WiNGBELS Privacy Policy / Datenschutzerklärung

Effective date: October 8, 2025
(Version 1.0 – reviewed and approved for GDPR, TTDSG & BDSG compliance)

1. Controller / Verantwortlicher (Art. 4 Nr. 7 GDPR | DSGVO)

Hamid Belhaj Salah
Sole Proprietor – operating under the name WiNGBELS
Registered address: Baiersbronner Str. 6, 71034 Böblingen, Germany
Operational office: Röhrer Weg 8, 71032 Böblingen, Germany
📞 +49 1522 5489612 ✉️ info@wingbels.de

No separate Data Protection Officer (DPO) has been appointed.
For all data-protection matters, please contact the Controller directly.

2. Scope and Purpose of Processing / Zweck der Verarbeitung

This notice explains how WiNGBELS collects, processes, and protects personal data when you:

• visit www.wingbels.de,

• contact us by email, chat, or contact form,

• subscribe to our newsletter, or

• use embedded services (e.g. analytics, maps, social media, videos).

All processing complies with the EU GDPR, German TTDSG, and BDSG.

3. Legal Bases of Processing / Rechtsgrundlagen der Verarbeitung

PurposeLegal BasisContract performance or pre-contractual measures (inquiries, offers)Art. 6 (1)(b) GDPRConsent (cookies, analytics, marketing, newsletters, photos)Art. 6 (1)(a) GDPRLegitimate interest (security, basic analytics, CRM B2B)Art. 6 (1)(f) GDPRLegal obligation (tax/commercial retention)Art. 6 (1)(c) GDPR

We never sell or trade personal data. Processing is limited to what is necessary.

4. Data Processing Activities / Verarbeitungsvorgänge

4.1 Server Logs (Web Hosting)

When accessing our website, our hosting provider Hostinger International Ltd. (EU) automatically records:
IP address | timestamp | URL requested | referrer | browser & OS info | HTTP status.
Purpose: Site delivery, stability, and IT-security (Art. 6 (1)(f) GDPR).
Retention: Automatically deleted after 14–30 days.

4.2 Contact Forms and (Chat if applicable)

When you contact us, we collect your name, email, optional phone, and message content.
Purpose: Handling inquiries and pre-contract communication (Art. 6 (1)(b)).
Retention: Up to 24 months after last contact.
Processor: HubSpot Ireland Ltd. (Art. 28 GDPR agreement).
Hostinger International Ltd. (EU)

Optional chat/CRM features load only after your consent.

4.3 Cookies and Consent Management (TTDSG §25)

We use:

• Essential cookies (required for operation – no consent needed), and

• Non-essential cookies (analytics, marketing – load only after consent).

You can manage or withdraw consent anytime via the “Cookie Settings” link in the footer.
Consent records are securely logged (Art. 7 GDPR).

4.4 Analytics (Google Analytics with IP Anonymization)

Enabled only after consent.
Purpose: Website usage statistics, improvement.
Legal basis: Art. 6 (1)(a) GDPR.
Transfer: Google Ireland Ltd.; SCCs apply for any US transfer.
Retention: 14 months or until consent withdrawal.
Opt-out plugin: http://tools.google.com/dlpage/gaoptout?hl=en

4.5 Embedded Services (after consent)

• Google Maps – Display of location (Art. 6 (1)(a))

• Google Fonts – Web fonts (hosted locally where possible)

• YouTube Player – Videos load only on click

• LinkedIn Insight Tag – Conversion tracking/retargeting

Withdrawal possible anytime via Cookie Settings.

4.6 Newsletter & CRM

You may subscribe voluntarily to our newsletter.
Legal basis: Art. 6 (1)(a) GDPR + §7 UWG. Unsubscribe link in each email.
CRM Data: contact and interaction records (Art. 6 (1)(f)).
Retention: Newsletter – until unsubscribe; CRM – 6 years (HGB).

4.7 Applications (if applicable)

Applicant data processed for recruitment (Art. 6 (1)(b) GDPR + §26 BDSG).
Retention 6 months after decision unless consent to retain longer.

4.8 Video Surveillance (only if operated)

Security monitoring on premises (Art. 6 (1)(f)); storage ≤ 7 days.

4.9 Event Photos (if taken)

Used for documentation & marketing (Art. 6 (1)(f)) or based on consent (Art. 6 (1)(a)).
Consent may be revoked at any time.

5. Recipients & Processors / Empfänger & Auftragsverarbeiter

We engage only reputable EU or GDPR-compliant providers:
Hostinger (EU) – web hosting; HubSpot (Ireland/USA) – CRM;
Google Ireland Ltd., Microsoft Ireland Operations Ltd., LinkedIn Ireland UC, YouTube LLC.
All processors operate under Art. 28 GDPR contracts or SCCs.

6. Third-Country Transfers / Drittstaatenübermittlungen

Transfers outside the EU/EEA occur only when adequate safeguards exist – typically EU Standard Contractual Clauses (SCCs) or EU Adequacy Decisions.
Copies of these can be requested (subject to redactions).

7. Retention Periods / Speicherdauern

Data CategoryTypical RetentionServer logs14 – 30 daysContact inquiries≈ 24 monthsCRM / business docs6 years (HGB)Tax records10 years (AO)Cookies / analyticsuntil withdrawalJob applications6 months

Data no longer needed is securely deleted or anonymized.

8. Your Rights / Ihre Rechte

You have the rights of:
Access (Art. 15), Rectification (Art. 16), Erasure (Art. 17), Restriction (Art. 18), Portability (Art. 20), and Objection (Art. 21).

• Withdraw consent any time (Art. 7 (3)) via email or Cookie Settings.

• Object to processing based on legitimate interest for reasons of your situation.

Supervisory Authority:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (LfDI BW)
Königstraße 10a, 70173 Stuttgart, Germany 📞 +49 711 615541-0

9. Security of Processing / Datensicherheit

We use SSL/TLS encryption (HTTPS) and apply technical and organizational measures (Art. 32 GDPR) to protect data against loss, misuse or unauthorized access.

10. Automated Decisions & Profiling

WiNGBELS does not conduct automated decision-making or profiling within the meaning of Art. 22 GDPR.

11. Changes to this Policy / Änderungen dieser Erklärung

We may update this policy to reflect legal or technical developments.
The latest version is always available at www.wingbels.de/privacy-policy.

Kurzfassung auf Deutsch (for German readers)

WiNGBELS verarbeitet personenbezogene Daten nach den Vorgaben der DSGVO, des BDSG und des TTDSG.
Verantwortlich ist Hamid Belhaj Salah, Einzelunternehmer, Baiersbronner Str. 6, 71034 Böblingen.

Wir erheben Daten nur, soweit dies erforderlich ist (z. B. Kontaktformular, Cookies nach Einwilligung).
Analyse- und Marketing-Cookies werden erst nach Ihrer Einwilligung gesetzt und können über „Cookie-Einstellungen“ jederzeit widerrufen werden.

Sie haben Rechte auf Auskunft, Berichtigung, Löschung, Einschränkung, Datenübertragbarkeit und Widerspruch.
Beschwerden richten Sie an den LfDI Baden-Württemberg, Königstraße 10a, 70173 Stuttgart.