Skip to main content

Data Privacy Notice

The following Data Privacy Notice is intended to inform you about the processing of your personal data by Wilhelm Ewe GmbH & Co. KG (hereinafter referred to as Ewe) and your rights as a data subject under the new EU General Data Protection Regulation (GDPR) and the new German Federal Data Protection Act (BDSG) as of 25th May 2018.

The data controller responsible for processing your personal data

Wilhelm Ewe GmbH & Co. KG

Volkmaroder Str. 19

38104 Braunschweig

Phone +49 531 37005-0

Fax +49 531 37005-55

Data Protection Officer

Our Data Protection Officer is available at:

Anna Bauer

c/o BEL NET GmbH

Christian-Pommer-Str. 23

38112 Braunschweig

Or via E-Mail

Purpose and legal basis for processing

We process your personal data exclusively in accordance with the legal specifications of the EU General Data Privacy Regulation (GDPR), the new German Federal Data Protection Act (BDSG) and any relevant sector-specific laws. Therefore, we only process your data if we have a contractual basis to do so, if you have given us your consent to process your data, or if a law allows or requires us to process your data.

Data processing for the purpose of fulfilling a contract or carrying out pre-contractual measures

We process your personal data which you have provided to us in an inquiry, on a notification sheet, or on an order form if this is necessary to conclude, carry out, or end a contractual relationship with you. In addition to data on the service requested or goods ordered by you, this includes your first name, last name, and customer number.

To ensure we can carry out our contract with you and contact you as quickly as possible if there are any questions or problems, for instance, we also process your address and/or phone number or cell phone number, and/or your e-mail address if you have provided it to us for this purpose.

The legal basis for data processing to fulfil a contract and carry out pre-contractual measures is typically Art. 6 para. 1 lit. b GDPR.

Data processing for the purpose of safeguarding the legitimate interests of the data controller or a third party

We also process your data if this is necessary to safeguard our legitimate interests or the legitimate interests of a third party. We regularly process information under our legitimate interest for the purpose of direct advertisement of our own products, preparing internal statistics, clarifying criminal offences, and taking measures to ensure the proper operation of our IT infrastructure.

The legal basis for data processing to safeguard the legitimate interests of the data controller or a third party is Art. 6 para. 1 lit. f GDPR.

Data processing to fulfil a legal obligation

We also process your data if this is necessary to fulfil a legal obligation that applies to us. The obligations we must fulfil include, in particular, retention periods under tax and commercial law and the Product Liability Act.

The legal basis for processing to fulfil a legal obligation is Art. 6 para. 1 lit. c GDPR in conjunction with the respective relevant legal standard.

Data processing based on consent and for other purposes

We may also process your personal data if you have granted us express consent to do so (cf. Art. 6 para. 1 lit. a GDPR). In such cases, we will provide you additional data privacy law information separately. You can revoke your consent at any time using the contact information above.

If we process your personal data in the future for other purposes not listed under this Data Privacy Notice, we will inform you separately of this in accordance with legal regulations.

Categories of recipients of your personal data

Data processing within the corporate group

In the course of completing our administrative work and carrying out the contract, it may be necessary for us to transmit your personal data to the company in our corporate group responsible for the respective data processing task.

External service providers

Our external service providers who process data on our behalf are contractually obligated in the sense of Art. 28 GDPR to handle your personal data in accordance with applicable regulations. If these companies access your personal data, we have taken legal, technical, and organizational measures and carry out regular controls to ensure that they comply with the regulations of data privacy law.

Official agencies

We will provide your personal data to official agencies if necessary as part of our legal notification obligations.

Data transmission to a third country

In general, we do not transmit your personal data to third countries or international organisations outside of the European Economic Area (EEA). If we do transmit your data to such countries in an individual case, we only transmit data to those third countries for which the European Commission has reached a suitability resolution, or whose level of data privacy is confirmed through suitable or appropriate guarantees (e.g. Binding Corporate Rules or EU standard contractual clauses).

Duration of data storage

We save your personal data only for as long as necessary to carry out the purposes indicated above and for the time period in which we could potentially expect legal claims to be asserted against us. The statute of limitations for such claims may be between three and thirty years in individual cases.

In addition, we save your personal data for as long as we are obligated to do so under statutory certification and retention periods (such as according to the Commercial Code, Tax Law, or Money Laundering Act). Statutory retention periods may be up to ten years. Furthermore, in exceptional cases there may be specialised certification obligations that require us to store your personal data for a longer period of time.

Rights of data subjects

As a data subject, you have the following rights towards us under Art. 15 et seqq. GDPR:

Right to information

You have the right to request information from us as to whether we process your personal information. If so, you have the right to obtain information from us on this personal data.

Right to rectification

You have the right to request that any incorrect personal data on you be rectified

Right to deletion

In certain cases, you have the right to request that your personal data be deleted immediately.

Right to restrict processing

In certain cases, you have the right to request that we restrict processing of your personal data

Right to data portability

You have the right to receive your personal data you have provided to us in a structured, usable, and machine-readable format.

Right to object to processing

You have the right to object to the processing of your personal data for reasons governed by Article 6 para. 1 lit. e or f DSGVO at any time for reasons related to your individual situation. If we use your data for direct advertisement, you can object to this use at any time.

Right to revocation

If you have given us consent to use your personal data, you can revoke this consent at any time.

Data privacy supervising authority

In addition, you can submit a complaint regarding our processing of your personal data to a data privacy supervising authority. The responsible data privacy authority is:

The State Officer for Data Privacy of Lower Saxony
Prinzenstraße 5
30159 Hannover

If you have further questions or remarks, you can contact our Data Protection Officer at any time.

Date: 25/05/2018