WTB Group UG

Privacy policy

1. Data Protection at a Glance

General Information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any information that can be used to personally identify you. For detailed information on data protection, please refer to our privacy policy below.

Data Collection on This Website

Who Is Responsible for Data Collection on This Website?

The data processing on this website is carried out by the website operator. You can find their contact details in the “Note on the Responsible Entity” section of this privacy policy.

How Do We Collect Your Data?

We collect some of your data when you provide it to us. This can include information you enter into a contact form, for example.

Other data is collected automatically by our IT systems when you visit the website, with or without your consent. This primarily includes technical data (e.g., web browser, operating system, or time of page visit). This data is collected automatically as soon as you enter the website.

What Do We Use Your Data For?

Part of the data is collected to ensure the website is provided error-free. Other data can be used to analyze your user behavior. If contracts can be concluded or initiated via the website, the data you provide will also be processed for contract proposals, orders, or other service inquiries.

What Rights Do You Have Regarding Your Data?

You have the right at any time to receive, free of charge, information about the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you may withdraw this consent at any time for the future. Furthermore, under certain circumstances, you have the right to demand the restriction of processing of your personal data. In addition, you have the right to lodge a complaint with the competent supervisory authority.

If you have any further questions on the subject of data protection, you can contact us at any time.

Analysis Tools and Third-Party Tools

When you visit this website, your browsing behavior may be statistically analyzed. This is done primarily with so-called analysis programs.

Detailed information on these analysis programs can be found in the following privacy policy.

2. Hosting

We host the content of our website with the following provider:

IONOS

The provider is IONOS SE, Elgendorfer Str. 57, 56410 Montabaur (hereinafter IONOS). When you visit our website, IONOS records various log files, including your IP address. For details, please refer to IONOS’s privacy policy: https://www.ionos.de/terms-gtc/terms-privacy.

The use of IONOS is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the most reliable presentation of our website. If consent has been requested, processing takes place exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting). Consent can be revoked at any time.

Order Processing

We have concluded an order processing agreement (AVV) for the use of the above-mentioned service. This is required by data protection law and ensures that the provider processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

3. General Notes and Mandatory Information

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with legal data protection regulations as well as this privacy policy.

When you use this website, various personal data is collected. Personal data is any information that can personally identify you. This privacy policy explains which data we collect and what we use it for, as well as how and why this happens.

Please note that data transmission over the Internet (e.g., via email) can have security vulnerabilities. Complete protection from third-party access is not possible.

Note on the Responsible Entity

The responsible entity for data processing on this website is:

WTB Group UG
Hofmannstr. 7b
81379 Munich

Phone: +49 89 780 64 650
Email: info@wtb-group.de

The responsible entity is the person or organization who alone or jointly with others determines the purposes and means of processing personal data (e.g., names, email addresses).

Retention Period

Unless a more specific retention period is specified in this privacy policy, your personal data will remain with us until the purpose of processing ceases. If you request deletion or withdraw consent, your data will be deleted unless we have other legally permissible reasons to retain it (e.g., tax or commercial law retention periods); in that case, deletion will occur once those reasons no longer apply.

General Information on the Legal Bases of Data Processing on This Website

If you have given consent to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR if special categories of data are involved. Explicit consent to transfer personal data to third countries is based on Art. 49(1)(a) GDPR. Consent to store cookies or access information on your device is also based on § 25(1) TDDDG and can be revoked at any time. If your data is necessary for contract performance or pre-contractual measures, we process it on the basis of Art. 6(1)(b) GDPR. If required by law, processing is based on Art. 6(1)(c) GDPR. Processing may also be based on our legitimate interest under Art. 6(1)(f) GDPR. The specific legal bases are explained in the following sections.

Note on Data Transfer to Non-Secure Third Countries and to US Companies Not DPF-Certified

We use tools from companies in third countries that are not data-protection secure, as well as US tools whose providers are not certified under the EU-US Data Privacy Framework (DPF). When these tools are active, your personal data may be transferred to and processed in those countries. No level of data protection comparable to the EU can be guaranteed in those countries.

The USA generally provides a level of data protection comparable to the EU. A data transfer to the USA is permissible if the recipient is certified under the DPF or provides appropriate safeguards. Information on data transfers and recipients can be found in this privacy policy.

Recipients of Personal Data

As part of our business, we work with external parties. We only share personal data when required for contract fulfillment, when legally obligated (e.g., tax authorities), when we have a legitimate interest under Art. 6(1)(f) GDPR, or when another legal basis permits it. Processors only receive personal data under a valid order processing agreement. Joint processing is governed by a joint processing agreement.

Withdrawal of Your Consent to Data Processing

Many data processing operations require your explicit consent. You can withdraw consent at any time. The lawfulness of processing based on consent before withdrawal remains unaffected.

Right to Object to Data Processing in Special Cases and to Direct Marketing (Art. 21 GDPR)

IF DATA PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU MAY OBJECT AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS THAT OUTWEIGH YOUR INTERESTS OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS (ART. 21(1) GDPR).

IF YOUR DATA IS PROCESSED FOR DIRECT MARKETING, YOU MAY OBJECT AT ANY TIME; THIS ALSO APPLIES TO PROFILING RELATED TO DIRECT MARKETING. IF YOU OBJECT, YOUR DATA WILL NO LONGER BE USED FOR DIRECT MARKETING (ART. 21(2) GDPR).

Right to Lodge a Complaint with the Competent Supervisory Authority

In case of GDPR violations, data subjects have the right to lodge a complaint with a supervisory authority in their EU member state of residence, place of work, or where the infringement occurred. This right is without prejudice to other administrative or judicial remedies.

Right to Data Portability

You have the right to receive data that we process based on your consent or contract in a structured, common, and machine-readable format, and to have it transmitted to another controller if technically feasible.

Right to Obtain Information, Correction, and Deletion

You have the right, under applicable law, to obtain free information about your stored personal data—its origin, recipients, and purpose—and, if necessary, the right to correction or deletion. For questions, you may contact us at any time.

Right to Restrict Processing

You may request the restriction of processing of your personal data in the following cases:

  • If you contest the accuracy of your data while we verify its accuracy.
  • If processing is unlawful and you prefer restriction over deletion.
  • If we no longer need your data but you need it to assert, exercise, or defend legal claims.
  • If you have objected under Art. 21(1) GDPR and a balance of interests is pending.

Restricted data may only be processed—with the exception of storage—with your consent, for legal claims, to protect another person’s rights, or for important public interests.

SSL/TLS Encryption

This site uses SSL/TLS encryption for security and to protect the transmission of confidential content you send to us (e.g., orders or inquiries). An encrypted connection is indicated by “https://” and a lock icon in your browser’s address bar.

When SSL/TLS encryption is active, data you transmit cannot be read by third parties.

4. Data Collection on This Website

Cookies

Our websites use “cookies.” Cookies are small data packets that do not harm your device. They are stored temporarily for a session (session cookies) or permanently (persistent cookies). Session cookies are deleted at the end of your visit; persistent cookies remain until you delete them or your browser does so automatically.

Cookies may come from us (first-party cookies) or from third parties (third-party cookies). Third-party cookies enable integration of services (e.g., payment processing).

Cookies have various functions: some are technically necessary (e.g., shopping cart or video display), others are used for behavior analysis or advertising.

Necessary cookies for communication, requested functions, or website optimization are stored based on Art. 6(1)(f) GDPR, unless another legal basis is specified. The operator has a legitimate interest in storing necessary cookies. If consent is requested, processing is based on Art. 6(1)(a) GDPR and § 25(1) TDDDG; consent can be revoked at any time.

You can configure your browser to inform you about cookies, allow them on a case-by-case basis, accept them for certain cases, block them entirely, or delete them when closing the browser. Disabling cookies may limit site functionality.

Details on cookies and services used can be found in this privacy policy.

Contact Form

If you send us inquiries via the contact form, the information you provide, including contact data, will be stored to process your inquiry and for possible follow-up questions. We will not share this data without your consent.

Processing is based on Art. 6(1)(b) GDPR if the inquiry is related to a contract or pre-contractual measures; otherwise, it is based on our legitimate interest for effective inquiry handling (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), which can be revoked at any time.

Your data will remain with us until you request deletion, revoke consent, or the purpose ceases (e.g., after completion of your inquiry). Mandatory retention periods remain unaffected.

Inquiry by Email, Phone, or Fax

If you contact us by email, phone, or fax, your inquiry, including all personal data (name, inquiry), will be stored and processed by us solely to handle your request. We will not share this data without your consent.

Processing is based on Art. 6(1)(b) GDPR if related to a contract or pre-contractual measures; otherwise, on our legitimate interest (Art. 6(1)(f) GDPR) or your consent (Art. 6(1)(a) GDPR), which can be revoked at any time.

Your data will remain with us until you request deletion, revoke consent, or the purpose ceases. Mandatory retention periods remain unaffected.

5. Plugins and Tools

YouTube with Extended Data Protection

This website embeds YouTube videos. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit a page with embedded YouTube videos, a connection to YouTube’s servers is established. The server learns which of our pages you visited. If logged into YouTube, your behavior may be assigned to your profile. To prevent this, log out of your YouTube account.

We use YouTube in extended data protection mode. According to YouTube, videos played in this mode are not used for personalization, and ads are not personalized. No cookies are set; instead, local storage elements are used. For details, see: https://support.google.com/youtube/answer/171780.

After activating a video, additional processing may occur beyond our control.

Use of YouTube is based on Art. 6(1)(f) GDPR. If consent is requested, processing is on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent can be revoked at any time.

For more on YouTube’s privacy, see: https://policies.google.com/privacy?hl=de.

The company is certified under the EU-US Data Privacy Framework (DPF), ensuring compliance with EU data protection standards. For details: https://www.dataprivacyframework.gov/participant/5780.

Google Fonts (Local Hosting)

This site uses Google Fonts locally hosted. No connection to Google servers is made.

More information: https://developers.google.com/fonts/faq and https://policies.google.com/privacy?hl=de.

Font Awesome

This site uses Font Awesome for fonts and icons. The provider is Fonticons, Inc., 6 Porter Road Apartment 3R, Cambridge, MA 02140, USA.

Your browser loads required fonts from Font Awesome’s servers, revealing your IP address. Use of Font Awesome is based on Art. 6(1)(f) GDPR. If consent is requested, processing is on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent can be revoked at any time.

If your browser does not support Font Awesome, a default local font will be used.

For more: https://fontawesome.com/privacy.

Google reCAPTCHA

We use Google reCAPTCHA on this website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

reCAPTCHA checks whether data entry (e.g., in a form) is by a human or an automated program. It analyzes user behavior (e.g., IP address, time on site, mouse movements) and transmits this data to Google. The analysis runs in the background without notifying users.

Processing is based on Art. 6(1)(f) GDPR. If consent is requested, processing is on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent can be revoked at any time.

For details: https://policies.google.com/privacy?hl=de and https://policies.google.com/terms?hl=de.

Certified under the EU-US Data Privacy Framework (DPF): https://www.dataprivacyframework.gov/participant/5780.

Wordfence

We have integrated Wordfence. The provider is Defiant Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA.

Wordfence protects our website from unwanted access or cyberattacks by maintaining a permanent connection to Wordfence’s servers for threat intelligence and blocking.

Use of Wordfence is based on Art. 6(1)(f) GDPR. If consent is requested, processing is on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent can be revoked at any time.

Data transfer to the USA is based on the EU Commission’s standard contractual clauses. Details: https://www.wordfence.com/help/general-data-protection-regulation/.

Source: https://www.e-recht24.de