Privacy Policy

1. Controller

2. General Data Processing

We process personal data of our users only to the extent necessary to provide a functional website and our content and services. Personal data is generally processed only with the user's consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of data is permitted by law.

Legal bases: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. b GDPR (contract initiation/fulfillment), Art. 6 para. 1 lit. f GDPR (legitimate interests).

3. Hosting & Server Log Files

Our website is hosted by Cloudflare, Inc. When our pages are accessed, the hosting provider automatically stores information in so-called server log files:

• IP address of the requesting computer (anonymised)
• Date and time of access
• Name and URL of the retrieved file
• Browser type and version
• Operating system of the requesting computer
• Referrer URL (previously visited page)

This data cannot be attributed to specific individuals and is automatically deleted after a maximum of 7 days. Legal basis: Art. 6 para. 1 lit. f GDPR.

4. Cookies

This website uses no cookies, neither technically necessary nor optional cookies. Matomo Analytics is configured without cookies (cookieless tracking).

No data is passed on to third parties for advertising purposes.

5. Web Analytics — Matomo

We use Matomo (open-source software) for anonymous visitor statistics. Matomo is self-hosted at walgerworks.de/metrics — no data is transferred to external servers.

• Provider: Self-hosted (Matomo open source)
• Purpose: Anonymous visitor statistics, improving our offering
• Data processed: IP address (truncated), page views, time on site, scroll depth, click events, language, host
• Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in reach measurement)
• Cookies: None — Matomo is configured with disableCookies
• Retention: 13 months
• Opt-out: The “Do Not Track” browser setting is respected

6. Payment Processing — Stripe

We use Stripe for payment processing.

• Provider: Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland
• Purpose: Processing card payments, Apple Pay, Google Pay, Klarna, SEPA, Sofort
• Data processed: Name, email, address, payment instrument, order amount, order number, IP address
• Legal basis: Art. 6 para. 1 lit. b GDPR (contract performance)
• Retention: Subject to Stripe’s own retention periods (statutory obligations)
• Privacy policy: stripe.com/privacy

7. Payment Processing — PayPal

We use PayPal for PayPal payments.

• Provider: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, 2449 Luxembourg
• Purpose: Processing PayPal payments
• Data processed: Name, email, address, PayPal account ID, order amount
• Legal basis: Art. 6 para. 1 lit. b GDPR
• Privacy policy: paypal.com/legalhub/privacy-full

8. Email Delivery — Resend

We use Resend for transactional emails (order confirmations).

• Provider: Resend Inc., 2261 Market Street #4988, San Francisco, CA 94114, USA
• Purpose: Sending order confirmations and transactional emails
• Data processed: Email address, name, order details
• Legal basis: Art. 6 para. 1 lit. b GDPR (contract performance)
• Third-country transfer (USA): EU Standard Contractual Clauses (SCC)
• Privacy policy: resend.com/legal/privacy-policy

9. Invoicing — Lexware Office

We use Lexware Office (Lexoffice) for invoice creation and bookkeeping.

• Provider: Haufe-Lexware GmbH & Co. KG, Munzinger Str. 9, 79111 Freiburg, Germany
• Purpose: Creating and managing invoices, bookkeeping
• Data processed: Full order data, customer name, address, invoice amount
• Legal basis: Art. 6 para. 1 lit. c GDPR (legal obligation — retention requirements)
• Retention: 10 years (statutory retention periods, § 147 AO)
• Privacy policy: lexware.de/datenschutz

10. Bot Protection — Cloudflare Turnstile

We use Cloudflare Turnstile to protect our forms from automated abuse.

• Provider: Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA
• Purpose: Protecting forms against automated abuse (spam, bots)
• Data processed: IP address, user agent, JavaScript browser fingerprint
• Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in security)
• Privacy policy: cloudflare.com/privacypolicy

11. Contact Form

If you send us an inquiry via our contact form, the information provided (name, email address, phone number, vehicle model, message) will be stored for the purpose of processing your inquiry.

The data will not be passed on to third parties and will be used exclusively to process your request. Storage will continue for as long as your inquiry has been fully processed, but at least for the legally required retention period.

Legal basis: Art. 6 para. 1 lit. b GDPR.

12. Embedded Fonts

This website uses the fonts Barlow Condensed and Inter. The fonts are self-hosted on our own server. No connection is made to Google servers or any other third-party servers. No data is transferred to Google or any third parties.

13. Your Rights

Under GDPR, you have the following rights:

• Access – Art. 15 GDPR
• Rectification – Art. 16 GDPR
• Erasure – Art. 17 GDPR
• Restriction of processing – Art. 18 GDPR
• Data portability – Art. 20 GDPR
• Objection – Art. 21 GDPR

To exercise these rights, please contact: info@walgerworks.com

You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the supervisory authority of the German federal state in which our company is headquartered.

14. Data Security

This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. Data that you transmit to us cannot be read by third parties.

15. Changes to this Policy

We reserve the right to update this privacy policy to ensure it always complies with current legal requirements or to reflect changes to our services. Your next visit will then be subject to the updated privacy policy.