I. Contact information of the Controller
The controller responsible for data processing pursuant to Art. 4 No. 7 General Data Protection Regulation (“GDPR”):
Metals Hub GmbH
Platz der Ideen 2
Phone: +49 211 976 33620
If you have any questions or suggestions regarding data protection or if you want to exercise your rights, please do not hesitate to contact us.
II. Personal Data
III. Processing Activities
The extent and type of processing of your personal data depends on the functionalities and services you may use when visiting our website. In this section we inform you for what purposes we may process your personal data:
1. Server Log Files
In order to log your visit to our website, we use log data (directly or via third parties) in the form of so-called log files. The information in the log files includes: date and time of accessing our website, IP-address, browser type and version, operating system, URL of the previously visited website (Referrer), Date and time stamp of access to our website, Pages clicked on and any other information that your browser provides to us.
We only store these data for the technical administration and the security of the website. The data are anonymized after seven (7) days and deleted after 30 days, provided that there is no legitimate reason to suspect illegal use based on concrete indications. The respective processing is necessary for the purposes of our legitimate interests in a secure website pursuant to Art. 6 para. 1 lit. f GDPR.
Some of the Cookies we use on our website are automatically deleted after the end of the browser session, i.e. after you close your browser (so-called “Session Cookies”). Other Cookies remain on your device and enable us to recognize your browser the next time you visit us (so-called “Persistent Cookies”).
You can also set your browser so that you exclude the acceptance of Cookies for certain cases or generally. You can delete Cookies that have already been set via your browser. Please note that if you delete or do not accept certain Cookies, the functionality of our website may be limited.
We offer a free newsletter. With our newsletter we provide you with updates and marketing information about Metals Hub.
The registration for the newsletter takes place in the so-called double opt-in procedure. To subscribe to the newsletter, you can enter your email address in the respective field on our website. To prevent abuse, we will send you an e-mail after your registration, asking you to confirm your registration. Only if you click on this link you will be added to our mailing list and receive our newsletter. In order to prove the registration process according to the legal requirements, your application will be logged, in particular the registration and the confirmation time and your IP address.
Furthermore, we collect via so-called "web beacons" (these are small graphics in HTML emails) information whether our newsletter was delivered, whether it has been opened and whether links have been clicked. This gives us statistical evaluations and allows us to see exactly how well our newsletter was received by you. This enables us to adapt and improve our newsletter service.
In order to provide our newsletter service we use the services of Mailchimp. This includes processing of the aforementioned data on Mailchimp’s servers located in the USA. Mailchimp is provided by The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA.
Provision of the newsletter service and processing of the data affected is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR. The consent includes the aforementioned data transfer to Mailchimp’s server in the USA. You may revoke your consent at any time via the unsubscribe link included in each newsletter email. Please note that the lawfulness of the processing carried out on the basis of the consent prior to your withdrawal remains unaffected.
Via our Metalshub-Platform third party sellers and buyers of goods can initiate requests for offers or bids, negotiate and complete transactions. When you use our platform we process your personal data in order to provide platform services according to the Metalshub-Platform’s general terms and conditions.
a) Registration and Log-in
You can only use the platform upon registration. In this regard the provision of certain data as indicated by the * in the registration form are necessary. If you do not provide the required data, you cannot register for Metalshub-Platform. The processing of these personal data is necessary to fulfil the registration contract. The provision of further data is voluntary. For both necessary and voluntary data the processing is based on our legitimate interest to handle your registration properly pursuant to Art. 6 para. 1 lit. f GDPR.
If you have been invited by a master user of your company or after you have submitted the registration form you receive a link to confirm your registration. Only if you click on this link, you will have access to the platform to continue the company registration process. Once your registration is confirmed and the required company details are provided we can approve your registration according to the Metalshub-Platform’s . After registration you may update your data or delete your data by cancelling your registration at any time via sending an email to email@example.com.
Please note that we will also process your abovementioned personal data to provide the platform services, especially in order to verify your authority to act, based on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. We further process the abovementioned data to obtain sanction reports as set out in our general terms and conditions Art. 6 para. 1 lit. c GDPR.
b) Buying and Selling
You can create a listing for the sale and purchase of goods. According to the preferences you chose for your listing, personal data may be published within the platform. The processing of personal data serves the purpose of providing our associated services, such as matching. If you are directly our customer, we process your personal data to fulfil our contractual obligations. If you are not our customer but a contact person of our customer acting for the customer the processing is based on our legitimate interest of the execution of the contract with our customer pursuant to Art. 6 para. 1 lit. f GDPR.
Please note that seller and buyer are solely responsible for any processing of the other party’s personal data in connection with their transactions.
5. Contact form
You can send us a message using the contact form or chat. We process the personal data provided by you to handle your request, to provide you with the requested information and to contact you for further assistance. This may involve processing all data contained in fields marked with* which are necessary, such as name, email, location and phone number as well as any other information provided by you as part of your contact request.
The processing is based on our legitimate interest to process your data in order to properly respond to your request pursuant to Art. 6 para. 1 lit. f GDPR.
6. Marketing and Analysis Tools
On our website we use the following marketing and analysis tools:
a) Google Analytics
We use Google Analytics on our website. Google Analytics is a web analytics service provided by Google. The operator responsible for the provision of Google Analytics in the European market is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
During your visit to the website, your user behaviour is recorded in the form of "events". Events can be: page visits, first visit to the website, session start, your "click path", interaction with the website, scrolling (whenever a user scrolls to the bottom of the page (90%)), clicks on external links, internal search queries, interaction with videos, file downloads, ads seen/clicked, language settings.
In addition, the following personal data are collected: Your approximate location (region), your IP address (in shortened form), technical information about your browser and the devices you use (e.g. language setting, screen resolution), your internet service provider, the referrer URL (via which website/advertising medium you came to this website).
Google Analytics has activated IP address anonymisation by default. Through IP anonymisation, your IP address is shortened by Google within member states of the EU or in other contracting states of the Agreement on the European Economic Area (EEA). Only in special situations the full IP address will be transferred to a Google server in the USA and shortened there. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other personal data from Google.
Google will process the aforementioned information for the purpose of analysing your use of the website and to compile reports on website activity for us. The reports provided to us by Google Analytics will be used to analyse the performance of the website.
The personal data collected and linked to the cookies set by Google Analytics are automatically deleted after 2 months. The deletion of personal data whose retention period has been reached takes place automatically once a month.
You can withdraw from your consent at any time with future effect by accessing the settings of our consent management tool and changing your selection there. Please note that the lawfulness of the processing carried out on the basis of the consent until withdrawal from it remains unaffected by this.
In addition, you can prevent the transfer to Google and the processing by Google of the data generated by the cookie relating to your use of the website (including your IP address) by downloading and installing the browser plug-in available at the following link:
b) Google Tag Manager
The legal basis for the use of the Google Tag Manager is your consent in accordance with Art. 6 para. 1 lit. a GDPR. The consent includes the aforementioned data transfer to Google’s server in the USA.
c) Google Fonts
We may use Google Fonts (in particular Open Sans) on our website. Google Fonts is a service that allows us to use individual fonts on our website. Responsible for operating Google Fonts in the EEA is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
When you visit our website, the respective fonts are loaded from a Google server. This also involves the transmission of certain personal data to the Google servers. This includes your IP address, language settings, technical information about your browser (browser version, browser screen resolution, browser type), operating system and the referrer URL (via which website you came to this website).
All Google Fonts are optimised for use on the internet. This reduces data volume and is especially beneficial when using the fonts on mobile devices. This reduces the data volume required and is particularly beneficial when the website is accessed on mobile devices. When you visit our website, the small file size ensures a fast load time.
We may only use Google Fonts with your prior consent pursuant to Art. 6 para. 1 lit. a GDPR. This means the website cannot load Google Fonts from the Google servers without your prior consent. In case you do not give us your consent we use only locally implemented fonts.
The legal basis for this data processing is your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future.
7. Our social media pages
In addition to this website, we operate several social media pages. If you interact with our social media pages, we may process certain personal data, e.g. if you leave comment, like or retweet a post. The legal basis for processing of your data is our legitimate interest in operating social media pages and to inform and communicate with the users of the respective social network, pursuant to Art. 6 para. 1 lit. f GDPR.
We operate the following social media pages:
● Our Facebook page can be accessed via
● Our Twitter channel can be accessed via
● Our LinkedIn page can be accessed via
● Our Xing page can be accessed via
● Our YouTube channel can be accessed via:
In addition, the operators of the respective social media networks may process your personal data when using their network. You will find further information in the privacy policies provided by the operators of the social media networks (please see below):
IV. Transfer of data to third parties
We may transfer your personal data to third parties in the following cases.
We transfer your personal data to the following recipients or categories of recipients:
● Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (re. use of Google Analytics, Google Fonts and Google Tag Manager)
● Hotjar Ltd Dragonara Business Centre 5th Floor, Dragonara Road, Paceville St Julian's, STJ 3141 Malta (re. use of Hotjar)
● The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA (re. provision of Mailchimp for the newsletter service)
● Invoice service provider (re. the invoice processing which involves processing the online order and handling the invoices)
V.Transfer of data to third countries
A transfer to a third country will only take place in compliance with the applicable data protection regulations, in particular the guarantee of an adequate level of data protection. This means that your personal data will only be transferred insofar as a decision of the EU Commission on an adequate level of data protection exists for the respective third country (Art. 45 GDPR), appropriate guarantees are provided for the protection of your personal data (cf. Art. 46 GDPR) or a legal permission norm exists (cf. Art. 49 GDPR). Appropriate safeguards within the meaning of Art. 46 GDPR include the standard data protection clauses published by the EU Commission.
VI. Storage period of your personal data / Erasure of your personal data
We only store personal data for as long as it is necessary for the purposes for which they are processed or if your consent has been revoked. In addition, statutory storage requirements may apply.
VII. Legal obligation to provide personal data
You are neither obliged by contract nor by law to provide us with your personal data. Please note the following: if you do not provide us with the personal data we may need for the respective purposes, such as the execution of a contract with you, the respective contractual relationship may not come into existence.
VIII. Automated individual case decisions and measures for profiling
We do not use any means of automated individual decision-making or profiling.
IX. Your rights as data subject
The GDPR provides you, as a data subject, with the following rights regarding the processing of your personal data:
• The right of access (Art. 15 GDPR)
• The right to rectification (Art. 16 GDPR)
• The right to erasure (Art. 17 GDPR)
• The right to restriction of processing (Art. 18 GDPR)
• The right to data portability (Art. 20 GDPR)
Insofar as we process your personal data based on your consent, you can withdraw from your consent at any time with effect for the future.
As far as your personal data is processed for the purpose of our legitimate interest pursuant to Art. 6 (1) lit. f GDPR, you have the right to object according to Art. 21 GDPR. You can find further information on your right to object in accordance with Art. 21 GDPR below.
Furthermore, you have the right to lodge a complaint with the competent supervisory authority (Art. 77 GDPR) if you are of the opinion that the processing of your personal data is not lawful.
Information about your right to object in accordance with Art. 21 General Data Protection Regulation (GDPR)
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you on the basis of Art. 6 para. 1 lit. f GDPR (processing of personal Data based on a balancing of interests); this includes profiling based on those provisions (Art. 4 No. 4 GDPR).
Should you decide to object the processing, we will stop to process personal data concerning you, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the purpose of establishment, exercise or defence of legal claims.
You also have the right to object at any time to processing of personal data concerning you for the purpose of advertising; this also applies to profiling insofar as it is associated with advertising.
Should you decide to object to the processing for advertising purposes, we will stop to process personal data concerning you for these purposes.
The objection is not subject to any form. Ideally, it should be lodged via email at the bodies mentioned in Section I.
In order to exercise the aforementioned rights, you can contact the bodies mentioned in Section I.