Privacy Notice

1. General Information

The following Privacy Notice pursuant to Article 13 of the GDPR provides an overview of how we process your personal data when you visit our website. The subject matter of data protection is personal data. Personal data pursuant to Article 4(1) GDPR means any information relating to an identified or identifiable natural person (“data subject”). This includes, but is not limited to, information such as name, postal address, email address, telephone number or payment data.
Please refer to the detailed information we have provided below to learn how we handle your personal data.

 

2. Contact Data of the Controller of personal data

The controller as defined in Article 4(7) GDPR is:

Westdeutscher Bindegarn-Vertrieb Eselgrimm GmbH & Co. KG

Am Landhagen 50
59302 Oelde
Germany
Tel.: +49 2522 790
Email: info(at)wbv-worldwide.com


For questions relating to data protection with regards to the processing carried out by the controller, please refer to our Data Protection Officer:

André Korte
DSB Münster GmbH
Martin-Luther-King-Weg 42–44
48155 Münster
Germany
Email: datenschutz(at)dsb-ms.de

 

3. Scope and Purpose of the Processing of Personal Data

When you visit our website, we may collect and process various categories of personal data. This Privacy Notice aims to inform you about the types of data we collect, the purposes for which we process it, and the legal bases on which such processing is conducted.
 

3.1 Processing During Website Visits

a) Server Log Files

When you visit our website, your browser automatically sends data to our server. Said data is then temporarily stored in server log files and includes:

  • IP address of your device
  • Date and time of access
  • Name and URL of the page visited
  • Referrer URL (the site from which you accessed our website)
  • Browser type and version, operating system, and the name of your internet service provider

Processing this type of data is necessary to pursue our legitimate interests in accordance with Article 6(1)(f) GDPR. Our legitimate interests include:

  • Ensuring the website connection is established efficiently
  • Providing a user-friendly experience
  • Maintaining system security and stability
  • Facilitating administration and improvement of our website

The data processed in the context of said interest is not used to create personal profiles or identify visitors. Log files are deleted after a maximum of 7 days. If data is stored longer, IP addresses are anonymized to prevent identification.
 

b) Cookies

Our website uses cookies. Cookies are small text files stored on your device by your browser.

Necessary Cookies

Certain cookies are technically necessary to ensure the proper functioning of essential website features, and without them the website is unable to provide you with the requested services. These types of cookies are usually deleted when you close your browser. The legal basis for their use is Article 6(1)(f) GDPR in conjunction with §25(2) TDDDDG.

Non-Essential Cookies

Other types of cookies (e.g., for analytics or marketing purposes) are not strictly necessary to carry out the core functions of our website or to provide the requested services and therefore require your prior consent pursuant to Article 6(1)(a) GDPR.

Cookie Settings

After initially configuring your cookies, you can always change your preferences via your browser settings to determine whether certain cookies should be stored or deleted. Please note that deleting cookies responsible for the core operations of our website may prevent you from using certain technical features during your visit.

Common types of cookies include:
  • Session cookies: Stored during an active website session and deleted when the browser is closed or the session expires.
  • Persistent cookies: Stored for a defined period and automatically deleted after expiration.
  • Third-party cookies: Set by external partners, e.g. for statistical or marketing purposes.
  • Technically necessary cookies: Required for basic website functionality such as navigation and access to secure areas.
     
c) Google Tag Manager

We use Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Tag Manager is used to manage website tags via a single interface. The tool itself does not create user profiles, store cookies, or perform independent analyses.
When accessing our website, your IP address is transmitted to Google solely for the purpose of establishing a connection to its servers and checking for, as well as executing, integrated tags. This processing of personal data is carried out exclusively to ensure the technical operation, stability, and security of the service.
Google Tag Manager is enabled only if you have given your consent via the cookie banner prior to us using the service. The legal basis for this processing is Article 6(1)(a) GDPR. A transfer of personal data to Google LLC in the United States may occur. Google LLC is certified under the EU–U.S. Data Privacy Framework.
 

d) Google Analytics

For the purpose of optimizing our website, we create pseudonymous Profiles using Google Analytics 4, operated by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
Google Analytics uses cookies to analyze your use of our website. If given prior consent in accordance with Article 6(1)(a) GDPR via our cookie banner, we enable the service to collect personal data during your visit.

The following types data are collected and processed via Google Analytics:
  • Pages visited
  • Browser information
  • Click paths
  • Date and time of visits
  • Device information
  • Downloads
  • Flash version
  • IP address (anonymized)
  • JavaScript support
  • Purchase activity
  • Usage data
  • Referrer URL
  • Location information
  • Widget interactions

The information generated by cookies about your use of our website may be transferred for storage purposes to Google servers in the USA. However, because we have enabled IP anonymization, your IP address is truncated by Google within the European Union or in other countries of the European Economic Area before being transferred overseas. Only in exceptional cases would the IP address be initially transmitted to Google LLC and then shortened. Furthermore, Google LLC is certified under the EU-U.S. Data Privacy Framework.

Google uses collected data to evaluate your use of the website, to compile reports on website activities, and to provide us with other services related to website and internet usage as well as market research. For example, we use Google Analytics to analyze clicks from Google Ads purely for statistical purposes. Personal data is retained only as long as necessary to fulfill the processing purpose and deleted thereafter.

Information on how Google uses data can be found here: 
http://www.support.google.com/analytics/answer/6004245 and http://www.google.com/policies/privacy/partners/

You can prevent the storage of non-essential cookies in advance by adjusting your browser settings. In this case, an opt-out cookie is set that prevents Google Analytics from storing usage data. Please bear in mind that if you delete your cookies, this will also remove the opt-out cookie.
 

Google Add-On to deactivate Google Analytics

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and its processing by Google by installing the browser add-on made available here:
https://tools.google.com/dlpage/gaoptout?hl=de
 

e) Google Ads Conversion Tracking / Enhanced Conversion Tracking

With your prior consent we use Google Ads Conversion Tracking to enhance our online advertising strategy. It helps us understand ad traffic and specifically which ads lead to actual inquiries and how we can improve our advertising efforts.

When you visit our website via an ad, Google sets a cookie on your device. This cookie makes tracking possible once you perform certain actions on our site, such as making a call, booking an appointment, or submitting a contact form. Such actions are recorded as conversions. This allows us to track how many contacts are generated through our ads.

Additionally, with your prior consent, we use Enhanced Conversion Tracking. This allows certain data you enter, such as an email address or phone number, to be transmitted to Google in a hashed form. The hash ensures that Google can only use the data to attribute a conversion to an existing Google user interaction. The information is not transmitted in plain text. This enables more accurate measurement, even if cookies alone cannot reliably make such associations.

Processing is carried out exclusively on the basis of your consent under Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDG.
Data transmission from the European branch to Google LLC in the USA is possible. Google LLC is certified under the EU-U.S. Data Privacy Framework, ensuring an adequate level of data protection. For more information on how Google handles personal data, please visit https://policies.google.com/privacy
 

f) Leadinfo

We also use the Leadinfo service on our website, provided by Leadinfo B.V., located in Capelle aan den IJssel, Netherlands. This service helps us identify which companies visit our site. Leadinfo uses publicly available company data and the IP address of each visit to check whether the IP can be linked to a known company network.

This information helps us understand which industries are interested in our services, and we use this data solely to assess and improve what we offer.
The data processing is based on your consent as outlined in Article 6(1)(a) GDPR. Data transfer outside the EU may occur. In that case Leadinfo ensures an adequate level of data protection and offers additional contractual safeguards as part of their data protection measures. For more details, please refer to their privacy policy:
https://www.leadinfo.com/de/datenschutz/
 

g) Use of our contact form

For any questions you may have, please contact us using the form provided on our website. In order to respond to your inquiry, we require a valid email address, your name, and your company name so that we know who the inquiry is from. Further information can be provided voluntarily. The legal basis for processing is Art. 6 (1) lit. b GDPR. Data processing is carried out exclusively for the purpose of handling and responding to inquiries. The personal data collected will be deleted as soon as the inquiry has been resolved and there is no further legal obligation to retain it.
 

h) Newsletter

To keep up to date, you can subscribe to receive promotional emails from us. To sign you up for our newsletter, we collect your email address and a timestamp of your consent. This step is necessary to deliver newsletters. We also analyze the delivery and open rates of our newsletters to help us improve the content.
These evaluations help us to recognize your reading habits and adapt our content accordingly.

The legal basis for processing your data after you register to receive the newsletter is your consent under Article 6(1)(a) GDPR. You can only receive newsletters with a valid email address and after you have registered.

To ensure proper registration and prevent unauthorised sign-ups on behalf of third parties, we send a confirmation email after initial registration, asking you to confirm your subscription (double opt-in process).

Your data is processed by Positive Group Deutschland GmbH, Ingeborg-Krummer-Schroth-Str. 18a, 79106 Freiburg im Breisgau, Germany, in short, our service provider. They are the processor that enables us to maintain and design our newsletter. We have concluded a data processing agreement with Positive Group in accordance with Article 28 GDPR.
 

i) Links (social media, map service)

We have also linked our website to the social media profiles of our company (Instagram, LinkedIn, Facebook, TikTok, Kununu, and YouTube) as well as integrated Google Maps as a map service. By clicking on one of the social media icons on the bottom of our website, you will be redirected to the respective platform.
Please note that from this point on, your personal data (e.g., your IP address, device information, pages accessed) will be transmitted to the respective platform operator and processed by them as a controller, regardless of whether you have a user account or are logged in. The data processing is therefore carried out under the responsibility of the respective provider.

For more information, please refer to the privacy policies of the respective platforms:

j) Web analysis with Matomo (cookieless)

We use Matomo to evaluate the use of our website and to improve its content and functions. Matomo is entirely operated from our own server. The data processed thereby is not passed on to third parties.

Matomois configured to run without the need for cookies. Only technical information necessary for the analysis is collected, such as pages visited, length of stay, a shortened IP address, and information about the browser and operating system. We derive this information from our website's log data, so IP addresses are already shortened at collection and no longer identify individuals.

The legal basis is Art. 6 (1) lit. f GDPR. Our legitimate interest lies in better understanding the use of our website and continuously optimizing it.
 

3.2. In Matters Concerning the Company

a) Customer Contact

Should you wish to contact us, you can do so via several channels, including email and phone. When you contact us, we will process any personal data that you provide to us for the sole purpose of communicating with you.
This processing is based on Article 6(1)(b) GDPR if your enquiry relates to the fulfilment of a contract or is necessary for pre-contractual steps. In all other cases, processing is based either on our legitimate interest in effectively handling the enquiries addressed to us under Article 6(1)(f) GDPR, or on your consent under Article 6(1)(a) GDPR if requested.
We will retain your data until you request its deletion, withdraw your consent for its retention, or the purpose for which we stored it no longer applies (e.g. once we have completed processing your enquiry). Mandatory legal provisions, especially retention periods, remain unaffected.
 

b) Customer and Supplier Data

We process such data in order to fulfil our contracts with customers and implement pre-contractual measures. Data processing is carried out for a variety of purposes, including sales or consultation discussions, on a case-to-case basis, according to the needs of the customer.
Additionally, we process personal data to initiate and fulfil contracts with suppliers and service providers, in accordance with Article 6(1)(b) GDPR.
 

c) Applying for a Job via E- Mail and Online Form

We will process personal data you provide when applying for an open position in our company to assess your suitability for this role, or potentially other roles, and, where applicable, to conduct the recruitment process.

As part of the process, we will process your personal data in order to establish an employment relationship with you, in accordance with Article 6(1)(b) GDPR. If this data is required for legal proceedings following the application process, it may be processed under Article 6 GDPR, particularly for legitimate interests under Article 6(1)(f) GDPR. Our interest in such cases is to assert or defend claims. Another legal basis is your consent, as outlined in Article 6(1)(a) GDPR. If special categories of personal data are concerned (e.g. health, religion, ethnic origin, political views or other 'sensitive' data), your additional consent is required under Article 9(2)(a) GDPR. If you wish to exclude the processing of sensitive data from the outset, we recommend that you either do not provide it or remove it from your documents.

We will process and store your personal data for as long as necessary to fulfil the purposes of processing, or to meet any contractual, legal or regulatory obligations. Thereafter, the data will be deleted or its processing restricted. If no employment relationship is established following the application process, we will delete your data after six months. However, if you have consented to the further storage of your personal data, it will be transferred to our talent pool, so that we can contact you in case a similar position is made open. This data will be deleted after two years. If offered a position and you accept, your data will be transferred to a new personnel file under your name.

Upon receipt of your application, the HR department will review your application. Suitable applications are then forwarded internally to the department heads responsible for the open position. The next steps will then be coordinated accordingly. Within the company, only individuals who require access to your data for the proper conduct of the recruitment process will have access to it. Your data will not be shared with third parties, nor is it planned to be shared.
 

d) Direct Marketing - Existing Customers

If you have provided us with your data in connection with the sale of our goods or services, we may send you regular offers and information about similar products and services via email. For this purpose, we process customer data (e.g. names and addresses) and contact details (e.g. email addresses), in accordance with Section 7(3) of the German Unfair Competition Act (UWG), without requiring separate consent.

The processing is based solely on our legitimate interest in personalized direct marketing, as set out in Article 6(1)(f) GDPR, in conjunction with Section 7(3) UWG. If you object to receiving emails for this purpose at any time, we will stop processing your data for this purpose altogether. We will only store your personal data for as long as you do not object to its processing, unless longer storage is legally required or permitted. If you object, we reserve the right to store your email address exclusively for the purpose of maintaining a 'blacklist'.

The data is processed by the service provider Positive Group Deutschland GmbH, Ingeborg-Krummer-Schroth-Straße 18a, 79106 Freiburg im Breisgau, Germany. They are our data processor and enable us to manage recipient lists, as well as design and send out emails. We have concluded a data processing agreement with the service provider under Article 28 GDPR.

You can unsubscribe from our newsletter at any time, thereby objecting to further email communications. A link to do so is provided at the end of each email, or you can use any of the contact methods listed above, preferably via email.

Under Article 21 GDPR, you have the right to make a general objection to the processing of your personal data for direct marketing. To exercise your right to withdraw consent or object, simply send an email to the address provided above.

 

4. Legal basis for data processing

Where the legal basis has not already been specified in section 3, the following applies to data processing:

  • Where we obtain the consent of the data subject for the processing of personal data, Art. 6 (1) (a) GDPR serves as the legal basis.
  • If the processing of personal data is necessary for the performance of a contract, whether paid or free of charge, Art. 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.
  • If processing is necessary for compliance with a legal obligation to which we are subject, Art. 6 (1) (c) GDPR serves as the legal basis.
  • If processing is necessary to safeguard a legitimate interest of our company or a third party and the interests, fundamental rights, and freedoms of the data subject do not outweigh the former interests, Art. 6 (1) lit. f GDPR serves as the legal basis for processing.

 

5. Recipients and categories of recipients of the data

Only the relevant company departments are granted access to your data. Your personal data will not be transferred to third parties. The only exceptions to this rule are if it is necessary for us to fulfil our contractual obligations to you, if you have given your consent, if it is required by law or if we are authorised to pass on the data.
This includes, in particular, transfer to third parties such as authorities, courts and experts. The transferred data may only be used by third parties for the specified purposes.
We pass on your data within the scope of order processing in accordance with Art. 28 GDPR to service providers who support us in operating our website and associated processes. These include hosting service providers, for example. Our service providers are strictly bound by our instructions and are contractually obliged to comply with them.

 

6. Data Processors

The following is a list of the processors we work with, provided they have not already been mentioned in the privacy policy text above. If data is transferred outside the EU or EEA in this context, we will provide information on the appropriate level of data protection.

Data Processor Purpose Adequate level of data protection
Mittwald CM Service GmbH & Co. KG Hosting Processing within the EU/EWR
Leadinfo B.V. Leads Generation Processing within the EU/EWR
Google Ireland Ltd. Web analytics (Google Analytics), Tag management Google Tag Manager), Ad success rate (Google Conversion Tracking) EU- SCCs, EU-US Data Privacy Framework

7. Retention period

Unless specified otherwise above and in individual cases, we will only store your personal data for as long as is necessary to fulfil the intended purpose.
Your personal data will be deleted as soon as the purpose of processing it no longer applies.
If there are legitimate reasons to prevent deletion, in accordance with Art. 17(3) GDPR, such as a legal retention obligation, the processing of the data will instead be restricted for the duration of this period. A statutory retention obligation may exist due to tax and commercial law documentation requirements, for example. In these cases, the data will be deleted when the reason for further storage no longer applies, e.g. when the statutory retention period expires.

 

8. Rights of data subjects

Under applicable legal provisions of the GDPR, you have the right to access, correct or supplement, delete, transfer, restrict, and object to the processing of your personal data.
To ensure that personal data is not disclosed to third parties, please send your request by email or post to the above address, clearly identifying yourself.
 

a) Right to access

You have the right to request information about your personal data processed by us. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned retention period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data if it was not collected by us, and the existence of automated decision-making, including profiling and, if applicable, relevant information about its details. (Art. 15 GDPR)
 

b) Right to rectification or supplementation

You have the right to request the immediate rectification or completion of any inaccurate or incomplete personal data stored by us. (Art. 16 GDPR).
 

c) Right to erasure

You have the right to request the erasure of your personal data stored by us, unless further processing is necessary for exercising the right to freedom of opinion and information, for fulfilling a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims. (Art. 17 GDPR).
 

d) Right to restriction of processing

You have the right to request the restriction of the processing of your personal data, provided that you dispute the accuracy of the data, the processing is unlawful but you do not want it to be deleted, we no longer need the data but you do, or you have lodged an objection to the processing in accordance with Art. 21 GDPR. (Art. 18 GDPR).
 

e) Right to data portability

You have the right to data portability, i.e., the right to have data stored by us about you transferred to you in a standard, machine-readable format. (Art. 20 GDPR)
You also have the right to have your personal data, which we process on the basis of your consent or in fulfillment of a contract and in an automated manner, transferred to another controller in a commonly used, machine-readable format.
If you request the direct transfer of the data to another controller, this will only be done to the extent that it does not restrict the rights and freedoms of other people.

 

9. Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(f) GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms. Or the processing serves to assert, exercise, or defend legal claims.

 

10. Right to withdraw consent

If we process your personal data on the basis of your consent, you have the right to withdraw this consent at any time with effect for the future.
In the event of withdrawal, we will delete the data concerned without delay, unless further processing can be based on a legal basis for processing without consent (e.g., statutory retention periods).
Your withdrawal of consent does not affect the lawfulness of the processing that took place prior to your withdrawal.

 

11. Right to lodge a complaint with the supervisory authority

You also have the right to lodge a complaint with the competent data protection supervisory authority at any time. To do so, you can contact the supervisory authority of the federal state in which you reside or the authority of the federal state in which the controller is based.
The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.

Competent supervisory authority:

State Commissioner for Data Protection and Freedom of Information

North Rhine-Westphalia
P.O. Box 20 04 44
40102 Düsseldorf
Tel.: 0211/38424-0
Email: poststelle(at)ldi.nrw.de

 

12. Status of this privacy policy

This privacy policy was last updated in December 2025.
We reserve the right to amend the privacy policy at regular intervals in line with the underlying data processing practices or due to changes in the legal situation.