Information about the collection of personal data and the data controller’s contact details
We are pleased that you have visited our website and would like to thank you for your interest.
We value the trust you have placed in us very highly and thus fully appreciate the importance and responsibility of dealing with your data carefully and protecting it against misuse.
This data protection statement informs you about when we store what data and how we use such data – needless to say, always taking current legal regulations into account, in particular the General Data Protection Regulation (GDPR). With regard to Internet use, we also follow the TMG (German Telemedia Act) to protect your personal data.
In the following, we will inform you about how your personal data is processed. “Personal data” means all data which can be used to personally identify you.
As defined in the General Data Protection Regulation, the controller for this website is:
Telefon: +49 (0) 221 169 15 635
CEO Marcel Oelschläger
The controller responsible for processing personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
The controller has appointed a data protection officer who can be contacted as follows:
Telefon: +49 (0) 221 169 15 635
For security purposes and to protect the transfer of personal data and other confidential con-tent (e.g. information retrieval or questions for the controller), this website uses SSL and/or TLS encryption. You can recognise an encrypted connection by the string “https: //” and the lock icon in your browser bar.
Data collection when visiting our website
You can use our website without letting us know who you are. When you simply use our website to gain information, we only collect data of the kind your browser sends to our server (“log files”).
When you visit our website, we collect the following information that is technologically necessary for us to display the website:
To make visits to our website attractive and to enable the use of certain functions, we use so-called “cookies” on various pages. These are small text files which are stored on your device.
Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser.
To the extent that individual cookies implemented by us are also used to process personal data, this processing is carried out either for the performance of the contract in accordance with Article 6, Paragraph 1, Point (b) of the GDPR, or to protect our legitimate interests in the website functioning as well as possible and your visit to our site being customer-friendly and effective, in accordance with Article 6, Paragraph 1, Point (f) of the GDPR.
Please note that you can set your browser up to inform you when cookies are placed so that you can decide whether to accept them in each case, or you can arrange for it to disable cookies in specific cases or in general. You can delete cookies at any time via your browser’s system settings.
Please note that if you do not accept cookies, this may restrict your ability to access our website’s functions.
Personal data are collected when you contact us (e.g. by e-mail or via the contact form on our website. Exactly what data are collected if you use a contact form is shown in the corresponding contact form. Over and above this, you may also provide further data voluntarily when reaching out to us.
This data will be stored and used solely for the purpose of replying to your query or for us and our retailer/partners to contact you, and for related technical administration purposes. The legal basis for these data being processed is our legitimate interest in answering your query, in accordance with Article 6, Paragraph 1, Point (f) of the GDPR.
If you contact us for the purpose of entering into a contract with us, Article 6, Paragraph 1, Point (b) of the GDPR constitutes a further legal basis for data processing.
When your query has been dealt with, the data will be erased. This is the case when the circumstances indicate that the issue in question has been definitively resolved and that erasing the data does not conflict with any statutory retention requirements.
Signing up for our e-mail newsletter
If you subscribe to our e-mail newsletter, we will send you regular information about our offers.
The only mandatory information required for sending the newsletter is your e-mail address. Any other information is supplied on a voluntary basis and used to address you personally. To send the newsletter, we use the “double opt-in” process. That means that we will only send you an e-mail newsletter if you have explicitly confirmed to us that you agree to it being sent. We will then send you a confirmation e-mail asking you to click on a link to confirm that you wish to receive newsletters in the future.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Article 6, Paragraph 1, Point (a) of the GDPR. When you register for the newsletter, we will save your IP address as assigned by your Internet Service Provider (ISP) as well as the date and time of registration so as to trace any possible misuse of your e-mail address at a later date.
The data collected by us when you register for the newsletter will be used exclusively for promotional purposes in the form of the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a message to the data controller named above. After unsubscribing, your e-mail address will immediately be deleted from our newsletter mailing list, unless you have expressly consented to the further use of your data or we reserve the right to further data use which is permitted by law and about which we inform you in this statement.
Data processing when entering into a contract as a customer and creditworthiness assessment
When a contractual relationship as a customer is entered into, a standardised creditworthiness assessment is carried out.
The personal data collected by us (name, address, tax ID) will be passed on to the commissioned credit rating agency as part of the assessment. The legal basis for transferring the data is Article 6, Paragraph 1, Point (b) of the GDPR.
Data processing for the purpose of implementing and processing the contract and of transferring data
We process the personal data which we collect from you to implement the contract. Without processing those data, we cannot conclude or implement the contract with you. To implement and process the contract, we work with service providers which support us in full or in part in implementing contracts which have been concluded. The personal data which we collect while implementing the contract will be passed to the transport company commissioned with the delivery, to the extent that this is necessary in order to deliver the goods. The legal basis for transferring the data is Article 6, Paragraph 1, Point (b) of the GDPR. Your personal data are not transferred to third parties for any purposes other than those listed below.
We only pass on your personal data to third parties if:
Data processing during training
The personal data you provide to us in the context of this registration shall only be used to process your registration and participation. No data shall be passed on to third parties.
During the training, the participants shall be asked to enter their names on an attendance list. This shall solely serve the purpose of documentation and invoicing. After the event, the attendance list for the training shall be kept in the invoicing records. These documents shall be destroyed after a retention period of 10 years.
Creation and use of photos/videos at events
From time to time, we may take photos/make videos to document the event and use these for advertising and marketing our company (e.g. on our homepages or social media sites, in flyers and print advertising). If you do not wish to appear in photos/videos, you can notify us at any time. All you need to do is get in touch with us. The legal basis for processing data when taking photos/making videos is Art. 6, Paragraph 1, Point (a) GDPR, provided that you have furnished your consent; Art. 6, Paragraph 1, Point (b) GDPR, provided that data must be processed in order to perform the contract/exercise rights; as well as Art. 6, Paragraph 1, Point (f) GDPR, which preserves our legitimate interests to create and use the photos/videos.
DoubleClick by Google
The website uses remarketing technology developed by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).
Using this technology, users who have visited this site and are interested in the products are shown targeted advertising again on the Google Partner Network.
The advertising is shown using cookies, which are employed to analyse users’ behaviour when visiting the website and can then be used for targeted advertising based on their interests.
However, please note that if you do so, you may not be able to use all the functions of this website to their full extent.
Google Analytics service
This website uses Google Analytics, a web analytics service provided by Google LLC, based in the USA. Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how you use the site. The information generated by the cookie about your use of this website (including your truncated IP address) is generally transmitted to and stored on Google’s servers in the USA.
This website exclusively uses Google Analytics with the extension “anonymizelP”, which ensures that the IP address is anonymised by means of truncation and cannot be directly connected to any individual. This extension means that Google will previously truncate your IP address within member states of the European Union or other states party to the Agreement on the European Economic Area.
In exceptional cases only, the full IP address will be transmitted to a Google server in the USA and truncated there. This processing takes place in accordance with Article 6, Paragraph 1, Point (f) of the GDPR on the basis of our legitimate interest in the statistical analysis of user behaviour for the purposes of optimisation and marketing.
On our behalf, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing us with other services relating to website activity and Internet usage. Your browser IP address as ascertained for the purposes of Google Analytics will not be brought together with other data gathered by Google.
You may refuse the storage of cookies by selecting the appropriate settings on your browser; however, please note that if you do this you may not be able to use the full functionality of this website. Moreover, you may prevent Google from gathering the data (including your IP address) collected using the cookie and regarding your use of the website, and prevent Google from processing this data in future, by downloading and installing the browser plugin available from the following link:
An opt-out cookie is stored which prevents your data from being collected when you visit this website in future.
We have committed Google to processing your data in accordance with data protection regulations by means of an order processing agreement.
Google LLC, based in the United States, is certified under the EU-US Privacy Shield framework, which ensures compliance with the level of data protection required in the EU.
The recorded data will be erased automatically after 26 months.
If you do not agree with data being collected, you can disable this feature by installing the Google Analytics opt-out browser add-on (https://tools.google.com/dlpage/gaoptout?hl=en). The add-on only needs to be installed once.
Video surveillance of the premises
The weinor GmbH & Co. KG premises are monitored by means of optical recording equipment for the purpose of deterring property damage and theft, exercising the house rules and, if necessary, providing evidence in the case of theft and property damage. This processing is carried out in accordance with Article 6, Paragraph 1, Point (f) of the GDPR based on our legitimate interest in protecting our property. The recording shall be stored for a period in line with statutory regulations.
Data subjects’ rights
Currently valid data protection law grants you comprehensive rights as a data subject in terms of the processing of your personal data by the controller (rights of access and intervention); the following informs you of those rights.
– Right of access pursuant to Article 15 of the GDPR:
Among other things, you have a right to access to
– Right to rectification pursuant to Article 16 of the GDPR:
You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you, and/or to have incomplete data which we have stored completed.
– Right to erasure pursuant to Article 17 of the GDPR:
You have the right to obtain the erasure of personal data concerning you where one of the grounds in Article 17, Paragraph 1 of the GDPR applies. This right shall not apply to the extent that processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims.
– Right to restriction of processing pursuant to Article 18 of the GDPR:
You have the right to obtain restriction of the processing of your personal data where the accuracy of data which you have contested is being verified, where you oppose the erasure of the personal data as the processing is unlawful and request the restriction of their use instead, where we no longer need the personal data for the purposes of the processing but you require your data for the establishment, exercise or defence of legal claims, or where you object on grounds relating to your particular situation pending verification whether our legitimate grounds override your grounds.
– Right to be informed pursuant to Article 19 of the GDPR:
If you have exercised your right to the rectification, erasure or restriction of processing by the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of data or restriction of their processing, unless the provision of such information proves impossible or would involve a disproportionate effort. You have the right to be informed about these recipients.
– Right to data portability pursuant to Article 20 of the GDPR:
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to have them transmitted to another controller, where technically feasible.
– Right to withdraw your consent pursuant to Article 7, Paragraph 3 of the GDPR:
You have the right to withdraw any consent to data processing which you have given us at any time, with future effect. In the case of such withdrawal, we shall erase the data concerned without undue delay to the extent that further processing cannot be carried out on another legitimate basis without your consent. Withdrawing your consent does not affect the legality of the processing carried out based on your consent until the time of its withdrawal.
– Right to lodge a complaint pursuant to Article 77 of the GDPR:
If you consider that the processing of personal data relating to you infringes the GDPR, you have the right – without prejudice to any other administrative or judicial remedy – to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.
The data protection supervisory authority responsible for us is:
Landesbeauftragte für Datenschutz und Informationsfreiheit
Kavalleriestr. 2 – 4
Tel.: +49 211/38424-0
Fax: +49 211/38424-10
– Right to object pursuant to Article 21
If, on weighing up the different interests, we process your personal data on the basis of an overriding legitimate interest, you have the right to object at any time to that processing with future effect, on grounds relating to your particular situation.
If you exercise your right to object, we will stop processing the data in question. If we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims, we reserve the right to continue processing the data.
Where your personal data are processed by us for direct marketing purposes, you shall have the right to object at any time to processing of personal data concerning you for such marketing. Where you exercise your right to object, we will stop processing the data concerning you for direct marketing purposes.
For queries regarding your rights, please get in touch via the above address:
Updating and changing the privacy statement
This privacy statement is currently valid as of May 2020. In the process of further developing our website and related offers, and due to changes in legal or regulatory requirements, it may become necessary for this privacy statement to be changed. The current privacy statement can be retrieved and printed by you at any time on our website at http://whydesign.works/privacy-policy/.