Privacy Policy

We take the protection of your personal data very seriously and treat your personal data confidentially and in accordance with the applicable data protection regulations as well as this privacy policy.

(1) In the following, we provide information about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, email addresses, user behavior

(2) The controller pursuant to Art. 4 Para. 7 of the EU General Data Protection Regulation (GDPR) is
DR. KURT WOLFF GMBH & CO. KG
Johanneswerkstraße 34-36
33611 Bielefeld
You can reach our data protection officer at or at our postal address with the addition "the data protection officer."

(3) When you contact us by email or via a contact form, the data you provide (your email address, if applicable your name and phone number, as well as any other personal data you include in your message) will be stored by us in order to answer your questions. The data arising in this context will be deleted once storage is no longer necessary, or processing will be restricted if statutory retention obligations exist. When using a contact form, data processing is carried out with your consent pursuant to Art. 6 Para. 1 S. 1 lit. a GDPR and may be necessary pursuant to Art. 6 Para. 1 S. 1 lit. b GDPR for the processing of your request or pursuant to Art. 6 Para. 1 S. 1 lit. c GDPR to fulfill a legal obligation. When you send us an email, data processing is necessary pursuant to Art. 6 Para. 1 S. 1 lit. b GDPR for the processing of your request and/or pursuant to Art. 6 Para. 1 S. 1 lit. c GDPR to fulfill a legal obligation.

(4) If we use commissioned service providers for individual functions of our offering or wish to use your data for advertising purposes, we will inform you in detail below about the respective processes. We will also specify the defined criteria for the storage period.

You have the following rights – in each case to the extent that the legal requirements are met. To exercise them, you may contact the contact addresses known to you. We would prefer, however, that you use the following address: .

• Art. 15 GDPR – Right of access by the data subject:
  You have the right to request confirmation from us as to whether personal data concerning you is being processed, and if so, what data this is and the specific circumstances of the data processing.
• Art. 16 GDPR – Right to rectification:
  You have the right to request that we immediately correct any inaccurate personal data concerning you. Taking into account the purposes of the processing, you also have the right to request the completion of incomplete personal data – including by means of a supplementary statement.
• Art. 17 GDPR – Right to erasure:
  You have the right to request that personal data concerning you be deleted without undue delay.
• Art. 18 GDPR – Right to restriction of processing:
  You have the right to request that we restrict the processing of your data.
• Art. 20 GDPR – Right to data portability:
  You have the right, in the case of processing based on consent or for the performance of a contract, to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and to transmit that data to another controller without hindrance from us, or to have the data transmitted directly to another controller, to the extent that this is technically feasible.
• Art. 21 GDPR – Right to object:
  You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out on the basis of a legitimate interest on our part or for the performance of a task in the public interest, or in the exercise of official authority.
  If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.To the extent that we process your personal data for the purpose of direct marketing, you have the right to object at any time to the processing for such purposes. If you object to processing for direct marketing purposes, we will no longer process your personal data for those purposes.You may raise the objection at any time with effect for the future via any of the contact addresses known to you.

(1) When using the website for purely informational purposes, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website and to ensure stability and security (the legal basis is Art. 6 Para. 1 S. 1 lit. f GDPR):

• IP address
• Date and time of the request
• Time zone difference from Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status/HTTP status code
• Amount of data transmitted in each case
• Website from which the request originates
• Browser
• Operating system and its interface
• Language and version of the browser software.
  (2) In addition to the data mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and assigned to the browser you are using, through which certain information flows to the party that sets the cookie (here by us). Cookies cannot execute programs or transmit viruses to your computer. They serve to make the internet offering as a whole more user-friendly and effective.
  (3) Use of cookies:
  a) This website uses the following types of cookies, the scope and functionality of which are explained below:
• Transient cookies (see b)
• Persistent cookies (see c).
  b) Transient cookies are automatically deleted when you close your browser. These include in particular session cookies. These store a so-called session ID, which allows various requests from your browser to be assigned to a shared session. This allows your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close your browser.c) Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. You can delete cookies at any time in your browser's security settings.d) You can configure your browser settings according to your preferences and, for example, decline the acceptance of third-party cookies or all cookies. Please note that you may not be able to use all features of this website.e) We use cookies to be able to identify you on subsequent visits.(4) Consent management:With the help of a data privacy management software, we offer you the option to consent to the storage of cookies in a legally compliant manner and to ensure the withdrawal of consent. The consent is documented to fulfill our obligation to provide proof and to technically control the setting of cookies. For this purpose, cookies are used that store your cookie settings on our websites. Your cookie settings can be retained on a subsequent visit to our platforms as long as you have not deleted the cookies beforehand. You can adjust your settings at any time. Mandatory statutory retention periods remain unaffected.Categories of data: In order to obtain, manage and record your consent, your IP address, the date of your consent, a pseudonymous ID and your selected settings are stored.Recipient: OneTrust, 82 St John Street, Farringdon, London EC1M 4JN, United Kingdom ("OneTrust"). OneTrust is based in the United Kingdom. The European Commission has issued an adequacy decision for data transfers to the United Kingdom, which establishes that an adequate level of protection exists for the processing of personal data.Third-country transfer: Data may be transferred by OneTrust to sub-processors in third countries. For these purposes, OneTrust has concluded standard contractual clauses with the respective recipients, unless an adequate level of protection exists based on a Commission decision. You can access the standard contractual clauses here (), here () and here ().Legal bases: The legitimate interest in pursuing the stated purposes (Art. 6 Para. 1 S. 1 lit. f. GDPR).Storage period: The data is stored for 365 days and then deleted.Privacy policy:

(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested. For this, you generally need to provide additional personal data, which we use to provide the respective service and to which the aforementioned principles of data processing apply.
(2) In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions, and are regularly monitored.
(3) Furthermore, we may pass on your personal data to third parties if promotions, sweepstakes, contract conclusions, or similar services are offered jointly with partners. You will receive more detailed information about this when you provide your personal data or below in the description of the offering (e.g. in the respective terms of participation).
(4) To the extent that our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the offering.

(1) If you wish to place an order in our web shop available at , it is necessary for the conclusion of the contract that you provide your personal data, which we require for the processing of your order. Mandatory information necessary for the processing of contracts is marked separately; additional information is voluntary. We process the data you provide in order to handle your order.

(2) Use of service providers for order processing

Purposes: To process your order, we use the service provider Plentymarkets. Your data is passed on exclusively for the purpose of order processing and only to the extent necessary for this purpose. Only the information provided during the ordering process is passed on. The service provider collects and stores the data and only passes it on to the companies involved in order processing, in particular logistics.

Categories of data: First name, last name, address and email address are processed.

Recipient: plentysystems AG, Johanna-Waescher-Straße 7, 34131 Kassel, Germany, (Plentymarkets)

Third-country transfer: Data may be transferred by Plentymarkets to sub-processors in third countries. For these purposes, Plentymarkets has concluded standard contractual clauses with the respective recipients, unless an adequate level of protection exists based on a Commission decision. You can access the standard contractual clauses here, here and here.

Legal bases: Art. 6 Para. 1 b GDPR, as the processing of the data is necessary for the processing of the order and thus for the performance of the contract.

Storage period: The data is generally processed until the respective order has been completed and is automatically deleted three months after the order has been processed.

Privacy policy:

(1) With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The advertised goods and services are named in the consent declaration.
(2) For registration to our end-customer newsletter, we use the so-called double opt-in procedure. This means that after your registration, we send you an email to the provided email address in which we ask you to confirm that you wish to receive the newsletter. In addition, we store your IP addresses used and the times of registration and confirmation. The purpose of this procedure is to be able to verify your registration and, if necessary, to clarify any possible misuse of your personal data.
(3) The only mandatory information required for sending the newsletter is your email address. The provision of additional, separately marked data is voluntary and is used to be able to address you personally. After your confirmation, we store your email address for the purpose of sending the newsletter. The legal basis is Art. 6 Para. 1 S. 1 lit. a GDPR.
(4) You can withdraw your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare the withdrawal by clicking on the link provided in every newsletter email or by sending a message to the contact details provided in the legal notice.
(5) We would like to point out that we evaluate your user behavior when sending the newsletter. For this evaluation, the emails sent contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. For the evaluations, we link the data mentioned in § 3 and the web beacons with your email address and an individual ID. Links contained in the newsletter also contain this ID. Such tracking is also not possible if you have disabled the display of images by default in your email program. In this case, the newsletter will not be displayed to you in full and you may not be able to use all functions. If you manually display the images, the above-mentioned tracking will take place.
Categories of data:

• Consent data (name, date of birth, email address, time, IP address)
• Usage data (opened email, clicked links)
• Personalization data (...)
  Recipient: JUNE Online Marketing GmbH, Große Johannisstraße 3, 20457 Hamburg, Germany
  For sending our newsletter, we use the data processor JUNE Online Marketing GmbH. Your data is transmitted to JUNE and processed there on our behalf. For these purposes, we have concluded a DPA with JUNE Online Marketing GmbH.Privacy policy: Legal bases: Art. 6 Para. 1 b GDPR, as the processing of the data is necessary for the processing of the order and thus for the performance of the contract.(6) Even if you have not subscribed to our newsletter, we may send you advertising for our own similar goods or services by electronic mail (email) after you have purchased one or more products from us, to the extent that you have not objected to this use of your data.You will be clearly and explicitly informed at the time your contact data is collected and with each use that you can object to this use at any time, without incurring any costs other than the transmission costs at the basic rates.You can object to this advertising at any time with effect for the future by:

We use additional services on this website in the area of web analytics, monitoring and optimization.
Purposes: Web analytics is used to evaluate visitors to our online offering and can include behavior, interests or demographic information about visitors, such as gender, in pseudonymous form. This allows us, for example, to identify at what times our online offering or its functions or content are used most frequently. Furthermore, we can identify which areas require optimization. In addition to web analytics, we can also use testing procedures to, for example, test and optimize different versions of our online offering or its components.
Categories of data:

• Interests
• Pseudonymous usage data (e.g. websites visited and elements used there), usage interactions (e.g. recordings of mouse movements, clicks, scrolling behavior and depth, and interactions with website elements)
• Technical data (e.g. device information, operating system, browser (type, version), screen resolution and language settings)
• Meta/communication data (e.g. IP address, referrer URL (the previously visited page) as well as date and time of access)
  Where possible, we use an IP masking procedure (i.e. pseudonymization by shortening the IP address)
• Demographic & geographic data (e.g. geographic localization from the IP address)
  If users have consented to the collection of their location data, this may also be processed depending on the provider.
  Service providers used:
  (1) Google services
  We use the following services from the provider Google in the area of web analytics, monitoring and optimization:
• Google Analytics
• Google Adwords
• DoubleClick
  Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
  Third-country transfers: Data may be transferred by Google to recipients in third countries. Google has concluded standard contractual clauses with the respective recipients for these purposes, unless an adequate level of protection exists based on a Commission decision. You can access the standard contractual clauses here (), here () and here ().Privacy policy: (2) SentryProvider: Functional Software Inc., 132 Hawthorne Street, San Francisco, CA 94107, USAThird-country transfers: Data may be transferred by Sentry to recipients in third countries. Sentry / Functional Software is an active participant in the EU-US Data Privacy Framework, which governs the correct and secure transfer of personal data of EU citizens to the USA. Sentry has also concluded standard contractual clauses with the respective recipients, unless an adequate level of protection exists based on a Commission decision. You can access the standard contractual clauses here (), here () and here ().Privacy policy: (3) Microsoft ClarityPurpose: Microsoft Clarity is an analytics tool that provides us with insights into user behavior through the creation of so-called "heatmaps" and the recording of individual usage sessions (session replays).These analyses help us to identify usage patterns, detect technical errors and specifically optimize the design and content of our website.

We use additional services on this website in the area of remarketing and conversion tracking.

Purposes: We use various remarketing and conversion tracking technologies on our website. This allows us to present users with advertisements based on their interests. We analyze the interactions of users on our website and can thus display targeted advertising to users on other websites or platforms even after their visit to our website. We also receive information from the respective platforms about the success of our advertising campaigns, which we in turn use to optimize our advertising measures.

Categories of data:

• Pseudonymous usage data (e.g. websites visited and elements used there as well as technical information, access times), meta/communication data (e.g. device information).
• Interests
• Demographic information
• If users have consented to the collection of their location data, this may also be processed depending on the provider.

Service providers used:

(1) Google services
We use the following services from the provider Google in the area of web analytics, monitoring and optimization:

• Google Analytics
• Google Adwords
• Google Remarketing
• DoubleClick

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may be transferred by Google to recipients in third countries. Google has concluded standard contractual clauses with the respective recipients for these purposes, unless an adequate level of protection exists based on a Commission decision. You can access the standard contractual clauses here (), here () and here ().

Last updated: 01.12.2025