Source: https://www.wwag.com/cgi-bin/WebObjects/WebSite.woa/wa/DirectAction?page=PrivacyPolicy
Timestamp: 2019-04-23 01:01:47+00:00

Document:
Isabella Schober, W&W Cycles AG, Ohmstraße 2, 97076 Würzburg, Germany; telephone: +49 / (0) 931 / 250 61 711; email: ischober@wwag.com.
The user data collected by cookies that is technically necessary is not used to compile user profiles.
These purposes represent our legitimate interest in the processing of personal data according to Art. 6 paragraph 1 point (f) GDPR.
In addition, we use Google Analytics, a web analysis service by Google Inc, (1600 Amphitheatre Parkway Mountain View, CA 94043, USA; "Google"). We use the "Universal Analytics" version. This allows us to assign data, sessions and interaction across several devices to a pseudonymised user ID and therefore to analyse the activities of a user on any device.
Google Analytics uses "cookies," which are text files placed on your computer that enable an analysis of your use of the website. The information generated by the cookie about your use of this website, for instance browser type/version, operating system used, referrer URL (last visited page), host name of the accessing computer (IP address), time of server request, is generally transmitted to and stored on a Google server in the United States. The IP address transmitted by your browser within the scope of Google Analytics will not be associated with any other data held by Google. Further, we have added the code "anonymizeIP" to Google Analytics on this website. This ensures masking of your IP address, so that all data is collected anonymously. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and truncated there.
the data and time of registration.
You may also make contact us via the email address, telephone or fax numbers provided. If you do so, your personal data associated with your email address, telephone or fax numbers will be stored. This data will not be passed on to third parties. The data will be used exclusively for processing the correspondence or conversation.
The legal grounds for processing the data provided via the contact form, or for processing the data transferred during communication by email, telephone or fax, are set out in Art. 6 paragraph 1 point (f) GDPR.
The personal data you provide in the contact form, in emails, in telephone conversations or by fax is used by us exclusively to process your enquiry. This represents our legitimate interest in data storage according to Art. 6 paragraph 1 point (f) GDPR, as we are unable to communicate with you if we do not store the data. Any other personal data that is processed when you send us the contact form is used to prevent abuse of the contact form and to protect the security of our information technology systems.
The data is erased as soon as the purpose of its storage no longer applies. This applies to the personal data in the input screen of the contact form and to the data transmitted to us by email, telephone or fax, once the respective conversation or correspondence with the user is complete. A conversation or correspondence is deemed complete when the circumstances indicate that the matter at hand has been clarified definitively. Any additional personal data collected during the sending process will be deleted after seven days at the latest. This period begins when the conversation or correspondence has ended.
The provision of data is stipulated neither by law nor by contract if you use the contact form or email merely to make contact with us. Neither is this data necessary for the conclusion of a contract. You are not required to provide this data. We are unable to make contact with you and answer your questions if you object to the provision of this data.
Salutation, first name and surname, address, delivery address, telephone number, email address and method of payment (cash on delivery, on account, credit card, PayPal) and password.
During the registration process, the user will be asked to grant consent for the processing of this data. This data will not be passed on to third parties. The data will be used exclusively for creating a customer account.
The legal grounds for processing the data where the user has provided consent are set out in Art. 6 paragraph 1 point (a) GDPR. However, this applies only to registration without the intention to conclude a contract.
Users must register on our website to access certain content and services. By registering, you will have access to our shopping basket function and will be able to place items in your shopping basket. This will allow you to compile individual products that interest you. The shopping basket is individual, so user identification is necessary.
The data is erased as soon as the purpose of its storage no longer applies. This applies to the data collected during the registration process insofar as the registration on our Internet page is cancelled or altered.
As a user, you are entitled at any time to close your account. You may alter the data stored about you at any time. To do this, you can use the delete button in your customer account and/or alter the information in your customer account. The provision of your data is neither stipulated by law nor by contract if you are registering merely to use a customer account, without the intention of concluding a contract. Neither is this data necessary for the conclusion of a contract. You are not required to provide this data. If you object to the provision of data, you will not be able to register and create a customer account.
Salutation, first name and surname, address, delivery address, telephone number, email address and method of payment (cash on delivery, on account, credit card, PayPal).
We are unable to accept any orders without this data.
In the event of a contract being concluded, the data processed by us will be forwarded to logistics service providers in the form of title, first and last name, address, delivery address in order to send the goods to you. Moreover, if you have selected payment by PayPal, we will redirect you to the payment service provider PayPal (Europe) S.à r.l. et Cie, S.C.A.; we will redirect you to the payment service provider Computop GmbH if you select payment by credit card.
W&W Cycles AG will also pass on the personal data of customers to the following categories of recipient, insofar as this is necessary for the fulfilment of your order: assignees, payment service providers (especially our banks and banking institutions), logistics providers, third-party debtors, residents' registration officers, courts, bailiffs, solicitors, credit agencies.
The legal grounds for the processing of data in the order of products and pre-contractual enquiries with the intention to conclude a contract are set out in Art. 6 paragraph 1 point (b) GDPR.
Processing as described above is necessary for the performance of a contract with the user or for the completion of pre-contractual measures. We are unable to conclude a contract with you in the absence of this data.
The data is erased as soon as the purpose of its storage no longer applies. This applies to the duration of contractual performance. Following payment of receivables for the order of products, we check after 2 years, counting from the end of the year in which the order was placed, whether we still require your data and whether erasure would be precluded by statutory retention periods, in particular according to Section 257 German Commercial Code (HGB) and Section 147 German Fiscal Code (AO). Where registration was made and orders were placed via the customer account on our web shop, the data collected during the registration process will be stored even after the fulfilment of the order process and the retention period, until such time as the registration on our website has been cancelled or altered.
According to Section 2 (2) of our Terms and Conditions, you are obliged to provide the data listed in this section. The data is necessary for the conclusion of the contract and for the completion of the pre-contractual measures, especially for the submission of a valid offer to us. If you do not provide the data, we will be unable to conclude a contract for the products, i.e. you will be unable to submit an a valid offer to us. Section 5 (e)(5) of this notice shall otherwise apply.
(8)	the existence of automated decision-making, including profiling, referred to in Article 22 paragraphs 1 and 4 and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
(4) you have objected to processing pursuant to Article 21 paragraph 1 GDPR and it is not yet ascertained whether the legitimate grounds of the controller override your own.
(2) You withdraw consent on which the processing is based according to point (a) of Article 6 paragraph 1 or of point (a) of Article 9 paragraph 2 GDPR, and where there is no other legal ground for the processing.
(3) You object to the processing pursuant to Article 21 paragraph 1 and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21 paragraph 2 GDPR.
(6) The personal data concerning you has been collected in relation to the offer of information society services referred to in Article 8 paragraph 1 GDPR.
When you order products from us and wish to make payment by credit card, we apply an automated decision-making process to check that your credit card is valid. The order process cannot continue if it is not valid. This check is necessary according to Art. 22 paragraph 2 point (a) GDPR for the conclusion and performance of a contract between us. Therefore, Art. 22 paragraphs 1 or 4 GDPR do not apply in this case.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 22
 Art. 22