Personal data information

Privacy notice

How Weltnexx processes website, quotation, sales and application data under the GDPR, including retention, recipients and your rights.

Last updated
09.10.2026

Personal data information

Privacy notice

1. Controller and contactThe controller is Weltnexx Import & Export GmbH, Oppenhoffallee 143, 52066 Aachen, Germany. Privacy enquiries and rights requests can be sent to info@weltnexx.com. This notice covers website access, contact and quotation enquiries, sales, partnership and career applications. A business representative's contact details can also be personal data.

The controller is Weltnexx Import & Export GmbH, Oppenhoffallee 143, 52066 Aachen, Germany. Privacy enquiries and rights requests can be sent to info@weltnexx.com. This notice covers website access, contact and quotation enquiries, sales, partnership and career applications. A business representative's contact details can also be personal data.

2. Website access and securityIP address, access time, requested resource, response status and browser/device information may be processed by the infrastructure to deliver the website, investigate errors and prevent abuse. Necessary and proportionate security and continuity processing relies on legitimate interests under GDPR Article 6(1)(f). Unnecessary personal information should not be added to technical logs. Vercel's approximate country information suggests a country in forms; it does not automatically change the website language or identify precise location.

IP address, access time, requested resource, response status and browser/device information may be processed by the infrastructure to deliver the website, investigate errors and prevent abuse. Necessary and proportionate security and continuity processing relies on legitimate interests under GDPR Article 6(1)(f). Unnecessary personal information should not be added to technical logs. Vercel's approximate country information suggests a country in forms; it does not automatically change the website language or identify precise location.

3. Contact and quotation enquiriesName, company, email, telephone, language, country, subject, message, product reference, quantity and submitted documents are used to assess and answer the enquiry. Data necessary for the person's own contract or requested pre-contractual steps relies on Article 6(1)(b); necessary business communication with a company representative relies on legitimate interests under Article 6(1)(f). Statutory record duties are assessed under Article 6(1)(c), and necessary protection of legal claims under Article 6(1)(f). Sending an enquiry is not subscribing to advertising or purchasing a product.

Name, company, email, telephone, language, country, subject, message, product reference, quantity and submitted documents are used to assess and answer the enquiry. Data necessary for the person's own contract or requested pre-contractual steps relies on Article 6(1)(b); necessary business communication with a company representative relies on legitimate interests under Article 6(1)(f). Statutory record duties are assessed under Article 6(1)(c), and necessary protection of legal claims under Article 6(1)(f). Sending an enquiry is not subscribing to advertising or purchasing a product.

4. Sales and delivery coordinationNecessary contact, order and delivery data is processed to assess requests and perform sales and delivery. Processing necessary for the individual’s contract relies on GDPR Article 6(1)(b), necessary proportionate representative communication on 6(1)(f), and statutory obligations on 6(1)(c). Necessary recipient categories are described below.

Necessary contact, order and delivery data is processed to assess requests and perform sales and delivery. Processing necessary for the individual’s contract relies on GDPR Article 6(1)(b), necessary proportionate representative communication on 6(1)(f), and statutory obligations on 6(1)(c). Necessary recipient categories are described below.

5. Career applicationsName, contact details, CV, experience, introduction and an optional professional profile are processed to assess the application and communicate with the candidate. Necessary recruitment processing relies on section 26(1) BDSG and, where applicable, GDPR Article 6(1)(b); necessary records for legal claims are assessed under Article 6(1)(f). Please do not submit health records, identity copies or unnecessary sensitive information. Applying does not enrol you in an indefinite talent pool or authorise marketing; these uses require separate information and an appropriate legal basis.

Name, contact details, CV, experience, introduction and an optional professional profile are processed to assess the application and communicate with the candidate. Necessary recruitment processing relies on section 26(1) BDSG and, where applicable, GDPR Article 6(1)(b); necessary records for legal claims are assessed under Article 6(1)(f). Please do not submit health records, identity copies or unnecessary sensitive information. Applying does not enrol you in an indefinite talent pool or authorise marketing; these uses require separate information and an appropriate legal basis.

6. Partnership applicationsCompany, authorised representative, brand, product and relevant document information is used to assess cooperation, verify authority and follow up. Necessary representative communication relies on Article 6(1)(f); steps towards the individual's own contract rely on Article 6(1)(b). Uploading a document does not authorise public publication or mean the application is approved. Unnecessary third-party or sensitive information should not be supplied.

Company, authorised representative, brand, product and relevant document information is used to assess cooperation, verify authority and follow up. Necessary representative communication relies on Article 6(1)(f); steps towards the individual's own contract rely on Article 6(1)(b). Uploading a document does not authorise public publication or mean the application is approved. Unnecessary third-party or sensitive information should not be supplied.

7. Recipients and providersAccess may be available, as required for their tasks, to authorised staff, hosting/technical and email providers, sellers/manufacturers needed for the enquiry, and necessary advisers. Disclosures to authorities require an applicable legal obligation or valid request. The frontend uses Vercel; the API, database and file hosting use Natro infrastructure. Data is not sold for unrelated advertising.

Access may be available, as required for their tasks, to authorised staff, hosting/technical and email providers, sellers/manufacturers needed for the enquiry, and necessary advisers. Disclosures to authorities require an applicable legal obligation or valid request. The frontend uses Vercel; the API, database and file hosting use Natro infrastructure. Data is not sold for unrelated advertising.

8. International processingVercel and its subprocessors may involve processing or access in different countries, including the United States; Natro's hosting infrastructure is in Türkiye. Transfers outside the EEA require an appropriate mechanism and safeguards under GDPR Articles 44 onwards, assessed alongside the provider contract and actual processing location. Where an applicable adequacy decision does not cover the transfer, appropriate standard contractual clauses and necessary supplementary measures must be assessed. Information about safeguards can be requested at info@weltnexx.com. A form acknowledgement is not blanket transfer consent.

Vercel and its subprocessors may involve processing or access in different countries, including the United States; Natro's hosting infrastructure is in Türkiye. Transfers outside the EEA require an appropriate mechanism and safeguards under GDPR Articles 44 onwards, assessed alongside the provider contract and actual processing location. Where an applicable adequacy decision does not cover the transfer, appropriate standard contractual clauses and necessary supplementary measures must be assessed. Information about safeguards can be requested at info@weltnexx.com. A form acknowledgement is not blanket transfer consent.

9. Browser preferences and Google MapsYour privacy preference is remembered in this browser for up to 180 days. Optional analytics and advertising tracking are not used. The contact page provides an optional Google Maps link for our office address. Our website does not load an embedded Google map automatically. If you choose to open the Google Maps link, you visit Google’s website, where Google may process IP addresses and connection information under its own privacy terms. The telephone country code is suggested using approximate IP-country information supplied by our hosting infrastructure. Precise location is not requested, no location permission is sought, and the selection can be changed.

Your privacy preference is remembered in this browser for up to 180 days. Optional analytics and advertising tracking are not used. The contact page provides an optional Google Maps link for our office address. Our website does not load an embedded Google map automatically. If you choose to open the Google Maps link, you visit Google’s website, where Google may process IP addresses and connection information under its own privacy terms. The telephone country code is suggested using approximate IP-country information supplied by our hosting infrastructure. Precise location is not requested, no location permission is sought, and the selection can be changed.

10. Retention and deletion scheduleQuotation/contact records not resulting in a contract are reviewed for deletion 3 months after the last activity/contact; unsuccessful recruitment applications 6 months after the recruitment process closes; partnership records not resulting in cooperation 1 year after review closes or the last substantive communication. Records whose purpose has ended are deleted or appropriately anonymised. These are Weltnexx's operating periods, not universal statutory minimums. Active contracts, statutory accounting/commercial duties, disputes or necessary legal claims may justify longer, purpose-limited retention. Technical logs, email copies and backups are managed separately according to their necessary purposes and periods; simultaneous automatic deletion of every copy is not claimed.

Quotation/contact records not resulting in a contract are reviewed for deletion 3 months after the last activity/contact; unsuccessful recruitment applications 6 months after the recruitment process closes; partnership records not resulting in cooperation 1 year after review closes or the last substantive communication. Records whose purpose has ended are deleted or appropriately anonymised. These are Weltnexx's operating periods, not universal statutory minimums. Active contracts, statutory accounting/commercial duties, disputes or necessary legal claims may justify longer, purpose-limited retention. Technical logs, email copies and backups are managed separately according to their necessary purposes and periods; simultaneous automatic deletion of every copy is not claimed.

11. Rights and requestsSubject to applicable conditions, you have rights of access, rectification, erasure, restriction, portability and objection. You may object to legitimate-interest processing on grounds relating to your situation; objection to direct marketing is separately protected. Consent, where relied on, can be withdrawn for the future. Contact info@weltnexx.com. Identity verification, when needed, is proportionate. GDPR requests are normally answered within one month; a legally permitted extension and its reasons will be explained.

Subject to applicable conditions, you have rights of access, rectification, erasure, restriction, portability and objection. You may object to legitimate-interest processing on grounds relating to your situation; objection to direct marketing is separately protected. Consent, where relied on, can be withdrawn for the future. Contact info@weltnexx.com. Identity verification, when needed, is proportionate. GDPR requests are normally answered within one month; a legally permitted extension and its reasons will be explained.

12. Supervisory authorityYou may complain to a competent data-protection authority. For Weltnexx's Aachen establishment, you may contact LDI NRW or another authority competent under the GDPR. KVKK request and complaint procedures are described separately in the KVKK notice. Complaints and rights requests are not conditional on agreeing to marketing.

You may complain to a competent data-protection authority. For Weltnexx's Aachen establishment, you may contact LDI NRW or another authority competent under the GDPR. KVKK request and complaint procedures are described separately in the KVKK notice. Complaints and rights requests are not conditional on agreeing to marketing.

14. Security and updatesAccess controls, private file access, file type/size checks and technical security measures are used; basic file checks do not guarantee a full antivirus scan. Decisions based solely on automated processing with legal or similarly significant effects are not part of the current service. This information is updated when purposes, providers or tools change; a policy update does not create consent that was never given.

Access controls, private file access, file type/size checks and technical security measures are used; basic file checks do not guarantee a full antivirus scan. Decisions based solely on automated processing with legal or similarly significant effects are not part of the current service. This information is updated when purposes, providers or tools change; a policy update does not create consent that was never given.

Competent authorities

Weltnexx

Create a quote request