GDPR

Privacy Policy

#inspireinventconnect

General Information

We are delighted that you have visited our website and are interested in our services. We attach the highest importance to protecting your privacy as a user of our online presence and strictly adhere to data protection regulations when collecting, processing, and using your personal data.

Name and Contact Details of the Controller

Wemhöner Surface Technologies GmbH & Co. KG
Planckstraße 7
32052 Herford, Germany

Phone: +49 5221 77020
Email: info@wemhoener.de

Managing Directors authorized to represent the company:
Florian Barth, B.Sc.
Heiner Wemhöner, Dipl.-Oec.

Contact Details of the Data Protection Officer

Dipl.-Wirt.-Ing. Oliver Baldner
bITs GmbH
Detmolder Straße 204
33100 Paderborn, Germany

Phone: +49 5251 688948-0
Email: info@bITs.GmbH

Purposes of Processing

Provision of general information / corporate or organizational presentation
Contact between website visitors and the controller via our online contact form
Upload and submission of application documents
File uploads
Analysis of usage behavior with Matomo on the controller’s own servers (without cookies)
Processing of technical information to deliver the service and to optimize how requested content is displayed on the visitor’s device
Controlling the website and tailoring processes during use by means of cookies

Legal Bases

Art. 6 (1) (f) GDPR (legitimate interests of the controller)
Art. 6 (1) (b) GDPR (required to perform pre-contractual measures) or Art. 6 (1) (f) GDPR (legitimate interests of the controller)
Art. 88 GDPR in conjunction with Section 26 (1) BDSG (establishing an employment relationship)
For file uploads, the legal basis depends on the file type and purpose. Possible bases include:
- Art. 6 (1) (b) GDPR (contract performance or pre-contractual measures)
- Art. 88 GDPR in conjunction with Section 26 (1) BDSG (establishing an employment relationship)
- Art. 6 (1) (f) GDPR (legitimate interests of the controller)
Art. 6 (1) (f) GDPR (legitimate interests of the controller) for additional technical processing as stated above

Where your personal data is processed on the basis of our legitimate interests pursuant to Art. 6 (1) (f) GDPR, our interests consist in continuously analyzing and improving our website, optimizing user-friendliness, and detecting and preventing misuse. If reach-measurement technologies are used based on our legitimate interests (e.g., Matomo), you will be informed separately in this Privacy Policy and provided with an opt-out option. In that case, our legitimate interest is the analysis, optimization, and economic operation of our website. Where information is stored on, or accessed from, your terminal device on the basis of your consent, such storage or access takes place pursuant to Section 25 (1) of the German Telecommunications Telemedia Data Protection Act (TTDSG). Our legitimate interest also includes pursuing economic goals such as revenue growth (e.g., through the provision of information or operation of social media channels).

Categories of Personal Data Processed

When you visit this website, personal data is processed.

Categories processed:

Technical connection data from server access:

IP addresses of visitors
Names of accessed pages
Date and time of access
Name of the browser used
Name of the operating system
Name of the search engine or external link
Names of downloaded files

Purpose of processing:

Monitoring technical functionality and increasing the operational security of our web server
Delivery and provision of the website
Anonymization and creation of statistics

Legal basis for processing:
Legitimate interest overriding the rights and freedoms of the data subjects (Art. 6 (1) (f) GDPR).

Legitimate interests in this context:
Strong commercial interest in the secure and reliable operation of technical systems.

Data transfer:
Data is transferred to the processor webgo GmbH, Wandsbeker Zollstraße 95, 22041 Hamburg, Germany.

If you submit data to us via our online forms, the personal data you provide will be processed for the respective stated purpose.

Recipients of Your Personal Data

Your personal data is disclosed to third parties only on the basis of your consent or where permitted by law. Transfers to government authorities entitled to receive such information occur only within the scope of applicable laws or where we are obligated by a court decision.

Our employees are bound to confidentiality and to compliance with data protection laws. For the technical provision of services, we engage companies that process your personal data on our behalf.

These are:

Processor: webgo GmbH
Service provided: Hosting of the website

Cookies and Local Storage

We use cookies to make our online presence more user-friendly and functional. Some cookies remain stored on your device.

Cookies are small text files sent by our web server to your browser and stored on your device. No personal data is stored—only a pseudonymous identifier. This allows us, for example, to recognize you while you navigate our site and make navigation easier.

Depending on purpose and function, cookies fall into the following categories:

Technically necessary cookies to ensure operation and basic functions of the website (e.g., retaining settings while navigating, preserving essential session information such as login or shopping cart).
Statistics cookies to understand how users interact with our website by collecting and analyzing information in anonymous form. This provides insights to optimize the website as well as our products and services.
Marketing cookies to enable targeted advertising activities on our website.

Legal basis:

Use of technically necessary cookies is based on our legitimate interest in proper technical operation and smooth functionality of the website (Art. 6 (1) (f) GDPR). Under Section 25 (2) No. 2 TTDSG, no consent is required, as these cookies are necessary to provide essential website functions.
Use of statistics and marketing cookies is based on your consent (Art. 6 (1) (a) GDPR). You may withdraw your consent at any time with future effect (Art. 7 (3) GDPR). Consent is voluntary; not granting it entails no disadvantages.

Alternatively, you may view this website without cookies by adjusting your browser settings. Please note that some functions of the site may then be partially or fully unavailable.

Further information on the cookies we actually use (especially their purpose and storage duration) is provided in this Privacy Policy and in our cookie consent manager.

Links to Other Websites

Our website contains links to external websites. We have no influence over whether their operators comply with data protection regulations. Despite careful content control, we assume no liability for external content. The respective operators are solely responsible.

Traffic Analysis – Matomo

This website uses the open-source software Matomo for statistical evaluation of visitor access.

Analysis is carried out exclusively on our own servers and does not require cookies. Processing is based on our legitimate interest (Art. 6 (1) (f) GDPR) in improving our online services. Data collected by Matomo is used only in anonymized form; your IP address is truncated and stored without the last octet. We can therefore identify the originating network but not the specific device.

Information about your use of our services is not passed on to third parties and is processed solely for the purposes stated above.

If your browser supports “Do Not Track” and it is enabled, your visit is automatically ignored. Otherwise, you can object to storage, processing, and use at any time via the opt-out option below. In that case, an opt-out cookie will be placed in your browser, preventing Matomo from collecting any data. Use of the opt-out cookie is likewise based on our legitimate interest (Art. 6 (1) (f) GDPR) in technically implementing the right to object. Note: If you delete this opt-out cookie, the system will no longer recognize your objection and you will need to activate it again.

Matomo Tracking Opt-Out

Our Social Media Presences

On the social networks listed below, we provide opportunities via fan pages/accounts/channels (e.g., Facebook, Instagram) to learn about us and our offerings and to contact us.

Below you will find information on which data we and the respective social network/service process in connection with accessing and using the respective web offering.

What data do we process about you?

If you contact us via a social network, we generally process your username and, where necessary, other data you provide insofar as this is required to handle/respond to your request.

Legal basis: Art. 6 (1) sentence 1 (f) GDPR (protection of our legitimate interests).

We may receive automatically provided statistics about our accounts from platform operators. These include in particular:

Number of page views
“Like” metrics
Page activities and post interactions, reach
Video views
Gender distribution of visitors to our social media presence

These statistics are aggregated and non-personal, so we cannot identify you based on them.

What data do the social networks/platform operators process?

You do not have to be a member of a social network to view our presence. Platform operators process data from visitors without accounts as well as from logged-in members (e.g., technical data to display pages). They may also use cookies and similar technologies beyond our control.

Details about the processing of your personal data by each platform can be found in the respective privacy policies. Where applicable, we provide provider-specific links below.

If you wish to use interactive features (comments, sharing, likes, messaging, etc.), registration with the platform and provision of personal data is required.

We have no influence over the networks’ processing of your data. According to our information, networks in particular analyze user behavior using cookies/similar technologies to display interest-based advertising within and outside the network. Your data may be stored outside the EU/EEA and shared with third parties (e.g., foreign authorities).

Please refer to each network’s privacy and cookie policies for details on the scope, purposes, storage periods, deletion, and your rights and opt-out options.

Our Facebook Page

Link:
https://www.facebook.com/people/Wemh%C3%B6ner-Surface-Technologies-GmbH-Co-KG/100086924900271/

We are joint controllers with Meta Platforms Ireland Limited, Dublin, Ireland, for certain functions (see below) pursuant to Art. 26 GDPR. Meta Platforms Ireland Limited is a subsidiary of Meta Platforms, Inc., Menlo Park, California, USA.

When you visit our page, Meta collects your IP address and other information via cookies stored on your device to provide us, as page operators, with statistics on usage (“Page Insights”).

Further information on data processing by Meta:
https://de-de.facebook.com/help/pages/insights

Information on processing within joint controllership:
https://www.facebook.com/privacy/explanation

The relevant content of the Art. 26 GDPR joint controllership agreement between Meta and us is available here:
https://www.facebook.com/legal/terms/page_controller_addendum

Meta has agreed to assume primary GDPR responsibility for processing Insights data and to fulfill all GDPR obligations relating to such data (in particular Arts. 12–13, 15–22, 32–34 GDPR).

The statistics provided to us are not personal data for us; we cannot identify you based on them. We use these statistics solely to better understand user interests, improve our online presence, and ensure the quality of our online services.

Where we collect personal data via Facebook (e.g., your name, nickname, message content, comment content, publicly available profile information), we use it only to communicate and interact with you.

Processing for communication/interaction is based on our legitimate interests (Art. 6 (1) (f) GDPR) in pursuing our business objectives through information and communications offerings on Facebook.

Where processing in connection with our Facebook page requires your consent (e.g., prize draws, newsletter distribution), we will obtain it separately (Art. 6 (1) (a) in conjunction with Art. 7 GDPR).

Where Facebook processes your data for its own purposes requiring consent (e.g., user behavior analysis), such consent is obtained by the network itself (Art. 6 (1) (a) in conjunction with Art. 7 GDPR).

Because Meta and we are joint controllers, you may exercise your data subject rights either with us or directly with Meta. As Meta controls most processing, asserting your rights is often most effective directly with Meta.

Where Meta transfers usage-related data to the USA, transfers are based on the European Commission’s adequacy decision (Art. 45 (3) GDPR), known as the EU–U.S. Data Privacy Framework (EU–U.S. DPF).

Meta Pixel (formerly Facebook Pixel)

We use Meta Pixel only with your consent (Art. 6 (1) (a) GDPR; Section 25 (1) TTDSG). You may withdraw consent at any time with future effect.

Purpose: analyze and measure the success of advertising placed on Facebook.

We aim to display ads only to users genuinely interested in our products and services. Meta Pixel enables us to better align advertising with potential customers’ interests. Facebook users who have consented to personalized ads may see relevant advertising. Meta may also use the data collected via Meta Pixel for its own analytics and advertising.

We have implemented Meta’s code on our website. When you arrive via Facebook Ads, Meta can analyze and measure your actions. If, for example, you purchase a product, Meta Pixel is activated and stores your actions in one or more cookies. These cookies allow Meta to match your usage data (e.g., IP address, user ID) with your Facebook account, if available. After matching, Meta deletes the data. We cannot view personal data; Meta uses the data only for ad delivery.

If you have a Facebook account and are logged in, your data is automatically associated with your account when visiting our site. You can adjust ad preferences (when logged in) here:
https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen

If you do not have a Facebook account, you can manage usage-based advertising and enable/disable providers here:
Preference management (insert your local link or tool)

A placeholder is currently displayed by the standard provider. To access the actual content, click the button below. Please note that doing so will transfer data to third-party providers.

Unlock content
More information

Meta privacy policy:
https://www.facebook.com/policy.php

Further information on the cookies we actually use (purpose and storage duration) can be found in this Privacy Policy and in our cookie consent manager.

Our Instagram Presence

Link:
https://www.instagram.com/wemhoener_hf/?hl=de

For certain functions, we are joint controllers with Meta Platforms Ireland Limited (service provider), Dublin, Ireland, pursuant to Art. 26 GDPR. Meta Platforms Ireland Limited is a subsidiary of Meta Platforms, Inc., Menlo Park, California, USA.

When you visit our Instagram page, Meta collects your IP address and other information via cookies to provide us with anonymized statistics on usage (“Insights”). Details and links are essentially the same as for Facebook:

Insights information: https://de-de.facebook.com/help/pages/insights
Privacy explanation: https://www.facebook.com/privacy/explanation
Joint controller terms: https://www.facebook.com/legal/terms/page_controller_addendum

We use statistics only to improve our online presence. Personal data provided via Instagram (e.g., your name, nickname, messages, comments, publicly provided profile information) is processed solely for communication and interaction (Art. 6 (1) (f) GDPR). Where consent is required (e.g., prize draws, newsletters), we obtain it separately (Art. 6 (1) (a) GDPR).

Transfers to the USA take place under the EU–U.S. Data Privacy Framework.

Your Security

We protect your data against unauthorized access, loss, manipulation, or destruction by means of technical and organizational measures. Our security measures are continuously updated in line with technological progress. All communication between your device and our servers is encrypted—both for downloads of documents/information and for data you submit via the contact or application forms.

Storage Period

Personal data you provide is automatically deleted when the purposes of processing no longer apply and no statutory retention obligations exist. Unless specified elsewhere (e.g., under cookie descriptions), the following retention periods apply:

Category of stored data

Content you send via the contact or application form
Technical data and logs to ensure website operation

Deletion period

6 months
Retention periods for submitted content depend on the type of information and applicable statutory retention rules. If an application does not lead to an employment contract, data is automatically deleted 6 months after completion of the recruitment process. If you exercise your rights to erasure earlier, we will delete the data immediately upon your request.

Data Subject Rights / Right to Lodge a Complaint

Under the GDPR you have the following rights:

Art. 15: Right of access
Art. 16: Right to rectification
Art. 17: Right to erasure (unless a legal basis permits/obliges further storage)
Art. 18: Right to restriction of processing, if:
- you contest the accuracy of the data (for the period needed to verify accuracy),
- processing is unlawful and you oppose erasure and request restriction instead,
- we no longer need the data for processing purposes but you require it for the establishment, exercise, or defense of legal claims,
- you object to processing pursuant to Art. 21 (1) GDPR pending verification whether our legitimate grounds override yours.
Art. 20: Right to data portability
Art. 77: Right to lodge a complaint with a supervisory authority if you believe processing infringes the GDPR.

Right to Withdraw Consent

You may withdraw consent at any time with future effect (Art. 7 (3) GDPR). Processing carried out prior to withdrawal remains lawful.

Right to Object

Where your personal data is processed on the basis of legitimate interests (Art. 6 (1) (f) GDPR), you have the right to object to such processing on grounds relating to your particular situation (Art. 21 GDPR).

Provision of Your Personal Data

Personal data is information about your identity (e.g., name, address, phone number, email address). Using this website generally does not require providing personal data. In certain cases, however, we need your name and address and other details to provide the services requested (e.g., use of the contact form, sending information, answering questions, or submitting online applications). Where required, we will inform you accordingly.

Beyond this, we store and process only data that you provide voluntarily or that is collected automatically. If you make use of consulting services, we generally collect only the data necessary to provide those services. Where we ask for additional data, this is voluntary. Personal data you provide is processed solely for the purposes communicated and explained to you.

Amendments to This Privacy Notice

Our security and data protection measures may need to be updated, particularly due to technical or legal developments. In such cases, this Privacy Policy will also be adjusted accordingly. Please therefore refer to the latest version of this notice.

Questions, Suggestions, Complaints

If you have further questions regarding this Privacy Policy or the processing of your personal data, you may contact our Data Protection Officer at any time using the contact details provided above.

GDPR for suppliers

Legal Disclaimer

purchasing terms

terms of sale