LEGAL

Privacy Policy

1. General Information

The protection of your personal data is important to us. In this privacy policy, we inform you about which personal data is processed when using our website, for what purposes this is done and what rights you have.

Personal data is all information that relates to an identified or identifiable natural person.

The processing of your data is carried out in accordance with the General Data Protection Regulation (GDPR) and the applicable data protection laws.

2. Controller

The person responsible for data processing on this website is:

Weidehoff Business Solutions GmbH
Hauptstraße 35
50126 Bergheim
Germany
Phone: +49 176 70087332
Email c.weidehoff@weidehoff.com

3. Hosting and server log files

Our website is hosted by the following provider:

IONOS SE
Elgendorfer Str. 57
56410 Montabaur
Germany

When visiting our website, technical information is automatically processed. This may include, in particular, the following data:

  • IP address of the accessing device
  • Date and time of the access
  • Requested pages and files
  • Browser type and browser version
  • Used operating system
  • Referrer URL, if submitted

The processing of this data is necessary to provide our website, to ensure its stability and security, and to detect technical malfunctions and possible attacks.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable operation of our website.

The server log files are stored by IONOS for a maximum of eight weeks and then deleted. The IP addresses of the visitors are then anonymized.

As far as IONOS processes personal data on our behalf, this is done on the basis of a contract for order processing in accordance with Article 28 GDPR.

4. Contacting us by email or phone

When you contact us by email or phone, we process the personal data you provide. This includes in particular your name, contact details and the information you provide to us as part of your request.

We use this data exclusively to process your request and to communicate with you.

The legal basis is Article 6(1)(b) GDPR, provided that your request serves the initiation or execution of a contract. In other cases, processing takes place on the basis of our legitimate interest in processing detailed inquiries in accordance with Article 6(1)(f) GDPR.

Your data will be deleted as soon as it is no longer necessary for processing your request and there are no statutory retention obligations or other legal reasons for further storage.

5. Online appointment scheduling via Calendly

For online appointment scheduling, we use the service Calendly from the provider Calendly, LLC, USA.

The „Schedule an Appointment“ button takes you to an external website from Calendly. Clicking the link will take you away from our website. When you visit the external page, data is sent to Calendly.

When you book an appointment, the personal data you provide will be processed. This may include, in particular, your name, your email address, the desired appointment, and other voluntary information.

We use the data received as part of the appointment booking to organize, conduct, and, if necessary, follow up on the agreed appointment.

The legal basis for the processing by us is Art. 6(1)(b) GDPR, insofar as the appointment of a date serves as the initiation or execution of a contract. In other cases, the processing takes place on the basis of our legitimate interest in efficient appointment organization in accordance with Art. 6(1)(f) GDPR.

When using Calendly, personal data may be transferred to the USA. For such data transfers, appropriate guarantees under Chapter V of the GDPR are applicable, depending on the respective processing, in particular a valid adequacy decision under the EU-US Data Privacy Framework or standard contractual clauses of the European Commission.

The appointment information stored with us is deleted as soon as it is no longer needed for the stated purposes and there are no statutory retention obligations.

Further information about the data processing by Calendly can be found at:
https://calendly.com/legal/privacy-notice

6. Cookies and similar technologies

Our website uses exclusively technically necessary cookies or comparable technologies. These are used to ensure the secure and functional operation of the website.

Specifically, we set a cookie with the name wbs_lang and a lifespan of twelve months. It only stores which language version you use on our website. Furthermore, no cookies are used, no reach measurement or tracking takes place. Fonts are delivered from our own server; there is no connection to external font services.

To the extent that such technologies are absolutely necessary for the provision of the explicitly desired digital service, their use is governed by § 25(2) TDDDG. The associated processing of personal data is carried out in accordance with the relevant provisions of the GDPR.

Furthermore, if consent-based cookies or similar technologies are used, their use shall only take place with prior consent in accordance with § 25, paragraph 1, TDDDG. Insofar as personal data is processed in this context, the legal basis is Art. 6, paragraph 1, letter a of the GDPR.

A given consent can be revoked at any time with effect for the future.

7. Storage duration

We generally only store personal data for as long as is necessary for the respective processing purpose.

Any further storage takes place only if statutory retention obligations exist or other legal reasons justify further storage.

Wherever possible, we inform you in the relevant sections of this privacy policy about specific storage periods or the criteria for determining them.

8. Your rights

You have the following rights regarding your personal data under the legal regulations:

Right of information (Art. 15 GDPR)
You can request information about whether and which personal data we process about you.

Right to rectification (Art. 16 GDPR)
You can request the correction of incorrect or the completion of incomplete personal data.

Right to erasure (Art. 17 GDPR)
You may request the deletion of your personal data under the legal requirements.

Right to restrict processing (Art. 18 GDPR)
You may request that the processing of your personal data be restricted under certain conditions.

Right to data portability (Art. 20 GDPR)
You have the right under the legal requirements to receive personal data in a structured, commonly used and machine-readable format or to request its transmission to another controller.

Right to object (Art. 21 GDPR)
You may object to the processing of your personal data at any time for reasons arising from your particular situation, insofar as this is based on Art. 6(1)(e) or (f) of the GDPR. We will then no longer process the relevant data unless there are no statutory reasons for further processing.

Right to revoke a consent
If data processing is based on your consent, you can revoke it at any time with effect for the future. The legality of the processing carried out up to the time of revocation remains unaffected.

To exercise your rights, you can contact us at any time:
c.weidehoff@weidehoff.com

9. Right of appeal to a supervisory authority

If you believe that the processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with a data protection supervisory authority in accordance with Article 77 of the GDPR.

The supervisory authority responsible for our company headquarters is:

State Officer for Data Protection and Freedom of Information North Rhine-Westphalia
Kavalleriestraße 2-4
40213 Düsseldorf
Email poststelle@ldi.nrw.de
Website: https://www.ldi.nrw.de

You can also contact another competent data protection supervisory authority.

10th update of this privacy policy

We reserve the right to adapt this privacy policy if legal requirements regarding the technologies used or the processing of personal data on our website change.

Status: October 2026