Privacy policy

This English version is a convenience translation. In case of dispute, the German version prevails.

Thank you for visiting our online shop. Below we inform you about the processing of personal data in accordance with Art. 13 and 14 GDPR.

1. Controller

Wemarto GmbH
Schöne Aussicht 45 · 61206 Wöllstadt, Germany
Phone: +49 6034 4049548
E-mail: info@wemarto.de

Represented by the managing director Marcel Weber. If you have any questions about data protection, please contact the same address. We are not legally required to appoint a data protection officer.

2. Operation of the online shop (Shopify)

This online shop is operated on the platform of Shopify International Ltd., 2nd Floor Victoria Buildings, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland. Shopify processes personal data on our behalf as a processor pursuant to Art. 28 GDPR.

This may involve the transfer of data to third countries outside the EU, in particular to Canada and the USA. Such transfers are safeguarded by the standard contractual clauses of the European Commission pursuant to Art. 46(2)(c) GDPR.

3. Accessing the shop (server log data)

When you access our pages, the following data is collected automatically:

  • IP address of the requesting device
  • date and time of access
  • page or file accessed
  • volume of data transferred and access status
  • previously visited page (referrer)
  • browser type, version, operating system and language

This processing is carried out to provide and secure our services on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR.

4. Order processing

To process your order, we process the company name, the name of the contact person, billing and delivery address, e-mail address, telephone number, VAT identification number as well as details of the payment and the goods ordered.

The legal basis is Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(c) GDPR (retention obligations under commercial and tax law).

5. Customer account

You can create a customer account to view orders and store address data. This information is used exclusively for this purpose. The legal basis is Art. 6(1)(b) GDPR. You may request deletion of the account at any time; statutory retention obligations for completed orders remain unaffected.

6. Payment processing

Depending on the payment method selected, your payment data is transmitted to the respective payment service provider, which processes it under its own responsibility. The legal basis is Art. 6(1)(b) GDPR. We neither collect nor store complete credit card details.

7. Shipping

For delivery, we pass on your name and delivery address, and where necessary your e-mail address and telephone number for shipment notifications, to our shipping service provider. The legal basis is Art. 6(1)(b) GDPR.

8. Contact

If you contact us by e-mail, telephone or via a form, we process your details in order to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR for contract-related enquiries, otherwise Art. 6(1)(f) GDPR.

Contact and enquiry form

On our website we provide a form that you can use to send us enquiries and transmit files such as technical drawings. We collect the details you enter, in particular your name, company, e-mail address, telephone number and your message, as well as the files you upload. For technical reasons, the time of transmission and the IP address are also processed.

The purpose of this processing is to handle your enquiry and prepare a quotation. The legal basis is Art. 6(1)(b) GDPR insofar as the enquiry is aimed at concluding or performing a contract, otherwise Art. 6(1)(f) GDPR based on our legitimate interest in responding to enquiries. Providing this data is voluntary; however, we cannot process your enquiry without it.

To operate the form, we use the application Hulk Form Builder provided by HulkApps, 1 Kingdom Street, Paddington Central, London W2 6BD, United Kingdom.

The provider processes the data transmitted via the form exclusively on our behalf and in accordance with our instructions. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider. Transfers to the United Kingdom are permitted on the basis of an adequacy decision of the European Commission.

Your data will be deleted once your enquiry has been fully dealt with and no statutory retention obligations prevent deletion. Retention periods of six or ten years under commercial and tax law remain unaffected. You may object to processing based on Art. 6(1)(f) GDPR at any time in accordance with Art. 21 GDPR.

9. Cookies

We use technically necessary cookies that are required for the operation of the shop, for example to store the shopping cart and the session. The legal basis is Section 25(2) no. 2 of the German Digital Services Data Protection Act (TDDDG) in conjunction with Art. 6(1)(f) GDPR; consent is not required for this.

Non-essential cookies, for example for analytics or marketing purposes, are only used with your consent pursuant to Section 25(1) TDDDG and Art. 6(1)(a) GDPR. You may revoke any consent given at any time with effect for the future. You can also delete or block cookies in your browser settings.

10. Storage period

Server log data is deleted after seven days. Data from contractual relationships is retained for up to ten years in accordance with the obligations under Section 257 of the German Commercial Code (HGB) and Section 147 of the German Fiscal Code (AO). It is then deleted unless another legal basis applies.

11. Recipients of the data

Data is only passed on to Shopify as the platform operator, to payment and shipping service providers, to our tax advisor and to authorities where we are legally obliged to do so. Data processing agreements pursuant to Art. 28 GDPR are in place with all processors.

12. Your rights

  • access to the data processed (Art. 15 GDPR)
  • rectification of inaccurate data (Art. 16 GDPR)
  • erasure (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • objection to processing based on legitimate interests (Art. 21 GDPR)
  • withdrawal of consent with effect for the future (Art. 7(3) GDPR)

To exercise these rights, simply send a message to info@wemarto.de. Please note that invoice and accounting data cannot be deleted during the statutory retention period; processing of such data can only be restricted.

13. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (Hessian Commissioner for Data Protection and Freedom of Information), Postfach 3163, 65021 Wiesbaden, Germany.

14. Obligation to provide data

The provision of the data required for order processing is necessary for the conclusion of the contract. Without this information, we cannot fulfil your order.

15. Use of AI tools

To process orders and prepare invoices, we use AI-supported software provided by Anthropic PBC, 548 Market Street, San Francisco, CA 94104, USA. The data processed includes the company name, contact person, contact details and the order details. The legal basis is Art. 6(1)(b) and (f) GDPR, the transfer to the USA is safeguarded by the standard contractual clauses, and we have disabled the use of your data for training AI models.