Data Protection

Data protection

Privacy policy for the website www.wlhk.de

1. Information about the collection of personal data

1. 1.   Below, we provide information about the collection of personal data when using our website. Personal data is any data that can be related to you personally, e.g. name, address, email addresses, user behaviour.

1. 2. The person responsible pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is
      WLHK – Weinert Levermann Heeg Partnerschaft mbB
      Kattrepel 2, 20095 Hamburg
      Tel. +49.40.361600130
      Fax +49.40.361600140Info (at)wlhk.de

1. 3. If we use contracted service providers for individual functions of our offering or wish to use your data for advertising purposes, we will inform you in detail about the respective processes below. We will also specify the criteria for the storage period.

2. Your rights

1. 1. You have the following rights with regard to your personal data:
      – Right to information,
      – Right to rectification or erasure,
      – Right to restriction of processing,
      – Right to object to processing,
      – Right to data portability.

2. 2. You also have the right to complain to a data protection supervisory authority about our processing of your personal data.

3. Collection of personal data when visiting our website

1. 1. When you use the website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR):
      – IP address
      – Date and time of the request
      – Time zone difference to Greenwich Mean Time (GMT)
      – Content of the request (specific page)
      – Access status/HTTP status code
      – Amount of data transferred in each case
      – Website from which the request originates
      – Browser
      – Operating system and its interface
      – Language and version of the browser software.
      This data is stored for a period of 7 days.

3. 2. In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and assigned to the browser you are using, and through which certain information goes to the entity that sets the cookie (in this case, us). Cookies cannot execute programs or transfer viruses to your computer. They serve to make the Internet offer more user-friendly and effective overall.

3. 3. Use of cookies

1. 1. 1. This website uses the following types of cookies, the scope and functionality of which are explained below:
         – Transient cookies (see 3.3.2)
         – Persistent cookies (see 3.3.3.)

3. 3. 2. Transient cookies are automatically deleted when you close your browser. These include, in particular, session cookies. These store a so-called session ID, which can be used to assign various requests from your browser to the shared session. This allows your computer to be recognised when you return to our website. The cookies we use to ensure the correct display of the website on the device used also belong to the session cookies. The session cookies are deleted when you log out or close your browser.

3. 3. 3. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time in your browser’s security settings.

3. 3. 4. You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all the features of this website.

3. 3. 5. Below is an overview of the cookies used on this website with detailed information on the purposes pursued, the storage period and the provider:

• Cookies required for the functioning of the website and the online shop:

Name	Provider	Purpose	Storage period
borlabs-cookie	Cookiebot	Stores the user’s consent status for cookies and data processing on this website.	11 months 30 days
wp-wpml_current_language	WordPress	This cookie is used by the WordPress plugin WPML to store the visitor’s currently selected language so that the website automatically displays it the next time the page is visited.	1 day

• Cookies for compiling statistics on the use of our website, which we evaluate to further develop our website and our offerings. These cookies are only stored with your consent. You can manage and revoke your consent at any time here. This includes the following cookies:

Name	Provider	Purpose	Storage period
_gat	Google Analytics	Used by Google Analytics to limit the request rate	13 months
ga_K0N8XBZE2K	Google Analytics	This cookie is used to store and measure session data for a specific property, e.g. how often and how long a user visits a website.	13 months
_gat_gtag_UA_119539447_1	Google Analytics	The cookie _ is used to throttle the request rate to Google Analytics so that measurement data is collected efficiently and without overload.	1 minute
_gid	Google Analytics	This cookie is used by Google Analytics to distinguish users from one another and to store their page views within a 24-hour period.	1 day

4. Contact via e-mail 
   1. When you contact us by e-mail, we store the data you provide (your e-mail address, your name and your message, if applicable) in order to answer your questions. We delete the data collected in this context once it is no longer necessary to store it or restrict its processing if there are legal retention obligations.

4. 2.  We process this data in order to be able to offer you the desired/requested service. The data is collected on a contractual basis (Art. 6 (1) (b) GDPR) insofar as it concerns the assertion of claims arising from revocation, guarantee or warranty rights. For the performance of customer service in general and the answering of your enquiries, processing is carried out on the basis of legitimate interests (Art. 6 para. 1 sentence 1 lit. b GDPR), as it enables satisfactory customer service.

 

5. Objection or revocation of the processing of your data
   1. If you have given your consent to the processing of your data, you can revoke this at any time. Such revocation affects the permissibility of the processing of your personal data after you have notified us of it.

5. 2. Insofar as we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case if the processing is not necessary in particular for the fulfilment of a contract with you, which is presented by us in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either stop or adjust the data processing or point out to you our compelling legitimate reasons for continuing the processing.

6. Google Analytics G4 
   1. Description and scope of data processing
      We use the web analytics service Google Analytics 4 (GA4) from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) on our website.
      Google Analytics 4 enables us to analyse the usage behaviour of our website visitors and thereby continuously improve our website. Cookies or similar technologies are used for this purpose, which enable an analysis of your use of the website.

6. 2. Processed data
      The following data may be collected:

• • • IP address of the accessing device (shortened resp. anonymised)
    • Date and time of access
    • Click paths, interactions with the website
    • Length of stay on individual pages
    • Technical information (browser, operating system, device type)
    • Origin of visitors (e.g. via search engines or referrer links)
      
      In Google Analytics 4, IP anonymisation is enabled by default, which means that your IP address is abridged within the EU or EEA before it is transmitted to Google’s servers in the US.

6. 3.  Google signals
      If you have given us your consent via the cookie banner, GA4 can use so-called Google signals. These enable us to create comprehensive reports (e.g. across different devices) and to display personalised advertising, provided you have activated this option in your Google account. This data is anonymised and evaluated statistically.

6. 4.  Purpose of data processing
      The data is processed for the purpose of analysing user behaviour and optimising the website and its content.
      The legal basis for this is your consent in accordance with Art. 6 (1) (a) GDPR, given via our cookie consent tool.

6. 5.  Recipients of the data / transfer to third countries
      Google processes the data on our behalf.
      Data is transferred to the USA on the basis of the EU-US Data Privacy Framework (DPF), which Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) has joined.
      Further information: https://www.dataprivacyframework.gov/

6. 6.  Storage period
      The data we collect is stored for a period of 14 months.

7. Use of Google Fonts
   This website uses Google Fonts to embed fonts, a service provided by Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. To display our site, Google servers are called up, namely fonts.googleapis.com and fonts.gstatic.com. In order to display the fonts as quickly and efficiently as possible on our site, Google stores the requests and fonts and specifications are cached by your browser. You can find more information here: https://developers.google.com/fonts/faq#what_does_using_the_google_fonts_api_mean_for_the_privacy_of_my_users

   The legal basis for use is Art. 6 I S.1 Lit f GDPR.

 

9. Google Maps
   We use the Google Maps service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-deutschland@google.com, website: https://www.google.com/ on our website. Personal data is also transferred to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en).. The operator of the service is certified under the DPF, so that the usual level of protection under the GDPR applies to the transfer.
   The legal basis for the processing of personal data is your consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, which you have given on our website.
   On our behalf, Google will use the information obtained through Google Maps to display the map to you. Google Maps allows you to find us faster and more accurately than with a simple non-interactive map. The corresponding data is also used to assign visitors to the site who view our Google Maps map, possibly with the aid of the Google advertising ID, and to link them to physical visits and calls to other contact information listed on Google. In this way, Google can estimate the expected visitor flows.
   For the processing itself, the service or we collect the following data: Data required for the visualisation and display of location data in the form of a map, such as IP address, information from Google background services such as Google APIs, search terms, IP address, coordinates, starting point and destination when using the route planner, location data, Google advertising ID, Android advertising ID.
   We have concluded a joint processing agreement with Google with regard to Google Maps. The content can be found at https://privacy.google.com/intl/de/businesses/mapscontrollerterms/. If the service is activated on our website, our website establishes a connection to the servers of Google Ireland Limited and transmits the required data. In the context of order processing, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When using the Google service on our website, Google may transfer and process information from other Google services in order to provide background services for the display and data processing of the services provided by Google. For this purpose, data may also be processed by the Google services Google Apis, Google Cloud and Google Fonts in accordance with Google’s privacy policy under Google’s responsibility for data protection. You can view the provider’s certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list.
   You can revoke your consent at any time. You can find more information on revoking your consent either in the consent form itself or in this privacy policy.
   Further information on the handling of the transferred data can be found in the provider’s privacy policy at https://policies.google.com/privacy.
   The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.
10. Borlabs Cookie
    This website uses Borlabs Cookie, which sets a technically necessary cookie (borlabs-cookie) to store your cookie consents.
    Borlabs Cookie does not process any personal data.
    The borlabs-cookie stores the consents you gave when you entered the website. If you wish to revoke these consents, simply delete the cookie in your browser. When you re-enter/reload the website, you will be asked again for your cookie consent.

10. Additional information on the handling of personal data in job application processes
    1. 10.1.  We are delighted that you are interested in our company and have applied or are applying for a position with us. We would like to provide you with information below about how your personal data is processed in connection with your application.
    2. 10.2.You can apply to us via the email address provided, bewerbung@wlhk.de . We recommend sending your documents in an encrypted email. You can download our public pgp key here. Alternatively, you can encrypt the documents attached to your email using a compression programme (e.g. 7Zip) and provide us with the password by telephone.
    3. 10.3.We process the data you send us in connection with your application in order to assess your suitability for the position (or other open positions in our companies, if applicable) and to carry out the application process.
    4. 10.4.The legal basis for the processing of your personal data in this application process is primarily Section 26 of the German Federal Data Protection Act (BDSG) in the version applicable from 25 May 2018. According to this, the processing of data that is necessary in connection with the decision to establish an employment relationship is permissible.
       If the data is required for legal purposes after the application process has been completed, data processing may be carried out on the basis of the requirements of Art. 6 GDPR, in particular for the purpose of safeguarding legitimate interests pursuant to Art. 6 (1) (f) GDPR. Our interest then lies in asserting or defending claims.

10. 5. 10.5.Data from applicants will be deleted after 6 months in the event of rejection. If you have been offered a position as part of the application process, the data will be transferred from the applicant data system to our personnel information system.
    6. 10.6.If you have expressly consented to the further storage of your personal data, we will transfer your data to our applicant pool. The data will be deleted after two years.

11. Updating the privacy policy
    This privacy policy is currently valid and was last updated in November 2025.
    Due to the further development of our website and offers on it, or due to changes in legal or regulatory requirements, it may become necessary to amend this privacy policy. You can access and print out the current privacy policy at any time on the website at https://www.wlhk.de/datenschutz.