Privacy Policy

General notes
The following information provides you with a quick overview of what happens to your personal data when you visit our website. Personal data includes all information that can be used to personally identify you. Detailed information on data protection can be found in the full privacy policy further down on this page.

1. Data collection on this website

Who is responsible for data collection on this website?
The data processing on this website is carried out by the website operator. The contact details can be found further down in the section "Responsible party."

How do we collect your data?
Your data is collected in part by you actively providing it to us – for example, by entering information into a contact form.
Other data is automatically collected by our IT systems as soon as you visit the website. This primarily includes technical information (e.g., internet browser, operating system, or the time of page access). The collection of this data occurs automatically or with your consent.

What do we use your data for?
Some of the data is required to ensure the website is provided without errors. Other data may be used to analyze user behavior.

What rights do you have regarding your data?
You have the right to request information free of charge about the origin, recipient, and purpose of your stored personal data at any time. Additionally, you have the right to correct or delete this data. You can withdraw your consent at any time with effect for the future. Under certain conditions, you also have the right to restrict the processing of your personal data.
Furthermore, you have the right to lodge a complaint with the relevant data protection supervisory authority.

If you have any questions regarding data protection, you can contact us directly at any time.

2. Hosting

We host the content of our website with the following provider:

Hetzner Online GmbH
Industriestraße 25
91710 Gunzenhausen
Germany
https://www.hetzner.com

Details zur Datenverarbeitung durch Hetzner entnehmen Sie der Datenschutzerklärung des Anbieters:
https://www.hetzner.com/de/rechtliches/datenschutz

The use of Hetzner is based on Article 6(1)(f) of the GDPR. We have a legitimate interest in providing a stable and secure online service. If consent has been requested, the processing is carried out solely based on Article 6(1)(a) of the GDPR as well as Section 25(1) of the TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's device (e.g., device fingerprinting). Consent can be revoked at any time.

Order processing
We have concluded a data processing agreement (DPA) with Hetzner in accordance with Article 28 of the GDPR. This ensures that Hetzner processes the personal data of our website visitors only in accordance with our instructions and in compliance with applicable data protection regulations.

3. General information and mandatory information

Privacy Policy
The protection of your personal data is important to us. We treat your personal data confidentially and in accordance with the legal data protection regulations as well as this privacy policy.

When visiting this website, various personal data is collected. Personal data refers to information that can be used to identify you personally. In this privacy policy, we explain which data we collect, how we use it, and for what purposes.

We would like to point out that data transmission over the internet (e.g., communication via email) may have security vulnerabilities. Complete protection of data from access by third parties is not possible.

Note on the responsible party
The responsible party for data processing on this website is:

Washpoint UG
Managing Director: Daniel Dittus
Paulinenstraße 10
70178 Stuttgart
Phone: 0179 340 18 75
E-Mail: info@washpoint-stuttgart.de

The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Retention period

Unless a specific retention period is stated in this privacy policy, your personal data will remain with us until the purpose for processing is no longer applicable. If you submit a legitimate request for deletion or withdraw your consent, your data will be deleted – unless we are legally obligated or entitled to retain the data (e.g., due to tax or commercial law retention obligations). In this case, the data will be deleted once these reasons no longer apply.

General information on the legal basis for data processing on this website

Depending on the type of processing, we rely on different legal bases:

If you have consented to the processing of your data, it is based on Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR (for special categories of personal data).
If you have expressly consented to the transfer of data to third countries, the processing is based on Article 49(1)(a) of the GDPR.
If you have consented to the storage of cookies or access to information on your device (e.g., via device fingerprinting), the data processing is also based on Section 25(1) of the TTDSG (Telecommunications-Telemedia Data Protection Act).
For the fulfillment of a contract or pre-contractual measures, we process your data in accordance with Article 6(1)(b) of the GDPR.
If we are legally obligated to process data, this is done based on Article 6(1)(c) of the GDPR.
In certain cases, we base the processing on our legitimate interest under Article 6(1)(f) of the GDPR.

The applicable legal basis will be specifically mentioned later in this privacy policy.

Recipients of personal data

As part of our business operations, we collaborate with various external service providers and partners. In certain cases, the transfer of personal data to these third parties is necessary. We will only share your personal data if it is necessary for the fulfillment of the contract, if we are legally obligated to do so (e.g., for sharing with tax authorities), if we have a legitimate interest under Article 6(1)(f) of the GDPR in sharing the data, or if another legal basis allows for it.

If we use processors, the data transfer occurs exclusively based on a valid data processing agreement. In the case of joint data processing, we also enter into a contract for the joint processing of personal data.

Withdrawal of your consent to data processing

Many data processing activities are based on your explicit consent. You can withdraw this consent at any time with effect for the future. The legality of the data processing that has taken place up until the point of withdrawal remains unaffected.

Right to object to data collection in specific cases as well as to direct marketing (Article 21 GDPR)

If the processing of your personal data is based on Article 6(1)(e) or (f) of the GDPR, you have the right to object to the processing of your personal data at any time, for reasons arising from your particular situation. This also applies to profiling based on these provisions. The applicable legal basis for the processing can be found in this privacy policy.

If you object to the processing, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims (objection under Article 21(1) of the GDPR).

If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for this purpose. This also applies to any related profiling. After an objection, we will no longer use your personal data for direct marketing purposes (objection under Article 21(2) of the GDPR).

Right to lodge a complaint with the competent supervisory authority

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a competent supervisory authority. This applies, in particular, to the member state of your usual place of residence, your place of work, or the location of the alleged infringement. The right to file a complaint remains unaffected by other administrative or judicial remedies.

Right to data portability

You have the right to receive the personal data we process automatically based on your consent or for the fulfillment of a contract in a commonly used, machine-readable format. Upon request, you may also ask for these data to be directly transmitted to another controller, provided this is technically feasible.

Access, correction, and deletion

Within the legal framework, you have the right to request information free of charge about the personal data we have stored about you at any time. This includes information about the origin, recipients, and the purpose of the data processing. Additionally, you can request the correction or deletion of your data. If you have any questions regarding personal data, you can contact us at any time.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. You can contact us at any time for this. The right to restrict processing applies in the following cases:

If you dispute the accuracy of your personal data stored with us, we generally need time to verify this. During the verification process, you can request the restriction of processing.
If the processing of your personal data has been or is unlawful, you can request the restriction of processing instead of deletion.
If we no longer need your personal data, but you need it for the exercise, defense, or assertion of legal claims, you have the right to request the restriction of processing instead of deletion.
If you have lodged an objection under Article 21(1) of the GDPR, an assessment of interests must take place. As long as it is not clear whose interests prevail, you can request the restriction of processing.

If the processing of the data is restricted, it may only be processed – apart from storage – with your consent, for the assertion, exercise, or defense of legal claims, to protect the rights of other natural or legal persons, or for reasons of important public interest of the European Union or a member state.

SSL and TLS encryption

For security reasons and to protect the transmission of confidential data, such as orders or inquiries, our website uses SSL or TLS encryption.

You can recognize an encrypted connection by the fact that the address bar of your browser changes from "http://" to "https://" and a lock symbol is displayed.

When SSL or TLS encryption is active, the data you transmit cannot be read by third parties.

4. Data collection on this website – Cookies

Our website uses so-called "cookies." These are small data packets stored on your device without causing any harm.

Cookies can either be stored temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are automatically deleted once you close your browser. Persistent cookies remain stored until you delete them yourself or your browser removes them automatically.

Cookies can be set by us (first-party cookies) or by third parties (third-party cookies). Third-party cookies, for example, enable the use of certain services, such as payment processing.

Cookies serve various functions: Some are technically necessary to ensure certain features of our website work, such as the shopping cart or video ads. Other cookies are used to analyze your usage behavior or for advertising purposes.

Necessary cookies, which are required for communication, providing certain functions (e.g., shopping cart), or optimizing the website (e.g., visitor count), are stored based on our legitimate interest in accordance with Article 6(1)(f) of the GDPR. If we have obtained consent to store cookies or similar technologies (e.g., tracking), the processing is carried out solely based on that consent (Article 6(1)(a) of the GDPR and Section 25(1) of the TTDSG). You can withdraw your consent at any time.

You can set your browser to be notified about the setting of cookies, allow cookies only on a case-by-case basis, exclude the acceptance of cookies for specific websites or generally, or have cookies automatically deleted when closing the browser. Please note that disabling cookies may limit the functionality of our website.

For information on which cookies and services are used on this website, please refer to the further sections of this privacy policy.

Consent with Complianz – GDPR/CCPA Cookie Consent

Our website uses the plugin "Complianz – GDPR/CCPA Cookie Consent" to obtain your consent for storing certain cookies on your device and to document this in a privacy-compliant manner. This tool displays a cookie banner when you first visit our website and allows you to allow or reject different categories of cookies.

Complianz stores your selection in a cookie to remember your preferences on future visits. The stored data will remain in place until you delete the cookies in your browser or the purpose for data storage no longer applies. Mandatory legal retention periods remain unaffected.

The use of Complianz is based on our legal obligation according to Art. 6 (1) lit. c GDPR.

Server log files
The provider of this website collects and stores information automatically in so-called server log files, which your browser automatically transmits to us. This includes, among other things:

Browser type and browser version
Operating system used
Referrer URL (the previously visited page)
Hostname of the accessing computer
Time of the server request
IP address

These data are not merged with other personal data.

The collection of this data is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in ensuring the technically error-free display and optimization of our website.

Inquiries by email, phone, or fax
If you contact us by email, phone, or fax, your inquiry and any resulting personal data (e.g., name, contact details, content of the inquiry) will be stored and processed by us for the purpose of handling your request. Without your explicit consent, we will not share this data with third parties.

The processing is based on Article 6(1)(b) of the GDPR if your inquiry is related to the fulfillment of a contract or is necessary for pre-contractual measures. In all other cases, we rely on our legitimate interest in the efficient processing of inquiries (Article 6(1)(f) of the GDPR) or on your consent (Article 6(1)(a) of the GDPR), if such consent has been requested. You can withdraw your consent at any time.

The data you provide will be stored by us until you request its deletion, withdraw your consent, or the purpose of storage no longer applies (e.g., after the completion of processing). Legal retention periods remain unaffected.

5. Analytics tools and advertising

Google Analytics
This website uses features of the web analytics service Google Analytics. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics allows us to analyze the behavior of visitors to our website. Various usage data is collected, such as page views, duration of visits, operating systems used, and the origin of users. These data are compiled into a user ID and assigned to the respective device.

Additionally, with Google Analytics, we can track your mouse movements, scrolling behavior, and clicks. Google Analytics also uses modeling techniques and machine learning technologies to further analyze the collected data.

Google Analytics uses technologies such as cookies or device fingerprinting to recognize users and analyze their behavior. The information collected in this way is usually transferred to Google's servers in the USA and stored there.

The use of Google Analytics is based on your consent according to Article 6(1)(a) of the GDPR and Section 25(1) of the TTDSG. You can withdraw this consent at any time.

The transfer of your data to the USA is based on the standard contractual clauses of the EU Commission. You can find more details here: https://privacy.google.com/businesses/controllerterms/mccs/.

Google is also certified under the "EU-US Data Privacy Framework" (DPF), an agreement between the EU and the USA that aims to ensure the protection of European data protection standards when processing data in the USA. For more information about the DPF and Google's certification, please visit: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active.

Browser-Plugin
You can prevent the collection and processing of your data by Google Analytics by downloading and installing the browser plugin available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=de

For more information on how user data is handled by Google Analytics, please refer to Google's privacy policy:
https://support.google.com/analytics/answer/6004245?hl=de

Google Signals
We use Google Signals. When you visit our website, Google Analytics collects, among other things, your location, search history, YouTube history, and demographic data (visitor data). These data can be used for personalized advertising through Google Signals. If you have a Google account, the visitor data from Google Signals will be linked to your Google account and used for personalized ads. Additionally, the data will be used to create anonymized statistics on user behavior for our visitors.

Order processing
We have concluded a data processing agreement (DPA) with Google and fully comply with the strict requirements of the German data protection authorities when using Google Analytics.

Google Fonts
This website uses Google Fonts, provided by Google, to ensure consistent display of fonts. When you visit a page, your browser loads the required fonts into the browser cache so that texts and fonts can be displayed correctly.

To do this, your browser establishes a connection to Google's servers. As a result, Google becomes aware that this website was accessed via your IP address. The use of Google Fonts is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in ensuring a consistent display of fonts on the website. If consent has been obtained, the processing is carried out exclusively based on Article 6(1)(a) of the GDPR and Section 25(1) of the TTDSG, to the extent that the consent includes the storage of cookies or access to information on the user's device (e.g., device fingerprinting). Consent can be withdrawn at any time.

If your browser does not support Google Fonts, standard fonts from your computer will be used instead.

For more information about Google Fonts, please visit:
https://developers.google.com/fonts/faq

You can find Google's privacy policy here:
https://policies.google.com/privacy?hl=de

Google holds certification under the "EU-US Data Privacy Framework" (DPF). This agreement between the European Union and the USA ensures compliance with European data protection standards when processing data in the USA. Every company certified under the DPF commits to adhering to these standards. For more information, please visit:
https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

Google Maps
This site uses the Google Maps service. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

To use the features of Google Maps, it is necessary to store your IP address. This information is usually transferred to a server of Google in the USA and stored there. The operator of this site has no control over this data transfer.

When Google Maps is enabled, Google may also use Google Fonts for consistent font display. When accessing Google Maps, your browser loads the necessary web fonts into the browser cache so that texts and fonts are displayed correctly.

The use of Google Maps is in the interest of presenting our online offerings in an appealing way and to make it easier to find the locations we list on the website. This constitutes a legitimate interest according to Article 6(1)(f) of the GDPR. If consent has been obtained, the processing is carried out exclusively based on Article 6(1)(a) of the GDPR and Section 25(1) of the TTDSG, to the extent that the consent includes the storage of cookies or access to information on the user's device (e.g., device fingerprinting). Consent can be withdrawn at any time.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. For details, please refer to:
https://privacy.google.com/businesses/gdprcontrollerterms/
https://privacy.google.com/businesses/gdprcontrollerterms/sccs/

For more information on how user data is handled, please refer to Google's privacy policy:
https://policies.google.com/privacy?hl=de