Last updated: July 2026
1. Controller
WEHAG Westfälische Handelsgruppe GmbHAuf der Bleiche 8
58300 Wetter
Germany
Represented by the Managing Director: Gerrit Nattler
Phone: +49 176 31720654
Email: einkauf@wehag-gmbh.de
2. Data Protection Officer
You can contact our Data Protection Officer at:
legal data Schröder Rechtsanwaltsgesellschaft mbHDr Georg F. Schröder, LL.M.
Lawyer / Data Protection Officer
Email: georg.schroeder@legaldata.law
3. Provision of the Website and Server Log Files
3.1 Nature and purpose of the processing
When you access this website, your browser transmits technically necessary data to our web server. In particular, the following data may be processed:
- IP address of the requesting device
- date and time of access
- page or file accessed and the previously visited page (referrer URL), if transmitted by your browser
- access status or HTTP status code and volume of data transferred
- browser type and version, operating system, device type and language setting
The processing is necessary to deliver the website, ensure its stability and functionality, identify technical errors, and prevent attacks or abusive access. These purposes also constitute our legitimate interests.
3.2 Legal basis
The legal basis is Article 6(1)(f) GDPR. Without the temporary processing of the IP address and other technical information, the website cannot be delivered to your device.
3.3 Recipients
We host this website with:
STRATO GmbHOtto-Ostrowski-Straße 7
10249 Berlin
Germany
STRATO processes the technical data generated when the website is accessed as a processor on the basis of a contract pursuant to Article 28 GDPR. According to STRATO, the hosting data is processed exclusively in data centres in Germany. In addition, access to the data is limited to the responsible persons within our company and, where applicable, other IT service providers engaged by us, insofar as this is necessary for the operation, maintenance and security of the website.
3.4 Storage period
The data required to deliver the website is no longer needed once the respective connection has ended. STRATO provides us with web server log files for the previous six weeks; older log files are no longer made available. According to STRATO, the hostname or IP address of the accessing device is anonymised in the log files made available to us.
We store data beyond this period only on a case-by-case basis if there are specific indications of a security incident or unlawful use, and only until the matter has been conclusively resolved or for the establishment, exercise or defence of legal claims.
4. Contact by Email or Phone
4.1 Nature and purpose of the processing
If you contact us by email or phone, we process the information you provide. This may include, in particular, your name, company, contact details, the time and content of your message, and the correspondence required to handle your request. The processing is carried out to answer your enquiry and to communicate with you further.
Providing your information is voluntary. However, without the information required to contact you and handle your enquiry, we may be unable to respond. Please do not send us special categories of personal data within the meaning of Article 9 GDPR unless this is strictly necessary for your enquiry.
4.2 Legal bases
If your contact relates to a contract with you or to pre-contractual measures taken at your request, Article 6(1)(b) GDPR is the legal basis. In all other cases, processing is carried out pursuant to Article 6(1)(f) GDPR on the basis of our legitimate interest in handling and responding to business and other relevant enquiries. Where statutory documentation or retention obligations apply, processing is additionally based on Article 6(1)(c) GDPR.
4.3 Recipients
Recipients are the persons within our company responsible for handling your enquiry. In addition, the telecommunications, email and IT service providers engaged by us may receive the data to the extent technically necessary. Further disclosure takes place only if it is necessary to handle your enquiry or conduct a business relationship, if you have consented, or if we are legally obliged to do so.
4.4 Storage period
We delete your information once your enquiry has been conclusively handled and no further retention is necessary. If the enquiry leads to a business relationship or the correspondence is subject to retention obligations under tax or commercial law, we retain the relevant data for the applicable statutory retention period. Data may be stored beyond this period where necessary for the establishment, exercise or defence of legal claims.
5. Cookies, Access to End Devices and External Services
In its current technical configuration, this website does not use cookies or comparable technologies that store or access information on your device. We do not use client-side analytics or tracking services, externally embedded fonts, maps, videos, social media plugins, or comparable third-party content. The server-side access statistics provided by STRATO are based on the anonymised log data described above and do not place cookies on your device.
The stylesheets, scripts, images and icons required for display and operation are provided by our own web server. Consent pursuant to Section 25(1) TDDDG and a consent banner are therefore not required for the website's current functionality.
6. Automated Decision-Making and Profiling
No solely automated decision-making, including profiling within the meaning of Article 22 GDPR, takes place in connection with this website.
7. Your Rights
Subject to the applicable statutory requirements, you have the following rights in relation to us:
- right of access to your personal data pursuant to Article 15 GDPR
- right to rectification of inaccurate data or completion of incomplete data pursuant to Article 16 GDPR
- right to erasure of your personal data pursuant to Article 17 GDPR
- right to restriction of processing pursuant to Article 18 GDPR
- right to data portability pursuant to Article 20 GDPR, where the relevant requirements are met
- right to object to processing pursuant to Article 21 GDPR
To exercise your rights, you may contact the controller or our Data Protection Officer. We may require information that enables us to clearly identify you in order to process your request.
8. Right to Object Pursuant to Article 21 GDPR
You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data where that processing is based on Article 6(1)(f) GDPR.
We will then no longer process the relevant data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing is required for the establishment, exercise or defence of legal claims. The processing of technical connection data is strictly necessary to provide the website during your respective visit.
9. Right to Lodge a Complaint with a Supervisory Authority
If you believe that the processing of your personal data infringes data protection law, you may lodge a complaint with a data protection supervisory authority pursuant to Article 77 GDPR. The supervisory authority responsible for us is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-WestfalenPostfach 20 04 44
40102 Düsseldorf
Germany
Phone: +49 211 38424-0
Email: poststelle@ldi.nrw.de
Website: www.ldi.nrw.de
Your right to contact any other supervisory authority competent under Article 77 GDPR remains unaffected.
10. Updates to This Privacy Policy
We update this Privacy Policy when the functions, service providers or legal requirements change. The current version published on this website applies.