Privacy Statement

Cookies

Privacy Statement

1. General remarks and mandatory information

Data protection

The aim of data protection, and also our objective at Würth IT GmbH, is to ensure that personal data is handled in such a way that every data subject’s right to privacy is protected.

In order to achieve this objective, all functions responsible for the processing of personal data must observe applicable EU legislation (EU General Data Protection Regulation (GDPR)) and all national data protection laws.

Personal data may only be collected and processed subject to the GDPR or other applicable laws. The essential underlying principles of the GDPR are:

Lawfulness of processing, fairness of processing, transparency
Purpose limitation
Data minimization
Accuracy of data processing
Storage limitation and erasure concepts
Integrity and confidentiality

Handling personal data responsibly but also being aware of the risks of IT systems and applications are other key objectives of Würth IT GmbH.

Information to be provided by data controller and rights of data subjects

Name and contact information of the controller

The controller is the natural person or legal entity that, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g., names, email addresses, etc.).

Würth IT GmbH
Drillberg 6
97980 Bad Mergentheim
Telefon: +49 7940 930-0
E-Mail: info@wuerth-it.com

Contact details of the data protection officer

You can contact our data protection officer at datenschutz@wuerth-it.com.

Purpose of data collection, processing or use

We are a medium-sized enterprise and internationally operating full service provider of end-to-end IT solutions and services. Our purpose is to offer our customers the best service and innovative solutions today and in the future.

The collection, processing or use of personal data serves this corporate purpose or supporting secondary purposes, such as customer service.

Thus, the company will only collect, process and use personal data to prepare and comply with contracts, for legitimate interests, to comply with legal regulations or with consent of the data subject.

Groups of people concerned and related data or data categories

The groups of people include

current employees,
former employees,
applicants,
interested parties,
customers,
suppliers,
service providers
other business partners.

The relevant data include all personal data that are necessary for the fulfillment of the purpose concerned. A detailed overview of the types of personal data that are processed can be found below.

Legal basis

The processing of personal data is only legal if permitted by a law: that is to say, if there is a legal basis for the processing or the data subject has consented to the processing.

Personal data are only processed in our company in accordance with legal provisions. These generally include,

when consent to the processing of personal data has been given (Article 6(1)(a) GDPR),
when personal data have to be processed for the performance or initiation of a contract (Article 6(1)(b) GDPR),
when personal data have to be processed to comply with legal requirements (Art. 6(1)(c) GDPR),
when personal data is processed on the basis of a legitimate interest or a legitimate interest of a third party (Article 6(1)(f) GDPR).

Special legal basis of data processing for contracts

Würth IT GmbH supplies almost exclusively to professionals. Unless agreed otherwise in individual cases, our legal basis for processing your personal data for the performance of a contract is as follows:

1. If you are a registered businessperson in accordance with the German Commercial Code (HGB) or a freelancer, processing your personal data is necessary for the performance of the contract or for the preparatory steps to enter into a contract (Art. 6(1)(b) GDPR).
2. Or, if you are an employee of a company - for example, a purchasing agent - processing your personal data is necessary for the purposes of the legitimate interests pursued by Würth IT GmbH (Art. 6(1)(f) GDPR). The legitimate interests of Würth IT GmbH - the sale of its goods and services - include, but are not limited to, the freedom to conduct a business and choose an occupation within the EU.

For simplification purposes, we shall refer only to “data processing for the performance of a contract” below.

Potential recipients of personal data

The potential recipients of personal data include

Public authorities, if there is a legal obligation exists or this is necessary to safeguard legal claims
Service providers and other business partners to the extent necessary to fulfill the respective purpose and permitted or required by a legal provision, or if the data subject has given consent.

Planned data transfer to countries outside the EU or international organizations

Should we transfer your data to a country outside the EU (countries that are not members of the European Union) or an international organization, we will provide you with all required information for this case.

Deadlines for the erasure of data

Personal data will be deleted in accordance with the legal or contractually established regulations on the disposal of data and considering any legal or contractually established retention periods. Most of these legal requirements are based on the German Commercial Code (HGB) and the German Fiscal Code (AO). The retention and documentation periods set out in these codes require data controllers to retain data for up to ten years after the end of a business relationship or pre-contractual legal transaction.

Other legal provisions may impose even longer retention periods on data controllers, for instance, for the retention of evidence in accordance with relevant statutes of limitations. The general statute of limitations is three years. Special statutes of limitation of up to 30 years or longer may, however, apply in certain situations. Personal data that are not subject to a legal or contractual retention period or erasure obligation must be deleted immediately after they are no longer necessary in relation to the purposes for which they were collected or otherwise processed.

Your data protection rights (Art. 12 et seqq. GDPR)

The data subject has various data protection rights. These rights are explained below. The contact information indicated above can be used to exercise these rights.

Right of Access (Art. 15 GDPR), Right to Rectification (Art. 16 GDPR), Right to Erasure (Art. 17 GDPR), and Right to Restriction of Processing (Art. 18 GDPR).

Subject to the applicable legal regulations, you have the right to obtain information, at any time and free of charge, about all your personal data stored by the data controller, its origin, recipients and purpose of storage, as well as, where applicable, the right to rectification, erasure, or restricted processing of your data.

Right to object (Art. 21 GDPR)

Every data subject has the right to object to the processing of their personal data on the basis of Art. 6(1)(f) GDPR or for direct marketing purposes. In the event we receive an objection to the processing of your personal data, we will carefully review your objection on a case-by-case basis. If your objection to the processing of your personal data requires us to delete your data, we will delete your data in accordance with statutory retention requirements. Your objection does not affect the lawfulness of processing based on your consent before its withdrawal.

Right to data portability (Art. 20 GDPR)

You have the right to have data that we process automatically on the basis of your consent or to perform a contract provided to you or to a third party in a commonly used, machine-readable format. If you request the direct transmission of the data to another controller, this will only be done if it is technically feasible.

Obligation to disclose data

Every data subject has the right to know whether the provision of personal data is a legal or contractual requirement, or a requirement necessary to enter into a contract, as well as whether the data subject is obliged to provide the personal data and what the possible consequences of failure to provide such data would be.

Right to lodge a complaint with the competent supervisory authority

The data subject has the right to lodge a complaint with the competent supervisory authority if the data subject believes that the processing of personal data relating to him or her infringes his or her rights. The responsible supervisory authority for data protection issues is the data protection officer responsible for the federal state in which our company has its registered office. The data subject may also lodge a complaint with a supervisory authority responsible for the data subject’s habitual place of residence or place of the alleged infringement. A list of data protection officers and their contact information can be found at the following link: https://www.bfdi.bund.de/EN/Service/Anschriften/Laender/Laender-node.html.

Revocation of your consent to process data

Many data processing operations can only be performed with your consent. You can withdraw your consent at any time. All you need to do is send an informal email to this effect to one of the email addresses indicated above. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Use of your data for (direct) marketing purposes

Irrespective of your subscription to our newsletter, we may use your data, and especially your email address, for (direct) marketing purposes. We only use your data if you have not objected to the use of your data for this purpose. We would like to inform you in this statement, and every other contact, that you can object to the use of your data for (direct) marketing purposes at any time and without incurring any additional costs other than the usual transmission costs according to the basic rates of your Internet provider.

SSL and/or TLS encryption

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator. You can recognize an encrypted connection when you see the address bar of your browser change from “http://” to “https://” and when the lock symbol appears in your address bar.

When SSL and/or TSL encryption is activated, the data that you transfer to us cannot be read by third parties.

2. Data collection on our website

Akamai

We use the “Akamai” service. This service is provided by Akamai Technologies GmbH, Parkring 20–22, 85748 Garching, Germany (hereinafter “Akamai”). Akamai offers a globally distributed content delivery network with a domain name system. Information is transferred between your browser and our website via the Akamai network. This enables Akamai to analyze the data traffic between your browser and our website and to serve as a filter between our systems and potentially malicious data traffic from the Internet. Akamai may also use cookies or other technologies to recognize returning Internet users, which are used solely for the purpose described here. We have concluded a data processing agreement with Akamai.

The use of Akamai Is based on our legitimate interest in ensuring that our online services are as secure and accurate as possible (Art. 6(1)(f) GDPR).

Further information on how Akamai handles personal data can be found in the privacy statement at: https://www.akamai.com/us/en/multimedia/documents/akamai/akamai-privacy-statement.pdf.

Server log files

When visiting our website, we process information in server log files, which your browser transmits to us automatically. The purpose of the processing to correctly display our Internet presence and to ensure the secure operation of our website.

Categories of processed data

Data are collected from the following categories:

Type and version of browser
Operating system used
Referrer URL
Host name of the accessing computer
Time of server request
IP address
Amount of data transferred
Retrieval confirmation
Name of accessed website
Requesting Internet service provider

These data are not merged with other data sources.

Legal basis

Data are processed on the legal basis set out in Article 6(1)(f) GDPR and Section 25(2) 2 TDDDG (German Telecommunications Digital Services Data Protection Act). As the website operator, we have a legitimate interest in a correct presentation of our Internet presence and in ensuring the website’s secure operation.

Retention periods

The data processed in connection with the collection of server log files are stored as long as required for their specific purposes.

Cookies

Some of the websites of Würth IT GmbH use cookies. Cookies help make our website more user-friendly, effective, and secure. Cookies are small text files that are placed on your computer and stored by your web browser.

You can adjust your browser settings to make sure you are informed about the use of cookies and allow cookies only in individual cases, accept cookies only for certain applications, or decline all cookies and activate the automatic deletion of cookies when closing your web browser. When cookies are deactivated, some of the functions available on this website may no longer work properly.

We process cookies for the performance of contracts, wherever they are necessary for electronic communication processes or the provision of our services (e.g., shopping car function). Würth IT GmbH uses these cookies primarily to process your orders in the online shop. The storage of any other cookies (e.g., cookies to analyze your browsing behavior) is treated separately in this privacy statement, and processing is subject to your prior consent.

For an overview of active cookies, please refer to this page: Cookie Policy. Cookie settings can be changed on this page at any time.

"Do Not Track" settings

You can also control the storage of cookies by adjusting the "Do Not Track" (DNT) settings in your web browser. Depending on the browser, DNT is available either as a setting in the program settings or as a plug-in or add-on. By enabling this setting, the browser signals that you do not wish for your browsing behavior to be tracked by these tools without your explicit consent. If the setting is enabled, the tracking features of our tools will be anonymized. Please note that different web browsers may require different settings to enable DNT.

Alternatively, you can check on the deactivation page for EU consumers (https://www.youronlinechoices.com/uk/your-ad-choices) whether advertising cookies are being stored on your browser and disable them if so.

Contact form

When you send us an inquiry through the contact form, your data from the inquiry form, including any contact data provided by you, will be stored by us in order to process your inquiry and answer any follow-up questions.

Categories of personal data

The following categories of personal data are processed when an inquiry is sent through the contact form:

Your request
Customer number
Name
Email address
Phone
Your message

Legal basis

The required data are processed for the performance of a contract. Any personal data provided voluntarily are processed on the legal basis set out in Article 6(1)(f) GDPR, according to which we may process your personal data whenever this is in our legitimate interest. Our legitimate interest is based on maintaining contact with you, our customers, improving the quality of our advice and services, and being able to contact you more easily should we have any follow-up questions.

Retention periods

We will store the data you have entered in the contact form until you request the erasure of the data or the purpose of the data storage is no longer applicable (e.g., after your inquiry has been processed). Statutory retention periods may apply.

Online portal for applicants

We use a digital applicant portal for our applicant management. The provider is SAP Deutschland SE & Co. KG, Hasso-Plattner-Ring 7, 69190 Walldorf, Germany. During job applications, we collect and process our applicants’ personal data through our job portal. After registering, all access details required for the creation of an applicant’s profile are sent out to the potential applicant by email. The information provided by the applicant in the profile is processed for the purpose of completing the recruitment process. Further information can be found in our privacy policy when registering in our applicant portal.

Categories of processed data

The following categories of personal data are processed when using the job portal:

Name, email address country (registration for job portal)
Information included in
- Cover letter
- Curriculum vitae
- Letters of reference/certificates
- Other documents relevant for the application in question

Legal basis for processing

The personal data of applicants are processed on the legal basis set out in Art. 6(1)(b) GDPR.

Retention periods

If the application is not considered or rejected in the course of the recruitment process, all application documents will be deleted automatically no later than six months after the application has been turned down unless further retention is necessary on the basis of other legitimate interests of the data controller.

Applicants can withdraw their applications at any time. After withdrawal of an application, all application documents are deleted without delay.

Further uses of the applicant’s profile

Any consideration of the applicant’s profile for future job openings is subject to the applicant’s prior consent.

In this case, the continued storage and processing of the applicant’s data is based on the consent of the applicant in compliance with Art. 6(1)(a) GDPR. This consent may be withdrawn at any time. Please contact personal@wuerth-it.com.

Contact form in the job application portal

Categories of personal data

The categories of personal data specified on the contact form are processed when an inquiry is sent through the contact form.

Legal basis

This mandatory data is processed on the lawful basis set out in Art. 6 (1b) GDPR, i.e. processing is necessary in order to take steps at the request of the data subject prior to entering into a contract.

Any personal data provided voluntarily is processed on the lawful basis set out in Art. 6 (1f) GDPR, according to which we may process your personal data whenever this is in our legitimate interest. Our legitimate interest is being in touch with you and being able to contact you directly should we need to check back with you.

Retention periods

We will store the data you have entered in the contact form until you request the erasure of the data or the purpose of the data storage is no longer applicable (e.g. after your inquiry has been processed). Statutory retentions periods may apply.

3. Analytics tools and advertising

Würth web analytics

This website uses features from Würth’s web analytics service based on the open-source software Matomo/Piwik. Würth’s web analytics tool uses cookies. Cookies are text files stored on your computer that make it possible to analyze how you use the website. The information generated by cookies regarding the use of our website is stored on our servers.

Legal basis

We use this information to evaluate your use of the website, to compile reports on website activity and to provide further services related to website usage. For more information on the purpose of processing and storage duration, please visit: https://www.wuerth.de/web/en/awkg/datenschutz/cookies/cookies.php. The Würth web analysis for statistical evaluation of our website is used on the basis of your consent in compliance with Art. 6(1)(a) GDPR and § 25(1) TDDDG (German Telecommunications Digital Services Data Protection Act). You may refuse the use of cookies by selecting the appropriate settings on your browser. However, please note that if you do so, you may not be able to use the full functionality of this website.

If you do not or no longer agree to the storage and use of your data, you can revoke your consent to the storage and processing here.

If consent is not given, Würth Analytics will remain active in an anonymous form. This means that the data processed by Würth Analytics will not be linked to your customer or partner number.

4. Social networks

We operate user profiles on social networks for the purpose of presenting our company and communicating with existing and prospective customers. For more information on the related processing activities, please refer to the notice below.

Data processing for presentation and communication purposes

Social networks help us present our company to persons that own a social network account (hereinafter “users”) and all visitors of our profile without a social network account (hereinafter “guests”). Customers and interested parties can also get in touch with us through our profile. Our profiles and contributions are generally visible to all users and guests (hereinafter collectively referred to as “visitors”). When commenting on our contributions or sending us a message, these data are stored by the social network and can be viewed by us. We can reply to your comments or messages. Your comments and our replies may remain visible for all visitors of the social network in question.

Data processing for statistical and advertising purposes

When viewing our profile, the social network can store and analyze your accessing of the profile page and all other interactions on the social network’s website. This information is provided to the profile owners in statistical form and further processed by the social networks for other purposes, including advertising purposes.

If you have an account on this social network and are signed into your account when visiting our profile, the social network provider can link your interactions with our profile to your account details and process them further. Any data on your interactions with our profile may also be stored and processed for other purposes by the social network, even if you are not signed in or do not have an account with the social network in question. In this case, you can be linked to your account details with the help of cookies, small files stored on your end device, or your IP address.

Your data are generally processed for the purpose of creating a profile of interests for each visitor, and these profiles are used for advertising purposes. When a person visits certain websites, information on this browser activity is analyzed and the provider adds certain interests to the visitor’s profile. The visitor is shown ads based on these identified interests. The provider can show such interest-based ads both on and outside the social network’s websites.

Categories of data subjects

Persons that access our profile on a social network (both users with an account with the social network provider and visitors without account).

Exercising your rights as a data subject

Should you wish to request further information or exercise your rights as a data subject, we would recommend contacting the provider in question directly, as only the provider has full access to the data processed when visiting our profile or interacting with us on the social network. You can find all contact details of the social networks to exercise your rights as a data subject under “Information about the social networks we use.” You can contact us to exercise your rights as a data subject regarding all data processing activities for which the provider of the social network and we are jointly responsible. In such cases, we will forward your inquiry to the social network provided your inquiry relates to data or processing activities carried out by the social network.

For more information on the processing activities of the social networks we use and the available options to object to these processing activities, please refer to the section “Information about the social networks we use.”

Facebook and Instagram information:

Facebook:

Provider: Meta Platforms Ireland Limited , 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter “Facebook”).

Website: https://en-us.facebook.com/

Form to contact Facebook’s data protection officer: https://en-us.facebook.com/help/contact/540977946302970?refid=41

Facebook’s data policy: https://en-us.facebook.com/policy.php

Our profile: https://www.facebook.com/Wuerth.IT/

Instagram:

Provider: Meta Platforms Ireland Limited , 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Website: https://www.instagram.com/

Instagram’s data policy: https://help.instagram.com/519522125107875

Our profile: https://www.instagram.com/wuerth_it/?hl=en

Categories of processed personal data when visiting our Facebook profile

Technical information on end user device: operating system, information on browser used, IP address, further information on end-user device, and Internet connection
Contact details: information on user account where applicable;
Data on interactions information on profiles visited, links accessed, date and time of the interaction, other interactions of the Visitor.

For more information on what personal data are processed, please refer to: https://www.facebook.com/legal/terms/page_controller_addendum

Joint responsibility for the processing of Page Insights data

We have concluded a joint controller agreement with Meta for the processing of data in connection with our Facebook profile (our “page”) for the provision of our profile and the statistical analysis of interactions between visitors and our profile. This agreement sets out the obligations we and Meta have to meet with regard to data processing activities and which party is responsible for individual processing activities.

Joint controller agreement for the processing of personal data for Page Insights between Meta and us as the page admin in accordance with Art. 26 GDPR: https://www.facebook.com/legal/terms/page_controller_addendum

Further information on the processing of Page Insights data: https://www.facebook.com/legal/terms/information_about_page_insights_data

Purposes and legal basis

Presentation of our company, legitimate interest Art. 6(1)(f) GDPR
Data processing for this purpose is based on the company’s legitimate interest, including, but not limited to, the company’s interest in upholding its corporate culture and maintaining public relations. These interests are based on the freedom to conduct a business and choose an occupation within the EU.
Communicating with existing and interested parties, legitimate interest Art. 6(1)(f) GDPR
Data relating to messages or comments on Facebook are processed on the basis of our legitimate interest in providing customers and interested parties with a simple way of communicating with us and improving our customer service. These interests are based on the freedom to conduct a business and choose an occupation within the EU.
Statistical purposes, legitimate interest Art. 6(1)(f) GDPR
To the extent we act as joint controllers with Meta, the processing of personal data for statistical purposes for Page Insights is based on our legitimate interest in improving our customer service. This interest is based on the freedom to conduct a business and choose an occupation within the EU.

Meta remains a separate and independent data controller for any other processing activities or processing for statistical or advertising purposes performed by Meta, and such processing may be performed on a different legal basis. For more information, please refer to the section “Meta’s data policy.”

Processor(s) of Meta

The use of Facebook may result in the transmission of personal data to Meta Platforms Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. Platforms Ireland Limited uses standard contractual clauses, as approved by the European Commission, for the transmission of personal data to Meta Platforms Inc. based in the United States. A copy of these standard contractual clauses used can be requested here: https://www.facebook.com/help/566994660333381?ref=dp

Opt-out options

Should you wish to object to the processing of your data by Meta, please click on the following link to opt out of the different processing activities: https://www.facebook.com/help/contact/367438723733209?no_redirect

You can change your advertising settings on your Facebook account yourself—for example, to deactivate interest-based advertising—by clicking on the following link: https://www.facebook.com/settings?tab=ads

If you do not own a Facebook account, you can deactivate web-based online advertising for all participating websites by clicking on the following link: https://www.youronlinechoices.com/

Right to lodge a complaint

You have the right to lodge a complaint with the competent supervisory authority. To find out which supervisory authority you should contact, please refer to the section “Right to lodge a complaint with the competent supervisory authority” in this privacy statement. Complaints regarding the processing of personal data in connection with our Facebook profile can also be addressed to the Irish Data Protection Commission. You can find the contact details of the Irish Data Protection Commission at: https://www.dataprotection.ie/en/contact/how-contact-us#

Information about other social networks we use:

XING:

Provider: XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany

Website: https://www.xing.com/

XING’s data policy: https://privacy.xing.com/en/your-privacy

Our profile: https://www.xing.com/pages/wurthitgmbh

LinkedIn:

Provider: LinkedIn Ireland Unlimited Company, Attn: Legal Dept. (Privacy Policy and User Agreement), Wilton Plaza, Wilton Place, Dublin 2, Ireland

Website: https://www.linkedin.com/

LinkedIn´s data policy: https://www.linkedin.com/legal/privacy-policy

Our profile: https://www.linkedin.com/company/w%C3%BCrth-it/

Kununu:

Provider: New Work SE, Am Strandkai 1, 20457 Hamburg, Germany

Website: https://www.kununu.com/

Privacy policy: https://privacy.xing.com/de/datenschutzerklaerung

Our profile: https://www.kununu.com/de/wuerth-it

5. Newsletter and electronic communication

Data processing for newsletter registrations

Should you wish to receive the newsletter offered on our website, we need an email address from you along with information allowing us to verify that you are the owner of the indicated email address and that you agree to receiving our newsletter. Any additional data are collected on a voluntary basis only.

The data entered in the newsletter registration form will be processed exclusively on the basis of your consent (Art. 6(1a) GDPR). You can withdraw your consent to the processing of your data for the distribution of our newsletters at any time, for example, by clicking on the “unsubscribe” link in the newsletter. Your withdrawal of consent does not affect the lawfulness of processing based on your consent before its withdrawal.

Newsletter distribution through Inxmail

Würth IT GmbH uses the newsletter distribution service Inxmail. This service is provided by Inxmail GmbH, Wentzingerstr. 17, 79106 Freiburg, Germany.

Inxmail is a newsletter distribution service for the organization and analysis of newsletter marketing. The data processed for the purpose of subscribing to our newsletter will be stored on Inxmail's servers in Germany.

Data analytics through Inxmail

To analyze the success of our newsletter marketing, all emails sent out with Inxmail utilize web beacons or “tracking pixels,” which track recipients’ interactions with the newsletter. Pixels track whether an email newsletter has been opened, which links recipients clicked on, and at what time a newsletter was read.

Inxmail processes the following data for its newsletter analytics:

Master data (e.g. name, address)
Contact details (e.g. email address, phone number)
Meta and communications data (e.g. device information, IP address)
Usage data (e.g. interests, access times)

You can withdraw your consent to these newsletter analytics separately. If you do not want Inxmail to analyze your data, you have to deactivate analytics for the newsletter in question. We provide an unsubscribe link in every newsletter we send out.

Legal basis

These data are processed on the basis of your consent (Art. 6(1)(a) GDPR and Section 25(1) TDDDG (German Telecommunications Digital Services Data Protection Act). You can withdraw your consent at any time. Your withdrawal of consent does not affect the lawfulness of processing based on your consent before its withdrawal.

Retention periods

The data provided when registering for the newsletter will be used to distribute the newsletter until such time as you cancel your subscription, when said data will be deleted. This does not apply to data we store for other purposes (e.g., email addresses needed for online shop registration).

Conclusion of a data processing agreement

We have concluded a data processing agreement with Inxmail in accordance with Art. 28(3) GDPR to ensure that Inxmail protects the personal data of our customers and does not disclose any personal data to third parties.

Automated internal forwarding of emails

When contacting our service team by email, the contact details provided by the customer via email may be used to process the inquiry in question and for other digital transactions for the purpose of automatically forwarding the inquiry to the responsible internal department where possible. Emails are forwarded automatically to ensure the proper handling of such business transactions and guarantee the fast processing of customer inquiries. The contact details provided are transferred to and stored in our customer database.

Legal basis

The data you provided in this context are processed on the basis of our legitimate interest in accelerating and optimizing our processes for our customers (Art. 6(1)(f) GDPR).

Retention periods

The personal data processed for this purpose will be retained for the duration of your business relationship with us or until you request the deletion of your data, subject to the applicable statutory retention periods.

6. Plugins and tools

YouTube

We have embedded YouTube videos in our online services, which are stored on www.youtube.com and can be played directly from our website. These features are provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. The use of YouTube may result in the transmission of personal data to the servers of Google LLC in the United States. Google LLC has concluded standard contractual clauses, as approved by the European Commission, with us for the transmission of personal data to Google LLC based in the United States.

The YouTube videos on our website are all embedded in “privacy-enhanced mode,” which means no user data about you are sent to YouTube as long as you do not interact with these videos. No data are transferred until you play a video. We have no influence over this data transfer. Before any data are transmitted, you will be notified again that your data will be transferred to YouTube when you play a video. Your data will be transferred to YouTube regardless of whether you are signed into a YouTube user account or not. If you are signed into your Google account, your data will be linked directly to your account.

If you do not wish to be linked to your YouTube profile, you have to log out of your Google account before playing a video. YouTube stores your data as a user profile and uses that information for the purposes of advertising, market research, and/or designing its website to meet users’ needs. You have the right to object to the creation of these user profiles; to do so, please send your request to YouTube.

Furthermore, we offer you the option of contacting us using the comment or chat function. In order to use this function, you have to be logged into your Google account. If you comment on our posts or send us a message via chat, this information will be saved by YouTube and is visible to anyone who opens the video.

Data are processed by Würth IT GmbH on the basis of your consent in accordance with Art. 6(1)(a) GDPR and Section 25(1) TDDDG (German Telecommunications Digital Services Data Protection Act). You can withdraw your consent at any time. Your withdrawal of consent does not affect the lawfulness of processing based on your consent before its withdrawal.

For more information on YouTube and Google’s privacy policy, please visit:

https://www.google.com/intl/en/policies/privacy/ (Google privacy policy)
https://policies.google.com/terms?hl=en#toc-software (Google terms of services)
https://www.youtube.com/static?gl=GB&template=terms&hl=en (YouTube terms of service)

Google Maps

We use services of Google Maps on this website to display interactive maps directly on the website, allowing you to use convenient features of the map function. These features are provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. The use of Google Maps may result in the transmission of personal data to the servers of Google LLC in the United States. Google LLC has concluded standard contractual clauses, as approved by the European Commission, with us for the transmission of personal data to Google LLC based in the United States.

When you visit this website, Google receives information that you have accessed this subpage of our website. Your data will be transferred to Google regardless of whether you are signed into a Google user account or not. If you are signed into your Google account, your data will be linked directly to your account. If you do not wish to be linked to your Google profile, you have to log out of your Google account before viewing a map. Google stores your data as a user profile and uses that information for the purposes of advertising, market research, and/or designing its website to meet users’ needs. This type of analysis is carried out (even for users who are not logged in) in order to provide appropriate advertising in particular and in order to inform other users in the same social network of your activities on our website. You have the right to object to the creation of these user profiles; to do so, please send your request to Google.

For more information on Google Maps and Google’s privacy policy, please visit:

https://www.google.com/intl/en/policies/privacy/ (Google privacy policy)
https://policies.google.com/terms?hl=en#toc-software (Google terms of services)

Friendly Captcha

We use Friendly Captcha (hereinafter “Friendly Captcha”) on our website. This service is provided by Friendly Captcha GmbH, Am Anger 3-5, 82237 Wörthsee, Germany.

Friendly Captcha is used to check whether the data entered on this website (e.g., in a contact form) have been entered by a human or by an automated program. To do this, Friendly Captcha analyzes the behavior of the website visitor based on various characteristics. Friendly Captcha uses various information for the analysis (e.g., anonymized IP address, referrer, visit time, etc.). For further information, please refer to: https://friendlycaptcha.com/en/legal/privacy-end-users/.

The data are saved and analyzed by virtue of Art. 6(1f) GDPR. The website operator has a legitimate interest in protecting its site from abusive automated crawling and spam.

Conclusion of a data processing agreement

We have concluded a data processing agreement with Friendly Captcha GmbH in accordance with Art. 28(3) GDPR to ensure that Friendly Captcha GmbH protects the personal data of our customers and does not disclose any personal data to third parties.

7. Data collection outside our website

Würth Supplier Portal - connect

The Würth Supplier Portal - connect is a WebEDI solution used as a supplier portal, the use of which is subject to a separately concluded usage agreement.

To fulfill our contractual obligations in accordance with Art. 6 (1b) GDPR, we process the following personal data:

Email address
Title
Name
User name
Password as hash
Company name
Company address
Department
Position
Telephone, cell phone number, fax number
Preferred language and time zone

In addition, we process log files (status of internal jobs, time of your login/logout, changes in the user management system) to carry out error analyses and to improve our services. This represents a legitimate interest within the meaning of Art. 6 (1f) GDPR.

Log files may be forwarded to Seeburger AG, Edisonstrasse 1, 75015 Bretten, Germany, for the purpose of bug fixing. We concluded an agreement with Seeburger on data processing in accordance with Art. 28 GDPR.

Your personal data will be stored in our Würth Supplier Portal - connect for as long as you are in a business relationship with us. Your data is deleted upon termination of the business relationship, subject to the applicable statutory retention periods.

The data processed in connection with the creation of log files is stored as long as required for the purposes mentioned.

Microsoft 365

Würth IT GmbH uses the productivity, collaboration, and exchange platform Microsoft 365. This service is offered by Microsoft Corporation, One Microsoft Way Redmond, WA 98052-6399, USA (hereinafter “Microsoft”).

Microsoft 365 is a service that connects different platforms for online meetings, as a phone solution, for surveys, to share and edit documents, and for email communication, among other things, and that makes it possible to share information easily between platforms.

Legal basis

Personal data are processed with Microsoft 365 for contractual purposes (for the performance of a contract or for the preparatory steps to enter into a contract) or, if personal data are processed within the framework of an employment relationship or recruitment process, on the legal basis set out in Art. 6(1)(b) in conjunction with Art. 88 GDPR, Section 26 of the German Federal Data Protection Act (BDSG). Furthermore, we process personal data on the basis of our legitimate interests (Art. 6(1)(f) GDPR). Our legitimate interest for processing your data is based on ensuring effective and efficient communication and collaboration between our employees, applicants, interested parties, customers, suppliers, service providers, and other business and communication partners. These interests are based on the freedom to conduct a business and choose an occupation within the EU.

Categories of processed personal data

The following categories of personal data are processed for the purpose of using Microsoft 365:

Communication data (company, name, phone, email (if personal), address)
Contract master data (contract relationship, product and/or contract interest)
Log files, log data
Meta data (e.g., IP address, duration of participation in a meeting, etc.)
Content data (documents, photos, videos, audio, document-specific)

Retention periods

The data processed in connection with the use of Microsoft 365 are stored for as long as required for the specified purposes.

Conclusion of a data processing agreement

A data processing agreement was concluded with Microsoft. The latest version can be found under the following link: https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendu m-DPA?lang=14

8. Disclaimer

The privacy statement of Würth IT GmbH does not apply to applications, products, services, websites, or social media functions of third-party providers that can be reached through links we offer for information purposes. When using these links, you leave the website of Würth IT GmbH, resulting in the possibility that information about you may be collected or passed on by third parties. Würth IT GmbH has no influence whatsoever over the websites of third parties and makes no recommendations or warranties regarding these websites or their data protection practices. We therefore encourage you to read and review the privacy policies of any websites with which you interact very closely before allowing them to collect, process, and use your personal data.

We kindly ask you to read the contents of our data privacy policy regularly. We update our privacy policy as required by any changes to how we process personal data. Please note that any addresses and contact information of companies and organizations indicated in this privacy policy may change over time. Please verify the information before making contact.

Version: August 2024