INTEL

Privacy Policy

Last updated: 6 August 2026
Effective date: 6 August 2026

SECTION 1 — INTRODUCTION

Hansa Defense GmbH respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we process and protect your personal data when you use our website, regardless of where you access it from. It also sets out your data protection rights and the legal protection afforded to your personal data.

The controller responsible for your personal data is:

Hansa Defense GmbH
Charles-Lindbergh-Ring 4
32756 Detmold
Germany
Phone: +41 79 923 56 83
Email: sales@hansadefense.com

1.1 Purpose of this Privacy Policy

This Privacy Policy tells you how Hansa Defense GmbH collects and processes your personal data through your use of this website, including any data you provide when you purchase a product or service from us.

Our products are intended for adults only. This website is not directed at children, and we do not knowingly collect data from anyone under 18 years of age.

Please read this Privacy Policy together with any other privacy notice or fair processing notice we may provide on specific occasions when we collect or process personal data about you, so that you are fully aware of how and why we use your data. This Privacy Policy supplements other notices and does not override them.

1.2 Changes to this Privacy Policy

We review this Privacy Policy regularly and publish any changes on our website. If you do not agree with the revised version, please stop using the services or do not consent to the updates.

1.3 Third-party links

This website may contain links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect, use or share data about you. We do not control these third-party websites and are not responsible for their privacy notices. When you leave our website, we encourage you to read the privacy policy of every website you visit.

SECTION 2 — THE DATA WE COLLECT ABOUT YOU

Personal data means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

2.1 Categories of personal data

We may collect, use, store and transfer different kinds of personal data about you for the purposes described in this Privacy Policy, in particular the following categories:

  • Identity Data — first name, middle name, last name or similar identifier, salutation or title.
  • Contact Data — billing address, delivery address, postal code, email address and telephone number.
  • Financial Data — payment method, bank details, payment card details and other payment information, to the extent necessary to process payment for your orders.
  • Transaction Data — details of your purchases and orders, payments to and from you, and details of the products you have bought from us.
  • Age Verification Data — your confirmation that you are at least 18 years old and, where we are required to verify this, any proof of age you provide.
  • Technical Data — internet protocol (IP) address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
  • Communication and Interaction Data — information requests, emails, correspondence, feedback, survey responses and appointment details.
  • Profile Data — your username and password, accounts on third-party platforms and your preferences.
  • Usage Data — information about how you use our website, products and services.
  • Marketing Data — your preferences in receiving marketing from us and your communication preferences, together with information about the airguns, calibres and product types that interest you.

We may also process your personal data in aggregated and anonymised form. Once anonymised, this is no longer personal data. However, if we combine or link anonymised or aggregated data with your personal data so that you become directly or indirectly identifiable, we treat the combined data as personal data and process it in accordance with this Privacy Policy.

Certain categories of personal data — such as details of your racial or ethnic origin, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, health data, and genetic and biometric data — receive special protection under applicable data protection law and are referred to in this Privacy Policy as "special categories of personal data". We do not collect any special categories of personal data through this website. We also do not collect information about criminal convictions or offences.

2.2 If you do not provide personal data

Where we need to collect personal data by law, or under the terms of a contract we have or intend to enter into with you, and you do not provide that data when requested, we may be unable to perform or enter into that contract (for example, to supply goods to you). In that case we may have to cancel a product or service you have ordered, and we will notify you if this is the case.

SECTION 3 — HOW YOUR PERSONAL DATA IS COLLECTED

We collect data from and about you in different ways, in particular:

(a) Direct interactions. You may give us your data by filling in forms on our website or by corresponding with us by post, telephone, email or otherwise. This includes personal data you provide when you:

  1. place an order for our products;
  2. create an account on our website;
  3. subscribe to our newsletter or publications;
  4. request marketing to be sent to you;
  5. enter a competition, promotion or survey;
  6. give us feedback or contact us.

(b) Automated technologies or interactions. As you use our website, we automatically collect technical data about your equipment, browsing actions and patterns. We collect this personal data by using cookies and similar technologies. Please see Section 5 for further details.

(c) Third parties or publicly available sources. We also receive personal data about you from various third parties, in particular:

  1. analytics providers such as Google, where you have consented and in accordance with applicable data protection law;
  2. our store platform, hosting and technical service providers;
  3. payment service providers and carriers.

SECTION 4 — HOW WE USE YOUR PERSONAL DATA

4.1 Purposes

We may use your personal data for the following purposes in particular:

  • to register you as a new customer;
  • to communicate with you, in particular to answer and process your enquiries;
  • to manage our relationship with you, including notifying you of changes to our terms or to this Privacy Policy, and asking you to leave a review or take part in a survey;
  • to enable you to take part in a prize draw, competition or survey;
  • to make suggestions and recommendations about goods that may be of interest to you;
  • to supply our products and process your requests, in particular to process your purchase, and to process and deliver your order, including managing payments, fees and charges and collecting outstanding amounts;
  • to confirm that you meet the minimum age requirement for our products;
  • to provide customer support;
  • to administer and protect our business and this website, including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data;
  • to deliver relevant website content and advertising, and to measure and understand the effectiveness of the advertising we serve;
  • to improve our website, products, marketing, customer relationships and customer experience;
  • to comply with legal obligations, including tax, commercial, product safety, packaging and export control obligations, and to respond to lawful requests from law enforcement and other public authorities.

4.2 Legal bases for using your personal data

Under the EU General Data Protection Regulation (GDPR) we must have a legal basis for processing your personal data. Which basis applies depends on the purpose for which we collected and use your data. We rely on the following:

  • Consent (Art. 6(1)(a) GDPR) — for example for marketing emails and for non-essential cookies. You may withdraw your consent at any time with effect for the future, without affecting the lawfulness of processing carried out before withdrawal.
  • Performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR) — for example to process and deliver your order and to handle returns.
  • Compliance with a legal obligation (Art. 6(1)(c) GDPR) — for example to keep invoices and accounting records, to verify age, and to meet customs and product safety requirements.
  • Legitimate interests (Art. 6(1)(f) GDPR) — for example to keep our website secure, prevent fraud, and operate and develop our business, provided your interests and fundamental rights do not override those interests.

This list is not exhaustive, and we may process your personal data on more than one legal basis depending on the specific purpose. If you would like further details of the legal basis we rely on in a particular case, please contact us.

4.3 Marketing

You will receive marketing communications from us if you have requested information from us or purchased goods from us and have consented to receive such communications. We use a double opt-in procedure: after you sign up we send a confirmation email, and we only add you to our list once you click the confirmation link.

We will obtain your express consent before sharing your personal data with any third party for that third party's own marketing purposes.

4.4 Opting out of marketing

You can ask us to stop sending you marketing communications at any time by clicking the "unsubscribe" link at the bottom of any marketing email, or by contacting us at sales@hansadefense.com. After you unsubscribe we keep your email address on a suppression list so that we do not contact you again.

Opting out of marketing does not affect personal data provided to us as a result of a purchase or other transaction.

SECTION 5 — COOKIES AND RELATED TECHNOLOGIES

5.1 Technologies we use

Cookies. Cookies are text files placed on your device to collect standard internet log information and information about visitor behaviour. When you visit our website, we may automatically collect information about you through cookies or similar technologies. You can set your browser to refuse all or some cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, parts of this website may not work correctly.

We distinguish between strictly necessary cookies, which are required for the shopping cart, checkout, login and security and which are set on the basis of § 25(2) TDDDG, and functional, analytics and marketing cookies, which we set only after you give consent through our cookie banner, on the basis of § 25(1) TDDDG and Art. 6(1)(a) GDPR. You can change or withdraw your choices at any time through our cookie settings.

Pixels. Pixels (also called web beacons) are pieces of code embedded in a website, video, email or advertisement that transmit information about your use to a server. When you access content containing a pixel, that pixel may allow us or a third party to set or read cookies in your browser.

Analytics tools. Subject to your consent, we use third-party analytics providers, including Shopify's built-in analytics and Google Analytics. Google Analytics uses cookies, similar technologies and your IP address to collect and evaluate information about how the services are used, and to produce reports on activity and trends. Information about Google's privacy practices is available at www.google.com/policies/privacy/partners/.

5.2 Purposes for which we use these technologies

Functionality, support and security. Some of the tracking technologies we use serve functional, support and security purposes. These include recognising your device, storing items in your cart, enabling faster checkout, easing navigation, presenting information more efficiently, personalising your experience, maintaining the security of our website, managing your account, preventing crashes, fixing errors and remembering your preferences.

Our checkout is provided by external payment service providers. Further information is set out in Section 6.

Targeted advertising and marketing measurement. Subject to your consent, pixel tags may be used to market our products to you, to measure the success of our marketing campaigns and to compile statistics about website usage and response rates. Some advertisements are served by third-party advertisers, ad networks and ad servers, which may use cookies alone or together with web beacons or other tracking technologies to collect information about you. Some of these technologies may track your activity across time and across services in order to link the devices you use and to provide you with relevant advertising ("interest-based advertising").

Behavioural and website analytics. We use pixels in combination with cookies to understand activity within a particular browser on a particular device, to understand how our communications perform, how the website is used, and where users access our website from.

SECTION 6 — DISCLOSURE OF YOUR PERSONAL DATA

We may share your personal data with the parties listed below for the purposes set out in Section 4:

  • our store platform provider, Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland, which hosts our store and processes orders on our behalf;
  • IT service providers who provide system administration, hosting and support services;
  • third-party analytics providers;
  • payment service providers, such as Shopify Payments / Stripe, PayPal and Klarna, and our banks;
  • third-party customer support providers;
  • carriers, freight forwarders and customs agents, to whom we pass your name, delivery address and, where provided, your email address and telephone number so that your order can be delivered;
  • professional advisers, including lawyers, bankers, auditors, tax advisers and insurers;
  • public authorities, where we are legally required to disclose;
  • third parties to whom we may sell, transfer or merge parts of our business or assets. If our business changes, the new owners may use your personal data in the same way as set out in this Privacy Policy.

We take all reasonable steps to ensure that your data is processed securely and in accordance with this Privacy Policy. We have contractual arrangements in place with these third parties requiring them to process your personal data lawfully, only for specified purposes and in accordance with our instructions.

We do not sell your personal data.

SECTION 7 — INTERNATIONAL TRANSFERS

Some of the recipients listed in Section 6 are located outside the European Economic Area, in particular in the United States. Where we transfer your personal data outside the EEA, we take appropriate measures to ensure it receives the level of protection required by this Privacy Policy and by applicable data protection law, by relying on one of the recognised transfer mechanisms under Chapter V GDPR:

  • an adequacy decision of the European Commission, including the EU–U.S. Data Privacy Framework where the recipient is certified; or
  • the European Commission's Standard Contractual Clauses, supplemented where necessary by additional technical and organisational measures.

You can request a copy of the relevant safeguards from us at the contact address above. Please note that data protection standards in third countries may not match the level of protection within the EU, and that public authorities in those countries may have access rights.

SECTION 8 — DATA RETENTION

We keep your personal data only for as long as is reasonably necessary to fulfil the purposes for which we collected it, including to satisfy any legal, regulatory, tax, accounting or reporting requirements. Where there is a complaint, or where we reasonably believe there is a prospect of litigation in relation to our relationship with you, we may retain your personal data for longer.

In particular, invoices, contracts and accounting records are kept for ten years under § 147 AO and § 257 HGB, and commercial correspondence for six years. Newsletter subscription data is kept until you unsubscribe. Once the relevant period expires, the data is deleted or irreversibly anonymised.

In determining the appropriate retention period we consider the nature, scope and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes of processing, whether we can achieve those purposes by other means, and the applicable legal requirements.

SECTION 9 — YOUR LEGAL RIGHTS

9.1 Your rights

Under applicable data protection law you have the following rights in relation to your personal data:

  • Request access to your personal data (Art. 15 GDPR). This enables you to receive a copy of the personal data we hold about you and to check that we are processing it lawfully.
  • Request correction of the personal data we hold about you (Art. 16 GDPR). This enables you to have incomplete or inaccurate data corrected, though we may need to verify the accuracy of the new data you provide.
  • Request erasure of your personal data (Art. 17 GDPR). This enables you to ask us to delete or remove personal data where there is no good reason for us to continue processing it and no legal retention obligation applies.
  • Object to processing of your personal data where we rely on a legitimate interest (Art. 21 GDPR). In some cases we may demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or that we need the data to establish, exercise or defend legal claims.
  • Object to direct marketing at any time.
  • Request restriction of processing of your personal data in certain circumstances (Art. 18 GDPR).
  • Request transfer of your personal data to you or to a third party (Art. 20 GDPR). Where technically feasible, we will provide your personal data in a structured, commonly used, machine-readable format. This right applies only to automated information which you initially provided consent for us to use, or which we used to perform a contract with you.
  • Withdraw consent at any time with effect for the future, where we rely on consent to process your personal data (Art. 7(3) GDPR).
  • Lodge a complaint with a supervisory authority (Art. 77 GDPR) if you believe that our processing of your personal data infringes the law. We would, however, appreciate the chance to address your concerns first, so please contact us before you do so.

The supervisory authority responsible for us is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Kavalleriestraße 2–4, 40213 Düsseldorf, Germany

You may also lodge a complaint with the supervisory authority in your country of residence. To exercise any of the rights above, please contact us at sales@hansadefense.com. We will respond within one month.

9.2 What we may need from you

We may need to request specific information from you to confirm your identity and ensure your right to access your personal data or to exercise any of your other rights. This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask for further information in relation to your request, in order to speed up our response.

SECTION 10 — DATA SECURITY

We have implemented appropriate technical and organisational security measures in line with the state of the art, including encryption technologies and authentication systems, to protect the security of your personal data. This website uses TLS/SSL encryption for all data transmitted between your browser and our store.

Complete security of data transmission over the internet cannot be guaranteed. However, we make every reasonable effort to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. We limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They process your personal data only on our instructions and are subject to a duty of confidentiality.

We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable supervisory authority of a breach where we are legally required to do so.

SECTION 11 — AUTOMATED DECISION-MAKING AND DO-NOT-TRACK SIGNALS

We do not use automated decision-making or profiling that produces legal effects concerning you within the meaning of Art. 22 GDPR. Payment providers may carry out automated fraud or credit checks as part of their own services; details are set out in their privacy notices.

Some web browsers transmit "Do Not Track" signals to websites. Because there is no common standard for how these signals are implemented or activated, it is not always clear whether users intend to send them or are aware of them. We currently do not respond to such signals. You can control non-essential tracking through our cookie settings.

SECTION 12 — CONTACT

We have not appointed a Data Protection Officer, as we are not required to do so under Art. 37 GDPR or § 38 BDSG. If you have any questions about this Privacy Policy or wish to exercise your legal rights, please contact us:

Hansa Defense GmbH
Charles-Lindbergh-Ring 4
32756 Detmold
Germany
Phone: +41 79 923 56 83
Email: sales@hansadefense.com