Privacy Policy

Last updated: 30 October 2026

This policy explains how we collect, use, share and protect the personal data of your company's representatives, and the data your company sends us, when you register on or use the Dr.Baker Supplier Portal at srm.dr-baker.com as a supplier or an applicant to become a supplier of Dr.Baker. We do so in line with the Egyptian Personal Data Protection Law No. 151 of 2020 and its Executive Regulations issued by Ministerial Decree No. 816 of 2025.

1. Who we are

Dr.Baker Supplier Portal is an online portal for registering suppliers and submitting prices, operated by the following company ("Dr.Baker"): Dr.Baker, an Egyptian limited liability company, Commercial Registry No. 4535 (Gamasa Investment Commercial Registry Office), Unified Registry No. 11090 02000 04535, Tax Registration No. 753-611-961, head office: Al-Sananiya, Old Ras El Bar Road, opposite the power station, Damietta Markaz, Damietta. Dr.Baker is the party responsible for your data (the controller). Throughout this policy, "we", "us" and "our" mean Dr.Baker. This policy applies to the personal data of the people who register or act on the portal for their company, such as the owner or representative and the contact person, and to the data and documents the company sends us. You can reach our data-protection contact about anything related to your data at: Email info@drbaker.de and phone/WhatsApp +20 115 122 2223.

2. Data we collect and where it comes from

Sign-in data: the mobile number you register with, to which we send a one-time sign-in code.
Company and contact data: the company name, address, the name of the contact person, and email address.
Documents: the tax card number and a copy of it, the commercial register number and a copy of it, and the bank letter and the bank name.
Materials and prices: the materials you can supply, and the prices and items you offer us in your submissions.
Technical data and sign-in log: IP address, portal operating logs, and an audit log showing when you signed in to your account.

We receive this data from you directly when you register and use the portal, and from the documents you upload. We do not ask you for sensitive data such as health or religious data. Financial data is sensitive data under the law, which is why we use the bank letter only to verify the company's account. We limit access to your data to those who need it for their work with us.

3. Why we use your data

To register you as a supplier, and to have the finance department review and verify your company's documents.
To request samples of materials and have the quality department test them.
To receive and update your prices and offers, and to make purchasing decisions.
To send the one-time sign-in code and manage your account.
To answer your questions and messages.
To operate and secure the portal and prevent fraud, including reviewing the sign-in log.
To comply with tax and commercial law and answer requests from competent authorities.

4. Legal basis for processing

We process your data on one of the following bases:

Performance of a contract or steps before entering one: to register you as a supplier, consider your offers and carry out supply if we agree.
Legal obligation: such as tax, invoicing and what commercial law requires.
Legitimate interest: to verify suppliers, prevent fraud and secure the portal, without overriding your rights.

5. Sharing your data

We do not sell your personal data. We share it only as needed with:

Dr.Baker management and the finance department: your company data, documents and prices, each as far as their work requires.
The quality department: data on the materials and samples you offer.
Competent government bodies where the law requires it, including the Egyptian Tax Authority.

Price confidentiality: no other supplier sees your prices or offers; on our side only Dr.Baker management and the finance department can see them.

We also share it with service providers that process data on our behalf, under confidentiality obligations:

Hetzner: hosting of our servers, databases, email and backups (Germany and Finland).
Backblaze: storage of encrypted backup copies of our data (United States).
AcruxLab (ApiChat) and Meta (WhatsApp): sending the one-time sign-in code to your mobile number on WhatsApp.

We send the sign-in code to your mobile number on WhatsApp, and Meta also processes that message under its own policy.

6. Transfers outside Egypt

Your data is stored on servers outside the Arab Republic of Egypt and is transferred to the following countries:

Germany and Finland: the Hetzner servers that run our systems, and their backups.
United States: encrypted backup copies at Backblaze, and the services of Meta.

Some of the service providers listed may also process data in other countries where their servers are located. The Personal Data Protection Law and its Executive Regulations require a licence or permit from the Personal Data Protection Center for these transfers. We have applied for it, and until it is issued we transfer only what is needed to provide the service.

7. How long we keep your data

We keep your company's data, documents and prices for as long as needed for the commercial relationship and for legal and tax obligations. After that we delete the data or remove what identifies you. You can ask to close your account by contacting us, and after closure we keep only what the law requires us to keep.

8. Security

We take technical and organisational measures to protect your data against loss, misuse and unauthorised access, including:

Encryption of the connection between your device and our websites over HTTPS.
Administrative access to our servers over SSH is by key only.
Encrypted backups.
Access rights set for each user according to their work.

9. Your rights

The law gives you the following rights:

To know what data we hold about you, to see it and to obtain it.
To withdraw your consent to processing at any time.
To have your data corrected, changed, added to or updated.
To have your data erased.
To restrict processing to a specific scope.
To object to processing or its results where it conflicts with your fundamental rights and freedoms.
To be informed of any breach of your personal data.

Withdrawing consent does not affect processing carried out before it. We may keep some data after an erasure request where the law requires us to.

10. How to exercise your rights

Send your request to our data-protection contact at: Email info@drbaker.de and phone/WhatsApp +20 115 122 2223. We may ask you for proof of identity before we act on a request, so that we do not give your data to someone else. We answer your request within six (6) working days of receiving it.

11. Complaints

If you believe our processing of your data breaks the law, you have the right to complain to the Personal Data Protection Center in Egypt. We ask you to contact us first so that we can try to solve the problem.

12. Data breach notification

If a breach of your personal data occurs, we notify the Personal Data Protection Center within seventy-two (72) hours of becoming aware of it, and we also notify you if you are affected, as the law requires, explaining what happened and what we have done.

13. Cookies and measurement tools

The portal uses only essential cookies, to keep you signed in and protect your session. It uses no analytics or advertising tools.

14. Changes to this policy

We may change this policy from time to time. We publish the updated version on this page with its "Last updated" date. If a change is material, we tell you about it in a suitable way before it takes effect.

15. Contact

Dr.Baker — Al-Sananiya, Old Ras El Bar Road, opposite the power station, Damietta Markaz, Damietta. Email info@drbaker.de and phone/WhatsApp +20 115 122 2223.