Privacy Policy
Information pursuant to Art. 13 and 14 GDPR · Last updated: 29 July 2026
Beta version. FMCGBridge is a closed test release. We process no payment data and offer no paid services. Accounts are activated manually after review.
1. Controller
[COMPANY NAME / FULL NAME]
[STREET], [POSTAL CODE] [CITY], Germany
Email: [CONTACT EMAIL]
Data protection contact: [DATA PROTECTION OFFICER — only required in specific cases, see docs]
2. What we process and why
Account data — email address and password. The password is stored exclusively as a hash by our authentication provider; we never see it in plain text. Purpose: creating and securing your account. Legal basis: Art. 6 (1)(b) GDPR (performance of a contract).
Profile data — first name, last name, job position, company name, company address, website, and the company details you enter (markets, categories, certifications, products, images). Purpose: presenting your company to potential partners. Legal basis: Art. 6 (1)(b) GDPR.
Messages and match requests — content and metadata of messages you exchange with other members, plus the status of match requests. Purpose: enabling contact between brands and distributors. Legal basis: Art. 6 (1)(b) GDPR.
Profile views and shortlists — we record which member viewed which company profile and when, and which profiles you saved. Views are shown to the profile owner as a statistic. Purpose: transparency about interest in your profile and shortlist functionality. Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in a functioning matching platform). You may object at any time under section 6.
Server logs — when the site is accessed, our hosting provider processes IP address, time, requested resource, and browser identifier. Purpose: operation and security of the service. Legal basis: Art. 6 (1)(f) GDPR.
3. Cookies
We use only technically necessary cookies to keep you signed in. There is no tracking, no analytics, no advertising, and no profiling. For this reason no consent banner is required (§ 25 (2) no. 2 TDDDG).
Fonts are self-hosted and delivered from our own server. No connection to third-party font providers is established when you visit the site.
4. Who receives your data
Other members. Your company profile is visible to verified members of the opposite role — brands see distributors and vice versa. Your personal contact details (name, private address, email address) are not shown to other members. Your email address is disclosed to the other party only once you have both accepted a match request.
Supabase. Hosting of the database, authentication and file storage. Servers are located in Frankfurt am Main (region eu-central-1). Provider: Supabase, Inc., USA. A data processing agreement pursuant to Art. 28 GDPR is in place, including EU standard contractual clauses for any transfers to third countries.
[HOSTING PROVIDER]. Operation of the web application. Location: [REGION]. Data processing agreement pursuant to Art. 28 GDPR in place.
We do not sell your data and do not pass it on for advertising purposes.
5. Retention
We store your data for as long as your account exists. If you delete your account, the profile and all associated data — company profile, products, images, messages, match requests, profile views and shortlists — are removed irreversibly and immediately.
Statutory retention obligations remain unaffected. In the beta phase no invoices are issued, so commercial retention periods do not currently apply.
6. Your rights
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interest (Art. 21).
You can exercise two of these directly in the app: under Settings you can download all data stored about you as a JSON file, and delete your account permanently.
You also have the right to lodge a complaint with a supervisory authority, for example the data protection authority of the federal state in which we are based.
7. Security
Data is transmitted in encrypted form over TLS. Access to personal data is restricted server-side: profile data of other members is delivered without personal contact details, and message content is accessible only to the participants of the respective conversation.
8. Changes
We may adapt this privacy policy as the service evolves — particularly as the beta phase ends and paid features are introduced. The current version is always available on this page.