Privacy policy
1. Data protection at a glance
General information
The following information provides an overview of what happens to your personal data when you visit this website. Personal data is any data with which you can be personally identified. Detailed information can be found in the following sections.
Data collection on this website
Who is responsible?
Data processing is carried out by the website operator. Contact details are given in the section “Information on the controller”.
How do we collect your data?
On the one hand you share data with us (e.g. in contact, enquiry or application forms). On the other hand our systems collect technical data when you visit (e.g. browser, operating system, time of access) and – only with your consent – analytics and marketing data.
What do we use your data for?
To provide and secure the website, to process your enquiries and applications, and – with consent – for analytics and advertising (Google Analytics and Google Ads).
What rights do you have?
You have, among other things, the right of access, rectification, erasure, restriction of processing, objection, data portability and withdrawal of consents given, as well as a right to lodge a complaint with the supervisory authority. Details are below; if you have questions, contact us using the details provided.
2. Hosting
We operate this website on infrastructure from Google Ireland Limited or affiliated companies (Firebase Hosting, Google Cloud Run, Google Cloud Storage) and a PostgreSQL database. When the site is accessed, technically necessary server and access data are processed (including IP address, timestamp, requested resource, user agent) in order to deliver and secure the website and remedy faults.
Media and other files may be stored in Google Cloud Storage and delivered from there. Transactional and content data of the website (e.g. form enquiries) are held in our database.
Processing is based on Art. 6(1)(f) GDPR (legitimate interest in secure, reliable operation). Where Google processes data in the USA or other third countries, the transfer is based on the EU Commission’s Standard Contractual Clauses and/or – where applicable – the EU-US Data Privacy Framework. Further information: https://cloud.google.com/terms/data-processing-addendum and https://policies.google.com/privacy.
3. General notes and mandatory information
Data protection
We treat your personal data confidentially and in accordance with statutory data protection rules and this privacy policy. When you use this website, various personal data are collected. This policy explains which data we collect, for what purpose and on what basis.
Data transmission on the internet (e.g. by email) can have security gaps. Complete protection against access by third parties is not possible.
Information on the controller
The controller for data processing on this website is:
J. Wandel GmbHManaging director: Jonathan WandelIn der Braike 2272127 Kusterdingen
Phone: +49 7071 5395490
Email: info@jwandel.com
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
Storage period
Unless a more specific storage period is stated, your personal data remain with us until the purpose of processing ceases. Upon a justified erasure request or withdrawal of consent we erase the data unless other legally permitted grounds (e.g. tax or commercial retention periods) apply; erasure then takes place after those grounds cease.
Legal bases of processing
Where you have consented, we process data on the basis of Art. 6(1)(a) GDPR (where applicable Art. 9(2)(a) GDPR). For cookies and similar technologies on the end device, § 25(1) TDDDG also applies; consent may be withdrawn at any time. For performance of a contract or pre-contractual measures Art. 6(1)(b) GDPR applies, for legal obligations Art. 6(1)(c) GDPR and for legitimate interests Art. 6(1)(f) GDPR. The relevant basis is stated in the following sections.
Transfers to the USA and other third countries
We use Google services with seat or processing options in the USA. When these tools are active (especially after your consent), personal data may be transferred to the USA or other third countries. We base the transfer – where available – on adequacy decisions (e.g. EU-US Data Privacy Framework) and/or Standard Contractual Clauses of the EU Commission. Details are in the sections on the respective services and in Google’s privacy notices.
Withdrawal of your consent
Many processing operations are only possible with your consent. You may withdraw consent at any time (e.g. via the cookie settings on this website). The lawfulness of processing carried out until withdrawal remains unaffected.
Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)
If processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object at any time on grounds relating to your particular situation; this also applies to profiling based on those provisions. If you object, we will no longer process the data concerned unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims (Art. 21(1) GDPR).
If data are processed for direct marketing, you may object at any time; thereafter the data will no longer be used for direct marketing (Art. 21(2) GDPR).
Right to lodge a complaint with the supervisory authority
In the event of breaches of the GDPR you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.
Right to data portability
You have the right to receive data that we process automatically on the basis of your consent or for performance of a contract in a commonly used, machine-readable format or – where technically feasible – to have it transmitted to another controller.
Access, erasure and rectification
Within the framework of the applicable legal provisions you have the right at any time to free information about your stored personal data, their origin and recipients and the purpose of processing and, where applicable, a right to rectification or erasure. For this and further questions you may contact us at any time.
Right to restriction of processing
You may request restriction of processing, in particular if you contest the accuracy of the data, processing is unlawful and you request restriction instead of erasure, we no longer need the data but you need them for the establishment of legal claims, or you have objected under Art. 21(1) GDPR and it has not yet been determined whose interests prevail.
SSL / TLS encryption
This site uses SSL/TLS encryption for security. An encrypted connection is indicated by “https://” in the address bar and the lock symbol in the browser.
4. Data collection on this website
Cookies
Our website uses cookies and similar technologies. Cookies are small data packages stored on your device. Session cookies are deleted at the end of your visit; permanent cookies remain until you delete them or the browser removes them.
Technically necessary cookies (e.g. for cart/enquiry list, language or security) are stored on the basis of Art. 6(1)(f) GDPR or § 25(2) TDDDG. For analytics and marketing cookies we obtain your consent via our cookie banner (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Consent may be withdrawn at any time; you can reopen the settings via the “Cookie settings” link in the footer.
If you disable cookies in your browser, website functionality may be limited.
Contact, enquiry and order forms
If you contact us via forms on this website or submit a product or order enquiry, we process the data you provide (e.g. name, contact details, message, configuration, attachments) to handle your request and follow-up questions. Data are not disclosed without your consent unless required by law or necessary for contract performance.
Processing is based on Art. 6(1)(b) GDPR where your request relates to a contract or pre-contractual measures; otherwise on Art. 6(1)(f) GDPR (legitimate interest in handling enquiries) or on consent where requested.
Data remain with us until you request erasure, withdraw consent or the purpose ceases (e.g. after processing is complete). Statutory retention periods remain unaffected. Emails for notification and processing may be sent via our email provider (SMTP or Microsoft 365).
Enquiries by email, phone or fax
If you contact us by email, phone or fax, we process your enquiry and the personal data arising in that context to handle your request. Legal bases and storage periods correspond to those for the forms.
Applications
You can apply via our application form or by email. We process your application data (contact details, documents, role information) insofar as this is necessary to decide on establishing an employment relationship. Legal basis is § 26 BDSG, Art. 6(1)(b) GDPR and – where given – Art. 6(1)(a) GDPR.
If you do not receive an offer, decline or withdraw the application, we generally retain the data for up to six months after the procedure ends on the basis of Art. 6(1)(f) GDPR (evidentiary purposes) and then erase them unless longer retention is required by law or with your consent.
5. Analytics tools and advertising
Google Analytics
This website uses Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables analysis of website use (e.g. page views, time on site, devices/browsers used, origin). Google may use cookies or similar technologies for this. The information generated is usually transmitted to and processed on Google servers; transfer to the USA is possible.
Use takes place only after your consent via the cookie banner (Art. 6(1)(a) GDPR and § 25(1) TDDDG). Consent may be withdrawn at any time.
Further information: https://support.google.com/analytics/answer/6004245?hl=en and https://policies.google.com/privacy?hl=en. Opt-out browser add-on: https://tools.google.com/dlpage/gaoptout?hl=en.
Google Ads
We use Google Ads (including conversion measurement). The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
With Google Ads we can display ads and measure whether users perform a certain action on our website after clicking an ad (e.g. submitting an enquiry). Cookies and similar technologies may be used and data transmitted to Google.
Use takes place only after your consent via the cookie banner (Art. 6(1)(a) GDPR and § 25(1) TDDDG). Consent may be withdrawn at any time.
Further information: https://policies.google.com/privacy?hl=en.
6. Plugins and tools
YouTube
Product pages may embed YouTube videos. The operator is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Videos are loaded only after your active confirmation; a connection to YouTube is then established and data (including IP address) may be transmitted to Google. Cookies or similar technologies are possible.
Use is in the interest of an appealing presentation of our offerings and – where required – on the basis of your consent (Art. 6(1)(a) or (f) GDPR, § 25(1) TDDDG). Further information: https://policies.google.com/privacy?hl=en.
7. Social media
In the footer and possibly elsewhere we link to our profiles on Instagram and Pinterest. These are plain links; when you visit our website no social media plugins are loaded and no data are automatically transmitted to those networks. Only when you follow the link do the privacy policies of the respective provider apply.
Instagram: https://instagram.com/about/legal/privacy/
Pinterest: https://policy.pinterest.com/en/privacy-policy
8. Customer data for enquiry and contract processing
To process product enquiries, quotes and orders we process necessary customer and communication data (e.g. contact details, delivery and billing address, configuration and order details). Legal basis is Art. 6(1)(b) GDPR.
Where necessary for contract performance, data may be disclosed to service providers (e.g. carriers). Only the data required in each case are transmitted. Online payment processing via external payment providers does not take place on this website.
After the business relationship ends and statutory retention periods expire, the data are erased.