top of page

Privacy Policy

​

This Privacy Policy explains the type, scope and purpose of the processing of personal data on this website and informs you about your rights as a data subject in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and applicable national laws such as the German Telecommunications and Telemedia Data Protection Act (TTDSG).

The controller responsible for data processing on this website is:


LW Handel UG (haftungsbeschränkt)

Pfarrer-Disselhoff-Str. 26

46514 Schermbeck
Germany
Email: info@lw-handel.com

​

(Hereinafter “we”, “us” or “our”)

​

We process personal data only to the extent necessary for the operation of this website, communication in a B2B context, handling of business inquiries, contract initiation and business development. The legal bases of processing are Art. 6 (1) GDPR and, where applicable, §7 German Unfair Competition Act (UWG).

​

1. Legal Bases of Processing
Depending on the individual case, data processing is carried out on the basis of:

  • Art. 6 (1) lit. a GDPR – your consent

  • Art. 6 (1) lit. b GDPR – performance of a contract or pre-contractual measures

  • Art. 6 (1) lit. c GDPR – legal obligations

  • Art. 6 (1) lit. f GDPR – our legitimate interests (e.g., secure IT operations, technical presentation, website optimization, fraud prevention, B2B outreach)

​

We expressly process personal data in B2B contexts under Art. 6 (1) lit. f GDPR in conjunction with §7 UWG, as business customers are presumed to have a legitimate interest in being contacted regarding relevant products, offers, potential cooperation, pricing, distribution or supply opportunities.

​

2. Hosting and Server Log Files
Our website is hosted on the servers of Wix.com Ltd., 40 Namal Tel Aviv Street, Tel Aviv, Israel. As part of hosting, Wix processes personal data as a processor under Art. 28 GDPR.

When visiting our website, Wix automatically processes server log files, which may contain:

  • IP address

  • date and time of access

  • accessed resources

  • referrer URL

  • browser type and version

  • device information

  • operating system

  • amount of data transmitted

  • provider information

These data are processed to ensure security, error-free functioning, system stability and integrity of our website. Legal basis: Art. 6 (1) lit. f GDPR. Log data is deleted no later than seven days after the end of the site visit unless longer retention is required for security investigations or legal purposes.

Wix may store data on servers in the EU, Israel and the USA. Data transfers are secured through the EU-U.S. Data Privacy Framework and Standard Contractual Clauses under Art. 46 GDPR. Further information: https://www.wix.com/about/privacy

​

3. Website Technologies (Wix Studio, Velo Code, Google Fonts)
We use Wix Studio as technical infrastructure. In addition, custom scripts may be deployed through Velo by Wix. This may involve technical metadata such as IP address, device and browser type, timestamps, accessed URLs, and security identifiers.

We also use Google Fonts for uniform design. Processing is based on Art. 6 (1) lit. f GDPR (legitimate interest in a technically functional, secure and user-friendly website).

​

4. Cookies and Consent Management (GDPR and TTDSG)
We use cookies and similar technologies. These may include:

  • essential cookies (website operation, security, session functions)

  • analytical cookies (usage analysis, measurement)

  • marketing cookies (remarketing, behavioral advertising)

  • preference cookies (language, views, settings)

Essential cookies are processed under Art. 6 (1) lit. f GDPR. Analytical and marketing technologies only run with your consent under Art. 6 (1) lit. a GDPR in accordance with § 25 (1) TTDSG.

​

You may withdraw consent at any time via our cookie settings. If you refuse cookies, the basic functionality of the website remains unaffected.

We also document consents in accordance with legal requirements to demonstrate compliance (Art. 7 (1) GDPR).

​

5. Analytics and Tracking Tools (Only with Consent)

If you consent, we use the following tracking and analysis services:

​

Google Analytics
Used for statistical analysis of website usage. The IP address is anonymized before storage. Data may be transferred to the USA. Google complies with the EU-U.S. Data Privacy Framework. Legal basis: Art. 6 (1) lit. a GDPR.

​

Google Tag Manager
Used to deploy tags and scripts. No direct processing of personal data. Legal basis: Art. 6 (1) lit. f GDPR.

Google Ads Remarketing
Used to display interest-based advertising. Legal basis: Art. 6 (1) lit. a GDPR.

​

Meta Pixel (Facebook Pixel)
Used for conversion tracking and personalized advertising on Meta platforms. If logged into Facebook, Meta may link data to your user account. Legal basis: Art. 6 (1) lit. a GDPR.

​

LinkedIn Insight Tag
Used to generate statistics, optimize content, and measure campaigns. Legal basis: Art. 6 (1) lit. a GDPR.

​

TikTok Pixel
Used for behavioral analytics and advertising optimization. Legal basis: Art. 6 (1) lit. a GDPR.

You can revoke consent at any time with effect for the future.

​

6. Integration of Other Services and Content

Where consent is given, we may integrate:

  • Google Search Console

  • Google Maps (map display)

  • YouTube videos

  • Instagram feeds

  • Facebook Business widgets

  • LinkedIn Company Page elements

  • TikTok feed

  • Google reCAPTCHA

  • CAPTCHA functions (spam protection)

  • Cloudflare or similar content delivery/security services

These services collect personal data such as IP address, device and browser data and may transmit such data to the providers’ servers. The legal basis is Art. 6 (1) lit. a GDPR for marketing-related services and Art. 6 (1) lit. f GDPR for security technologies and display components.

​

7. Joint Controllership with Meta and LinkedIn (Art. 26 GDPR)
For data collected via Meta Pixel (Facebook and Instagram) and LinkedIn Insight Tag, we and the providers act as joint controllers under Art. 26 GDPR.
The agreement regulates responsibilities for data collection and forwarding. The subsequent processing by Meta and LinkedIn outside our responsibility is covered by the providers’ own privacy policies:

Meta Privacy: https://www.facebook.com/privacy
LinkedIn Privacy: https://www.linkedin.com/legal/privacy-policy

​

8. Communication and Contact

When contacting us (e.g., via contact form, email, WhatsApp, callback request), we process the data you submit (company name, name, business email, phone number, inquiry details).
Legal basis is Art. 6 (1) lit. b GDPR (contract initiation) and Art. 6 (1) lit. f GDPR (legitimate interest in business communication). Data will be deleted after final processing unless retention is legally required.

​

9. Newsletter
If you register for our newsletter, we process your email and, if applicable, name and preferences. Service provider: Wix Email Marketing.
Legal basis: Art. 6 (1) lit. a GDPR.
Unsubscribe anytime via the link in each newsletter.

​

10. No Online Payment and No Shipping via Website
We do not offer online payment processing through the website and do not handle shipment of goods via this platform. Therefore, no payment or logistics data is processed through the website.

​

11. Security, Monitoring and Technical Logs
For security purposes, Wix automatically uses:

  • security logs

  • anti-spam filters

  • DDOS protection

  • firewall mechanisms

  • automated bot detection

  • uptime and performance monitoring

These measures ensure secure operation and prevention of misuse. Legal basis: Art. 6 (1) lit. f GDPR.

​

12. Data Transfers to Third Countries (Art. 44–49 GDPR)
Where personal data is transferred to third countries, such transfers are conducted only on the basis of:

  • adequacy decisions

  • Standard Contractual Clauses (Art. 46 GDPR)

  • the EU-U.S. Data Privacy Framework

  • or your explicit consent

Providers involved include Google, Meta, LinkedIn, TikTok and Wix.

​

13. Retention Periods
We store personal data only as long as necessary for the intended purpose or legal retention obligations.
Server logs are erased within seven days unless required for longer periods to ensure security or fulfill legal duties.

​

14. Data Subject Rights

​

You have the right to:

  • access (Art. 15 GDPR)

  • rectification (Art. 16 GDPR)

  • erasure (Art. 17 GDPR)

  • restriction of processing (Art. 18 GDPR)

  • data portability (Art. 20 GDPR)

  • objection (Art. 21 GDPR)

  • withdrawal of consent (Art. 7 (3) GDPR)

  • lodge a complaint with a supervisory authority (Art. 77 GDPR)

​

The competent supervisory authority for our company is:

​

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LD NRW):
Kavalleriestraße 2–4
40213 Düsseldorf
Germany
https://www.ldi.nrw.de

​

15. Contact

For questions about the collection, processing or use of personal data or to exercise your rights, please contact us via the details provided in our legal notice.

​

16. Updates to This Policy

We may update this Privacy Policy due to legal, technical or business developments. The current version is always published on this page.

bottom of page