Privacy Policy
Last updated:
Privacy Policy
We are pleased about your interest in our homepage and our company. Protecting your personal data is our highest priority, which is why we would like to inform you below about how WLO.social GmbH (hereinafter WLO.social) collects, uses, stores, shares, and protects your data.
This privacy policy was last updated on: 06.02.2023
In the event of changes to this privacy policy, we will publish the amended policy and the effective date of the amended policy on this website. We therefore recommend that you read it at regular intervals. Changes affecting consent granted by you will only be implemented by obtaining your consent again. This privacy policy is valid from 06.02.2023.
1. Controller within the meaning of the GDPR
The controller within the meaning of the General Data Protection Regulation is:
WLO.social GmbH, Salzufer 8, 10587 Berlin, Germany
Tel.: +49 152 0761 2305
Email: Datenschutz@wlo.social.
If you have any questions regarding data protection matters that are not answered in this privacy policy, or if you would like further information, please feel free to write to us at Datenschutz@wlo.social.
2. General Information on Data Processing
We take the protection of your personal data very seriously. Therefore, we process it exclusively in accordance with the General Data Protection Regulation (GDPR) and other national data protection laws. This is necessary to provide a functioning website. It also enables us to provide you with our content and services. Processing of personal data generally takes place only if you have given your consent. An exception applies only if consent cannot be obtained for factual reasons and statutory provisions permit the processing of data.
Data processing only takes place to the extent that it is lawful. Lawfulness exists if at least one condition mentioned in Art. 6 para. 1 GDPR is met. We delete your data as soon as the purpose of storage no longer applies or a period prescribed by statutory provisions (usually 7 days) has expired. You have the right to object to data processing with effect for the future at any time. To do so, please send us a written declaration of revocation by mail or by email.
Our services are not directed at children under the age of 13, and we do not knowingly collect data from anyone under 13. If we discover during data collection that the data belongs to a child under 13, we will not process or retain it without the consent of the legal guardian. If we have nevertheless processed a child's data at some point, we will make every effort to remove this information from our systems.
3. Log Files
When you access our website, our system automatically collects data and information from your computer system. The following data is collected:
a. browser types and versions used,
b. the operating system used by the accessing system,
c. the website from which an accessing system reaches our website (so-called referrers),
d. the sub-pages accessed via an accessing system on our website,
e. the date and time of access to the website,
f. a shortened Internet Protocol address (anonymized IP address),
g. the internet service provider of the accessing system.
This data is stored in our system's log files. This data is not stored together with other personal data.
The storage in log files is done to ensure the functionality of our website. In addition, we use the data to optimize our website and to ensure the security of our information technology systems. No analysis of the data for marketing purposes takes place in this context.
These purposes also constitute our legitimate interest in data processing pursuant to Art. 6 para. 1 lit. f) GDPR. The stored data is deleted as soon as its purpose has been fulfilled. If the data is collected to provide the website, its purpose is achieved when the session is ended. Since the collection of data for the provision of the website and the storage of data in log files is essential for the operation of the website, you have no option to object.
4. Cookies
We use so-called "cookies" on our website. These are text files that are stored on your end device. Some of the cookies we use, so-called session cookies, are deleted immediately when you close your browser, i.e., end the session. Other cookies remain stored on your end device and enable us and our third-party providers to recognize your browser on your next visit to our website (persistent cookies). Set cookies are processed to an individual extent and collect data such as browser and location data as well as IP address values. Persistent cookies are automatically deleted after a prescribed duration.
Cookies serve to make your visit to our website attractive and to enable the use of certain functions. Insofar as the cookies set by us process personal data, the processing is lawful pursuant to Art. 6 para. 1 lit. b) GDPR either for contractual purposes or pursuant to Art. 6 para. 1 lit. f) GDPR to safeguard our legitimate interests in a user-friendly website.
You can find out more below about the cookies collected by third-party providers and the respective type and scope of data processing (see 5, 6, and 7).
To prevent cookies from being set, you can configure your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or generally exclude the acceptance of cookies for certain cases. The type of browser setting varies for each browser. You can find a description of cookie settings for the respective browser under the following links:
Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/de/latest/web-preferences/
Please note that if you do not accept cookies, the functionality of our website may be limited.
Attached is a list of our cookies:
Cookie name
Example value
Expiration time
Type
Domain
Provider name
Privacy Policy
MUID
252FF33BDDF96DAE1F10E2D3DC506C...
Session
Marketing
bing.com
Microsoft Advertising / Bing Ads
bcookie
"v=2&10bc16cc-b7cb-4c4e-8353-a...
Session
Function
linkedin.com
li_gc
MTswOzE2NTg0Mjg2NzQ7MjswMjEZLu...
Session
Function
linkedin.com
lidc
"b=TGST05:s=T:r=T:a=T:p=T:g=25...
Session
Function
linkedin.com
FPID
FPID2.2.xX8LHvGwc4Cn6aFcARNJ4g...
730 days
Measurement
wlo.social
Google Analytics
FPLC
X9cis8wAtAPP3cBzZvlsVVw1XNl0Dr...
20 hours
Measurement
wlo.social
Google Analytics
__cmpconsent*
BPm11YCPm11YCAfTjBENDXAAAAAAAA
Session
Function
wlo.social
consentmanager
_clck
j65js3|1|f8x|0
365 days
Function
wlo.social
Microsoft Clarity
_clsk
1vkmra6|1675777383380|1|1|a.cl...
1 day
Function
wlo.social
Microsoft Clarity
_ga_*
deleted
730 days
Measurement
wlo.social
Google Analytics
_ga
GA1.1.1303040476.1676194672
730 days
Measurement
wlo.social
Google Analytics
PHPSESSID
5ar424a2275gi69ec3b23ng60u
Session
Function
www.wlo.social
[unknown]
-
__cmpconsent*
BPm1qcBPm1qcBAfTjBITDXAAAAAAAA
Persistent
Function
www.wlo.social
consentmanager
5. Tracking and Advertising
Attached is a list of the vendors we use:
consentmanager
Facebook (Meta)
Google Ads
Google Analytics
Google General
Google Maps
Google Tag Manager
Microsoft Advertising / Bing Ads
Microsoft Clarity
If you want to change your consent settings, please click here.
6. SSL/TLS Encryption
This site uses SSL or TLS encryption to ensure the security of data processing and to protect the transmission of confidential content, such as orders, login details, or contact requests that you send to us as the operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
7. Contact via Email
There is a contact form on our website that you can use to contact us electronically. If you take advantage of this option, the data entered in the input mask will be transmitted to us and processed. This data includes:
Name
Email address
Phone number
http:// – Website address
Other personal data entered in the message text field. In the process of sending this message, the following data is stored:
IP address
Date and time of registration
Add other data. Your consent is obtained during the sending process for processing the data, and reference is made to this privacy policy. Alternatively, you can contact us via the following email address: josef.raasch@wlo.social
Add other email addresses through which the website visitor can make contact
In this case, we process and store the personal data transmitted via email. This will generally be your email address and any other information you choose to disclose. Such data processing is necessary for managing the conversation. The data processing is based on our legitimate interest within the meaning of Art. 6 para. 1 lit. f) GDPR and is thus lawful, provided that your rights are not unreasonably restricted. If the contact aims at the conclusion of a contract, the processing is lawful pursuant to Art. 6 para. 1 lit. b) GDPR. If you provide further data unsolicited, the processing is based on your consent within the meaning of Art. 6 para. 1 lit. a) GDPR. We delete this data as soon as the conversation has ended and there is no further purpose for storage. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively resolved. All other data transmitted during the sending process will be deleted after a maximum period of 7 days. The data processing can be objected to by sending a written declaration of revocation of data processing to josef.raasch@wlo.social.
8. Disclosure of Data by Us
We disclose personal data to fulfill legal obligations, to investigate complaints about offers or content that violate the rights of third parties, and to protect the rights, property, or safety of others. The disclosure of this data takes place exclusively in accordance with applicable laws. As stated above, we do not disclose your personal data to third parties for their marketing purposes without your explicit consent.
We are also authorized to share your personal data with law enforcement or regulatory authorities or authorized third parties in response to an information request in connection with an investigation or suspicion of a criminal offense, an illegal act, or other acts that may result in legal liability for us, you, or another user. In such cases, we will disclose data necessary for the investigation, such as name, city, zip code, phone number, email address, previous usernames, IP address, fraud complaints, and offer history.
9. Rights of the Data Subjects
The applicable data protection law grants you, as a data subject, comprehensive rights (information and intervention rights) vis-à-vis the controller regarding the processing of your personal data, about which we inform you below:
9.1. Right to confirmation, Art. 15 para. 1 sentence 1 GDPR:
The data subject has the right to obtain confirmation from the controller as to whether or not personal data concerning them is being processed.
9.2. Right to access, Art. 15 para. 1 sentence 2 GDPR:
If personal data of the data subject is processed, they have the right to access this personal data and the following information:
a. the purposes of the processing;
b. the categories of personal data concerned;
c. the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
d. where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
e. the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
f. the right to lodge a complaint with a supervisory authority;
g. where the personal data are not collected from the data subject, any available information as to their source;
h. the existence of automated decision-making, including profiling, referred to in Article 22 paragraphs 1 and 4 and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
9.3. Right to rectification and completion, Art. 16 GDPR:
The data subject has the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning them. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by means of providing a supplementary statement.
9.4. Right to erasure (Right to be forgotten), Art. 17 GDPR
The data subject has the right to obtain from the controller the erasure of personal data concerning them without undue delay, and the controller is obliged to erase personal data without undue delay where one of the following grounds applies:
a. The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
b. The data subject withdraws consent on which the processing is based according to Article 6 paragraph 1 point a or Article 9 paragraph 2 point a, and where there is no other legal ground for the processing.
c. The data subject objects to the processing pursuant to Article 21 paragraph 1 and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21 paragraph 2.
d. Objection to processing.
e. The personal data have been unlawfully processed.
f. The personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
g. The personal data have been collected in relation to the offer of information society services referred to in Article 8 paragraph 1.
However, the aforementioned does not apply to the extent that processing is necessary for legal purposes (see 8.).
9.5. Right to restriction of processing, Art. 18 GDPR:
The data subject has the right to obtain from the controller restriction of processing where one of the following applies: a. the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data,
b. the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
c. the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise, or defense of legal claims, or
d. the data subject has objected to processing pursuant to Article 21 paragraph 1 pending the verification whether the legitimate grounds of the controller override those of the data subject.
Where processing has been restricted under these conditions, such personal data shall, with the exception of storage, only be processed with the data subject's consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
A data subject who has obtained restriction of processing shall be informed by the controller before the restriction of processing is lifted.
9.6. Right to data portability, Art. 20 GDPR
The data subject has the right to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used, and machine-readable format and has the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where:
a. the processing is based on consent pursuant to Article 6 paragraph 1 point a or Article 9 paragraph 2 point a or on a contract pursuant to Article 6 paragraph 1 point b; and
b. the processing is carried out by automated means. In exercising their right to data portability, the data subject has the right to have the personal data transmitted directly from one controller to another, where technically feasible.
9.7. Right to object, Art. 21 GDPR:
The data subject has the right to object, on grounds relating to their particular situation, at any time to processing of personal data concerning them which is based on Art. 6 para. 1 lit. e) and f) GDPR, including profiling based on those provisions. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject or for the establishment, exercise, or defense of legal claims.
9.8. Right to withdraw consent, Art. 7 para. 3 GDPR:
The data subject has the right to withdraw their consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Prior to giving consent, the data subject shall be informed thereof. It shall be as easy to withdraw as to give consent.
9.9. Right to lodge a complaint, Art. 77 para. 1 GDPR
Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or place of the alleged infringement if the data subject considers that the processing of personal data relating to them infringes this Regulation.
10 Website Content
10.1 Data Processing for Order Management
The personal data collected by us will be passed on to the transport company commissioned with the delivery within the scope of contract management, as far as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution within the scope of payment processing, if this is necessary for payment processing. If payment service providers are used, we explicitly inform about this below. The legal basis for the transfer of data is Art. 6 para. 1 lit. b GDPR.
10.2 Contact / Contact Form
Personal data is collected when you contact us (e.g., via contact form or email). Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used to respond to your request or for contacting you and the associated technical administration; additionally, data is stored for statistical purposes. The legal basis for processing the data is our legitimate interest in responding to your request pursuant to Art. 6 para. 1 lit. f GDPR. If your contact aims at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after final processing of your request, which is the case if it can be inferred from the circumstances that the matter in question has been conclusively resolved and provided that no statutory storage obligations prevent this.
10.3 Services / Digital Goods
We only transmit personal data to third parties if this is necessary within the scope of contract management, for example, to the credit institution commissioned with the payment processing. No further transmission of the data takes place or only if you have expressly consented to the transmission. Your data will not be passed on to third parties without express consent, such as for advertising purposes.
The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.
10.4 Comment Function Blog
We offer users on a blog, which is located on our website, the opportunity to leave individual comments on individual blog posts. A blog is a portal run on a website, usually publicly viewable, in which one or more people, called bloggers or web bloggers, can post articles or write down thoughts in so-called blog posts. The blog posts can usually be commented on by third parties.
If you leave a comment on the blog published on this website, in addition to your comments, information about the time the comment was entered and the username (pseudonym) you selected will be stored and published. Furthermore, the IP address assigned by your internet service provider (ISP) is logged. This storage of the IP address is done for security reasons and in the event that you violate the rights of third parties or post illegal content through a comment. The storage of this personal data is therefore in our own interest, so that we can exculpate ourselves in the event of an infringement. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. This collected personal data is not passed on to third parties, unless such disclosure is required by law or serves our legal defense.
10.5 Application Management / Job Board
We collect and process the personal data of applicants for the purpose of managing the application process. The processing can also be done electronically. This is particularly the case if an applicant submits corresponding application documents to us electronically, for example, by email or via a web form located on the website. If we conclude an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with statutory provisions. If no employment contract is concluded with the applicant by us, the application documents will be automatically deleted six months after notification of the rejection decision, provided that no other legitimate interests on our part prevent deletion. Other legitimate interest in this sense is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG). Data processing takes place solely on the basis of our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.
