Legal

Privacy Policy

We take the protection of your personal data seriously. This policy explains how IWR International GmbH processes personal data in connection with this website, in accordance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

01

Controller

The controller responsible for data processing on this website within the meaning of the GDPR is:

IWR International GmbH

An Groß St. Martin 7

50667 Cologne, Germany

Phone: +49 (221) 718 230 90

Email: contact@iwr-international.com

02

Overview of Data Processing

This website is primarily an informational presence. We process personal data only to the extent necessary to provide a functional website and its content, and to respond to enquiries you send us.

Categories of data

  • Technical access data automatically transmitted by your browser (e.g. IP address, user agent, referrer, timestamp).
  • Contact data you voluntarily provide when contacting us by email (e.g. name, email address, message content).
03

Legal Bases

We process personal data on the following legal bases under Art. 6(1) GDPR:

  • Art. 6(1)(a) GDPR — where you have given consent.
  • Art. 6(1)(b) GDPR — where processing is necessary to perform a contract or to take pre-contractual steps at your request.
  • Art. 6(1)(c) GDPR — where processing is required to comply with a legal obligation.
  • Art. 6(1)(f) GDPR — where processing is necessary for our legitimate interests (e.g. secure and reliable operation of the website), provided your interests do not override ours.
04

Hosting and Server Log Files

This website is hosted by a service provider that processes technical data on our behalf as a processor within the meaning of Art. 28 GDPR. When you visit the site, our hosting provider automatically collects and stores information in server log files transmitted by your browser:

  • Browser type and version
  • Operating system
  • Referrer URL
  • Hostname of the accessing device
  • Time of the server request
  • IP address

This data is not merged with other data sources. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is a technically reliable, stable and secure presentation of the website. Log data is deleted or anonymised as soon as it is no longer required and, at the latest, after 30 days, unless further retention is required to investigate security incidents.

05

Contact by Email

If you contact us by email, we process the data you provide (in particular your email address, name and the content of your message) solely to handle your enquiry and any follow-up questions. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or pre-contractual measures, and otherwise Art. 6(1)(f) GDPR based on our legitimate interest in responding to enquiries addressed to us. We retain this data until the purpose of processing ceases (e.g. once your enquiry has been handled), unless mandatory statutory retention obligations apply.

06

Cookies

This website uses only technically necessary session storage required to operate the site. It does not use tracking cookies, advertising cookies or third-party analytics. Any strictly necessary storage relies on Section 25(2) TTDSG and Art. 6(1)(f) GDPR. Should we introduce non-essential cookies or tracking in the future, we will obtain your prior consent (Section 25(1) TTDSG, Art. 6(1)(a) GDPR) via a consent banner.

07

Google Fonts (Consent-Based)

This website uses web fonts provided by Google Fonts, a service of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. The fonts (Space Grotesk, Inter, JetBrains Mono) are not self-hosted; they are loaded from Google servers (fonts.googleapis.com and fonts.gstatic.com). When these resources are requested, your browser transmits certain data to Google, in particular your IP address, information about your browser and operating system, and the referring page. This may involve the transfer of personal data to the United States. Google is certified under the EU-U.S. Data Privacy Framework; where applicable, transfers are additionally safeguarded by EU Standard Contractual Clauses (Art. 46 GDPR).

Google Fonts are loaded only after you provide consent via our cookie/consent banner on your first visit. Legal basis is Art. 6(1)(a) GDPR (consent) and, for the storage of your consent decision on your device, Section 25(1) TTDSG. If you decline, the fonts are not loaded and the site is displayed using your operating system's default fonts. You can withdraw your consent at any time by clearing this site's storage in your browser; the banner will then reappear on your next visit. For further information please refer to the Google Privacy Policy.

08

Recipients and International Transfers

Personal data is only disclosed to third parties where necessary, permitted by law or where you have consented. Recipients may include IT and hosting service providers acting as processors under Art. 28 GDPR. Where processors are located outside the European Economic Area, we ensure an adequate level of protection through appropriate safeguards such as EU Standard Contractual Clauses (Art. 46 GDPR) and, where relevant, supplementary measures.

09

Retention

We store personal data only for as long as necessary for the purposes for which it was collected, or as required by statutory retention obligations (in particular under German commercial and tax law, typically 6 or 10 years).

10

Your Rights

Subject to the conditions set out in the GDPR, you have the following rights in relation to your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)
  • Right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR)

To exercise these rights, please contact us using the details in Section 1. You also have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement (Art. 77 GDPR).

11

SSL/TLS Encryption

For security and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the "https://" prefix in the address bar and the lock icon in your browser.

12

Objection to Promotional Emails

We hereby object to the use of contact data published as part of our imprint obligations for the purpose of sending unsolicited advertising and information materials. We expressly reserve the right to take legal action in the event of the unsolicited sending of advertising, such as spam emails.

13

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our services or legal requirements. The current version is always available on this page.