Privacy Policy – Wöhrle Power Supply Systems GmbH

1. General Information and Controller

We appreciate your interest in our online shop. The protection of your personal data is of great importance to us. In this regard, we would like to inform you transparently about our data processing activities.

Below, we have summarized the most important points of our data processing on this website in an easy-to-understand format under Data Protection at a Glance. Detailed information can be found in our full Privacy Policy provided after this brief overview.

Controller in the sense of the GDPR

Wöhrle Stromversorgungssysteme GmbH
Lerchenstraße 34
71144 Steinenbronn
Phone: +49 7157 7374 0
Email: info@woehrle-svs.de
(hereinafter referred to as “we” or “us”)

Data Protection Officer

Mr. Wasim Barkat, PSW GROUP GmbH & Co. KG
Flemingstrasse 20–22
36041 Fulda
Email: dsb@psw.de

2. General Information on Data Processing

We process personal data of our users only insofar as this is necessary to provide a functional website and our content and services. Processing of personal data takes place only on the basis of a legal ground according to Article 6 GDPR. The respective legal grounds are listed below:

• Consent: Article 6 (1)(a) GDPR
• Performance of a contract or pre-contractual measures: Article 6 (1)(b) GDPR
• Legal obligation: Article 6 (1)(c) GDPR
• Legitimate interest: Article 6 (1)(f) GDPR

3. Data Collection on Our Website

a) Hosting, Server Log Files, and Security

Our webshop is hosted by Hetzner Online GmbH. The domain is also registered there. Provider: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany.

Each time our website is accessed, Hetzner’s system automatically collects data and information from the computer system of the accessing device (server log files), typically including:

• Browser type and version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address

This data is stored to ensure the functionality and security of the website and to defend against potential attacks. Legal basis: legitimate interest (Article 6 (1)(f) GDPR).

We have concluded a Data Processing Agreement (DPA) with Hetzner in accordance with Article 28 GDPR. Further information can be found in Hetzner’s privacy policy: https://www.hetzner.com/de/rechtliches/datenschutz.

b) Technical Security Measures and Backups

To protect your data, we use continuous SSL/TLS encryption (recognizable by “https://” and the lock symbol in your browser). In addition, nightly backups of the entire server environment are performed to ensure data availability and recovery.

Access to the server and the administrative backend is strictly limited to authorized employees of ABAS and UNIT08 through access control measures. Legal basis: legitimate interest in ensuring security, integrity, and availability (Article 6 (1)(f) GDPR) as well as compliance with legal obligations on data security (Article 32 GDPR).

4. Orders, User Accounts, and Inventory Management

a) Order Processing and User Accounts

• Guest orders: Data (name, address, email address, order details) are collected and processed for the purpose of contract fulfillment. No permanent user account is created.
• Registered B2B account: As a B2B customer, you may create a permanent customer account. Registration is completed only after confirmation of your email address (double opt-in procedure).

Legal basis: performance of a contract or pre-contractual measures (Article 6 (1)(b) GDPR). The double opt-in process serves to fulfill legal documentation obligations (Article 6 (1)(c) GDPR).

b) Order Completion

After completing an order, order data is synchronized with the ABAS ERP system of Wöhrle GmbH for further commercial processing (invoicing, shipping, etc.). Legal basis: performance of a contract (Article 6 (1)(b) GDPR).

c) Simplified Registration for Existing Customers

Existing customers of Wöhrle GmbH can use a simplified registration process. By entering your postal code and customer number, previously stored master data can be used to pre-fill the registration form. Legal basis: legitimate interest in providing a convenient and error-free registration process (Article 6 (1)(f) GDPR).

5. Newsletter

You can subscribe to our newsletter via our website. For this purpose, we use the service Brevo (formerly Sendinblue), Provider: Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.

We require your email address for sending the newsletter. Subscription is completed through a double opt-in procedure. You may withdraw your consent at any time, for example, via the “unsubscribe” link in each newsletter. Legal basis: consent (Article 6 (1)(a) GDPR).

We have concluded a DPA with Brevo. Privacy Policy: https://www.brevo.com/de/legal/privacypolicy/.

6. Cookies and Consent Management

Our website uses cookies. We use Shopware’s cookie management solution to manage your consent.

• Technically necessary cookies: required for basic operation (e.g., shopping cart, login status) and activated by default; cannot be deactivated.
• Marketing and tracking cookies: set only after your explicit consent (opt-in), e.g., for analyzing usage and personalizing advertising.

Legal basis: technically necessary cookies based on legitimate interest (Article 6 (1)(f) GDPR) in conjunction with Section 25 (2) TTDSG; all other cookies exclusively based on your consent (Article 6 (1)(a) GDPR and Section 25 (1) TTDSG). You may change or withdraw your consent at any time via the cookie settings on our website.

7. External Services and Integrations

These services are activated only upon your explicit consent.

a) Google Services (Analytics, Ads, Tag Manager)

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. A DPA has been concluded with Google. Data transfers to the USA cannot be excluded. An adequacy decision under the EU-U.S. Data Privacy Framework exists, to which Google has acceded.

• Google Tag Manager: management of website tags; the Tag Manager itself does not process personal data but may trigger other tags.
• Google Analytics: analysis of user behavior; IP anonymization within the EU/EEA is activated.
• Google Ads: conversion tracking and targeted advertising.

Legal basis: consent (Article 6 (1)(a) GDPR). More information: https://policies.google.com/privacy.

b) Integration of Oxomi for Product Data

To display detailed product information, we integrate content from the service Oxomi (Provider: scireum GmbH, Bahnhofstr. 29, 97318 Kitzingen, Germany). When accessing the respective pages, your IP address and information about the visit are transmitted to Oxomi. Legal basis: consent (Article 6 (1)(a) GDPR) via our cookie management.

Oxomi Privacy Policy: https://www.oxomi.com/datenschutz.

c) Integration of YouTube Videos

We embed videos from the YouTube platform in “enhanced privacy mode” (Provider: Google Ireland Limited, Dublin, Ireland). Data is transmitted only when you actively click on a video to start playback. Legal basis: consent (Article 6 (1)(a) GDPR) by clicking on the video.

Further information: https://policies.google.com/privacy.

8. Payment Service Providers

To process payments, we offer various payment methods and cooperate with external payment service providers. When you select one of these payment methods, the entered payment data will be transmitted to the respective provider. Legal basis: performance of a contract (Article 6 (1)(b) GDPR).

• Invoice: processed internally or via our ABAS ERP system.
• PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg – Privacy Policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
• Credit Card via Stripe: Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland – Privacy Policy: https://stripe.com/de/privacy.

9. Your Rights as a Data Subject

9.1 Withdrawal of Consent

You may withdraw any consent granted at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal and does not apply to processing based on other legal grounds.

9.2 Further Data Subject Rights

Under Articles 15–21 and 77 GDPR, you have the following rights, provided the legal requirements are met:

• Right of access (Article 15 GDPR): to obtain information about the personal data we process and a copy thereof.
• Right to rectification (Article 16 GDPR): to correct inaccurate data and complete incomplete data.
• Right to erasure (Article 17 GDPR): to delete personal data, except where data is required for contract fulfillment, assertion/defense of legal claims, or statutory retention obligations.
• Right to restriction of processing (Article 18 GDPR): e.g., in cases of disputed or unlawful processing or pending objection.
• Right to object (Article 21 GDPR): at any time to direct marketing or, for specific reasons, to processing based on legitimate interests.
• Right to data portability (Article 20 GDPR): to receive the data you have provided in a structured, commonly used, and machine-readable format and, where technically feasible, to have it transmitted to another controller.

9.3 Contact

To exercise your rights, please contact our data protection officer at datenschutz@woehrle-svs.de.

9.4 Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with the competent data protection supervisory authority. You can find our supervisory authority here: https://www.baden-wuerttemberg.datenschutz.de/.

Version: October 2025