personal data can, if necessary, be passed on to service providers and contractual partners involved in the respective business relationship.

The data is stored for the duration of the business relationship and beyond, insofar as statutory retention requirements or other lawful reasons require this.

7. Provision of personal data

The provision of personal data is generally not necessary for a purely informational visit to our website, unless it is technically necessary connection data.

If you contact us via our contact form or by email, we need certain information, in particular a valid contact option, in order to be able to process and answer your request.

The provision of this data is fundamentally voluntary. However, your request may not be processed without the necessary information.

As part of a business collaboration, the provision of certain personal data may be necessary to prepare or execute a contract.

8. Cookies and similar technologies

In the current version, our website only uses technically necessary cookies and local storage to remind you to confirm the cookie notice. Analysis or advertising cookies are not used.

The request form uses the session cookie PHPSESSID to secure the transmission. In the protected administration area, the richful_editor session cookie is used to maintain login. Registration expires after 30 minutes of inactivity; When you log out, the cookie is deleted.

To the extent that storing information on your device or accessing information that has already been stored is absolutely necessary, this is done on the basis of Section 25 Paragraph 2 TDDDG.

After selecting “Understood”, the confirmation of the cookie notice is stored locally in your browser for 183 days (localStorage: rich_cookie_notice_v1). The version of the notice and the time of confirmation are saved. This information is not transmitted to an analysis service.

You can reopen the notice at any time using the “Cookie Settings” function in the page footer. By deleting the website data in your browser, you will also remove the saved confirmation. Confirming the notice does not activate any analytics or advertising technologies.

Further information can be found at Cookie notice.

9. Google Analytics 4

Google Analytics 4 is currently not used on this website. No Google Analytics scripts are loaded and no data from visits to this website are sent to Google Analytics.

If Google Analytics is used in the future, this data protection declaration and cookie management will be adjusted accordingly before activation. Analysis technologies that require consent would only be activated after your consent.

10. Google Tag Manager

Google Tag Manager is currently not used on this website. There is no Google Tag Manager container integrated.

11. Cookie notice and management of settings

On our website we provide a note about the necessary cookies and technologies currently used. This can be reopened at any time via “Cookie Settings” in the page footer.

You can use “Learn more” to view additional information. With “Understood” you confirm the message. The confirmation is stored locally in the browser with the version number and time for 183 days so that the notice does not appear again every time the page is accessed during this period.

There are currently no optional analysis categories and no consent to Google services. Confirmation of the reference does not constitute consent to analysis or advertising.

The processing serves the technically necessary administration and presentation of the notice. The legal basis for the associated processing of personal data is Article 6 (1) (f) GDPR. Our legitimate interest lies in providing data protection information in a user-friendly manner.

12. Data transfer to third countries

There are currently no Google analysis or tag management services integrated into this website. There is therefore no data transfer to Google through such services.

If personal data is transmitted to recipients outside the European Union or the European Economic Area as part of external services, this is done in compliance with the requirements of Article 44 ff. GDPR.

Depending on the recipient and the specific processing, adequacy decisions of the European Commission or suitable guarantees in accordance with Art. 46 GDPR may in particular apply.

13. Recipients of personal data

As part of the operation of our website and our business communication, personal data may be transmitted to external service providers to the extent that this is necessary for the respective purposes and is legally permissible.

These include in particular:

• Hosting and infrastructure service provider
• Email service provider
• service providers and contractual partners involved in specific projects

The current website does not integrate any external providers of web analysis, tag management or consent management. The cookie notice is provided directly on the website.

If external service providers process personal data on our behalf, this is done on the basis of corresponding agreements in accordance with Art. 28 GDPR, to the extent required by law.

Data will only be passed on for other purposes if there is a corresponding legal basis.

14. Storage period and deletion

We generally only store personal data for as long as is necessary for the respective processing purposes.

The following principles apply in particular to the various data categories:

Website access data:
Storage depends on the technical settings and retention periods of our hosting provider.

Contact inquiries:
The data will be deleted as soon as the request has been finally processed and there are no legitimate reasons for further storage.

Business and contractual documents:
If there are statutory retention requirements, the relevant documents will be retained for the legally prescribed periods. Depending on the type of document, retention periods of six, eight or ten years may be particularly relevant.

Cookie notice:
The locally stored confirmation is taken into account for 183 days. The notice then appears again. You can remove the entry beforehand by deleting the website data in the browser. The entry remains in the local browser storage until overwritten or deleted.

After the respective retention periods have expired, personal data will be deleted unless there is another legal basis for further storage.

15. Rights of data subjects

Within the scope of the legal requirements, you are particularly entitled to the following rights:

Information (Art. 15 GDPR)
You have the right to request information about the processing of your personal data.

Correction (Article 16 GDPR)
You can request that incorrect data be corrected or incomplete data be completed.

Deletion (Art. 17 GDPR)
You can request the deletion of your personal data under the legal requirements.

Restriction of processing (Article 18 GDPR)
Under certain conditions, you have the right to request that processing be restricted.

Data portability (Art. 20 GDPR)
Under the legal requirements, you have the right to receive personal data in a structured, common and machine-readable format.

Objection (Art. 21 GDPR)
You have the right to object to certain processing operations based on Article 6 (1) (e) or (f) of the GDPR for reasons arising from your particular situation.

Revocation of consent (Art. 7 Para. 3 GDPR)
You can revoke your consent at any time with future effect.

To exercise your rights, you can contact us at info@richful.de .

16. Right to lodge a complaint with a supervisory authority

According to Article 77 GDPR, you have the right to complain to a data protection supervisory authority if you believe that the processing of your personal data violates data protection regulations.

The supervisory authority responsible for our company headquarters is:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW)

Website: https://www.ldi.nrw.de/

The right to complain to another responsible data protection supervisory authority remains unaffected.

17. Data security

We take appropriate technical and organizational measures to protect personal data from unauthorized access, loss, manipulation and unlawful processing.

This includes suitable measures to secure our website, the technical infrastructure and business communication.

18. Automated decision making

Automated decision-making including profiling within the meaning of Art. 22 GDPR does not take place.

19. Changes to this privacy policy

We reserve the right to adapt this data protection declaration if legal requirements, technical functions of our website or our data processing processes change.

The version published on our website applies.