Back

Privacy Policy

General remarks and mandatory information

Data protection

The aim of data protection, and also our objective at Adolf Würth GmbH & Co. KG, is to ensure that personal data are handled in such a way that every data subject’s right to privacy is protected. To ensure the fulfillment of this objective, entities responsible for the processing of personal data are obliged to comply with the provisions of EU legislation (General Data Protection Regulation (GDPR)) and national data protection laws. Personal data may only be collected and processed if this is permitted by the GDPR or another law. The essential underlying principles of the GDPR are:

  • Lawfulness of processing, fairness of processing, transparency
  • Purpose limitation
  • Data minimization
  • Accuracy of data processing
  • Storage limitation and erasure concepts
  • Integrity and confidentiality

Responsible handling of personal data and the risk-conscious use of IT systems and applications are further key objectives of Adolf Würth GmbH & Co KG. We would like to point out that data transmission on the Internet (e.g. when communicating by e-mail) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

Information to be provided by data controller and rights of data subjects

Name and contact information of the data controller

The controller is the natural or legal entity that, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).

The controller responsible for data processing on this website is:

Adolf Würth GmbH & Co. KG
Reinhold-Würth-Strasse 12–17
74653 Künzelsau-Gaisbach
Phone: +49 7940/15 2200
E-Mail: museum@wuerth.com

Contact information of the data protection officer

You can reach our data protection officer at datenschutz@wuerth.com

Purpose of the data collection, processing or use

Adolf Würth GmbH & Co KG specializes in the trade of assembly and fastening materials. The collection, processing or use of personal data is carried out to fulfill this corporate purpose or supporting secondary purposes, such as customer advice.

Groups of people concerned and related data or data categories

The groups of people affected are:

  • Current employees
  • Former employees
  • Applicants
  • Interested parties
  • Customers
  • Suppliers
  • Service providers
  • Other business partners

The relevant data include all personal data that are necessary for the fulfillment of the purpose concerned. A detailed overview of the types of personal data that are processed can be found below.

Legal basis

The processing of personal data is only legal if this is permitted by law, i.e. if there is a legal basis, or if the person has given their consent. Personal data is only processed in our company in accordance with the statutory provisions. These are generally:

  • when consent to the processing of personal data has been given (Art. 6(1)(a) GDPR)
  • when personal data must be processed to fulfill a contract or to initiate a contract (Art. 6(1)(b) GDPR)
  • when the processing of personal data is necessary to fulfill a legal obligation (Art. 6(1)(c) GDPR)
  • when we process personal data on the basis of a legitimate interest or on the basis of a legitimate interest of a third party (Art. 6(1)(f) GDPR)

Potential recipients for data transmission

The potential recipients of transferred personal data are:

  • public bodies, insofar as a legal obligation exists
  • service providers and other business partners, insofar as this is necessary to fulfill the respective purpose and a legal provision permits or requires this or the data subject has consented

Planned data transfer to countries outside the EU or international organizations

Should it become necessary to transfer data to third countries (countries that are not member states of the European Union) or to international organizations, this will be done exclusively for the conclusion or fulfillment of contracts – insofar as this does not conflict with the legitimate interests of the data subject – taking into account all data protection requirements. If we transfer your data to a third country or an international organization in individual cases, we will provide you with the information required for this case.

Deadline for the erasure of data

The deletion of personal data is carried out in accordance with the applicable statutory or contractual regulations on data deletion, taking into account statutory or contractual retention obligations. Such legal obligations arise, for example, from the German Commercial Code (HGB) and the German Fiscal Code (AO). The retention and documentation periods specified there are up to ten years beyond the end of the business relationship or the pre-contractual legal relationship.

In addition, other statutory provisions may require a longer retention period, such as the preservation of evidence within the scope of statutory limitation periods. The regular limitation period is three years; in certain cases, however, limitation periods of up to 30 years or, in individual cases, even longer may apply. The deletion of personal data that is not subject to any statutory or contractual retention or deletion obligation takes place after it is no longer required to fulfill the respective purpose.

Your rights with regard to data protection (Art. 12 et seqq. GDPR)

The data subject has various data protection rights. These rights are explained below. The contact information indicated above can be used to exercise these rights.

Right of Access (Art. 15), Rectification (Art. 16), Restriction of processing (Art. 18) and Erasure (Art. 17)

Within the framework of the applicable legal provisions, you have the right to obtain information free of charge at any time about the personal data concerning you that is stored by the controller, its origin and recipients and the purpose of the data processing and, if applicable, a right to rectification, blocking or erasure of this data.

Right to object (Art. 21 GDPR)

Every data subject has the right to object to the processing of their data if the data processing is carried out on the basis of Art. 6(1)(f) GDPR or for direct marketing purposes. In the event of an objection to the processing of your personal data, we will examine your objection on a case-by-case basis. If we are obliged to delete your personal data due to your objection under data protection law, we will delete your data taking into account statutory retention obligations. The objection does not affect the permissibility of the processing carried out prior to the objection.

Right to data portability (Art. 20 GDPR)

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract transferred to yourself or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only take place if it is technically feasible.

Obligation to disclose data

Every data subject has the right to know whether the provision of personal data is required by law or contract or is necessary for the conclusion of a contract, whether the data subject is obliged to provide the personal data and what the possible consequences of non-provision would be.

Right to lodge a complaint with the competent supervisory authority

The data subject has the right to lodge a complaint with the competent supervisory authority if they believe that one of their rights has been violated. The competent supervisory authority for data protection issues is the state data protection officer of the federal state in which our company is based. In principle, however, the data subject can also contact the supervisory authority of their place of residence or the place of the suspected infringement. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

Revocation of your consent to data processing

Some data processing operations are only possible with your consent. You can revoke any consent you have already given at any time. All you need to do is send an informal e-mail to one of the e-mail addresses given above. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Further information: https://kunstkultur.wuerth.com/artsculture/legal/legal-notice.php