Privacy Policy

Unless otherwise stated below, providing your personal data is neither legally nor contractually required and is not necessary to conclude a contract. You are not obliged to provide your data. “Personal data” means all information relating to an identified or identifiable natural person.

Server Log Files

Whenever our website is accessed, your browser automatically transmits information to our web server, which is temporarily stored in server log files. This may include your IP address, the date and time of access, the page visited, the amount of data transferred, the referring website and information about your browser. Processing is carried out to ensure the secure, reliable and technically correct operation of the website and to protect against misuse. The legal basis is Art. 6(1)(f) GDPR. Data is deleted when it is no longer required for these purposes.

Hosting and Shopify

Our online shop is hosted by Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland. Shopify processes personal data on our behalf to provide hosting, security, technical operation and shop functions. Further information is available at Shopify’s Privacy Policy.

Contact and Contract Processing

When you contact us by email or other means, we process the information you provide to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR where the enquiry relates to a contract or pre-contractual measures, or Art. 6(1)(f) GDPR based on our legitimate interest in responding to enquiries.

When you create a customer account or place an order, we process the information required to establish and perform the contract, including your name, address, email address, payment information and order details. The legal basis is Art. 6(1)(b) GDPR. We retain the data for the duration of the contractual relationship and thereafter in accordance with statutory retention periods.

External Enterprise Resource Planning System

For contract processing, we use an external enterprise resource planning system as a processor. Order data may be transferred to ViA-Online GmbH, Kimplerstraße 296, 47807 Krefeld, Germany. Processing serves to fulfil the contract and is based on Art. 6(1)(b) GDPR.

Payment Service Providers

PayPal Express and PayPal Checkout

We use payment services provided by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. When PayPal is selected, the data required for payment processing is transmitted to PayPal. PayPal may process information such as your IP address, device type, operating system, browser type and device location and may use cookies. Processing necessary to perform the contract is based on Art. 6(1)(b) GDPR; processing for offering different payment methods is based on Art. 6(1)(f) GDPR. Further information is available at PayPal’s Privacy Policy.

For certain payment methods, PayPal may obtain a credit assessment using credit agencies and statistical scoring procedures. Processing is based on Art. 6(1)(f) GDPR where applicable. You may object for reasons arising from your particular situation.

Shopify Payments

We use Shopify Payments provided by Shopify International Limited. Payment processing is carried out by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. Data required for the selected payment method is transmitted to Stripe. Processing required for contract performance is based on Art. 6(1)(b) GDPR. Further information is available at Shopify’s Privacy Policy and Stripe’s Privacy Policy.

Cookies

Our website uses cookies. Cookies are small text files stored in your browser or on your device. Technically necessary cookies are used under § 25(2) TDDDG and Art. 6(1)(f) GDPR to ensure the secure and technically correct operation of the website. Other cookies are used only with your consent where required.

You can control cookies through your browser settings and delete cookies that have already been stored. Disabling cookies may limit the functionality of this website.

Shopify Privacy and Compliance Consent Tool

We use Shopify Privacy and Compliance to obtain and document consent for data processing, in particular for cookies. The tool may process user information, including your IP address, and may transfer data to countries outside the EU, including Canada and the United States. Processing is carried out to fulfil a legal obligation and is based on Art. 6(1)(c) GDPR. Further information is available at https://www.shopify.com/legal/privacy.

Retention and Data Subject Rights

After the contract has been fully performed, data is initially retained for the statutory warranty period and then in accordance with statutory tax and commercial retention obligations. It is deleted after those periods have expired unless you have consented to further processing.

Subject to the statutory requirements, you have the rights under Articles 15 to 20 GDPR to access, rectification, erasure, restriction of processing and data portability. Under Article 21(1) GDPR, you may object to processing based on Art. 6(1)(f) GDPR and to processing for direct marketing purposes.

Right to Lodge a Complaint

Under Article 77 GDPR, you may lodge a complaint with a supervisory authority if you believe that processing your personal data is unlawful. The supervisory authority responsible for us is:

State Commissioner for Data Protection of Saxony-Anhalt
Leiterstraße 9
39104 Magdeburg
Germany
Phone: +49 391 818030
Fax: +49 391 8180333
Email: poststelle@lfd.sachsen-anhalt.de

Controller and Contact

Pachulski Andre & Wycisk Torsten GbR
Burg 13
06179 Teutschenthal OT Holleben
Germany
Email: mail@wp-spezialteile.de
Phone: +4934552489523

This English version is provided for convenience. The German version remains the legally controlling version.