Privacy Statement

Data protection

The aim of data protection, and also our objective at Adolf Würth GmbH & Co. KG, is to ensure that personal data are handled in such a way that every data subject’s right to privacy is protected.

In order to achieve this objective, all functions responsible for the processing of personal data must observe applicable EU legislation (General Data Protection Regulation (GDPR)) and all national data protection laws.

Personal data may only be collected and processed subject to the GDPR or other applicable laws. The essential underlying principles of the GDPR are:

• Lawfulness of processing, fairness of processing, transparency
• Purpose limitation
• Data minimization
• Accuracy of data processing
• Storage limitation and erasure concepts
• Integrity and confidentiality

Handling personal data responsibly but also being aware of the risks of IT systems and applications are other key objectives of Adolf Würth GmbH & Co. KG.

Information to be provided by data controller and rights of data subjects

Name and contact information of the data controller

The controller is the natural person or legal entity that, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g., names, email addresses, etc.).

The data controller for data processing on this website is:

Adolf Würth GmbH & Co. KG
Reinhold-Würth-Straße 12–17
74653 Künzelsau-Gaisbach
Phone: +49 7940 15-0
Email: info@wuerth.com

Contact information of the data protection officer

You can contact our data protection officer at datenschutz@wuerth.com.

Purpose of data collection, processing, or use

Adolf Würth GmbH & Co. KG is Germany's leading specialist in the sale of assembly and fastening materials.

The collection, processing, or use of personal data serves this corporate purpose or supporting secondary purposes, such as customer service.

Groups of people concerned and related data or data categories

Relevant groups of people include:

• Current employees
• Former employees
• Applicants
• Interested parties
• Customers
• Suppliers
• Service providers
• Other business partners

The relevant data include all personal data that are necessary for the fulfillment of the purpose concerned. A detailed overview of the types of personal data that are processed can be found below.

Legal grounds

The processing of personal data is only legal if permitted by a law: that is to say, if there is a legal basis for the processing or the data subject has consented to the processing.

Personal data are only processed in our company in accordance with legal provisions. These generally include,

• when consent to the processing of personal data has been given (Article 6(1a) GDPR),
• when personal data have to be processed for the performance or initiation of a contract (Article 6(1b) GDPR),
• when personal data have to be processed to comply with legal requirements (Art. 6(1c) GDPR),
• when personal data are processed on the basis of a legitimate interest or a legitimate interest of a third party (Article 6(1f) GDPR).

Special legal basis of data processing for contracts

Adolf Würth GmbH & Co. KG supplies almost exclusively to professionals. Unless agreed otherwise in individual cases, our legal basis for processing your personal data for the performance of a contract is as follows:

1. If you are a registered businessperson in accordance with the German Commercial Code (HGB) or a freelancer, processing your personal data is necessary for the performance of the contract or for the preparatory steps to enter into a contract (Art. 6(1b) GDPR).

2. Or, if you are an employee of a company—for example, a purchasing agent—processing your personal data is necessary for the purposes of the legitimate interests pursued by Adolf Würth GmbH & Co. KG (Art. 6(1f) GDPR). The legitimate interests of Adolf Würth GmbH & Co. KG—the sale of its goods and services—include, but are not limited to, the freedom to conduct a business and choose an occupation within the EU.

In line with the intended purpose for processing your data, we aggregate data that are saved and processed in our central systems as a result of interactions with customers or interested parties, as well as their employees, via our various communication channels (in particular, sales force, pick-up shops, telesales, and online shop) and also use these data when contacting you through a different communication channel (e.g., our sales representatives are granted access to data regarding your searches in our online shop).

For simplification purposes, we shall refer only to “data processing for the performance of a contract” below.

Potential recipients of personal data

The potential recipients of personal data include:

• Public authorities if legally required
• Service providers and other business partners as far as this is necessary for the purpose in question and allowed or required by a legal provision, or if the data subject has given his/her consent

Planned data transfer to countries outside the EU or international organizations

Should we transfer your data to a country outside the EU (countries that are not members of the European Union) or an international organization, we will provide you with all required information for this case.

Deadlines for the erasure of data

Personal data will be deleted in accordance with the legal or contractually established regulations on the disposal of data and considering any legal or contractually established retention periods. Most of these legal requirements are based on the German Commercial Code (HGB) and the German Fiscal Code (AO). The retention and documentation periods set out in these codes require data controllers to retain data for up to ten years after the end of a business relationship or pre-contractual legal transaction.

Other legal provisions may impose even longer retention periods on data controllers, for instance, for the retention of evidence in accordance with relevant statutes of limitations. The general statute of limitations is three years. Special statutes of limitation of up to 30 years or longer may, however, apply in certain situations. Personal data that are not subject to a legal or contractual retention period or erasure obligation must be deleted immediately after they are no longer necessary in relation to the purposes for which they were collected or otherwise processed.

Your data protection rights (Art. 12 et seqq. GDPR)

The data subject has various data protection rights. These rights are explained below. The contact information indicated above can be used to exercise these rights.

Right of Access (Art. 15 GDPR), Right to Rectification (Art. 16 GDPR), Right to Erasure (Art. 17 GDPR), and Right to Restriction of Processing (Art. 18 GDPR).

Subject to the applicable legal regulations, you have the right to obtain information, at any time and free of charge, about all your personal data stored by the data controller, its origin, recipients and purpose of storage, as well as, where applicable, the right to rectification, erasure, or restricted processing of your data.

Right to object (Art. 21 EU GDPR)

Every data subject has the right to object to the processing of their personal data on the basis of Art. 6(1f) GDPR or for direct marketing purposes. In the event we receive an objection to the processing of your personal data, we will carefully review your objection on a case-by-case basis. If your objection to the processing of your personal data requires us to delete your data, we will delete your data in accordance with statutory retention requirements. Your objection does not affect the lawfulness of processing based on your consent before its withdrawal.

Right to data portability (Art. 20 GDPR)

You have the right to have data that we process automatically on the basis of your consent or to perform a contract provided to you or to a third party in a commonly used, machine-readable format. If you request the direct transmission of the data to another controller, this will only be done if it is technically feasible.

Obligation to disclose data

Every data subject has the right to know whether the provision of personal data is a legal or contractual requirement, or a requirement necessary to enter into a contract, as well as whether the data subject is obliged to provide the personal data and what the possible consequences of failure to provide such data would be.

Right to lodge a complaint with the competent supervisory authority

The data subject has the right to lodge a complaint with the competent supervisory authority if the data subject believes that the processing of personal data relating to him or her infringes his or her rights. The responsible supervisory authority for data protection issues is the data protection officer responsible for the federal state in which our company has its registered office. The data subject may also lodge a complaint with a supervisory authority responsible for the data subject’s habitual place of residence or place of the alleged infringement. A list of data protection officers and their contact information can be found at the following link: https://www.bfdi.bund.de/EN/Service/Anschriften/Laender/Laender-node.html.

Revocation of your consent to process data

Many data processing operations can only be performed with your consent. You can withdraw your consent at any time. All you need to do is send an informal email to this effect to one of the email addresses indicated above. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Use of your data for (direct) marketing purposes

Irrespective of your subscription to our newsletter, we may use your data, and especially your email address, for (direct) marketing purposes. We only use your data if you have not objected to the use of your data for this purpose. We would like to inform you in this statement, and every other contact, that you can object to the use of your data for (direct) marketing purposes at any time and without incurring any additional costs other than the usual transmission costs according to the basic rates of your Internet provider.

SSL and/or TLS encryption

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator. You can recognize an encrypted connection when you see the address bar of your browser change from “http://” to “https://” and when the lock symbol appears in your address bar.

When SSL and/or TSL encryption is activated, the data that you transfer to us cannot be read by third parties.

Würth IT GmbH – the global IT service provider for the Würth Group

We process your data in the data centers of Würth IT GmbH, Drillberg 6, 97980 Bad Mergentheim, Germany (hereinafter “Würth IT”). We rely on the services of Würth IT in order to render our services. We have concluded an order processing agreement with Würth IT.

Further information on how Würth IT handles personal data can be found in the privacy statement at https://www.wuerth-it.com/en/it/datenschutz.php

Akamai

We use the “Akamai” service. This service is provided by Akamai Technologies GmbH, Parkring 20–22, 85748 Garching, Germany (hereinafter “Akamai”). Akamai offers a globally distributed content delivery network with a domain name system. Information is transferred between your browser and our website via the Akamai network. This enables Akamai to analyze the data traffic between your browser and our website and to serve as a filter between our systems and potentially malicious data traffic from the Internet. Akamai may also use cookies or other technologies to recognize returning Internet users, which are used solely for the purpose described here. We have concluded a data processing agreement with Akamai.

The use of Akamai is based on our legitimate interest in ensuring that our online services are as secure and accurate as possible (Art. 6 Sec. 1f GDPR).

Further information on how Akamai handles personal data can be found in the privacy statement at: https://www.akamai.com/us/en/multimedia/documents/akamai/akamai-privacy-statement.pdf

Server log files

When visiting our website, we process information in server log files, which your browser transmits to us automatically. The purpose of the processing to correctly display our Internet presence and to ensure the secure operation of our website.

Categories of processed data

Data are collected from the following categories:

• Type and version of browser
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of server request
• IP address
• Amount of data transferred
• Retrieval confirmation
• Name of accessed website
• Requesting Internet service provider

These data are not merged with other data sources.

Legal basis

Data are processed on the legal basis set out in Article 6(1f) GDPR and Section 25(2) 2 TTDSG (German Telecommunications Telemedia Data Protection Act). As the website operator, we have a legitimate interest in a correct presentation of our Internet presence and in ensuring the website’s secure operation.

Retention periods

The data processed in connection with the collection of server log files are stored as long as required for their specific purposes.

Cookies

Some of the websites of Adolf Würth GmbH & Co. KG use cookies. Cookies help make our website more user-friendly, effective, and secure. Cookies are small text files that are placed on your computer and stored by your web browser.

You can adjust your browser settings to make sure you are informed about the use of cookies and allow cookies only in individual cases, accept cookies only for certain applications, or decline all cookies and activate the automatic deletion of cookies when closing your web browser. When cookies are deactivated, some of the functions available on this website may no longer work properly.

We process cookies for the performance of contracts, wherever they are necessary for electronic communication processes or the provision of our services (e.g., shopping car function). Adolf Würth GmbH & Co. KG uses these cookies primarily to process your orders in the online shop. The storage of any other cookies (e.g., cookies to analyze your browsing behavior) is treated separately in this privacy statement, and processing is subject to your prior consent.

For an overview of active cookies, please refer to this page: Cookie Policy. Cookie settings can be changed on this page at any time.

"Do Not Track" settings

You can also control the storage of cookies by adjusting the "Do Not Track" (DNT) settings in your web browser. Depending on the browser, DNT is available as a setting in the program settings or as a plug-in or add-on. By enabling this setting, the browser signals that you do not wish for your browsing behavior to be tracked by these tools without your express consent. If the setting is enabled, the tracking features of our tools will be anonymized. Please note that different web browsers may require different settings to enable DNT.

Alternatively, you can check on the deactivation page for EU consumers (https://www.youronlinechoices.com/uk/your-ad-choices) whether advertising cookies are being stored on your browser and disable them if so.

Contact form

When you send us an inquiry through the contact form, your data from the inquiry form, including any contact data provided by you, will be stored by us in order to process your inquiry and answer any follow-up questions.

Categories of personal data

The following categories of personal data are processed when an inquiry is sent through the contact form:

• Your request
• Customer number
• Name
• Email address
• Phone
• Your message

Legal basis

The required data are processed for the performance of a contract. Any personal data provided voluntarily are processed on the legal basis set out in Article 6(1f) GDPR, according to which we may process your personal data whenever this is in our legitimate interest. Our legitimate interest is based on maintaining contact with you, our customers, improving the quality of our advice and services, and being able to contact you more easily should we have any follow-up questions.

Retention periods

We will store the data you have entered in the contact form until you request the erasure of the data or the purpose of the data storage is no longer applicable (e.g., after your inquiry has been processed). Statutory retention periods may apply.

Sweepstakes entry form

When you fill out an entry form to participate in a sweepstakes, the information in that form, including the contact information you have entered, is saved for the purpose of carrying out the sweepstakes, determining the winner, and notifying the winner.

Categories of personal data

Depending on the sweepstakes, the following categories of personal data may be processed via the sweepstakes entry form:

• Customer number
• Partner number
• Company name
• First name
• Last name
• Email address
• Address

Legal basis

Your data are processed on the basis of your consent in compliance with Art. 6(1a) GDPR.

Retention periods

We will store the data you have entered in the sweepstakes entry form until you request the erasure of the data or the purpose of the data storage is no longer applicable (e.g., after the sweepstakes is over). Statutory retention periods may apply.

Customer Surveys

Adolf Würth GmbH & Co. KG conducts customer surveys in order to customize your customer profile and thus create individual offers specifically for your company. To associate the results of the customer survey with your profile, your personal data will be processed.

Categories of personal data

The following categories of personal data are processed during the customer survey:

• First name
• Surname
• e-mail address
• Customer number

Legal Basis

The processing of your data is based on Art. 6(1)(f) GDPR. Accordingly, processing is permissible if it is necessary to protect our legitimate interests. Our legitimate interest lies in improving our customer outreach in marketing and enhancing the quality of our offerings.

Retention Period

The collected data will be stored by us as long as you maintain a business relationship with us or you object to the processing of your data. After termination of the business relationship or in the event of an objection, your data will be deleted.

Online shop

You can register in our online shop in order to use additional functions on our website. The data provided will only be used for the purpose of providing the individual feature or service for which you have registered. All mandatory information must be provided for the registration to be successful. Otherwise, we will refuse registration.

Categories of processed data

The following data are processed for the purpose of using the online shop:

Company information

• Company name*
• Name of owner for sole proprietorship
• Street address*
• Country*
• Post code*
• Town*
• Website
• Industry*
• Number of people working with Würth products*
• VAT ID number

Personal details

• Salutation*
• First name*
• Last name*
• Language
• Position*
• Email*
• Phone*
• Mobile phone*
• Fax

Legal basis

All mandatory data (marked with an asterisk) provided during registration in our online shop are processed for the performance of a contract.

Any personal data provided voluntarily are processed on the legal basis set out in Article 6(1f) GDPR, according to which we may process your personal data whenever this is in our legitimate interest. Our legitimate interest is based on improving the quality of our consulting services and being able to contact you more easily should we have any follow-up questions.

Email contact

For important changes, such as a change in our services or essential technical changes, we will inform you using the email address provided upon your registration.

Retention periods

We will store all data entered for the duration of our business relationship. Your data are deleted upon termination of the business relationship, After deleting your online shop access, we will continue to store your Würth customer account and customer details, subject to the applicable statutory retention periods.

Linking customer activities across contact points

When you interact with one of our contact points as a customer or interested party, or as an employee of the same, we aggregate data that are saved and processed in our central systems via our various communication channels (in particular, sales force, pick-up shops, telesales, and online shop) and also use these data when contacting you through a different communication channel (e.g., our sales representatives are granted access to data regarding your searches in our online shop).

Categories of processed data

• The information you entered when registering (in the online shop or another contact point)
• Activity-related information (e.g., purchased items, items marked as favorites, items saved in the shopping cart)

Legal basis

These data are processed for the performance of a contract.

Retention periods

We will store all data entered for the duration of our business relationship. Your data are deleted upon termination of the business relationship, After deleting your online shop access, we will continue to store your Würth customer account and customer details, subject to the applicable statutory retention periods.

Online portal for applicants

During job applications, we collect and process our applicants’ personal data through our job portal. After registering, all access details required for the creation of an applicant’s profile are sent out to the potential applicant by email. The information provided by the applicant in the profile is processed for the purpose of completing the recruitment process.

Categories of processed data

The following categories of personal data are processes when using the job portal:

• Name and email address (registration for job portal)
• Information included in
  
  • Cover letter
  • Curriculum vitae
  • Letters of reference/certificates
  • Other documents relevant for the application in question

Legal basis

The personal data of applicants are processed on the legal basis set out in Art. 6(1b) in conjunction with Art. 88 GDPR, Section 26 of the German Federal Data Protection Act (BDSG).

Recipients of the data

Other recipients of the information entered during registration and the files attached to your application as well as the data stored in the applicant profile and the log files is SAP Deutschland SE & Co. KG (Hasso-Plattner-Ring 7, 69190 Walldorf, Germany).

If you give us your consent, you can become part of our Talent Community. Your data will then be used to contact you by the relevant company or for other recruitment purposes if a suitable position is found for you. Such communication could include, for example, invitations to apply for other positions or opportunities or job alerts. For further information on this, please refer to the data protection information in the applicant portal.

Retention periods

If the application is not considered or rejected in the course of the recruitment process, all application documents will be deleted automatically no later than six months after the application has been turned down unless further retention is necessary on the basis of other legitimate interests of the data controller.

Applicants can withdraw their applications at any time. After withdrawal of an application, all application documents are deleted without delay.

Further uses of the applicant’s profile

Any consideration of the applicant’s profile for future job openings is subject to the applicant’s prior consent.

In this case, the continued storage and processing of the applicant’s data is based on the consent of the applicant in compliance with Art. 6(1a) GDPR. This consent may be withdrawn at any time. Please contact personal@wuerth.com.

Registering for the DOCUsmart construction documentation software

You can register for the DOCUsmart construction documentation software via our website in order to use additional features on our site. The information entered here will be used solely for the purpose of processing your request and rendering our services. All mandatory information must be provided for the registration to be successful. Otherwise, we will refuse registration.

In the event of important changes—for instance, regarding the scope of the offer or in case of any technical requirements—we will notify you using the email address provided during your registration.

Legal basis

The registration on our website, as well as the further processing of your personal data as part of the DOCUsmart service, is intended for the performance of a contract.

Retention periods

We will retain the data entered upon registration for as long as you are registered for DOCUsmart and delete the data afterward, subject to the applicable statutory retention periods. All of the information saved in DOCUsmart will be deleted within one year after terminating the contract.

Personalized product recommendations

If you have agreed to the use of cookies on our website, we will use your browsing history for product recommendations on this website after you have logged in. This includes product pages and categories that you visited or searched for on Würth websites. You can withdraw your consent to the analysis of your browsing behavior at any time. Please note that we will be unable to provide personalized product recommendations to you once you withdraw your consent.

Legal basis

Cookies to create personal product recommendations are stored on the basis of your consent in compliance with Art. 6(1a) GDPR and Section 25(1) TTDSG (German Telecommunications Telemedia Data Protection Act).

You can prevent the storage of cookies by not consenting to the use of cookies. However, please note that by doing so, you may not be able to use all of the features on this website. If you do not consent to the use of cookies, products will be recommended based on the currently displayed website content.

Information generated through cookies for personalized product recommendations is not passed on to third parties.

Retention periods

If you do not agree to your data being stored and used, you can disable the storage and use features here. Your opt-out decision will be stored in a cookie. If you delete your cookies, this will also delete your opt-out cookie. The next time you visit our website, you will be asked again whether you consent to the use of cookies.

Würth web analytics

This website uses features from Würth’s web analytics service based on the open-source software Matomo/Piwik. Würth’s web analytics tool uses cookies. Cookies are text files stored on your computer that make it possible to analyze how you use the website. The information generated by cookies regarding the use of our website is stored on our servers

Würth web analytics and personalization

Legal basis

Würth web analytics is used for the statistical analysis of our website on the basis of your consent in compliance with Art. 6(1a) GDPR and Section 25(1) TTDSG (German Telecommunications Telemedia Data Protection Act).

Information on the intended purpose of processing your data and retention periods can be found at: https://www.wuerth.de/web/en/awkg/datenschutz/cookies/cookies.php

IP anonymization

We have enabled the IP anonymization function for this tool. This means that Würth shortens your IP address.

You can prevent the storage of cookies by not consenting to the use of cookies. However, please note that by doing so, you may not be able to use all of the features on this website.

If you do not agree to your data being stored and used, you can withdraw your consent to the storage and processing of your data here. Your opt-out decision will be stored in a cookie. If you delete your cookies, this will also delete your opt-out cookie. The next time you visit our site, you will be asked again whether cookies may be used for web analytics purposes.

If you do not consent to the use of cookies, Würth analytics will remain active anonymously nevertheless. This means that data processed by Würth analytics will not be associated with your customer or partner number.

We use this information to evaluate your use of the website, compile reports on website activity, and provide other services related to the use of the website.

Google Analytics

This website uses features from the web analytics service Google Analytics for the statistical analysis of website user behavior. These features are provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter “Google Ireland”). We have concluded a data processing agreement with Google Ireland. The use of Google Analytics may result in the transmission of personal data to the servers of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (hereinafter “Google LLC”) in the United States. Google Ireland has concluded standard contractual clauses, as approved by the European Commission, with Google LLC for the transmission of personal data to Google LLC based in the United States.

On behalf of the operator of this website, Google Ireland will use this information for the purpose of evaluating your use of the website, compiling reports on website activity, and providing other services relating to website activity and Internet usage for the website operator.

IP anonymization

We have enabled the IP anonymization function on this website. As a result, Google Ireland shortens your IP address within the member states of the European Union or in other EFTA member states of the European Economic Area before transmitting data to the United States. This refers to data transmitted directly from your browser to Google Analytics servers. In addition, we also send data about your interactions with this website to the Google Analytics servers via a first-party server hosted in the European Union (a GTM server). This GTM server anonymizes your IP address before communicating with the Google Analytics servers. Only under exceptional circumstances is the complete IP address transmitted to a Google LLC server in the United States and shortened there.

Google Signals

We continue to use the Google Signals feature. Google Ireland uses Signals to provide reports about the number of users across all devices, as well as the different groups of users, based on the different combinations of devices used. In addition, Google Ireland uses the data of the users who have enabled the “personalized ads” option in their Google account settings. Google Signals is used only with the IP anonymization function enabled. Google is the sole party to process the used data. The information provided to us includes only the anonymized reports. We do not process any of the personal data on which the reports are based. You can decline the collection of data by Google Signals at any time by disabling “personalized ads” in your Google account:
https://support.google.com/ads/answer/2662922?hl=en

We use Google Signals to identify users across different devices in order to show them advertisements related to their interests.

Demographics tracking in Google Analytics

We are also using the “Demographics” feature of Google Analytics. This allows us to generate reports on the age, gender, and interests of site visitors. This information is collected based on web-based advertising from Google and third-party visitor data. This information cannot be attributed to a specific person. You can disable this feature at any time by adjusting the ad settings in your Google account or by objecting to the collection of your data by Google Analytics, as described in the “Objection to data collection” section.

You can permanently object to the collection of your data for the purpose of anonymous statistics by disabling personalized advertising in the Google Ads options by following this link:

https://www.google.com/settings/ads/onweb/

For more information on Google Analytics and Google Ireland and Google LLC’s privacy policy, please visit:

https://www.google.com/intl/en/policies/privacy/ (Google privacy policy)

https://support.google.com/analytics/answer/6004245?hl=en (Data privacy and security in Google Analytics)

https://policies.google.com/terms?hl=en#toc-intro (Terms of Google services)

https://policies.google.com/technologies/cookies?hl=en (How Google uses cookies)

https://support.google.com/analytics/answer/7532985?hl=en&ref_topic=7668613 (information about Google Signals)

Legal basis

Google Analytics and Google Signals are used for the statistical analysis of our website on the basis of your consent in compliance with Art. 6(1a) GDPR and Section 25(1) TTDSG (German Telecommunications Telemedia Data Protection Act).

You can prevent the use of cookies by not consenting to the use of cookies. However, please note that by doing so, you may not be able to use all of the features on this website.

If you do not agree to your data being stored and used, you can disable the storage and use features here. Your opt-out decision will be stored in a cookie. If you delete your cookies, this will also delete your opt-out cookie. The next time you visit our site, you will be asked again whether cookies may be used for web analytics purposes.

Google Analytics remarketing

Our websites use the remarketing features from Google Analytics in connection with the cross-device features from Google Ads and Google DoubleClick. These features are provided by Google Ireland Limited, Gordon House, Barrow St, Dublin 4, D04 E5W5, Ireland (hereinafter “Google Ireland”). We have concluded a data processing agreement with Google Ireland. The use of Google Analytics may result in the transmission of personal data to the servers of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (hereinafter “Google LLC”) in the United States. Google Ireland has concluded standard contractual clauses, as approved by the European Commission, with Google LLC for the transmission of personal data to Google LLC based in the United States.

This function makes it possible to link the advertising target groups created using Google Analytics remarketing with the cross-device features from Google Ads and Google DoubleClick. In doing so, web-based, personalized advertising messages created based on your earlier browsing behavior on one end device (e.g., smart phone) can also be displayed on another one of your end devices (e.g., tablet or PC).

If you have already given your consent to Google, Google links your website and app browser histories with your Google account for this purpose. This makes it possible to display the same personalized advertising messages on every end device on which you are signed on with your Google account.

In order to facilitate this feature, Google Analytics tracks the Google-authenticated IDs of users, which are temporarily linked to our Google Analytics data in order to define and create target groups for universal advertising on all devices.

You can permanently decline universal remarketing/targeting on all devices by disabling personalized advertising in your Google account; click on the following link to do so: https://www.google.com/settings/ads/onweb/.

The recorded data will only be compiled in your Google account with your consent, which you can provide or withdraw from Google (Art. 6(1a) GDPR and Section 25(1) TTDSG (German Telecommunications Telemedia Data Protection Act)). Any data collection activities that are not compiled in your Google account (e.g., because you do not have a Google account or have declined the collection of your data) are based on Art. 6(1f) GDPR. Legitimate interest is based on the website operator’s interest in conducting an anonymous analysis of the website’s visitors for advertising purposes.

For more information on Google Analytics and Google Ireland and Google LLC’s privacy policy, please visit:

https://www.google.com/intl/en/policies/privacy/ (Google privacy policy)

https://support.google.com/analytics/answer/6004245?hl=en (data privacy and security in Google Analytics)

https://policies.google.com/terms?hl=en#toc-intro (terms of Google services)

https://policies.google.com/technologies/cookies?hl=en (how Google uses cookies)

https://policies.google.com/technologies/ads?hl=en (how Google uses cookies in advertising)

https://business.safety.google/privacy/ (how Google uses business data)

Google Ads

This website uses Google Ads, including the conversion tracking tool. Google Ads is an online advertising program. This service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google Ireland”). The use of Google Ads may result in the transmission of personal data to the servers of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (hereinafter “Google LLC”) in the United States. Google Ireland has concluded standard contractual clauses, as approved by the European Commission, with Google LLC for the transmission of personal data to Google LLC based in the United States.

We use the conversion tracking tool for the targeted advertising of our product range. This is done on the legal basis of your consent in compliance with Art. 6(1a) GDPR and Section 25(1) TTDSG (German Telecommunications Telemedia Data Protection Act).

If you click on an ad placed on Google, the conversion tracking tool will a cookie on your end device. These conversion cookies expire after 90 days and do not serve as a means of personal identification for the users.

If the cookie is still valid and you visit a certain page on our website, both we and Google Ireland can see that you clicked on one of our ads placed by Google Ireland and that you were then redirected to our website.

Google Ireland uses the data retrieved in the process to generate statistics for us about the visitors on our website. In addition, we receive information about the number of clicks on our ad(s), as well as the subsequent pages that are opened on our website. However, neither we nor any third parties that are also using Google Ads are able to identify you in this manner.

Furthermore, you can prevent or restrict the installation of cookies using the corresponding settings in your web browser. At the same time, you can delete already saved cookies at any time. The steps and actions required for this depend on the specific web browser you are using. Therefore, please use the help function or documentation of your web browser or contact the developer or support team should you have any questions.

For more information on Google Ads and Google Ireland and Google LLC’s privacy policy, please visit:

https://www.google.com/intl/en/policies/privacy/ (Google privacy policy)

https://services.google.com/sitestats/en.html (information about how Google ads work)

https://www.google.com/policies/technologies/ads/ (overview of how Google uses data for advertising)

https://business.safety.google/privacy/ (how Google uses business data)

Google Ads Remarketing

Our websites use the remarketing features from Google Ads Remarketing. With Google Ads Remarketing, we can assign people who interact with our online offering to specific target groups in order to then display interest-based, personalized advertising in the Google advertising network.

If you have already given your consent to Google, Google links your website and app browser histories with your Google account for this purpose. This makes it possible to display the same personalized advertising messages on every end device on which you are signed on with your Google account.

These features are provided by Google Ireland Limited, Gordon House, Barrow St, Dublin 4, D04 E5W5, Ireland (hereinafter “Google Ireland”). We have concluded a data processing agreement with Google Ireland. The use of Google Ads may result in the transmission of personal data to the servers of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (hereinafter “Google LLC”) in the United States.

The recorded data will only be compiled in your Google account with your consent, which you can provide or withdraw from Google (Art. 6(1a) GDPR and Section 25(1) TDDDG (German Telecommunications Telemedia Data Protection Act)). Any data collection activities that are not compiled in your Google account (e.g., because you do not have a Google account or have declined the collection of your data) are based on Art. 6(1f) GDPR. Legitimate interest is based on the website operator’s interest in conducting an anonymous analysis of the website’s visitors for advertising purposes.

If you have a Google Account, you can opt out of personalized advertising by following this link:

https://www.google.com/settings/ads/onweb/

For more information on Google Ads Remarketing and Google Ireland and Google LLC’s privacy policy, please visit:

https://www.google.com/intl/en/policies/privacy/ (Google privacy policy)

https://policies.google.com/terms?hl=en#toc-intro (terms of Google services)

https://policies.google.com/technologies/cookies?hl=en (how Google uses cookies)

https://policies.google.com/technologies/ads?hl=en (how Google uses cookies in advertising)

https://business.safety.google/privacy/ (how Google uses business data)

Bing Ads

This website uses the “Bing Ads” conversion tracking technology developed by Microsoft (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA). For this purpose, Microsoft Bing Ads saves a cookie on your end device, provided you reached our website by clicking on a Microsoft Bing ad. Cookies are small text files that are stored on your end device. These cookies expire after 180 days and are not used as a means of personal identification. If a user visits certain pages of this website and the cookie has not yet expired, Microsoft and us can see that the user clicked on the advertisement and was redirected to this page (conversion page).

We use the conversion tracking tool for the targeted advertising of our product range. This is done on the legal basis of your consent in compliance with Art. 6(1a) GDPR and Section 25(1) TTDSG (German Telecommunications Telemedia Data Protection Act).

The information obtained with the help of the conversion cookie serves to generate conversion statistics, that is to say, to determine how many users landed on a conversion page after clicking on an advertisement. This allows us to discover the total number of users who clicked on our advertisement and were redirected to a page featuring a conversion tracking tag. However, we do not receive any information that could be used to identify users personally.

For more information on Bing’s analytics services, please visit the Bing Ads website (https://help.bingads.microsoft.com/#apex/3/en/53056/2).

For further information on the data privacy policy of Microsoft Bing Ads, please refer to the following website: https://privacy.microsoft.com/en-us/privacystatement

Meta Pixel

Our website uses Meta’s user action pixel to measure conversions, Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (Meta).

This pixel makes it possible to track the behavior of visitors to a particular provider’s website after they have been redirected to that website by clicking on an advertisement. By doing so, it is possible to evaluate the effectiveness of Meta advertisements for statistical purposes and market research and to optimize future advertising campaigns.

The collected data remain anonymous for us as the operator of the website; we are not able to determine the identity of the users. However, Meta stores and processes the data, linking the information to the corresponding user profile so that Meta can use the data for its own advertising purposes, in accordance with Meta’s data use policy. This allows Meta to turn on advertisements on pages both inside and outside the Meta network. We as the website operator cannot influence the use of these data.

Please refer to Meta’s data privacy notice for further information on protecting your personal privacy: https://www.facebook.com/about/privacy/.

Furthermore, you can disable the “Custom Audiences” remarketing function in the “Ad Settings” section under https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You have to be logged into Facebook in order to do this.

If you do not have a Facebook account, you can disable Facebook’s user-based advertising on the website from the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/uk/your-ad-choices.

Meta Pixel is used on the legal basis of your consent in compliance with Art. 6(1a) GDPR and Section 25(1) TTDSG (German Telecommunications Telemedia Data Protection Act). You can withdraw your consent to the use of Meta Pixel at any time by changing your settings here.

LinkedIn

Our website uses LinkedIn Conversion Tracking provided by LinkedIn Corporation to measure conversions. LinkedIn Ireland Unlimited Company, Attn: Legal Dept. (Privacy Policy and User Agreement), Wilton Plaza, Wilton Place, Dublin 2, Ireland (“LinkedIn”).

We use LinkedIn’s conversion tracking to analyze and continuously improve the use of our website. Thanks to the statistics obtained, we can improve our offering, making it more interesting for you, our customer. LinkedIn’s conversion tracking is used on the legal basis of your consent in compliance with Art. 6(1a) GDPR and Section 25(1) TTDSG (German Telecommunications Telemedia Data Protection Act). You can withdraw your consent to the use of Meta Pixel at any time by changing your settings here.

The LinkedIn Insight Tag makes it possible to track the behavior of visitors to a particular provider’s website after they have been redirected to that website by clicking on a LinkedIn advertisement. This allows LinkedIn to evaluate the effectiveness of LinkedIn advertisements for statistical and market research purposes and optimize future advertising campaigns. The LinkedIn Insight Tag helps LinkedIn collect data on website visits, including the URL, referring URL, IP address, device and browser characteristics (user agent), and time stamp. This information is encrypted, IP addresses are shortened, and direct member IDs are removed within seven days in order to pseudonymize the data. The remaining pseudonymized data are deleted within 90 days.

The collected data remain anonymous for us as the operator of the website; we are not able to determine the identity of the users. However, LinkedIn stores and processes the data, linking the information to the corresponding user profile so that LinkedIn can use the data for its own advertising purposes in accordance with LinkedIn’s data use policy (https://www.linkedin.com/legal/privacy-policy). This allows LinkedIn to place advertisements both on LinkedIn pages and outside of LinkedIn. We as the website operator cannot influence the use of these data.

Please refer to LinkedIn’s privacy policy for further information on protecting your personal privacy: http://www.linkedin.com/legal/privacy-policy.

LinkedIn members have the choice to object to LinkedIn Conversion Tracking and to opt out of and delete cookies at https://www.linkedin.com/psettings/advertising/ or to deactivate the use of demographic information. LinkedIn does not share any personal data with the website owner, providing only summarized reports on the website’s target group and the effectiveness of advertisements. LinkedIn also offers retargeting of website visitors, allowing the website owner to retarget website visitors with targeted ad content outside their own website without being able to identify the member. LinkedIn members can control the use of their personal data for advertising purposes in their account settings.

For further information on LinkedIn’s marketing and tracking solutions, please refer to the LinkedIn website: https://www.linkedin.com/help/lms/answer/87080/linkedin-marketing-solutions-and-the-general-data-protection-regulation-gdpr-?lang=en

Uptrends RUM

This website uses the web performance analytics service Uptrends Real User Monitoring (hereinafter “Uptrends RUM”). This service is provided by Uptrends GmbH, Niermannsweg 11–15, 40699 Erkrath, Germany.

Uptrends RUM is integrated into our website through a script that forwards the performance data of our website visitors to Uptrends’ servers. Our websites use a version of the Uptrends script that anonymizes the IP address. As a result, your IP address is shortened before it is transmitted to Uptrends (deletion of the last two octets). Uptrends RUM does not use cookies.

The data collected by Uptrends includes the IP address (shortened before transmission to Uptrends), type of device, operating system, and browser used. This performance data are compiled on the servers of Uptrends RUM and provided to us with information that allows us to improve our website’s user experience on the basis of the above information. Uptrends RUM uses the anonymized IP addresses solely for the purpose of identifying the website visitor’s country of origin.

All data collected in connection with Uptrends RUM are processed on the basis of your consent in compliance with Art. 6(1a) GDPR and Section 25(1) TTDSG (German Telecommunications Telemedia Data Protection Act). Your data are processed for the purpose of analyzing the performance of our websites to improve our website offering.

You can prevent the processing by Uptrends RUM by not consenting to the processing of your data. However, please note that by doing so, you may not be able to use all of the features on this website.

If you do not agree to your data being stored and used, you can withdraw your consent to the processing of your data here. Your opt-out decision will be stored in a cookie. If you delete your cookies in your current browser, this will also delete your opt-out cookie. The next time you visit our site, you will be asked again whether Uptrends RUM may be used for web performance analytics.

For more information on Uptrends RUM and the privacy policy of Uptrends GmbH visit:

https://www.uptrends.com/products/real-user-monitoring

https://www.uptrends.com/privacy-policy

TikTok Pixel

Our website uses the TikTok Pixel to measure conversions. The TikTok Pixel is a TikTok advertiser tool from the two providers

• TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, and
• TikTok Information Technologies UK Limited, WeWork, 125 Kingsway, London, WC2B 6NH, United Kingdom (both are hereinafter jointly referred to as "TikTok").

The TikTok Pixel is a JavaScript code snippet that enables us to understand and track the activities of visitors to our website. The TikTok pixel collects and processes information about visitors to the website or the devices they use (so-called event data).

The event data collected via the TikTok Pixel is used to target our advertisements and to improve ad delivery and personalized advertising. For this purpose, the event data collected on our website by means of the TikTok pixel is transmitted to TikTok.

Some of this event data is information that is stored on the device you are using. In addition, the TikTok Pixel also uses cookies to store information on the device you are using. Such storage of information by the TikTok Pixel or access to information that is already stored on your device only takes place with your consent. The legal basis for the collection and transmission of personal data by the provider to TikTok is therefore Art. 6 (1a) GDPR and § 25 (1) TDDDG. You can revoke your consent at any time. The legality of the data processing operations that have already taken place remains unaffected by the revocation.

This collection and transmission of event data is carried out by the provider and TikTok as joint controllers. There is an agreement with TikTok on processing as joint controllers, in which the distribution of data protection obligations between the provider and TikTok is defined. In this agreement, both parties have agreed, among other things, that the provider is responsible for providing you with all information pursuant to Art. 13, 14 GDPR on the joint processing of personal data and that TikTok is responsible for enabling the rights of data subjects pursuant to Art. 15 to 20 GDPR with regard to the personal data stored by TikTok Ireland after the joint processing.

You can access the agreement concluded between the provider and TikTok at https://ads.tiktok.com/i18n/official/policy/jurisdiction-specific-terms

TikTok is solely responsible for the processing of the transmitted event data following the transmission. For more information on how TikTok processes personal data, including the legal basis on which TikTok relies and how you can exercise your rights against TikTok, please refer to TikTok's data policy at https://www.tiktok.com/legal/page/eea/privacy-policy/en.

In principle, your data will be processed within the EU/EEA. If the data collected by TikTok is also processed in countries outside the European Union or the European Economic Area, it will be processed on the basis of standard contractual clauses.

We operate user profiles on social networks for the purpose of presenting our company and communicating with existing and prospective customers. For more information on the related processing activities, please refer to the notice below.

Data processing for presentation and communication purposes

Social networks help us present our company to persons that own a social network account (hereinafter “users”) and all visitors of our profile without a social network account (hereinafter “guests”). Customers and interested parties can also get in touch with us through our profile. Our profiles and contributions are generally visible to all users and guests (hereinafter collectively referred to as “visitors”). When commenting on our contributions or sending us a message, these data are stored by the social network and can be viewed by us. We can reply to your comments or messages. Your comments and our replies may remain visible for all visitors of the social network in question.

Data processing for statistical and advertising purposes

When viewing our profile, the social network can store and analyze your accessing of the profile page and all other interactions on the social network’s website. This information is provided to the profile owners in statistical form and further processed by the social networks for other purposes, including advertising purposes.

If you have an account on this social network and are signed into your account when visiting our profile, the social network provider can link your interactions with our profile to your account details and process them further. Any data on your interactions with our profile may also be stored and processed for other purposes by the social network, even if you are not signed in or do not have an account with the social network in question. In this case, you can be linked to your account details with the help of cookies, small files stored on your end device, or your IP address.

Your data are generally processed for the purpose of creating a profile of interests for each visitor, and these profiles are used for advertising purposes. When a person visits certain websites, information on this browser activity is analyzed and the provider adds certain interests to the visitor’s profile. The visitor is shown ads based on these identified interests. The provider can show such interest-based ads both on and outside the social network’s websites.

Categories of data subjects

Persons that access our profile on a social network (both users with an account with the social network provider and visitors without account).

Exercising your rights as a data subject

Should you wish to request further information or exercise your rights as a data subject, we would recommend contacting the provider in question directly, as only the provider has full access to the data processed when visiting our profile or interacting with us on the social network. You can find all contact details of the social networks to exercise your rights as a data subject under “Information about the social networks we use.” You can contact us to exercise your rights as a data subject regarding all data processing activities for which the provider of the social network and we are jointly responsible. In such cases, we will forward your inquiry to the social network provided your inquiry relates to data or processing activities carried out by the social network.

For more information on the processing activities of the social networks we use and the available options to object to these processing activities, please refer to the section “Information about the social networks we use.”

Information about Facebook and Instagram

Facebook:

Provider

Meta Platforms Ireland Limited , 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter “Facebook”)

Website

https://en-us.facebook.com/

Form to contact Facebook’s data protection officer

https://www.facebook.com/help/contact/540977946302970

Facebook’s privacy policy

https://en-us.facebook.com/policy.php

Our profile

https://www.facebook.com/wuerth.germany

Instagram:

Provider

Meta Platforms Ireland Limited , 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Website

https://www.instagram.com/

Instagram’s privacy policy

https://help.instagram.com/519522125107875

Our profile

https://www.instagram.com/wuerth_germany/

Categories of processed personal data when visiting our Facebook and Instagram profiles

• Technical information on end user device: operating system, information on browser used, IP address, further information on end-user device, and Internet connection
• Contact details: information on user account where applicable
• Data on interactions Information on profiles visited, links accessed, date and time of the interaction, other interactions of the visitor

For more information on what personal data are processed, please refer to:

https://www.facebook.com/legal/terms/page_controller_addendum

Joint responsibility for the processing of Page Insights data

We have concluded a joint controller agreement with Meta for the processing of data in connection with our Facebook profile (our “page”) for the provision of our profile and the statistical analysis of interactions between visitors and our profile. This agreement sets out the obligations we and Meta have to meet with regard to data processing activities and which party is responsible for individual processing activities.

Joint controller agreement for the processing of personal data for Page Insights between Meta and us as the page admin in accordance with Art. 26 GDPR: https://www.facebook.com/legal/terms/page_controller_addendum

Further information on the processing of Page Insights data:

https://www.facebook.com/legal/terms/information_about_page_insights_data

Purposes and legal basis

• Presentation of our company, legitimate interest (Art. 6(1f) GDPR)

Data processing for this purpose is based on the company’s legitimate interest, including, but not limited to, the company’s interest in upholding its corporate culture and maintaining public relations. These interests are based on the freedom to conduct a business and choose an occupation within the EU.

• Communicating with customers and interested parties, legitimate interest (Art. 6(1f) GDPR).

Data relating to messages or comments on Facebook are processed on the basis of our legitimate interest in providing customers and interested parties with a simple way of communicating with us and improving our customer service. These interests are based on the freedom to conduct a business and choose an occupation within the EU.

• Statistical purposes, legitimate interest (Art. 6(1f) GDPR)

To the extent we act as joint controllers with Meta, the processing of personal data for statistical purposes for Page Insights is based on our legitimate interest in improving our customer service. This interest is based on the freedom to conduct a business and choose an occupation within the EU.

Meta remains a separate and independent data controller for any other processing activities or processing for statistical or advertising purposes performed by Meta, and such processing may be performed on a different legal basis. For more information, please refer to the section “Meta’s data policy.”

Processor(s) of Meta

The use of Facebook may result in the transmission of personal data to Meta Platforms Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. Platforms Ireland Limited uses standard contractual clauses, as approved by the European Commission, for the transmission of personal data to Meta Platforms Inc. based in the United States. A copy of these standard contractual clauses used can be requested here: https://www.facebook.com/help/566994660333381?ref=dp

Opt-out options

Should you wish to object to the processing of your data by Meta, please click on the following link to opt out of the different processing activities:

https://www.facebook.com/help/contact/367438723733209?no_redirect

You can change your advertising settings on your Facebook account yourself—for example, to deactivate interest-based advertising—by clicking on the following link:

https://www.facebook.com/settings?tab=ads

If you do not own a Facebook account, you can deactivate web-based online advertising for all participating websites by clicking on the following link:

http://www.youronlinechoices.com/uk/your-ad-choices/

Right to lodge a complaint

You have the right to lodge a complaint with the competent supervisory authority. To find out which supervisory authority you should contact, please refer to the section “Right to lodge a complaint with the competent supervisory authority” in this privacy statement. Complaints regarding the processing of personal data in connection with our Facebook profile can also be addressed to the Irish Data Protection Commission. You can find the contact details of the Irish Data Protection Commission at:

https://www.dataprotection.ie/en/contact/how-contact-us#

Information about the other social networks we use:

Xing:

Provider: XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany

Website: https://www.xing.com/

Privacy policy: https://privacy.xing.com/en/your-privacy

Our profile: https://www.xing.com/pages/wuerth-germany

LinkedIn:

Provider: LinkedIn Ireland Unlimited Company, Attn: Legal Dept. (Privacy Policy and User Agreement), Wilton Plaza, Wilton Place, Dublin 2, Ireland

Website: https://www.linkedin.com/

Privacy policy: https://linkedin.com/legal/privacy-policy?

Our profile: https://www.linkedin.com/company/wuerth-germany

TikTok:

Provider: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland

Website: https://www.tiktok.com/

Privacy policy: https://www.tiktok.com/legal/privacy-policy/en

Our profile: https://www.tiktok.com/@wuerth_germany

Data processing for newsletter registrations

Should you wish to receive the newsletter offered on our website, we need an email address from you along with information allowing us to verify that you are the owner of the indicated email address and that you agree to receiving our newsletter. Any additional data are collected on a voluntary basis only.

The data entered in the newsletter registration form will be processed exclusively on the basis of your consent (Art. 6(1a) GDPR). You can withdraw your consent to the processing of your data for the distribution of our newsletters at any time, for example, by clicking on the “unsubscribe” link in the newsletter. Your withdrawal of consent does not affect the lawfulness of processing based on your consent before its withdrawal.

Newsletter distribution through Inxmail

Adolf Würth GmbH & Co. KG uses the newsletter distribution service Inxmail. This service is provided by Inxmail GmbH, Wentzingerstr. 17, 79106 Freiburg, Germany.

Inxmail is a newsletter distribution service for the organization and analysis of newsletter marketing. The data processed for the purpose of subscribing to our newsletter will be stored on Inxmail's servers in Germany.

Data analytics through Inxmail

To analyze the success of our newsletter marketing, all emails sent out with Inxmail utilize web beacons or “tracking pixels,” which track recipients’ interactions with the newsletter. Pixels track whether an email newsletter has been opened, which links recipients clicked on, and at what time a newsletter was read.

Inxmail processes the following data for its newsletter analytics:

• Master data (e.g., name, address)
• Contact details (e.g., email address, phone number)
• Meta and communications data (e.g., device information, IP address)
• Usage data (e.g., interests, access times)

You can withdraw your consent to these newsletter analytics separately. If you do not want Inxmail to analyze your data, you have to deactivate analytics for the newsletter in question. We provide an unsubscribe link in every newsletter we send out.

Legal basis

These data are processed on the basis of your consent (Art. 6(1a) GDPR and Section 25(1) TTDSG (German Telecommunications Telemedia Data Protection Act)). You can withdraw your consent at any time. Your withdrawal of consent does not affect the lawfulness of processing based on your consent before its withdrawal.

Retention periods

The data provided when registering for the newsletter will be used to distribute the newsletter until such time as you cancel your subscription, when said data will be deleted. This does not apply to data we store for other purposes (e.g., email addresses needed for online shop registration).

Conclusion of a data processing agreement

We have concluded a data processing agreement with Inxmail in accordance with Art. 28(3) GDPR to ensure that Inxmail protects the personal data of our customers and does not disclose any personal data to third parties.

Sending out product review emails

Adolf Würth GmbH & Co. KG uses Bazaarvoice to send out product review emails and process product reviews. This service is provided by Bazaarvoice Inc, 10901 Stonelake Blvd, Austin, TX 78759, USA.

We use Bazaarvoice to send you product review emails asking you to submit product reviews on products you have purchased. Your personal data will be passed on to Bazaarvoice for this purpose. Bazaarvoice will use your data solely to personalize and distribute these review emails. Your data are not stored permanently nor disclosed to third parties by Bazaarvoice.

More information on Bazaarvoice’s privacy policy can be found at https://www.bazaarvoice.com/legal/privacy-policy/. Bazaarvoice processes some of your personal data in the United States. Bazaavoice has concluded standard contractual clauses, as published by the European Commission, with us for the transmission of personal data to the United States.

Legal basis

Your personal data are processed on the basis of your consent in accordance with Art. 6(1a) GDPR. You can withdraw your consent at any time if you no longer wish to submit product reviews. We provide an unsubscribe link in every product review email.

Retention periods

We will store the data you have entered for the purpose of submitting a product review until you withdraw your consent to receiving our product review emails or request the erasure of the data, in which case your data will be deleted from Bazaarvoice’s servers. Bazaarvoice uses this data solely for sending out product review emails and processing product reviews.

Conclusion of a data processing agreement

We have concluded a data processing agreement with Bazaarvoice in accordance with Art. 28(3) GDPR to ensure that Bazaarvoice protects the personal data of our customers and does not disclose any personal data to third parties. The disclosure of your data to other companies for advertising purposes is expressly excluded.

Shopping cart reminders

Data processing for shopping cart reminders

When you add products to your shopping cart in our online shop, we offer you the option of receiving shopping cart reminders.

The data for the shopping cart reminders are processed on the basis of your consent (Art. 6(1a) GDPR and Section 25(1) TTDSG (German Telecommunications Telemedia Data Protection Act)). You can withdraw your consent to the processing of your data for the shopping cart reminders at any time, for example, by using the “unsubscribe” link in the email. Your withdrawal of consent does not affect the lawfulness of processing based on your consent before its withdrawal.

Shopping cart reminders emailed by Inxmail

Adolf Würth GmbH & Co. KG uses the Inxmail service for sending shopping cart reminders by email. This service is provided by Inxmail GmbH, Wentzingerstr. 17, 79106 Freiburg, Germany.

Inxmail is a newsletter distribution service for the organization and analysis of newsletter marketing. The data processed for the purpose of subscribing to our newsletter will be stored on Inxmail's servers in Germany.

Data analytics through Inxmail

To analyze the success of our shopping cart reminders, all emails sent out by Inxmail utilize web beacons or “tracking pixels,” which track recipients’ interactions with the email. Pixels track whether a shopping cart reminder has been opened, which links recipients clicked on, and at what time the email was read.

Inxmail processes the following data for its newsletter analytics:

• Master data (e.g., name, address)
• Contact details (e.g., email address, phone number)
• Meta and communications data (e.g., device information, IP address)
• Usage data (e.g., interests, access times)

You can withdraw your consent to these newsletter analytics separately. If you do not want Inxmail to analyze your data, you have to deactivate analytics for the newsletter in question. We provide an unsubscribe link in every shopping cart reminder we send out.

Legal basis

These data are processed on the basis of your consent (Art. 6(1a) GDPR and Section 25(1) TTDSG (German Telecommunications Telemedia Data Protection Act)). You can withdraw your consent at any time. Your withdrawal of consent does not affect the lawfulness of processing based on your consent before its withdrawal.

Retention periods

The data processed for the purpose of sending you shopping cart reminders will be saved until such time as you opt out of receiving shopping cart reminders, when said data will be deleted. This does not apply to data we store for other purposes (e.g., email addresses needed for online shop registration).

Conclusion of a data processing agreement

We have concluded a data processing agreement with Inxmail in accordance with Art. 28(3) GDPR to ensure that Inxmail protects the personal data of our customers and does not disclose any personal data to third parties.

Transactional emails

Adolf Würth GmbH & Co. KG uses Inxmail to send out transactional emails relating to your orders. Transactional emails are a type of email sent out automatically in response to specific business transactions such as order confirmations or delivery notifications.

This service is provided by Inxmail GmbH, Wentzingerstr. 17, 79106 Freiburg, Germany.

Inxmail processes the following data for its transactional email service:

• Technical information on end user device of recipient: operating system, information on browser used, IP address of the recipient, further information on end-user device and internet connection
• Contact details of recipient: email address, name where applicable
• User interaction data: information on which newsletters have been opened, which links have been clicked, dates and times of interactions

Legal basis

The data needed for the distribution of transactional emails relating to your orders are processed for the performance of a contract.

Data processing for the purpose of documenting our compliance with information requirements is based on Art. 6(1f) GDPR (processing for the purpose of the legitimate interests pursued by the data controller).

Retention periods

All data provided by you for the purpose of receiving transactional emails are deleted from our servers and those of Inxmail by regular deletion routines after an email has been sent out.

All data stored by us for the purpose of documenting our compliance with information requirements are deleted from our servers and those of Inxmail by regular deletion routines six months after an email has been sent out.

Automated internal forwarding of emails

When contacting our service team by email, the contact details provided by the customer via email may be used to process the inquiry in question and for other digital transactions for the purpose of automatically forwarding the inquiry to the responsible internal department where possible. Emails are forwarded automatically to ensure the proper handling of such business transactions and guarantee the fast processing of customer inquiries. The contact details provided are transferred to and stored in our customer database.

Legal basis

The data you provided in this context are processed on the basis of our legitimate interest in accelerating and optimizing our processes for our customers (Art. 6(1f) GDPR).

Retention periods

The personal data processed for this purpose will be retained for the duration of your business relationship with us or until you request the deletion of your data, subject to the applicable statutory retention periods.

Web push notifications

We use the services of CleverPush GmbH, Heidenkampsweg 100, 20097 Hamburg, Germany, to provide web push notifications. This service allows us to send notifications directly to your browser to inform you about updates, news and other relevant content. When you sign up for our web push notifications, CleverPush GmbH collects certain data, including your IP address, browser type and operating system. This data is used solely for the purpose of delivering notifications and improving the service.

Categories of processed data

Web-Push:

• IP address
• Push token with public key and private key
• Date of registration
• Browser version
• Type and version of the operating system

Purposes of data processing

Your data is processed for the following purposes:

• Delivery of web push notifications
• Improvement and optimization of the notification service
• Analyzing the use of the service to improve the user experience

Legal basis for data processing

The legal basis for the processing of your data in connection with the push notifications is your consent pursuant to Art. 6 (1 a) GDPR. By registering for our web push notifications, you give your express consent to the processing of your data.

Revocation of consent

You can revoke your consent at any time with effect for the future by unsubscribing from the notifications. The legality of the data processing operations that have already taken place remains unaffected by the revocation. The data you have stored with us for the purpose of receiving the mailing will be stored by us until you unsubscribe from the mailing and will be deleted from both our servers and the CleverPush servers after you unsubscribe from the mailing. A detailed explanation of the unsubscription process can be found at the following link: https://cleverpush.com/de/faq/

Storage duration

Your data will be stored for as long as you are registered to receive web push notifications. After unsubscribing, your data will be deleted immediately, unless statutory retention obligations prevent this.

Order processing

We have concluded an order processing contract with CleverPush GmbH.

Further information on data processing by CleverPush can be found at: https://cleverpush.com/de/privacy/

Würth videos

We provide various videos on different topics on our website.

We use the service provider TwentyThree ApS, Sortedam Dossering 7E, 2200 Copenhagen N, Denmark. The use of TwentyThree as a service provider may result in the transmission of personal data to TwentyThree ApS servers in the EU.

Purpose of data processing

Depending on the user preferences you opted for when visiting our website, various data may be transmitted to us when you play the videos. This includes information on how the videos are used (date, time and frequency of playback, geolocation). This is done for the purposes of performance optimization and load balancing.

In addition, we may store your data as a user profile and use it for the purposes of advertising, market research and/or website optimization. You can prevent this storage of your data by adjusting your user preferences accordingly. The information about the content of the videos can also be used by us, for example, to provide you with suitable product suggestions if you have given us your consent to this in advance.

Legal basis of data processing

For the sole playback of the videos, data is processed by Adolf Würth GmbH & Co. KG on the legal basis of the legitimate interest of Adolf Würth GmbH & Co. KG in an appealing design of the website presence and the provision of adequate information on the services and products offered in compliance with Art. 6 (1f) GDPR in conjunction with Section 25 (2) TDDDG (German Telecommunications Telemedia Data Protection Act).

For the additional purposes described above, data is processed on the legal basis of your consent in compliance with Art. 6 (1a) GDPR and Section 25 (1) TDDDG (German Telecommunications Telemedia Data Protection Act). You can withdraw your consent at any time. Your withdrawal of consent does not affect the lawfulness of processing data based on your consent before its withdrawal.

Conclusion of a data processing agreement

We have concluded a data processing agreement with TwentyThree in accordance with Art. 28 (3) GDPR to ensure that TwentyThree ApS protects the personal data of our customers and does not disclose any personal data to third parties.

Retention periods

The data processed in connection with the purposes described above is stored as long as required for the specific purpose or until you withdraw your consent.

For more information on TwentyThree and its privacy policy, please visit: https://www.twentythree.com/policies

YouTube

We have embedded YouTube videos in our online services, which are stored on www.youtube.com and can be played directly from our website. These features are provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. The use of YouTube may result in the transmission of personal data to the servers of Google LLC in the United States. Google LLC has concluded standard contractual clauses, as approved by the European Commission, with us for the transmission of personal data to Google LLC based in the United States.

The YouTube videos on our website are all embedded in “privacy-enhanced mode,” which means no user data about you are sent to YouTube as long as you do not interact with these videos. No data are transferred until you play a video. We have no influence over this data transfer. Before any data are transmitted, you will be notified again that your data will be transferred to YouTube when you play a video. Your data will be transferred to YouTube regardless of whether you are signed into a YouTube user account or not. If you are signed into your Google account, your data will be linked directly to your account.

If you do not wish to be linked to your YouTube profile, you have to log out of your Google account before playing a video. YouTube stores your data as a user profile and uses that information for the purposes of advertising, market research, and/or designing its website to meet users’ needs. You have the right to object to the creation of these user profiles; to do so, please send your request to YouTube.

Furthermore, we offer you the option of contacting us using the comment or chat function. In order to use this function, you have to be logged into your Google account. If you comment on our posts or send us a message via chat, this information will be saved by YouTube and is visible to anyone who opens the video.

Data are processed by Adolf Würth GmbH & Co. KG on the basis of your consent in accordance with Art. 6(1a) GDPR and Section 25(1) TTDSG (German Telecommunications Telemedia Data Protection Act). You can withdraw your consent at any time. Your withdrawal of consent does not affect the lawfulness of processing based on your consent before its withdrawal.

For more information on YouTube and Google’s privacy policy, please visit:

https://www.google.com/intl/en/policies/privacy/ (Google privacy policy)

https://policies.google.com/terms?hl=en#toc-software (Google terms of services)

https://www.youtube.com/static?gl=GB&template=terms&hl=en (YouTube Terms of Service)

Google Maps

We use services of Google Maps on this website to display interactive maps directly on the website, allowing you to use convenient features of the map function. These features are provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. The use of Google Maps may result in the transmission of personal data to the servers of Google LLC in the United States. Google LLC has concluded standard contractual clauses, as approved by the European Commission, with us for the transmission of personal data to Google LLC based in the United States.

When you visit this website, Google receives information that you have accessed this subpage of our website. Your data will be transferred to Google regardless of whether you are signed into a Google user account or not. If you are signed into your Google account, your data will be linked directly to your account. If you do not wish to be linked to your Google profile, you have to log out of your Google account before viewing a map. Google stores your data as a user profile and uses that information for the purposes of advertising, market research, and/or designing its website to meet users’ needs. This type of analysis is carried out (even for users who are not logged in) in order to provide appropriate advertising in particular and in order to inform other users in the same social network of your activities on our website. You have the right to object to the creation of these user profiles; to do so, please send your request to Google.

Data are processed by Adolf Würth GmbH & Co. KG on the basis of your consent in accordance with Art. 6(1a) GDPR and Section 25(1) TTDSG (German Telecommunications Telemedia Data Protection Act). You can withdraw your consent at any time. Your withdrawal of consent does not affect the lawfulness of processing based on your consent before its withdrawal.

For more information on Google Maps and Google’s privacy policy, please visit:

https://www.google.com/intl/en/policies/privacy/ (Google privacy policy)

https://policies.google.com/terms?hl=en#toc-software (Google terms of service)

Friendly Captcha

We use Friendly Captcha (hereinafter “Friendly Captcha”) on our website. This service is provided by Friendly Captcha GmbH, Am Anger 3-5, 82237 Wörthsee, Germany.

Friendly Captcha is used to check whether the data entered on this website (e.g., in a contact form) have been entered by a human or by an automated program. To do this, Friendly Captcha analyzes the behavior of the website visitor based on various characteristics. Friendly Captcha uses various information for the analysis (e.g., anonymized IP address, referrer, visit time, etc.). For further information, please refer to: https://friendlycaptcha.com/en/legal/privacy-end-users/.

The data are saved and analyzed by virtue of Art. 6(1f) GDPR. The website operator has a legitimate interest in protecting its site from abusive automated crawling and spam.

Conclusion of a data processing agreement

We have concluded a data processing agreement with Friendly Captcha GmbH in accordance with Art. 28(3) GDPR to ensure that Friendly Captcha GmbH protects the personal data of our customers and does not disclose any personal data to third parties.

Use of Google Tag Manager

We use Google Tag Manager. This service is used to manage website tags via a web interface. Google Tag Manager is used solely to create these tags. No cookies are set and no personal data are collected. Google Tag Manager triggers other tags that may collect data. Google Tag Manager does not access this data.

More information about the Google Tag Manager can be found under the following link: https://www.google.com/analytics/terms/tag-manager/

Social share buttons

Our website uses social share buttons of the social networks Facebook, Pinterest, and Twitter. In order to protect your data when you visit our website, these buttons are embedded into our website with a Shariff solution. This type of integration ensures that no connection is established with Facebook, Pinterest, and Twitter ("social networks") servers when you access one of our websites that contains such buttons. Only by actively clicking on one of these buttons, and thereby consenting to the transmission of your data, will your browser establish a direct connection to the servers of the social network. When clicking on a social share button, the social network will only be notified that your browser has accessed a particular page of our website, even if you have no user profile with the social network in question or are currently not signed into your account. Your browser sends this information (including your IP address) directly to the server of the social network where it is stored, without us being able to control this transmission of data. If you are logged into your account with the social network, the social network can link your visit to our website directly to your profile. If you interact with a social network, for example, by clicking on the "Like" or the "Twitter" button, this information is also transmitted directly to a server of the respective social network. This information is published by the social network in question and subject to further processing by the social network.

Please refer to the social network's privacy policy for more information on how and why data are collected, processed, and used further by the social network and on the rights and options you have to protect your privacy:

Facebook's privacy policy: http://www.facebook.com/policy.php

Twitter’s privacy policy: https://twitter.com/privacy

Pinterest’s privacy policy: https://policy.pinterest.com/en/privacy-policy

If you do not want the social network to link the data collected through our website directly to your profile on its service, you need to log out of the social network service before clicking on a social share button.

Facebook is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Twitter is operated by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA.

Pinterest is operated by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA.

Bazaarvoice

This website uses Bazaarvoice to display product reviews in the shop and to determine how many visitors see these reviews. This service is provided by Bazaarvoice Inc, 10901 Stonelake Blvd, Austin, TX 78759, USA.

More information on Bazaarvoice’s privacy policy can be found at https://www.bazaarvoice.com/legal/privacy-policy/. Bazaarvoice processes some of your personal data in the United States. Bazaavoice has concluded standard contractual clauses, as published by the European Commission, with us for the transmission of personal data to the United States.

Legal basis

Your personal data are processed on the basis of your consent in accordance with Art. 6(1a) GDPR and Section 25(1) TTDSG (German Telecommunications Telemedia Data Protection Act). You can withdraw your consent at any time by adjusting your cookie settings for this website. You can control the storage of cookies by changing the cookie settings in your web browser (e.g., by changing the "Do Not Track" settings of your browser or using a browser add-on).

Retention periods

The data processed in connection with Bazaarvoice are stored as long as required for the specific purpose or until to you withdraw your consent.

Conclusion of a data processing agreement

We have concluded a data processing agreement with Bazaarvoice in accordance with Art. 28(3) GDPR to ensure that Bazaarvoice protects the personal data of our customers and does not disclose any personal data to third parties. The disclosure of your data to other companies for advertising purposes is expressly excluded.

Matelso

Adolf Würth GmbH & Co. KG uses a call tracking service provided by Matelso GmbH, Heilbronner Straße 150, 70191 Stuttgart, Germany. When calling one of the telephone numbers provided to Würth by Matelso, the service tracks the caller’s telephone number (the last three digits are hidden)—unless the caller ID is restricted—as well as the number dialed, the date, the time, and the duration of the call. We forward this information to Google Analytics and Würth web analytics. If you consent to the use of Würth web analytics and have registered in the online shop, this information can then be associated with your profile. We use the data collected to further analyze caller behavior on the website.

Information about how Google Analytics and Würth web analytics process your data con be found in this privacy statement.

Legal basis

Your data are processed on the basis of your consent in accordance with Art. 6(1a) GDPR. You can prevent the use of Matelso using the cookie settings on this website. However, please note that by doing so, you may not be able to use all of the features on this website.

Retention periods

The data collected in connection with Matelso are stored anonymously for an indefinite period of time. The data forwarded to Würth web analytics and Google Analytics are stored according to the specified retention periods. This information can also be found in our privacy statement.

Conclusion of a data processing agreement

We have concluded a data processing agreement with Matelso in accordance with Art. 28(3) GDPR to ensure that Matelso protects the personal data of our customers and does not disclose any personal data to third parties. The disclosure of your data to other companies for advertising purposes is expressly excluded.

For more information on how Matelso processes your data, please visit: https://matelso.com/en/privacy-statement.

Userlane

Our website uses Userlane to provide you with instructions and support for our platform. Userlane enables us to describe the features and services to you virtually while using the platform. This service is provided by Userlane GmbH, Georgenstr. 39, 80779 Munich, Germany.

By logging in as a customer, we store cookies to analyze the use of Userlane services. This information is transmitted to and stored on a Userlane server on our behalf. The IP address transmitted by the browser is not linked to any other data provided by Userlane.

Legal basis

The use of Userlane in our web application is based on your consent in accordance with Art. 6(1a) GDPR and Section 25(1) TTDSG (German Telecommunications Telemedia Data Protection Act). You can withdraw your consent at any time by adjusting your cookie settings for this website. You can prevent cookies from being saved by changing the cookie settings in your web browser (e.g., by changing the "Do Not Track" settings of your browser or using a browser add-on). For more information on data protection at Userlane, please visit: https://www.userlane.com/privacy.

Retention periods

The data processed in connection with Userlane are stored as long as required for the specific purpose or until to you withdraw your consent.

PayPal

Our website accepts payments through PayPal. This payment service is provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”).

When you select payment through PayPal, the payment details you provide will be transmitted to PayPal. Further information on how PayPal handles personal data can be found in the privacy statement at: https://www.paypal.com/us/legalhub/privacy-full

Legal basis

Your data are transmitted to PayPal for the performance of a contract.

Credit card

Our website accepts payments by credit card through our payment service provider Stripe Payments Europe Limited (SPEL), 1 Grand Canal Street Lower, Dublin - Irland (hereinafter "Stripe").

When you select payment by credit card, all personal and payment-related data required to complete the transaction are transmitted directly to your bank or credit card company and Ingenico. Your credit card details are collected, stored, and encrypted only by Ingenico. Further information on how Ingenico handles personal data can be found in the privacy notice at: https://stripe.com/de/privacy.

Legal basis

Your data are transmitted to Stripe for the performance of a contract.

Processing customer data

Adolf Würth GmbH & Co. KG offers you the option of registering as a customer without access to the online shop. For this purpose, we collect, process, and use personal data for the performance of a contract.

Categories of data

We need the following data to register you as one of our customers:

• Name of the company and legal structure (e.g., GmbH, limited liability company)
• Head office (street address / post code / town)
• Name and first name of contact
• Phone
• Name and first name of managing director/owner of the business

You can provide the following data voluntarily:

• Email address (please note that the email address is mandatory for online shop access).
• Telefax
• If applicable, alternative invoice address
• Mobile phone
• Date of birth of the managing director/owner of the business

Retention periods

We will store all data entered for the duration of our business relationship. Your data are deleted upon termination of the business relationship, subject to the applicable statutory retention periods.

Microsoft 365

Adolf Würth GmbH & Co. KG uses the productivity, collaboration, and exchange platform Microsoft 365. This service is offered by Microsoft Corporation, One Microsoft Way Redmond, WA 98052-6399, USA (hereinafter “Microsoft”).

Microsoft 365 is a service that connects different platforms for online meetings, as a phone solution, for surveys, to share and edit documents, and for email communication, among other things, and that makes it possible to share information easily between platforms.

Legal basis

Personal data are processed with Microsoft 365 for contractual purposes (for the performance of a contract or for the preparatory steps to enter into a contract) or, if personal data are processed within the framework of an employment relationship or recruitment process, on the legal basis set out in Art. 6(1b) in conjunction with Art. 88 GDPR, Section 26 of the German Federal Data Protection Act (BDSG). Furthermore, we process personal data on the basis of our legitimate interests (Art. 6(1f) GDPR). Our legitimate interest for processing your data is based on ensuring effective and efficient communication and collaboration between our employees, applicants, interested parties, customers, suppliers, service providers, and other business and communication partners. These interests are based on the freedom to conduct a business and choose an occupation within the EU.

Categories of processed personal data

The following categories of personal data are processed for the purpose of using Microsoft 365:

• Communication data (company, name, phone, email (if personal), address)
• Contract master data (contract relationship, product and/or contract interest)
• Log files, log data
• Meta data (e.g., IP address, duration of participation in a meeting, etc.)
• Content data (documents, photos, videos, audio, document-specific)

Retention periods

The data processed in connection with the use of Microsoft 365 are stored for as long as required for the specified purposes.

Conclusion of a data processing agreement

A data processing agreement was concluded with Microsoft. The latest version can be found under the following link:

https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA?lang=14

Cross-border pick-ups

As a registered customer, we also offer you the option of purchasing items from other Würth Group companies in the EU with your Adolf Würth GmbH & Co. KG account. For this purpose, we provide the respective Würth Group company with personal data for the performance of a contract.

Categories of data

Adolf Würth GmbH & Co. KG provides the following data to the respective Würth Group company abroad, which in turn processes the data:

• Name of the company and legal structure (e.g., GmbH, limited liability company)
• Head office (street address / post code / town)
• Name and first name of contact
• Phone
• Name and first name of managing director/owner of the business

You can provide the following data voluntarily:

• Email address
• Telefax
• If applicable, alternative invoice address
• Mobile phone
• Date of birth of the managing director/owner of the business

Retention periods

We will store all data entered for the duration of our business relationship. For that period, these data will also be available to the other Würth Group companies in the EU. Your data are deleted upon termination of the business relationship, subject to the applicable statutory retention periods.

Google Pay

In our pick-up shops, we also offer the option of paying with Google Pay. This payment service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”). The payment is processed via the “Google Pay” function on your end device, which charges the payment to one of the cards saved in Google Pay. Google Pay uses security features, which are integrated into the hardware and software of your device, in order to secure your transactions.

In order to approve your payment, you are required to enter a predefined code or verify it by means of the biometric features on your device. In order to process the payment, the information you provide as part of your order is forwarded to Google in encrypted form, along with the information about your order.

After the payment has been made, Google sends your device account number and a transaction-specific, dynamic security code to the end device in our shop used for the payment in order to confirm that the payment was successful.

For further information on how Google processes your personal data in connection with Google Pay, please refer to the privacy notice at: https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=en

Legal basis

Your data are transmitted to Google for the performance of a contract.

Apple Pay

In our pick-up shops, we also offer the option of paying with Apple Pay. This payment service is provided by Apple Distribution International Limited, Hollyhill Industrial Estate, Hollyhill, Cork, Ireland (hereinafter “Apple Distribution International”). The payment is processed via the “Apple Pay” function on your end device, which charges the payment to one of the cards saved in Apple Pay. Apple Pay uses security features, which are integrated into the hardware and software of your device, in order to secure your transactions.

In order to approve your payment, you are required to enter a predefined code or verify it using the “Face ID” or “Touch ID” feature on your end device. In order to process the payment, the information you provide as part of your order is forwarded to Apple in encrypted form, along with the information about your order.

After the payment has been made, Apple sends your device account number and a transaction-specific, dynamic security code to the end device in our shop used for the payment in order to confirm that the payment was successful.

For further information on how Apple Distribution International processes your personal data in connection with Apple Pay, please refer to the privacy notice at: https://support.apple.com/en-euro/HT203027.

Legal basis

Your data are transmitted to Apple Distribution International for the performance of a contract.

Credit ratings

We perform a credit check prior to concluding a contract if we are expected to render services before being paid. The reason for this is to protect ourselves against non-payment. In order to check your creditworthiness, we request information from credit bureaus (EOS KSI Inkasso Deutschland GmbH, Gottlieb-Daimler-Ring 7-9, 74906 Bad Rappenau, Verband der Vereine Creditreform e.V., Hellersbergstraße 12, 41460 Neuss, CRIF Bürgel GmbH, Radlkoferstraße 2, 81373 Munich). For this purpose, we send the respective agency your name, address, and birth date. If we receive information from credit bureaus or collection agencies, we also use the credit index as an additional measure. This allows us to calculate the probability that a customer will fulfill their payment obligations in compliance with their contract. The scoring is based on a mathematically and statistically recognized and proven method.

Legal basis

Your data are processed on the legal basis set out in Art. 6(1f) GDPR. Our legitimate interest is based on evaluating your creditworthiness and reducing the risk of non-payment.

Retention periods

We will store all data entered for the duration of our business relationship. Your data are deleted upon termination of the business relationship, subject to the applicable statutory retention periods.

For further information on the indicated credit bureaus and their privacy policies, please see:

EOS KSI Inkasso Deutschland GmbH:

https://www.eos-direct.de/datenschutz/

Verband der Vereine Creditreform e.V.:

https://www.creditreform.de/datenschutz

CRIF Bürgel GmbH:

https://www.crif.de/en/privacy

Sharing payment history

In order to check your credit worthiness and improve the quality of the information in your credit report, we share the personal data collected as part of our contractual relationship, as well as information regarding the failure to adhere to the terms of contract or fraudulent behavior, with various credit bureaus (Verband der Vereine Creditreform e.V., Hellersbergstraße 12, 41460 Neuss, CRIF Bürgel GmbH, Radlkoferstraße 2, 81373 Munich).

Categories of processed data

In connection with sharing payment history, we store or transfer the following personal data: Address data, request for default summons or proceedings against the purchaser for undisputed claim (with date of appeal to court), insolvency application (with date of application), decisions of insolvency tribunal (with date), any prior foreclosures or seizures (date of each claim, type of action), arrest warrant issued as part of foreclosure or seizure (with date), appointment of a deadline to submit an affidavit or any previously submitted affidavit (with date), number of days by which the agreed terms of payment have been violated, arrest warrant issued due to offenses related to property law.

Legal basis

Your data are processed on the legal basis set out in Art. 6(1f) GDPR. Our legitimate interest, as well as the legitimate interests of other business partners and the general public, is based on evaluating your creditworthiness and reducing the risk of non-payment. The credit bureaus store this information and share it with their business partners only after having substantiated their legitimate interest beforehand.

For further information on the indicated credit bureaus and their privacy policies, please see:

EOS KSI Inkasso Deutschland GmbH:

https://www.eos-direct.de/datenschutz/

Verband der Vereine Creditreform e.V.:

https://www.creditreform.de/datenschutz

CRIF Bürgel GmbH:

https://www.crif.de/en/privacy

Target customer form

Together with our sales personnel, we offer interested customers the option of registering with other companies, especially companies of the Würth Group. For this purpose, we share the information required to contact the customer with the desired company.

Categories of data

The following categories of personal data are processed when sharing the target customer form:

• Customer number
• Company
• Street name
• Street number
• Post code
• City
• Contact
• Position:
• Phone
• Email

Legal basis

Your personal data are processed for the performance of a contract.

Retention periods

We will store all data entered for the duration of our business relationship. Your data are deleted upon termination of the business relationship, subject to the applicable statutory retention periods. The retention period of the receiving companies depends on their privacy policies.

Video surveillance at Würth shops

Adolf Würth GmbH & Co. KG monitors its pick-up shops using video surveillance to protect its property rights, to assert claims, and to prosecute criminal offenses.

Categories of data

Video recordings

Legal basis for processing

The legitimate interest of the data controller is based on Art. 6(1f) GDPR

Legitimate interests that are pursued:

Protection of property

Retention periods or criteria for defining the duration:

General retention period: 72 hours

In the event the recorded data are used to assert claims in connection with the infringement of the property rights of the data controller (e.g., theft), the retention period is based on the period of time for which the data are required to assert such claims.

Recipients or categories of data recipients (provided personal data are transferred):

Lawyers, law enforcement agencies

No personal data are transferred to countries outside of the EU or to any international organizations.

Repair of IoT-ready products

Adolf Würth GmbH & Co. KG offers the possibility to repair defective IoT-compatible devices. For this purpose, it is necessary for the stored data to be read out from the devices before the repair. This data is backed up by Adolf Würth GmbH & Co. KG and reimported into the device after repair.

Legal basis

This data is processed on the basis of Art. 6 (1f) GDPR. This allows processing that is necessary to protect our legitimate interests. Our legitimate interest is to offer our customers the best possible service by restoring the functionality of our products as they were before the repair.

Categories of data

Backup may include the following data:

• Serial number + material number (internal manufacturer code)
• UUID (unique device ID)
• Date reference

Retention periods

The backed up data is deleted 24 hours after recovery or, if repair is not possible, at the latest after 120 days.

The privacy statement of Adolf Würth GmbH & Co. KG does not apply to applications, products, services, websites, or social media functions of third-party providers that can be reached through links we offer for information purposes. When using these links, you leave the website of Adolf Würth GmbH & Co. KG, resulting in the possibility that information about you may be collected or passed on by third parties. Adolf Würth GmbH & Co. KG has no influence whatsoever over the websites of third parties and makes no recommendations or warranties regarding these websites or their data protection practices. We therefore encourage you to read and review the privacy policies of any websites with which you interact very closely before allowing them to collect, process, and use your personal data.

We kindly ask you to read the contents of our data privacy policy regularly. We update our privacy policy as required by any changes to how we process personal data. Please note that any addresses and contact information of companies and organizations indicated in this privacy policy may change over time. Please verify the information before making contact.