Privacy policy

General information
The following information will give you a quick overview of what happens to your personal data when you visit our website. Personal data is any information that can be used to identify you personally. Detailed information on data protection can be found in the full privacy policy further down on this page.

1. data collection on this website

Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. The relevant contact details can be found below in the „Controller“ section.

How do we collect your data?
On the one hand, your data is collected when you actively communicate it to us - for example by entering it in a contact form.
Other data is collected automatically by our IT systems as soon as you visit the website. This is primarily technical information (e.g. internet browser, operating system or time of page view). This data is collected automatically or with your consent.

What do we use your data for?
Some of the data is required to provide the website without errors. Other data can be used to analyze user behavior.

What rights do you have in relation to your data?
You have the right to request information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to have this data corrected or deleted. You can revoke any consent you have already given at any time with effect for the future. Under certain circumstances, you also have the right to restrict the processing of your personal data.
You also have the right to lodge a complaint with the competent data protection supervisory authority.

If you have any questions about data protection, you can contact us directly at any time.

2. hosting

We host the content of our website with the following provider:

Hetzner Online GmbH
Industriestrasse 25
91710 Gunzenhausen
Germany
https://www.hetzner.com

Details on data processing by Hetzner can be found in the provider's privacy policy:
https://www.hetzner.com/de/rechtliches/datenschutz

The use of Hetzner is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the stable and secure provision of our online services. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's end device (e.g. device fingerprinting). Consent can be withdrawn at any time.

Order processing
We have concluded a data processing agreement (DPA) with Hetzner in accordance with Art. 28 GDPR. This ensures that Hetzner processes the personal data of our website visitors only in accordance with our instructions and in compliance with the applicable data protection regulations.

3 General notes and mandatory information

Data protection
The protection of your personal data is important to us. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

Various personal data is collected when you visit this website. Personal data is data that can be used to identify you personally. In this privacy policy, we explain what data we collect, how we use it and for what purpose.

We would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

Note on the responsible body
The controller responsible for data processing on this website is:

Washpoint UG (haftungsbeschränkt)
Managing Director: Daniel Dittus
Paulinenstrasse 10
70178 Stuttgart
Telefon: 0179 340 18 75
E-Mail: info@washpoint-stuttgart.de

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, email addresses, etc.).

Storage duration

Unless a more specific storage period is specified in this privacy policy, your personal data will remain with us until the purpose for processing no longer applies. If you make a justified request for deletion or revoke your consent, your data will be deleted - unless we are legally obliged or entitled to continue storing the data (e.g. due to tax or commercial law retention obligations). In this case, the data will be deleted as soon as these reasons no longer apply.

General information on the legal basis for data processing on this website

Depending on the type of processing, we rely on different legal bases:

If you have consented to the processing of your data, this is done on the basis of Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR (for special categories of personal data).
If explicit consent to the transfer of data to third countries has been given, the processing is based on Art. 49 para. 1 lit. a GDPR.
If you have consented to the storage of cookies or access to information in your end device (e.g. via device fingerprinting), the data processing is also carried out on the basis of Section 25 (1) TTDSG.
We process your data for the fulfillment of a contract or pre-contractual measures in accordance with Art. 6 para. 1 lit. b GDPR.
If we are legally obliged to process data, this is done on the basis of Art. 6 para. 1 lit. c GDPR.
In certain cases, we base the processing on our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR.

The applicable legal basis will be specified in the further course of this privacy policy.

Recipients of personal data

As part of our business activities, we work with various external service providers and partners. In certain cases, it is necessary to transfer personal data to these third parties. We only pass on your personal data if this is necessary for the fulfillment of the contract, if we are legally obliged to do so (e.g. for disclosure to tax authorities), if we have a legitimate interest in the disclosure pursuant to Art. 6 para. 1 lit. f GDPR or if another legal basis permits this.

If we use processors, the data will only be passed on on the basis of a valid contract for order processing. In the case of joint data processing, we also conclude a contract for the joint processing of personal data.

Revocation of your consent to data processing

Many data processing operations are based on your express consent. You can revoke this consent at any time with effect for the future. This does not affect the lawfulness of the data processing that took place before you withdrew your consent.

Right to object to the collection of data in special cases and to direct marketing (Art. 21 GDPR)

If your personal data is processed on the basis of Art. 6 para. 1 lit. e or f GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation. This also applies to profiling based on these provisions. The underlying legal basis for processing can be found in this privacy policy.

If you legitimize the processing through your objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims (objection pursuant to Art. 21 (1) GDPR).

If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for this purpose. This also applies to the associated profiling. After an objection, we will no longer use your personal data for direct marketing (objection pursuant to Art. 21 (2) GDPR).

Right to lodge a complaint with the competent supervisory authority

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a competent supervisory authority. This applies in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement. The right to lodge a complaint remains unaffected by other administrative or judicial remedies.

Right to data portability

You have the right to receive the personal data that we process automatically on the basis of your consent or to fulfill a contract in a commonly used, machine-readable format. If you wish, you can also request that this data be transmitted directly to another controller - provided this is technically feasible.

Information, correction and deletion

Within the scope of the statutory provisions, you have the right to receive information free of charge at any time about the personal data stored by us. This also includes information about the origin, recipient and purpose of the data processing. You can also request the correction or deletion of your data. If you have any questions about personal data, you can contact us at any time.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. You can contact us at any time to do so. The right to restriction of processing exists in the following cases:

If you dispute the accuracy of your personal data stored by us, we generally need time to check this. You can request that processing be restricted for the duration of the review.
If your personal data has been or is being processed unlawfully, you can request the restriction of processing instead of erasure.
If we no longer need your personal data, but you need it for the exercise, defense or assertion of legal claims, you have the right to request the restriction of processing instead of deletion.
If you have lodged an objection in accordance with Art. 21 (1) GDPR, your interests must be weighed up. As long as it is not clear whose interests prevail, you can request the restriction of processing.

If the processing of the data is restricted, it may only be processed - apart from being stored - with your consent, for the establishment, exercise or defense of legal claims, for the protection of the rights of other natural or legal persons or for reasons of important public interest of the European Union or of a Member State.

SSL or TLS encryption

Our website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential data, such as orders or inquiries.

You can recognize an encrypted connection by the fact that „http://“ changes to „https://“ in the address line of your browser and a lock symbol is displayed.

If SSL or TLS encryption is active, the data you transmit cannot be read by third parties.

4. data collection on this website - cookies

Our website uses so-called „cookies“. These are small data packets that are stored on your end device without causing any damage.

Cookies can be stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted as soon as you close your browser. Permanent cookies remain stored until you delete them yourself or your browser automatically deletes them.

Cookies can be set by us (first-party cookies) or by third-party providers (third-party cookies). Third-party cookies enable, for example, the use of certain services such as payment processing.

Cookies fulfill various functions: Some are technically necessary for certain functions of our website, such as the shopping cart or video ads, to work. Other cookies are used to evaluate your usage behavior or for advertising purposes.

Necessary cookies that are required for communication, for the provision of certain functions (e.g. shopping cart) or for the optimization of the website (e.g. visitor counting) are stored on the basis of our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. If we have obtained consent to store cookies or similar technologies (e.g. tracking), the processing is carried out exclusively on the basis of this consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG). You can withdraw your consent at any time.

You can set your browser so that you are informed about the setting of cookies, allow cookies only in individual cases, exclude the acceptance of cookies for certain websites or in general or automatically delete cookies when closing the browser. Please note that if you deactivate cookies, the functions of our website may be restricted.

To find out which cookies and services are used on this website, please refer to the other sections of this privacy policy.

Consent with compliance - GDPR/CCPA cookie consent

Our website uses the „Complianz - GDPR/CCPA Cookie Consent“ plugin to obtain your consent to the storage of certain cookies on your end device and to document this in compliance with data protection regulations. This tool displays a cookie banner when you first visit our website and allows you to accept or reject various cookie categories.

Complianz stores your selection in a cookie in order to be able to track your decision on subsequent visits. The stored data is retained until you delete the cookies in your browser or the purpose for storing the data no longer applies. Mandatory statutory retention obligations remain unaffected.

Complianz is used to fulfill the legal obligations pursuant to Art. 6 para. 1 lit. c GDPR.

Server log files
The provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This includes, among other things

Browser type and browser version
Operating system used
Referrer URL (the previously visited page)
Host name of the accessing computer
Time of the server request
IP address

This data is not merged with other personal data.

This data is collected on the basis of Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in ensuring the technically error-free presentation and optimization of our website.

Request by e-mail, telephone or fax
If you contact us by e-mail, telephone or fax, your inquiry and all personal data resulting from it (e.g. name, contact details, content of the inquiry) will be stored and processed by us for the purpose of processing your request. We will not pass this data on to third parties without your express consent.

Processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, we rely on our legitimate interest in the efficient processing of inquiries (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR), if such consent has been requested. You can withdraw your consent at any time.

We will retain the data you provide until you request its deletion, revoke your consent or the purpose for its storage no longer pertains (e.g. after processing has been completed). Statutory retention periods remain unaffected.

5. analysis tools and advertising

Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables us to analyze the behavior of visitors to our website. Various usage data is collected, such as page views, length of visit, operating systems used and the origin of the users. This data is summarized in a user ID and assigned to the respective end device.

In addition, we can use Google Analytics to record your mouse movements, scrolling behavior and clicks. Google Analytics also uses modeling methods and machine learning technologies to further analyze the collected data.

Google Analytics uses technologies such as cookies or device fingerprinting to recognize users and analyse their behaviour. The information collected in this way is usually transferred to Google servers in the USA and stored there.

The use of Google Analytics is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. You can revoke this consent at any time.

The transfer of your data to the USA is based on the standard contractual clauses of the EU Commission. You can find details on this at: https://privacy.google.com/businesses/controllerterms/mccs/.

Google is also certified under the „EU-US Data Privacy Framework“ (DPF), an agreement between the EU and the USA that is intended to ensure the protection of European data protection standards when processing data in the USA. Further information on the DPF and Google's certification can be found here: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active.

Browser plugin
You can prevent the collection and processing of your data by Google Analytics by downloading and installing the browser plug-in available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=de

Further information on the handling of user data by Google Analytics can be found in Google's privacy policy:
https://support.google.com/analytics/answer/6004245?hl=de

Google signals
We use Google signals. When you visit our website, Google Analytics records your location, search history, YouTube history and demographic data (visitor data), among other things. This data can be used for personalized advertising with the help of Google signals. If you have a Google account, the visitor data from Google signals will be linked to your Google account and used for personalized advertising messages. In addition, the data is used to compile anonymous statistics on the user behavior of our visitors.

Order processing
We have concluded an order processing agreement (AVV) with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Google Fonts
This website uses so-called Google Fonts, which are provided by Google, for the uniform display of fonts. When you access a page, your browser loads the required fonts into your browser cache so that texts and fonts can be displayed correctly.

For this purpose, your browser establishes a connection to Google's servers. Google is informed that this website has been accessed via your IP address. The use of Google Fonts is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the uniform presentation of the typeface on the website. If a corresponding consent has been obtained, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's end device (e.g. device fingerprinting). Consent can be revoked at any time.

If your browser does not support Google Fonts, your computer's standard fonts will be used instead.

Further information on Google Fonts can be found at:
https://developers.google.com/fonts/faq

You can find Google's privacy policy here:
https://policies.google.com/privacy?hl=de

Google is certified in accordance with the „EU-US Data Privacy Framework“ (DPF). This agreement between the European Union and the USA guarantees compliance with European data protection standards when processing data in the USA. Every company certified under the DPF undertakes to comply with these standards. Further information on this can be found at
https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

Google Maps
This site uses the map service Google Maps. The provider is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.

To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there. The operator of this site has no influence on this data transfer.

If Google Maps is activated, Google can also use Google Fonts for the uniform display of fonts. When you access Google Maps, your browser loads the required web fonts into your browser cache so that texts and fonts are displayed correctly.

The use of Google Maps is in the interest of an appealing presentation of our online offers and to make it easier to find the places we have indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If consent has been obtained, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's end device (e.g. device fingerprinting). Consent can be revoked at any time.

Data is transferred to the USA on the basis of the EU Commission's standard contractual clauses. You can find details here:
https://privacy.google.com/businesses/gdprcontrollerterms/
https://privacy.google.com/businesses/gdprcontrollerterms/sccs/

Further information on the handling of user data can be found in Google's privacy policy:
https://policies.google.com/privacy?hl=de

6. video surveillance in the store

We use video surveillance in our self-service launderette to ensure the safety of our customers, to protect our property and to investigate criminal offenses. The processing is based on our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR.

Detailed information on video surveillance, your rights and the storage period can be found on the following information page: Video surveillance