Privacy policy

This English version is provided for convenience. Only the German version is legally binding.

1. Data protection at a glance

General information
The following information gives a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally.

Controller
The controller responsible for data processing on this website is:

Virtuelle Wendel Fabrik GmbH
Tannenstraße 15
77761 Schiltach
Germany

Represented by:
Managing director: Jeremy Fischer

Email: jeremy.fischer@vwf.solutions
Phone: +49 7836 3789869

2. Hosting

We host the content of our website with the following provider:
Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA

The provider automatically collects and stores information in server log files, which your browser automatically transmits to us. These are:
-Browser type and browser version
-Operating system used
-Referrer URL (the previously visited page)
-Host name of the accessing computer
-Time of the server request
-IP address

This data is not combined with other data sources. It is collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in presenting and optimising its website without technical errors, for which the server log files must be recorded.

Netlify processes this data on our behalf. We have a data processing agreement with Netlify under Art. 28 GDPR, which forms part of Netlify’s terms of service. Netlify operates a worldwide server network, so data may also be processed in the USA (see “Note on data transfers to the USA”). For more information, see Netlify’s privacy policy: https://www.netlify.com/privacy/

Video delivery
We use the Cloudinary service (Cloudinary Ltd. and its US subsidiary Cloudinary Inc.) to deliver the videos on this website. A video is only loaded once it appears in the visible area of the page. When a video is requested, Cloudinary processes your IP address and technical information about your browser and the requested file in order to deliver the video, and stores this information in log files. If a video is not available from Cloudinary, your browser loads it from our host Netlify instead.

This processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in delivering the videos quickly and reliably. For more information, see Cloudinary’s privacy policy: https://cloudinary.com/privacy

3. General and mandatory information

Data protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

Note on data transfers to the USA
We use services from providers that also process data in the USA (Netlify, including the spam filter Akismet used by Netlify, and Cloudinary). Personal data may therefore be transferred to the USA. For companies certified under the EU-US Data Privacy Framework, the European Commission has determined an adequate level of data protection (Art. 45 GDPR). Netlify and Cloudinary are certified under this framework. Other transfers are based on the European Commission’s standard contractual clauses (Art. 46 GDPR).

Withdrawing your consent to data processing
Many data processing operations are only possible with your express consent. You can withdraw any consent you have already given at any time. An informal email to us is sufficient.

Right to object to data collection in special cases (Art. 21 GDPR)
If data processing is based on Art. 6(1)(f) GDPR, you have the right to object to the processing of your personal data at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Right to lodge a complaint with the competent supervisory authority
In the event of breaches of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority.

4. Data collection on this website

Cookies
Our website does not use cookies. No files are stored on your device to track your user behaviour.

Contact form
If you send us an enquiry using the contact form, the information you enter (name, email address and message) is stored by us to process your enquiry and in case of follow-up questions. The form is processed by the Netlify Forms service of our host Netlify. Netlify stores the submissions on our behalf and forwards them to us by email. Technical information such as your IP address, your browser type and the page from which the form was sent may also be stored. To detect spam, Netlify has the submissions checked by the Akismet service of Automattic Inc. (USA).

The form data is processed on the basis of your consent (Art. 6(1)(a) GDPR), which you give using the checkbox in the form and can withdraw at any time. If your enquiry relates to the performance of a contract or is necessary to carry out pre-contractual measures, the processing is also based on Art. 6(1)(b) GDPR. We delete the submissions at Netlify as soon as they are no longer needed to process your enquiry.

Contact by email or phone
If you contact us by email or phone, your enquiry, including all resulting personal data (name, enquiry), will be stored and processed by us for the purpose of handling your request. We do not pass on this data without your consent.
This data is processed on the basis of Art. 6(1)(b) GDPR if your enquiry relates to the performance of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in handling the enquiries addressed to us effectively (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if this has been requested.

Storage period for enquiries
The data you send us in contact enquiries remains with us until you ask us to delete it, withdraw your consent to its storage or the purpose for storing it no longer applies (e.g. after your enquiry has been dealt with). Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.

Visitor statistics with GoatCounter
To find out how our website is used, we create visitor statistics with the GoatCounter service. GoatCounter is operated by Martin Tournoij in Ireland, and its servers are located at Hetzner Online GmbH in Germany and Finland. When you open a page, your browser sends the address and title of the page and the previously visited page (referrer) to our own domain. Our host Netlify forwards this information to GoatCounter together with your IP address, your browser identifier (user agent) and your language setting.

GoatCounter does not store IP addresses. The IP address is only used briefly in memory to determine the country or region and to assign page views to a randomly generated identifier for a maximum of 8 hours, so that visits are not counted more than once. Only aggregated statistics are stored, for example the number of views per page, referring pages, browsers, operating systems, languages and countries. No cookies are set, no information is stored on your device and no device properties such as the screen size are read.

This processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in statistically analysing how our website is used and improving what we offer. For more information, see GoatCounter’s privacy policy: https://www.goatcounter.com/help/privacy

5. Your rights

Right to information, deletion and correction
Within the framework of the applicable statutory provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of the data processing and, where applicable, a right to have this data corrected or deleted. For this and any other questions about personal data, you can contact us at any time at the address given in the legal notice.

Right to restriction of processing
You have the right to request that the processing of your personal data be restricted. You can contact us about this at any time. The right to restriction of processing applies in the following cases:
-If you dispute the accuracy of your personal data stored by us.
-If the processing was or is unlawful.
-If we no longer need your personal data, but you need it to exercise, defend or assert legal claims.
-If you have objected to the processing.

Right to data portability
You have the right to have data that we process on the basis of your consent or for the performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done where technically feasible.

6. Data security

SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as enquiries you send to us as the website operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the browser’s address bar changing from “http://” to “https://” and by the lock symbol in your browser bar. When SSL or TLS encryption is active, the data you send to us cannot be read by third parties.

Last updated: November 2026