Privacy Policy (EU GDPR)

1. Data Controller & Contact Information

Vektor Waffen Handelsgesellschaft mbH
Glockengießerwall 15, 20095 Hamburg, Germany
Telephone: +49 15216685014 | Email: [email protected]
Data Protection Officer: [email protected]

2. Statutory Data Collection for Firearms Transactions

In compliance with European and national firearms legislation and the maintenance of statutory electronic arms trading registers, we process:

• Full legal name, date of birth, place of birth, and official registration address
• Government identification / passport details (for in-person and courier validation)
• Copies and reference numbers of firearms acquisition licenses (WBK, hunting license, SIA account, Zbrojní průkaz, WES)
• National Firearms Register Identifiers: Personal IDs (P-ID) and Permit IDs (E-ID)
• Serial numbers and proof marks of the acquired handguns

3. Legal Basis for Processing

Processing of this sensitive information is carried out under Art. 6(1)(c) GDPR (compliance with statutory legal obligations under national weapons legislation and EU Directive 2021/555) and Art. 6(1)(b) GDPR for performance of the purchase contract.

4. Transmission to Authorities & Certified Couriers

Data is disclosed strictly on a need-to-know basis to:

• National Firearms Registries (NWR / SIA / CRZ): Mandatory reporting of transfer and ownership change.
• Accredited Firearms Courier Services: Exclusively for the execution of statutory identity and age verification upon delivery.
• Customs & Export Control Authorities: For cross-border intra-community transfers (e.g., France, Czech Republic, Switzerland).

5. Statutory Retention Periods

Under firearms law, entries in the firearms register must be retained for periods ranging between 10 and 30 years. The right to erasure under Art. 17 GDPR is restricted accordingly under Art. 17(3)(b) GDPR.

6. Rights of Data Subjects

You possess statutory rights of access (Art. 15 GDPR), rectification (Art. 16 GDPR), restriction of processing (Art. 18 GDPR), and the right to lodge a complaint with the competent supervisory authority (Hamburg Commissioner for Data Protection and Freedom of Information).