Contact forms, email, phone and WhatsApp

When you contact us, we process the details you provide—such as name, company, email address, telephone number, country, enquiry category, message and attachments—to answer the request, prepare quotations, take pre-contractual steps and maintain business correspondence.

The legal basis is Article 6(1)(b) GDPR where the communication relates to a contract or requested pre-contractual action. Otherwise, it is Article 6(1)(f) GDPR based on our legitimate interest in responding to business enquiries and maintaining professional relationships.

The contact-page HTML form supplied with this website prepares a message in the visitor’s own email application and does not itself store the entered data on the website. If you replace it with an Elementor, CRM or other server-side form, add that form provider, storage location, recipients and retention period here.

If you choose WhatsApp, your use of that service is also governed by the provider’s terms and privacy information. Data may be processed by the provider independently and potentially outside the European Economic Area. Use email if you prefer not to communicate through WhatsApp.

Customers, suppliers and business contacts

For business relationships, we may process names, job titles, employer details, business contact information, enquiry and order history, contractual documents, delivery information, invoices, payment status, compliance records and correspondence.

Processing supports contract preparation and performance under Article 6(1)(b) GDPR, compliance with legal obligations under Article 6(1)(c), and legitimate interests under Article 6(1)(f), including procurement, account management, fraud prevention, sanctions screening and asserting or defending legal claims.

If a company provides another person’s business contact details, it should ensure that person is informed about this policy where required.

Cookies and similar storage

Cookies and similar technologies may store or access information on your device. Strictly necessary technologies can support security, session management, language choices or functions specifically requested by you. Optional technologies—such as analytics, advertising or non-essential embeds—should not activate until the required consent has been obtained.

For personal-data processing, the legal basis may be consent under Article 6(1)(a) GDPR or, for strictly necessary operations, legitimate interests under Article 6(1)(f). Device access is additionally assessed under Section 25 TDDDG.If optional cookies are used, provide a persistent “Cookie settings” control on the live website so visitors can change or withdraw consent as easily as they gave it.

External links, maps, fonts and embedded content

The Contact page uses ordinary links to Google Maps and WhatsApp. A connection to those providers is generally initiated only when you click the relevant link. The destination provider then processes data under its own responsibility.

If the website embeds maps, videos, social media posts, remote fonts, reCAPTCHA or other third-party content, the live policy and consent setup must name each provider and explain the data, purpose, legal basis, recipients, transfers and retention involved.

Recipients and service providers

Personal data may be accessible to authorised W2B personnel and, where necessary, to hosting, IT support, email, communications, logistics, payment, banking, accounting, legal, compliance, insurance and other professional providers. Public bodies may receive information when required by law.

Processors receive data only for agreed purposes and under appropriate contractual controls where required. We do not sell personal data.

International data transfers

Some providers or transaction participants may be located outside Germany or the European Economic Area (“EEA”). Where personal data is transferred to a country without an EU adequacy decision, we use an appropriate GDPR transfer mechanism where required, such as European Commission Standard Contractual Clauses, together with supplementary measures where appropriate.

Retention and deletion

We retain personal data only for as long as needed for the relevant purpose, and then delete or anonymise it unless legal duties or legitimate needs require longer retention. Criteria include the status of an enquiry or contract, statutory tax and commercial record-keeping periods, limitation periods, legal claims, security incidents and consent status.

Your data-protection rights

Subject to the conditions and limits in the GDPR, you may have rights to:

• request access to your personal data (Article 15);
• request correction of inaccurate data (Article 16);
• request erasure (Article 17);
• request restriction of processing (Article 18);
• receive certain data in a portable format (Article 20);
• object to processing based on legitimate interests (Article 21); and
• withdraw consent at any time for future processing (Article 7(3)).

If we process data for direct marketing, you may object at any time and we will stop that marketing processing. To exercise a right, email info@w2bgmbh.com. We may request reasonable information to verify identity and protect data from unauthorised disclosure.

Right to lodge a complaint

You may lodge a complaint with a competent data-protection supervisory authority, particularly in the EU Member State of your habitual residence, place of work or the alleged infringement.

For a private-sector company based in Bavaria, the supervisory authority is generally the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA). Please verify the competent authority against W2B’s actual registered establishment before publishing.

Data security

We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Measures may include encrypted transmission, access controls, backups, updates and provider oversight. No internet transmission or storage method can be guaranteed to be completely secure.

Automated decisions and obligation to provide data

We do not intend to make decisions producing legal or similarly significant effects based solely on automated processing through this website.

You are not legally required to provide data merely to browse the public website. Certain information is necessary if you ask for a quotation, enter a contract, request delivery or if we must perform legal compliance checks. Without it, we may be unable to proceed.

Changes to this policy

We may update this policy to reflect changes in law, technology, services or processing. The current version will be published on this page with its effective date. Material changes should be communicated by an appropriate additional notice where required.

Effective date: 17 September 2026
Policy version: 1.0