Privacy Policy

Data Controller

The entity responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is:

WINI Büromöbel Georg Schmidt GmbH & Co. KG
Managing Directors: Carolina Schmidt-Karsch, Jan Hendrik Karsch, Jörg Pannekoike, Dirk Hölscher
Auhagenstraße 79
31863 Coppenbrügge, Marienau,
Germany
Phone: +49 5156 979-0
Email: info@wini.de

Data Protection Officer

You can contact our Data Protection Officer at:

SaphirIT GmbH
Attorney Frank W. Stroot, Data Protection Officer (TÜV), Data Protection Auditor (TÜV)
Sutthauser Straße 285
49080 Osnabrück
Germany
Phone: +49 541 60079296
Email: datenschutz@saphirit.de

Hosting and Server Log Files

Our website’s servers are operated by the provider kyberio GmbH in Germany. We have entered into a data processing agreement with the provider in accordance with Art. 28 GDPR. The legal basis for the use of external hosting is the fulfillment of a contract with our potential and existing customers pursuant to Art. 6(1)(b) GDPR, as well as our legitimate interest in the secure and high-performance provision of our website pursuant to Art. 6(1)(f) GDPR. Every time our website is accessed, our system’s web server collects information about the device used. We collect the following data:

• Information about the browser type

• Operating system of the user’s device

• Date and time of access

• The previous website from which the user accessed our website (referrer)

We collect IP addresses only in anonymized form; therefore, we do not store any personal data within the meaning of the GDPR in our log files.

Contact

You have the option to contact us via email, phone, contact form, or letter; this may involve the processing of personal data. We process your data to handle and process your inquiry. We will not disclose your data to third parties without your consent. The legal basis for processing is our legitimate interest in effectively handling your inquiry pursuant to Art. 6(1)(f) GDPR. When you contact us via email, we store your email address as well as the information contained in the email. If you use the contact form, your IP address is recorded in pseudonymized form in addition to the information provided in the contact form. If you contact us by mail, your return address and the contents of the letter will be stored. When you contact us by phone, we collect personal data depending on the specific case. We store your data until you request its deletion or the purpose of processing (handling your inquiry) has been fulfilled.

Social Media Profiles

We maintain online profiles on the following social networks (hereinafter “Social Media”) to communicate with customers, prospective customers, and the public and to draw attention to our services:

• Instagram (Meta Platforms, Inc.)

• Facebook (Meta Platforms, Inc.)

• X (formerly Twitter; X Corp.)

• LinkedIn (LinkedIn Ireland Unlimited Company)

• Xing (New Work SE)

For information on the scope and purpose of data processing, please refer to the respective privacy policies of the networks:

• Instagram: (https://privacycenter.instagram.com/policy)

• Facebook: (https://www.facebook.com/privacy/policy/?entry_point=facebook_page_footer)

• X (Twitter): (https://x.com/de/privacy)

• LinkedIn: (https://de.linkedin.com/legal/privacy-policy?)

• Xing: (https://privacy.xing.com/de/datenschutzerklaerung)

Processing is based on Article 6(1)(f) of the GDPR, as we have a legitimate interest in conducting modern public relations activities. Where consent is required, processing is based on Article 6(1)(a) of the GDPR. If you submit additional data (e.g., personal messages) to the services, your consent is generally required for this. Please note that we have no influence over the data processing carried out by the social media providers. If you have any questions or wish to exercise your data subject rights (e.g., access, erasure), please contact the respective platform operator directly. You can subscribe to or unsubscribe from our social media profiles at any time. If you do not want social media service providers to collect data about your visit to our profiles, please use the opt-out options (e.g., logging out, blocking ad trackers) in your user account or install appropriate browser add-ons.

Rights of Data Subjects

As a data subject, you have the following rights under the EU General Data Protection Regulation (GDPR):

Right of access (Art. 15 GDPR)

You have the right to request information about which personal data is stored about you, for what purpose it is processed, from which recipients it was obtained or to whom it is disclosed, and how long it will be stored.

Right to rectification (Art. 16 GDPR)

You may request the immediate rectification of inaccurate personal data or the completion of incomplete personal data.

Right to erasure (“right to be forgotten”) (Art. 17 GDPR)

Under certain conditions, you may request the erasure of your personal data, e.g., if it is no longer necessary for the purposes for which it was collected or if you have withdrawn your consent.

Right to restriction of processing (Art. 18 GDPR)

You have the right to request the restriction of the processing of your personal data, for example if you contest the accuracy of the data or if the processing is unlawful, but you prefer restriction over erasure.

Right to data portability (Art. 20 GDPR)

You may request that the personal data concerning you that you have provided to us be transmitted to you in a structured, commonly used, and machine-readable format—or that we transfer this data directly to another controller.

Right to Object (Art. 21 GDPR)

You have the right to object to the processing of your personal data at any time, provided that the processing is based on the legitimate interests of our company or on a task carried out in the public interest. In the event of a justified objection, we will cease processing unless there are compelling legitimate grounds for the processing.

Withdrawal of Consent (Art. 7 GDPR)

If you have given us your consent, you may withdraw it at any time without providing a reason, effective for the future.

Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

Without prejudice to other administrative or judicial remedies, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, your place of work, or the place of the alleged infringement.

fontawesome.com

We use the “Font Awesome” service on our website to consistently integrate icons and visual elements. The provider is Fonticons, Inc. (“Fonticons”), 307 S Main St, Suite 202, Bentonville, AR 72712, USA.

The legal basis for the use of Font Awesome is your consent pursuant to Art. 6(1)(a) GDPR. You may revoke your consent at any time with future effect. The data processed by Font Awesome includes your IP address, browser and device information, as well as information about your use of the website; Font Awesome does not set cookies. The purpose of data processing is the optimized provision and integration of icons and fonts to improve the user-friendliness and design of the website. It cannot be ruled out that personal data may be transferred to non-EU countries (e.g., the U.S.) where data protection standards are lower than in the EU. We have entered into a Data Processing Agreement (DPA) with Fonticons, which ensures that personal data is processed only in accordance with our instructions and in compliance with the GDPR. 

For more information on Font Awesome’s privacy policy, please visit: https://fontawesome.com/privacy

Google Analytics

We use the “Google Analytics” service on our website to analyze user behavior. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

The legal basis for the use of Google Analytics is your consent pursuant to Art. 6(1)(a) GDPR. You may revoke your consent at any time with future effect. The data processed by Google Analytics includes your IP address, browser and device information, location data, time of visit, information regarding interaction with the website, and cookies are set. If you are logged into a Google account, this data may be linked to a user profile. The purpose of data processing is to analyze and evaluate user behavior to optimize the website and marketing activities. The standard data retention period for Google Analytics is 14 months. It cannot be ruled out that personal data may be transferred to non-EU countries (such as the U.S.) where data protection standards are lower than in the EU. Google is certified under the EU-U.S. Data Privacy Framework, which governs the secure processing of EU citizens’ data in the U.S. We have entered into a Data Processing Agreement (DPA) with Google, which ensures that personal data is processed only in accordance with our instructions and in compliance with the GDPR. 

For more information on Google Analytics’ privacy policy, please visit: https://support.google.com/analytics/topic/2919631?hl=en&ref_topic=1008008,3544742,2986333,&sjid=1881441919987619365-EU

For information about the cookies used, please visit: https://policies.google.com/technologies/cookies

You can prevent the processing of your data by clicking this link: https://tools.google.com/dlpage/gaoptout

Google Fonts

We use the “Google Fonts” service on our website to integrate external fonts for improved visual presentation. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

The legal basis for the use of Google Fonts is your consent pursuant to Art. 6(1)(a) GDPR. You may revoke your consent at any time with future effect. The data processed by Google Fonts includes your IP address, browser and device information, and the time of the request. The purpose of data processing is the optimized and uniform display of fonts on the website. It cannot be ruled out that personal data may be transferred to non-EU countries (such as the U.S.) where data protection standards are lower than in the EU. Google is certified under the EU-U.S. Data Privacy Framework, which governs the secure processing of EU citizens’ data in the U.S. 

For more information on Google Fonts’ privacy policy, please visit: https://policies.google.com/privacy

Information about the cookies set can be found at: https://policies.google.com/technologies/cookies

You can prevent the processing of your data by clicking this link: https://policies.google.com/privacy#infochoices

Google Tag Manager

We use the “Google Tag Manager” service on our website to efficiently manage website tags. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

The legal basis for the use of Google Tag Manager is your consent pursuant to Art. 6(1)(a) GDPR. You may revoke your consent at any time with future effect. The data processed by Google Tag Manager includes your IP address, browser and device information, as well as information regarding your interaction with the website; Google Tag Manager itself does not set cookies, but may trigger other services that do set cookies. The purpose of data processing is the simplified integration and management of website tags and tracking codes for the analysis of user interactions.

For more information on Google Tag Manager’s privacy policy, please visit: https://policies.google.com/privacy

For information about the cookies set, please visit: https://policies.google.com/technologies/cookies

You can prevent the processing of your data by clicking this link: https://tools.google.com/dlpage/gaoptout

YouTube

We use the video service "YouTube" on our website. The provider of this service is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

The legal basis for the use of YouTube is your consent pursuant to Art. 6(1)(a) GDPR. You may revoke your consent at any time with future effect. Google collects and processes your IP address, browser and operating system information, and location data; additionally, actions such as watching videos or creating playlists are processed. Cookies are also set in the process. YouTube integrates other Google services, such as Google Fonts, Google Photos, and Google Ads (formerly DoubleClick). If you are logged into a Google account, this data can be linked to a user profile. Your user behavior is recorded and analyzed for advertising purposes. The purpose of data processing is to provide video content and integrate it into our website. According to Google’s Privacy Policy, the retention period for data processed by YouTube varies depending on the data type and user settings. By default, activity data (such as videos watched, search history, etc.) is automatically deleted after 36 months (3 years) for new accounts or users who have not previously set a retention period. Users can manually set this retention period to 3 months, 18 months, or choose to store the data permanently. Detailed information can be found at: policies.google.com/privacy

It cannot be ruled out that personal data may be transferred to non-EU countries (such as the U.S.) where data protection standards are lower than in the EU. Google is certified under the EU-U.S. Data Privacy Framework, which governs the secure processing of EU citizens’ data in the U.S. We have entered into a Data Processing Agreement (DPA) with Google, which ensures that personal data is processed only in accordance with our instructions and in compliance with the GDPR. 

For more information on YouTube’s privacy policy, please visit: https://policies.google.com/privacy

For information about the cookies used, please visit: https://policies.google.com/technologies/cookies

You can prevent the processing of your data by clicking this link: https://myaccount.google.com/data-and-privacy

YouTube NoCookie

We use the YouTube NoCookie service (also known as "YouTube in enhanced privacy mode") on our website to embed videos without using cookies that track user behavior. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

The legal basis for the use of YouTube NoCookie is your consent pursuant to Art. 6(1)(a) GDPR. You may revoke your consent at any time with future effect. The data processed by YouTube NoCookie includes your IP address, device information, and information regarding video interaction. Data is stored in the browser’s web storage. The purpose of data processing is to embed videos while minimizing the use of cookies and improving user data protection. It cannot be ruled out that personal data may be transferred to non-EU countries (e.g., the U.S.) where data protection standards are lower than in the EU. We have entered into a Data Processing Agreement (DPA) with Google, which ensures that personal data is processed only in accordance with our instructions and in compliance with the GDPR. Google is certified under the EU-US Data Privacy Framework, which governs the secure processing of EU citizens’ data in the US. 

For more information on YouTube NoCookie’s privacy policy, please visit: https://policies.google.com/privacy#infocollect

Information about the cookies set can be found at: https://policies.google.com/technologies/cookies

You can prevent the processing of your data by clicking this link: https://policies.google.com/privacy#infochoices

jQuery

We use the 'jQuery' service on our website to improve the user interface and optimize the user experience. The provider is JS Foundation, Inc. ("JS Foundation"), 548 Market Street, PMB 57274, San Francisco, CA 94104-5401, USA. jQuery is an open-source project and is operated by Fastly (475 Brannan Street, Suite 300, San Francisco, CA 94107, USA). It cannot be ruled out that personal data may be transferred to non-EU countries (USA) where data protection standards are lower than those in the EU. We have entered into a Data Processing Agreement (DPA) with Fastly, which ensures that personal data is processed only in accordance with our instructions and in compliance with the GDPR. Fastly is certified under the EU-US Data Privacy Framework, which governs the secure processing of EU citizens’ data in the United States.

The legal basis for the use of jQuery is our legitimate interest pursuant to Art. 6(1)(f) GDPR to ensure the proper functioning and user-friendly design of our website.

The data processed by jQuery may include your IP address and device information, as it enables the loading of scripts from external servers; depending on the implementation, cookies may be set.

The purpose of data processing is to enable interactive website features and to improve the user experience through dynamic content customization.

For more information on jQuery’s privacy policy, please visit: https://openjsf.org/privacy

decareto Privacy Widget

We use the “decareto Privacy Widget” service on our website to create and manage our privacy notices. The provider is decareto GmbH, Mittelweg 144, 20148 Hamburg, Germany (“decareto”). As part of its service provision, decareto uses the content delivery network bunny.net operated by the subcontractor BunnyWay d.o.o. (Slovenia) to deliver content reliably and quickly. 

The legal basis for the use of the decareto Privacy Widget is the fulfillment of a legal obligation pursuant to Art. 6(1)(c) GDPR.

The legal basis for the use of bunny.net is decareto’s legitimate interest in the error-free delivery of the privacy policy. The data processed by the decareto Privacy Widget and bunny.net includes your IP address and browser information. The services do not set cookies. Data is not stored in log files.

The purpose of data processing is the reliable provision of our privacy notices.

For more information on the privacy policy of the decareto Privacy Widget, please visit: https://decareto.com/privacy/

Version 07/04/2026