Privacy Policy

1. General Information

Protecting your personal data is important to us. Below, we explain which personal data is processed when you use our website, the purposes for which it is processed and the rights you have under the General Data Protection Regulation (GDPR).

Personal data means any information relating to an identified or identifiable natural person.

2. Controller

The controller within the meaning of the General Data Protection Regulation is:

wissner-bosserhoff GmbH
Hauptstraße 4–6
58739 Wickede (Ruhr)
Germany
Telephone: +49/2377/784-0
Email: [email protected]
Commercial Register: Arnsberg Local Court, HRB 4429

wissner-bosserhoff GmbH is part of the LINET Group.

Where other companies within the LINET Group process personal data as part of specific processing activities, they do so in accordance with their respective data protection roles and applicable legal requirements.

3. Data Protection Officer

You can contact our external Data Protection Officer at:

External Data Protection Officer of wissner-bosserhoff GmbH
c/o TÜV SÜD Akademie GmbH
80339 Munich
Germany
Email: [email protected]

You can also contact our Data Protection Officer by post at the controller’s address, marking your correspondence “For the attention of the Data Protection Officer”.

4. Website Provision and Server Log Files

When you access our website, the hosting or infrastructure service provider we use processes information that is technically necessary. This may include, in particular:

  • IP address
  • Date and time of access
  • Page or file accessed
  • Referrer URL
  • Browser type and version
  • Operating system
  • Volume of data transferred
  • HTTP status code

This information is processed to make the website technically available and to ensure its stability and security.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is to provide our website securely, reliably and efficiently.

As a general rule, server log files are stored only for as long as necessary for the purposes stated above. The standard retention period is currently up to one month, in particular to enable us to investigate and resolve technical issues and security incidents.

We use České Radiokomunikace a.s. (CRA) as our service provider for website hosting and technical infrastructure.

Cloudflare is also used to deliver and secure the website. Further information is provided in the following section.

5. Cloudflare

We use Cloudflare services to secure our website and support its technical delivery. In particular, Cloudflare is used for protection against DDoS attacks and for load balancing.

When you use our website, Cloudflare may process connection data that is technically necessary, in particular your IP address and information about your access to our website. This processing enables us to provide our website securely, reliably and efficiently.

6. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Strictly necessary cookies and technologies are used insofar as they are required to provide the website you have requested and its basic functions.

Where consent is required to store information on your device or to access information already stored on it, this takes place on the basis of Section 25(1) of the German Telecommunications and Digital Services Data Protection Act (TDDDG). In these cases, any further processing of personal data is based on your consent pursuant to Article 6(1)(a) GDPR.

Analytics and marketing technologies that are not technically necessary are used only if you have given your prior consent through our consent management system.

7. Consent Management

We use the consent management platform consentmanager to manage your consent.

consentmanager enables us to obtain, document and manage your consent to the use of certain cookies and technologies. Information about your consent choices is processed to store those choices and apply them when you visit our website again.

The consent management system is necessary to manage your privacy choices and fulfil our legal obligations to provide evidence of consent.

You can withdraw your consent at any time with effect for the future or change your choices through the privacy settings on our website.

Further information about data protection at consentmanager is available at:
https://www.consentmanager.net/privacy/

8. Google Tag Manager

We use Google Tag Manager on our website, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is used to manage and deploy website tags. In particular, it can be used to integrate analytics and marketing services.

Using Google Tag Manager does not automatically activate all services managed through it. Services that require consent are controlled in accordance with the choices you make in our consent management system.

Google Tag Manager is linked to our consent management system. Analytics and marketing tags that require consent are controlled in accordance with the consent you have given.

9. Google Analytics 4

If you give your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables us to analyse website usage statistically and improve our online offering. This may involve processing information about page views, interactions, technical characteristics of the device used, approximate location and the source of a website visit.

Google states that it does not log or store the IP addresses of users in the EU. IP addresses are used to derive certain location information and are then discarded.

Processing is based on your consent pursuant to Article 6(1)(a) GDPR and, where information is stored on or read from your device, Section 25(1) TDDDG.

You can withdraw your consent at any time through our cookie settings with effect for the future.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When Google services are used, data may also be processed outside the European Economic Area. Google uses the applicable lawful data transfer mechanisms for this purpose.

Google Analytics is configured with a retention period of 2 months for event data and 14 months for user data. The retention period for user data is reset when new user activity occurs. Google signals is not enabled. Detailed location and device data collection is enabled. The Google Analytics property is not currently linked to Google Ads. Consent is managed through Google Consent Mode; analytics storage is enabled only after the relevant consent has been given.

10. Meta Pixel

If you give your consent, we use marketing technologies provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

For this purpose, we use the Meta Pixel. The Meta Pixel is controlled in accordance with the choices you make in our consent management system.

These technologies enable us to understand how users interact with our website after, for example, viewing or clicking an advertisement on Facebook or Instagram. This allows us to measure the effectiveness of our advertising and create audiences for our advertisements.

Depending on the configuration, information transmitted to Meta may include pages visited, actions performed, technical information about the device used and other event and usage data.

Processing is based on your consent pursuant to Article 6(1)(a) GDPR and, where required, Section 25(1) TDDDG.

You can withdraw your consent at any time through our cookie settings with effect for the future.

11. LinkedIn Insight Tag and Conversion Tracking

If you give your consent, we use the LinkedIn Insight Tag and conversion tracking provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.

These technologies enable us to understand how users interact with our website after, for example, viewing or clicking an advertisement on LinkedIn. This allows us to measure the effectiveness of our LinkedIn advertising and record certain actions on our website as conversions.

In particular, information about page views, actions performed or conversions, and technical information about the device and browser used may be processed and transmitted to LinkedIn.

Processing is based on your consent pursuant to Article 6(1)(a) GDPR and, where information is stored on or read from your device, Section 25(1) TDDDG.

You can withdraw your consent at any time through our cookie settings with effect for the future.

12. YouTube

Videos from the YouTube platform may be embedded on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When embedded YouTube content is loaded, information may be transmitted to Google or YouTube.

Where consent is required, YouTube content is loaded only after you have given your consent.

In such cases, processing is based on your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG.

Simple links from our website to our YouTube channel take you to the YouTube website only when you click them.

13. Social Media Links

Our website contains links to our profiles on social networks, including:

  • LinkedIn
  • Facebook
  • Instagram
  • YouTube

Where these are simply external links, visiting our website does not generally result in any data being transmitted to the respective platform. Only when you click a corresponding link do you leave our website, at which point the privacy policies of the respective platform operator apply.

14. Contacting Us and Contact Forms

When you contact us through our website, we process the data you provide. This may include, in particular:

  • First and last name
  • Company
  • Country or location
  • Email address
  • Telephone number, if provided
  • Content of your enquiry

We use this data exclusively to handle your enquiry and the associated communication.

If your enquiry relates to entering into or performing a contract, processing is based on Article 6(1)(b) GDPR.

For other business enquiries, processing may be based on our legitimate interest in handling and responding to enquiries pursuant to Article 6(1)(f) GDPR.

The data is deleted once it is no longer required for the respective purpose, provided that no statutory retention obligations or other legitimate grounds for continued storage apply.

15. Google reCAPTCHA

To protect our contact forms against misuse and automated submissions, we use Google reCAPTCHA v2 (Checkbox), a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

reCAPTCHA is used to determine whether an entry is made by a natural person or generated automatically. In particular, this may involve processing and transmitting to Google technical information about the device and browser used, as well as the IP address.

16. Download and Lead Forms

On certain pages, we may make specific content, such as brochures, documents or further information, available through forms.

In particular, this may involve processing your name, email address, company and country.

Where the data is required solely to provide you with the requested content, it is processed for that purpose.

Any further use of your data for marketing communications takes place only where an appropriate legal basis exists, in particular your express consent.

17. Newsletter and Marketing Communications

If you subscribe to our newsletter or other electronic marketing communications, we process the data you provide, in particular your email address and, where applicable, your name, company, role and any other information you provide voluntarily.

We use Salesforce Marketing Cloud Account Engagement (MCAE, formerly Pardot), a service provided by Salesforce, to send and manage our marketing communications.

MCAE enables us to send marketing communications and analyse how recipients engage with them. In particular, this may involve processing information about whether a message was delivered or opened and whether links within it were clicked. We use this information to improve the relevance and quality of our communications.

Processing for the purpose of sending marketing communications is based on your consent pursuant to Article 6(1)(a) GDPR. Where the associated tracking involves storing information on or reading information from your device and consent is required, this additionally takes place on the basis of Section 25(1) TDDDG.

You can withdraw your consent at any time with effect for the future. In particular, you can use the unsubscribe link in our marketing emails. This does not affect the lawfulness of processing carried out before you withdrew your consent.

We use Salesforce as a service provider for the provision of MCAE. When Salesforce is used, personal data may also be processed outside the European Economic Area. Such transfers take place only in accordance with the legal requirements of Articles 44 et seq. GDPR.

After you unsubscribe, your data will no longer be used to send the relevant marketing communications. Where necessary, your email address may be stored on a suppression list to ensure that you do not receive such communications in the future.

Further information about data protection at Salesforce is available in Salesforce’s privacy notice.

18. Recipients and Data Processors

We use carefully selected service providers to deliver our website and the associated services.

These include, in particular, the following providers and service providers:

  • Hosting and IT infrastructure: České Radiokomunikace a.s. (CRA)
  • Website development and maintenance: Aricoma Digital s.r.o.
  • Content delivery, DDoS protection and load balancing: Cloudflare
  • Consent management: consentmanager
  • Web analytics and technical services: Google (Google Analytics 4, Google Tag Manager and Google reCAPTCHA)
  • Online marketing and conversion tracking: Meta Platforms Ireland Limited and LinkedIn Ireland Unlimited Company
  • Newsletters, marketing automation and CRM: Salesforce (including Salesforce Marketing Cloud Account Engagement – MCAE)

Where service providers process personal data on our behalf, they are bound by contractual obligations in accordance with legal requirements.

19. Transfers to Third Countries

When certain service providers are used, personal data may be processed outside the European Union or the European Economic Area.

Such transfers take place only if the legal requirements of Articles 44 et seq. GDPR are met. In particular, transfers may be based on an adequacy decision by the European Commission or appropriate safeguards, such as the European Commission’s Standard Contractual Clauses.

20. Retention Periods

As a general rule, we store personal data only for as long as necessary for the respective processing purpose.

Data may also be retained where we are required to do so under statutory retention and documentation obligations, or where storage is necessary for the establishment, exercise or defence of legal claims.

Where relevant, specific retention periods for individual services are set out in the preceding sections.

21. Your Rights

Subject to the applicable legal requirements, you have, in particular, the right to:

  • Request access to the personal data we process about you pursuant to Article 15 GDPR.
  • Request the rectification of inaccurate data or the completion of incomplete data pursuant to Article 16 GDPR.
  • Request the erasure of your personal data pursuant to Article 17 GDPR.
  • Request the restriction of processing pursuant to Article 18 GDPR.
  • Receive the data you have provided in a structured, commonly used and machine-readable format pursuant to Article 20 GDPR.
  • Object to certain processing activities pursuant to Article 21 GDPR.
  • Withdraw any consent you have given at any time with effect for the future pursuant to Article 7(3) GDPR.

To exercise your rights, you can contact us or our Data Protection Officer.

22. Right to Lodge a Complaint

Under Article 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority.

The supervisory authority responsible for wissner-bosserhoff GmbH is, in particular:

North Rhine-Westphalia Commissioner for Data Protection and Freedom of Information
Kavalleriestraße 2–4
40213 Düsseldorf
Germany
Telephone: +49 211 38424-0
Email: [email protected]
www.ldi.nrw.de

You can also contact a data protection supervisory authority at your place of residence or habitual residence.

23. Changes to This Privacy Notice

We reserve the right to update this Privacy Notice if our website, the services we use or legal requirements change.

Last updated: October 2026