Our Privacy Policy

1. General Information and Principles of Data Processing

We are pleased that you are visiting our website. Protecting your privacy and your personal data—known as "personal information"—when you use our website is a top priority for us.

According to Article 4(1) of the GDPR, personal data refers to any information relating to an identified or identifiable natural person. This includes, for example, information such as your first and last name, your address, your phone number, your email address, and your IP address.

Data that cannot be linked to you personally-for example, through anonymization-is not considered personal data. Processing (e.g., collection, storage, retrieval, consultation, use, disclosure, erasure, or destruction) as defined in Article 4(2) of the GDPR always requires a legal basis or your consent. Processed personal data must be deleted as soon as the purpose of the processing has been achieved and there are no longer any legally required retention obligations to be observed.

Here you will find information about how we handle your personal data when you visit our website. In order to provide the features and services of our website, it is necessary for us to collect personal data about you.

We also explain to you the nature and scope of the respective data processing, the purpose and the corresponding legal basis, as well as the respective retention period.
This Privacy Policy applies only to this website. It does not apply to other websites to which we merely provide hyperlinks. We cannot assume any responsibility for the confidential handling of your personal data on these third-party websites, as we have no influence over whether these companies comply with data protection regulations. Please refer directly to these websites for information on how these companies handle your personal data.

Below you will find the contact information for the data controller and the data protection officer.

2. Data Controller as Defined in Article 4(7) of the GDPR

The data controller within the meaning of the GDPR and other national data protection laws of the member states, as well as other data protection regulations, is:

Josef Weischer GmbH
Sternbusch 14
48282 Emsdetten
Phone: 02572 93920
Email: info@weischer.de

3. Name and Address of the Data Protection Officer

If you have any questions regarding data protection, you can also contact our data protection officer at any time:

Claus Wissing
Mülot Expert Services
Grüner Weg 80
48268 Greven
Phone: 02571 540 40 200
Email: Datenschutz@SVB-Muelot.de

4. Provision and Use of the Website / Server Log Files

a) Nature and Scope of Data Processing
If you use this website without otherwise providing us with data (e.g., by registering or using the contact form), we collect technically necessary data via server log files that are automatically transmitted to our server, including:

• IP address
• Date and time of access
• Name and URL of the file accessed
• Website from which the access originated (referrer URL)
• Browser type/version
• Operating system used

b) Purpose of Data Processing
This processing is technically necessary to display our website to you. We also use the data to ensure the security and stability of our website.

c) Legal basis for data processing
The legal basis for this processing is Article 6(1)(f) of the GDPR (Legitimate Interest). The processing of the aforementioned data is necessary for the provision of a website and thus serves to safeguard a legitimate interest of our company.

d) Retention Period
As soon as the aforementioned personal data is no longer required to display the website, it will be deleted, but no later than 3 months after accessing our website. The collection of data for the purpose of providing the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, the user has no right to object to this aspect. Further storage may occur in individual cases if required by law.

5. Data Collection for the Purpose of Taking Precontractual Measures and Fulfilling the Contract

a) Nature and Scope of Data Processing
We collect personal data about you during the pre-contractual phase and upon conclusion of the contract. This includes, for example, your first and last name, address, email address, phone number, or bank account information.

b) Purpose of Data Processing
We collect and process this data exclusively for the purpose of contract performance or to fulfill pre-contractual obligations.

c) Legal basis for data processing
The legal basis for this is Article 6(1)(b) of the GDPR. If you have also provided your consent, an additional legal basis is Article 6(1)(a) of the GDPR.

d) Retention Period
The data will be deleted as soon as it is no longer necessary for the purpose for which it was processed.
In addition, statutory retention requirements may apply, such as commercial or tax-related retention requirements under the German Commercial Code (HGB) or the German Fiscal Code (AO). If such retention requirements exist, we will block or delete your data upon the expiration of these retention periods.

6. Special Features of the Website

Our website offers various features; when you use them, we collect, process, and store personal data. Below, we explain what happens to this data:

6.1 Contact Form(s):

a) Scope of personal data processing
The data you enter into our contact forms.

b) Legal basis for data processing
Art. 6(1)(a) of the GDPR (Consent)

c) Purpose of data processing
We will use the data collected via our contact form(s) solely to process the specific contact request submitted through the contact form.

d) Duration of storage
Once your inquiry has been processed, the collected data will be deleted immediately, provided that no further business activities (e.g., inquiry/quote) result from it.

e) Right to Object and Right to Erasure
The options for objection and deletion are governed by the general provisions regarding the right to object and the right to deletion under data protection law, as described below in this privacy policy.

7. Data Transfer

We will only disclose your personal data to third parties if:
a) You have given your explicit consent in accordance with Article 6(1)(a) of the GDPR.
b) This is permitted by law and necessary, pursuant to Article 6(1)(b) of the GDPR, to fulfill a contractual relationship with you or to take steps prior to entering into a contract.
c) There is a legal obligation to disclose the data under Article 6(1)(c) of the GDPR.
d) We are legally obligated to transfer data to government authorities, such as tax authorities, social security agencies, health insurance providers, regulatory agencies, and law enforcement agencies.
e) The disclosure is necessary under Article 6(1)(f) of the GDPR to safeguard legitimate business interests, as well as to assert, exercise, or defend legal claims, and there is no reason to believe that you have an overriding legitimate interest in preventing the disclosure of your data.
f) We engage external service providers, known as "processors," in accordance with Article 28 of the GDPR, who are obligated to handle your data with due care.

We use such service providers in the following areas:

• IT
• Logistics
• Telecommunications
• Sales
• Marketing

When transferring data to external entities in third countries—that is, outside the EU or the EEA—we ensure that these entities handle your personal data with the same level of care as within the EU or the EEA. We transfer personal data only to third countries for which the European Commission has confirmed an adequate level of protection, or when we ensure the careful handling of personal data through contractual agreements or other appropriate safeguards.

7.1. SSL or TLS Encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the browser's address bar changes from "http://" to "https://" and by the lock icon in your browser's address bar. When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

8. Hosting

This website is hosted externally. The personal data collected on this website is stored on the servers of the hosting provider(s). This may primarily include IP addresses, contact requests, metadata and communication data, contractual data, contact information, names, website visits, and other data generated through a website.

External hosting is carried out for the purpose of fulfilling our contractual obligations to our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of ensuring the secure, fast, and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR). If consent has been obtained, processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG, to the extent that the consent covers the storage of cookies or access to information on the user's device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent may be revoked at any time.

Our hosting provider(s) will process your data only to the extent necessary to fulfill its service obligations and will follow our instructions regarding this data.

We use the following hosting provider(s):

Cows Online GmbH
Von-Liebig-Str. 6
48432 Rheine

Data Processing
We have entered into a data processing agreement (DPA) for the use of the aforementioned service. This is a contract required under data protection law that ensures that the service provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

9. Cookies

Our website uses so-called "cookies." Cookies are small data packets that do not cause any harm to your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or your web browser deletes them automatically.

Cookies may originate from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain third-party services within the website.

Cookies serve various functions. Many cookies are technically necessary, as certain website functions would not work without them. Other cookies may be used to analyze user behavior or for advertising purposes.

Cookies that are necessary for carrying out the electronic communication process, for providing specific functions you have requested, or for optimizing the website (necessary cookies) are stored on the basis of Article 6(1)(f) of the GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies to ensure the technically error-free and optimized provision of its services. If consent to the storage of cookies and similar recognition technologies has been requested, processing is carried out exclusively on the basis of this consent (Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG); consent may be revoked at any time.

You can configure your browser to notify you when cookies are set and to allow cookies only on a case-by-case basis, to block the acceptance of cookies in specific cases or generally, and to enable the automatic deletion of cookies when you close your browser. Disabling cookies may limit the functionality of this website.

You can find out which cookies and services are used on this website in the Cookie Consent Tool.

9.1 Cookie Consent

Our website uses CCM19 to obtain your consent to the storage of certain cookies on your device or to the use of certain technologies, and to document this in compliance with data protection regulations. The provider of this technology is Papoo Software & Media GmbH, Auguststr. 4, 53229 Bonn (hereinafter "CCM19").

As part of the use of the Cookie Consent Tool, a so-called "Content Delivery Network" (CDN) from CCM19 is used.

A CDN is a service that enables the content of our website-particularly large media files such as graphics, fonts, or scripts-to be delivered more quickly via servers distributed regionally and connected via the Internet. User data is processed solely for the aforementioned purposes and to maintain the security and functionality of the CDN and our web servers. For this purpose, the browser you are using must establish a connection to the CDN's servers. As a result, the CDN becomes aware that our website was accessed via your IP address.

When you visit our website, a connection is established with CCM19's servers to obtain your consents and other declarations regarding cookie usage. CCM19 then stores a cookie in your browser to associate the consents you have granted—or their revocation—with your session. The data collected in this manner is stored until you request that we delete it, delete the CCM19 cookie yourself, or the purpose for storing the data no longer applies. Mandatory statutory retention obligations remain unaffected.

CCM19 is used to obtain the legally required consents for the use of cookies. The legal basis for this is Article 6(1)(c) of the GDPR.

Data Processing
We have entered into a data processing agreement (DPA) for the use of the aforementioned service. This is a contract required under data protection law that ensures the service provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

10. Analytics Tools

10.1 Matomo

This website uses the open-source web analytics service Matomo. This service is provided by Innocraft Ltd, 7 Waterloo Quay, PO Box 625, 6140 Wellington, New Zealand (hereinafter "MATOMO"). The data is processed in a European data center.

With the help of Matomo, we are able to collect and analyze data regarding how website visitors use our website. This allows us, among other things, to determine when specific pages were viewed and from which region the visitors are coming. In addition, we collect various log files (e.g., IP address, referrer, browsers, and operating systems used) and can measure whether our website visitors perform certain actions (e.g., clicks, purchases, etc.).

The use of this analytics tool is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. If consent has been obtained, processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG, to the extent that the consent covers the storage of cookies or access to information on the user's device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent may be revoked at any time.

10.1.1 IP Anonymization

We use IP anonymization when analyzing data with Matomo. This involves truncating your IP address prior to analysis so that it can no longer be uniquely associated with you.

10.1.2 Cookie-Free Analysis

We have configured Matomo so that it does not store any cookies in your browser.

10.1.3 Matomo Content Delivery Network

Our website uses a so-called "Content Delivery Network" (CDN) provided by Matomo.

A CDN is a service that helps deliver content from our website—particularly large media files such as graphics, fonts, or scripts—more quickly by using servers distributed regionally and connected via the Internet. User data is processed solely for the aforementioned purposes and to maintain the security and functionality of the CDN and our web servers. To this end, the browser you are using must establish a connection to the CDN's servers. As a result, the CDN becomes aware that our website was accessed via your IP address.

We use Matomo's CDN on the basis of Art. 6(1)(f) of the GDPR. Our legitimate interest lies in protecting the services on our site and ensuring they can be delivered effectively.

10.2 Google Ads

On this website, we use conversion tracking from Google Ads, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you click on a Google ad placed by us, a cookie is stored in your browser, and a click ID (known as "gclid") is assigned to your visit. This allows us to track whether, after clicking on an ad, you perform an action we have specified-such as submitting a form or completing a purchase. The data collected in this way is used solely for statistical purposes to measure the effectiveness of our advertising and does not allow us to identify you personally.

The cookie is stored and your device is accessed only if you have given your prior consent. The legal basis for this is Section 25(1), first sentence, of the TDDDG. The legal basis for the subsequent processing of your data is your consent pursuant to Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect, for example, via the settings on our consent banner. The lawfulness of the processing carried out prior to revocation remains unaffected.

As part of this service, data is transferred to Google LLC, which is headquartered in the United States. For this transfer, we rely on the European Commission's Adequacy Decision, as Google LLC is certified under the EU-U.S. Data Privacy Framework. The cookie's storage period is limited and generally does not exceed ninety days. You can adjust additional advertising settings in your Google Account at https://adssettings.google.com.

11. Our Social Media Presence

We maintain company profiles on the social media platforms LinkedIn, Instagram, and Facebook.

We use these pages to provide information about our company, our services, and job openings, and to connect with prospective clients, customers, and job applicants. The legal basis is our legitimate interest in modern public relations and communication pursuant to Article 6(1)(f) of the GDPR. If you contact us through one of these platforms to initiate or fulfill a contract, we also process your information based on Article 6(1)(b) of the GDPR.

In doing so, we process the data that you yourself make available to us via the platform. This includes your public profile name, your comments and reactions to our posts, as well as messages you send us. We do not have access to any other data that the platform operator collects about you.

When you visit our pages, the respective platform operator collects personal data, such as your IP address, device and browser information, and details about your usage behavior. To do so, the operator uses cookies and similar technologies. This may also occur even if you do not have an account on the platform or are not logged in. The platform operator is generally solely responsible for this processing. It obtains any necessary consents itself. Together with the platform operator, we are jointly responsible under Article 26 of the GDPR for compiling site statistics. Details can be found in the sections on the individual platforms.

The platform operators are headquartered in Ireland but are part of corporate groups based in the U.S. Therefore, a transfer of your data to the U.S. cannot be ruled out. The parent companies, Meta Platforms, Inc. and LinkedIn Corporation, are certified under the EU-U.S. Data Privacy Framework. In this regard, an adequacy decision by the European Commission pursuant to Article 45 of the GDPR applies to the U.S.

11.1 Links to Our Social Media Pages

On our website www.weischer.de, you will find icons that link to our social media profiles. These are simple links. The icons are loaded from our own server. Therefore, no data is transmitted to the operators of the social networks when you visit our website. Only when you click on an icon will you be redirected to the respective provider’s page. From that point on, that provider’s privacy policy applies, and we have no influence over their data processing.

11.1.1 LinkedIn

We operate our company page on LinkedIn (https://www.linkedin.com/company/josef-weischer-gmbh/posts/) on the platform of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (LinkedIn).

LinkedIn provides us with statistics on the use of our company page (Page Insights). To do so, LinkedIn processes information from members’ profiles, such as field of work, country, industry, career level, company size, and employment status. This is supplemented by information on how members interact with our page, such as whether they follow it. We receive only aggregated reports and cannot link them to any individual person. We use the statistics to better tailor our content to the interests of our visitors. The legal basis is Article 6(1)(f) of the GDPR.

We and LinkedIn are jointly responsible for processing data within the scope of Page Insights pursuant to Article 26 of the GDPR. The agreement concluded for this purpose (Page Insights Joint Controller Addendum) is available at https://legal.linkedin.com/pages-joint-controller-addendum. Under this agreement, LinkedIn is responsible for responding to inquiries from data subjects regarding Page Insights. You may also contact us with your concerns. We will then forward it to LinkedIn. The lead supervisory authority is the Irish Data Protection Commission.

For more information on data processing by LinkedIn, please see LinkedIn’s Privacy Policy at https://www.linkedin.com/legal/privacy-policy. You can manage your data usage and advertising settings yourself in your LinkedIn account.

11.1.2 Instagram

We operate our company profile on Instagram https://www.instagram.com/josef_weischer_gmbh/ on the platform provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (Meta).

As the operator of a professional account, Meta provides us with statistics (Insights). These show, for example, the reach and interactions of our posts, as well as summarized information about our followers, such as age groups, gender, and regions of origin. We receive this information only in aggregated form and cannot associate it with any individual person. We use the statistics to better tailor our content to the interests of our visitors. The legal basis is Article 6(1)(f) of the GDPR.

We and Meta are jointly responsible for processing within the scope of Insights pursuant to Article 26 of the GDPR. The agreement provided by Meta (Page Insights Controller Addendum) is available at https://www.facebook.com/legal/terms/page_controller_addendum. According to this agreement, Meta assumes primary responsibility for the processing of Insights data and for fulfilling the rights of data subjects. You may also contact us with your inquiry. We will then forward it to Meta. The lead supervisory authority is the Irish Data Protection Commission.

For more information on data processing by Instagram, please see the Privacy Policy at https://privacycenter.instagram.com/policy. You can manage your data usage and advertising settings yourself in the account overview of your Instagram account.

11.1.3 Facebook

We operate our company page on Facebook at https://www.facebook.com/people/Josef-Weischer-GmbH/61575176744911/ on the platform of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (Meta).

Meta provides us, as the page administrator, with statistics on the use of our page (Page Insights). These show, for example, reach, page views, and interactions, as well as aggregated information about visitors such as age groups, gender, and regions of origin. We receive this information only in aggregated form and cannot associate it with any individual person. We use the statistics to better tailor our content to the interests of our visitors. The legal basis is Article 6(1)(f) of the GDPR.

We and Meta are jointly responsible for processing within the scope of Page Insights pursuant to Article 26 of the GDPR. The agreement provided by Meta (Page Insights Controller Addendum) is available at https://www.facebook.com/legal/terms/page_controller_addendum. Meta explains which data it processes for this purpose at https://www.facebook.com/legal/terms/information_about_page_insights_data. Under the agreement, Meta assumes primary responsibility for processing the Insights data and for fulfilling the rights of data subjects. You may also contact us with your concerns. We will then forward it to Meta. The lead supervisory authority is the Irish Data Protection Commission.

For more information on data processing by Facebook, please see the Privacy Policy at https://www.facebook.com/privacy/policy. You can manage your data usage and advertising settings yourself in the Account Overview of your Facebook account.

Retention Period and Your Rights

We process messages and inquiries that you send us via our online presence for as long as necessary to handle them. Afterward, we delete them, provided there are no legal retention requirements to the contrary. Public comments remain visible until you or we remove them. How long the platform operator stores data is governed by its privacy policy.

You can most effectively exercise your rights regarding data processing by the platform operator directly with the platform operator. Only the platform operator has access to the user data stored there and can take immediate action. If you contact us, we will assist you and forward your request.

12. Withdrawal of Consent – Data Access Requests and Requests for Changes – Deletion & Blocking of Data

12.1. Right to Access Information

You have the right to request confirmation as to whether we process your personal data. If this is the case, you have the right to access the information specified in Article 15(1) of the GDPR, provided that this does not infringe upon the rights and freedoms of others (see Article 15(4) of the GDPR). We would also be happy to provide you with a copy of the data.

12.2. Right to Rectification

Pursuant to Article 16 of the GDPR, you have the right to have any personal data we hold that may be incorrect (such as your address, name, etc.) corrected at any time. You may also request at any time that we complete any data we have stored about you. Any such corrections will be made without delay.

12.3. Right to Erasure

Pursuant to Article 17(1) of the GDPR, you have the right to have us erase the personal data collected about you if

• the data is no longer needed;
• the legal basis for processing has ceased to exist without replacement due to the withdrawal of your consent;
• you have objected to the processing and there are no legitimate grounds for the processing;
• your data is being processed unlawfully;
• a legal obligation requires it, or the data was collected in accordance with Article 8(1) of the GDPR.

This right does not apply pursuant to Article 17(3) of the GDPR if

• the processing is necessary for the exercise of the right to freedom of expression and information;
• your data has been collected on the basis of a legal obligation;
• the processing is necessary for reasons of public interest;
• the data is necessary for the establishment, exercise, or defense of legal claims.

12.4. Right to Restriction of Processing

Pursuant to Article 18(1) of the GDPR, you have the right, in certain cases, to request the restriction of the processing of your personal data.

This is the case if

• you contest the accuracy of the personal data;
• the processing is unlawful and you do not consent to erasure;
• the data is no longer needed for the purpose of processing, but the collected data is necessary for the establishment, exercise, or defense of legal claims;
• an objection to the processing has been lodged pursuant to Article 21(1) of the GDPR and it is still unclear which interests prevail.

12.5 Right to Withdraw Consent

If you have given us your explicit consent to the processing of your personal data (Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR), you may withdraw this consent at any time. Please note that this does not affect the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.

12.6 Right to Object

Pursuant to Art. 21 GDPR, you have the right to object at any time to the processing of your personal data that was collected on the basis of Art. 6(1)(f) (in the context of a legitimate interest). You are entitled to this right only if there are specific circumstances that preclude the storage and processing of your data.

How can you exercise your rights?

You may exercise your rights at any time by contacting us at the address below:

Josef Weischer GmbH
Sternbusch 14
48282 Emsdetten
Phone: 02572 93920
Email: info@weischer.de

12.7. Right to Data Portability

Pursuant to Article 20 of the GDPR, you have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format. You may also request that we transfer this data to a third party immediately upon your first instruction, provided that the processing is based on consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR or on a contract pursuant to Article 6(1)(b) of the GDPR, and the processing by us is carried out by automated means.

When exercising this right to data portability, you also have the right to have the personal data concerning you transmitted directly to another controller, provided this is technically feasible. The freedoms and rights of other individuals must not be infringed upon as a result.

The right to data portability does not apply to the processing of personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

12.8. Right to File a Complaint with the Supervisory Authority pursuant to Art. 77(1) GDPR

If you suspect that your data is being processed unlawfully on our site, you may, of course, seek judicial resolution of the matter at any time. Regardless of this, you have the option of contacting a supervisory authority. You have the right to lodge a complaint in the EU Member State where you reside, where you work, and/or where the alleged infringement occurred; that is, you may choose the supervisory authority to which you wish to submit your complaint based on the locations mentioned above. The supervisory authority to which the complaint was submitted will then inform you of the status and results of your complaint, including the possibility of a judicial remedy under Article 78 of the GDPR.