Privacy Policy

Home Privacy Policy

Privacy Policy

Privacy notice for our website visitors 

Thank you for visiting our website. In the following, we would like to inform you about the handling of your data in accordance with Art. 13 of the General Data Protection Regulation (GDPR). 

Responsible person 

Responsible for the data processing described below is the person named in the imprint. 


Usage data 

When you visit our website, so-called usage data is temporarily analysed on our web server for statistical purposes as a log in order to improve the quality of our website. This data record consists of 

  • the name and address of the requested content, 
  • the date and time of the request, 
  • the amount of data transferred, 
  • the access status (content transferred, content not found), 
  • the description of the web browser and operating system used, 
  • the referral link, which indicates the page from which you came to ours, 
  • the IP address of the requesting computer, which is shortened so that a personal reference can no longer be established. 

The aforementioned log data is only evaluated anonymously. 


Storage of the IP address for security purposes 

In addition, we store the complete IP address transmitted by your web browser for a strictly limited period of seven days in the interest of being able to recognise, limit and eliminate attacks on our website. After this period, we delete or anonymise the IP address. The legal basis is Art. 6 para. 1 p. 1 lit. f) GDPR. 


Google Analytics 

We use the web analysis tool “Google Analytics” to design our websites and in line with demand.  

Google Analytics is not used on the and websites. 

Google Analytics creates user profiles on the basis of pseudonyms. For this purpose, permanent cookies are stored on your end device and read by us. In this way, we are able to recognise returning visitors and count them as such. 

Within the scope of Google Analytics, we are supported by Google Ireland Limited and Google LLC. (USA) as processors according to Art. 28 GDPR. The data processing may therefore also take place outside the EU or EEA. With regard to Google LLC, an adequate level of data protection cannot be assumed due to processing in the USA. There is a risk that authorities may access the data for security and monitoring purposes without you being informed or being able to seek redress. Please bear this in mind if you decide to give your consent to our use of Google Analytics.  

The data processing is based on your consent pursuant to Art. 6 para. 1 p. 1 lit. a) GDPR or §15 para. 3 p. 1 TMG, if you have given your consent via our banner. The transfer to a third country is based on Art. 49 para. 1 lit. a) GDPR.   

You can revoke your consent at any time. Please follow this link and make the appropriate settings via our banner. 


Contact form  

You have the option of contacting us by e-mail, post or telephone, as well as via our contact forms. We only collect the data you provide us with and only for the purpose of answering your enquiry. 

To use our contact form, we need your e-mail address and your message in order to answer your enquiry. On the websites and, we also need the name of your company, because the communication takes place between us and our business partners. You can also voluntarily provide us with your name, telephone number and the subject of your message. We use your name to address you personally and your telephone number to reach you by telephone if necessary to answer your enquiry.  

We use this data on the basis of Art. 6 para. 1 p. 1 lit. f) GDPR to answer your enquiry.  

Your data will only be processed to answer your enquiry. We will delete your data if it is no longer required and there are no legal obligations to retain it.  

Insofar as your data transmitted via the contact form is processed on the basis of Art. 6 para. 1 p. 1 lit. f) GDPR, you can object to the processing at any time. To do so, please contact the e-mail address listed in the imprint. 


Map services 

On our website we embed map services that are not stored on our servers.  

No map services are used on the, and websites. 

Calling up our pages with embedded map services leads to the content of the third-party provider who provides the map services being reloaded. This provides the third-party provider with the information that you have accessed our site as well as the usage data technically required in this context. 

We have no influence on the further data processing by the third-party provider.  

The embedding is carried out on the basis of Art. 6 para. 1 p. 1 lit. f) GDPR and in the interest of enabling you to use map services.  If you wish to object to the data processing, please stop using our site. 


WOW Tech Academy registration 

You can register for our WOW Tech Academy at To do this, we need your surname, first name, e-mail address, user name and password, as well as the name of your company. You need the username and password for each registration. You can voluntarily enter your language, time zone, biography and upload a profile photo. This information allows you to customise the site settings and complete your user profile. We also process your user type (admin, trainer, learner, manager), your groups, courses, certificates, tests, progress and time of actions and assign you to your shop. Furthermore, we process the messages sent by you or addressed to you and, if applicable, the attachments. The purposes of the data processing are the registration, the administration of your account and your progress as well as the issuing of certificates. The legal basis for the data processing is Art. 6 para. 1 lit. b) GDPR. If you don’t use your account for one year, it will be switched to inactive and then deleted. 


WOW Tech Media Library 

If you work for our business clients, you can use our Media Library on To do this, you need to set up an account that gives you access to the protected area. The setup requires you to enter your company name, your name, your e-mail address, your user name and the password you choose for the account. We also process the marketing materials you have added to your basket, downloaded, shared and/or sent. We do this to provide you with our services, to provide you with marketing materials to the extent permitted by law, to notify you of any applicable usage restrictions and to process your questions or requests for information. The legal basis for the data processing is Art. 6 para. 1 lit. b) GDPR. 

If you do not use your account for one year, it will be switched to inactive and then deleted, unless you use time-limited licences. In this case, your account will be deleted after the expiry of the longest licence if it is no longer used. 


Prospect data management 

If you have provided us with your data such as your name, address, e-mail address and, if applicable, your age in the context of trade fairs, conferences or other events, we will process your data for the purpose of contacting you and for marketing purposes. The legal basis for the data processing is Art. 6 para. 1 lit. b) GDPR or Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in contacting interested parties. We delete your data as soon as there is no longer any interest on your part and the deletion does not conflict with any legal retention periods. 



You can apply for open positions by post and by e-mail. For an online application at, we need your name, address, email address, telephone number, CV and salary expectations. We need this information to be able to contact you flexibly and to check whether you are suitable for the position. You can also voluntarily indicate your preferred date of recruitment and your social media presence. In addition, we work together with the service provider Your application is collected on a subpage of, which opens in a tab when you click on a job advertisement. Please note that the data processing on this website is governed by the privacy policy of and not by our privacy policy.  

Your application data will be forwarded to the persons responsible for the application process. All parties involved will treat your application documents with due care and confidentiality. We process the data that you disclose to us as part of your application for the purpose of applicant selection. This includes, in particular, your contact details, name and address, as well as all data related to your application, such as your CV, references, qualifications, answers to questions, etc. If you submit an application for reimbursement of travel expenses, we also need your bank details. We also receive personal data from interviews with you in which we discuss your background, profile and career goals. 

The legal basis for this data processing is § 26 para. 1 p. 1 BDSG (decision on the establishment of an employment relationship). After the selection procedure has been completed, the information you provided for the specific selection procedure and the documents you sent will be deleted after six months at the latest, unless we have concluded an employment contract with you. The same applies to documents from applications that have been withdrawn. Invoices for any reimbursement of travel expenses will be archived in accordance with tax law. In the event that we may also consider your application for other or future job advertisements, we ask for your consent. With your express consent, we will then process your data on the basis of Art. 6 para. 1 lit. a) GDPR (consent). You can revoke your consent at any time with effect for the future. The data processing that took place until the revocation remains lawful. 


Supplier and business interest data 

The implementation of our business relations requires the processing of data of our contractual partners. Insofar as this data allows conclusions to be drawn about a natural person (e.g. contact person of a company, supplier), it is personal data. We only process personal data that we receive from you in the course of our business relationship. This includes your name, address, company affiliation and your contact details (telephone number, e-mail address). We only pass on your data to third parties if this is necessary for the execution of the contract, invoicing or delivery. Service providers may only use your data to fulfil the tasks assigned to them. 

The legal basis for the data processing is Art. 6 para. 1 lit. f) GDPR, based on our legitimate interest in processing contracts with suppliers. 


Product tests and surveys 

If you register as a product tester at, you will be required to provide your name, email address, username and the password you choose for the account. We process this data in order to provide you with an account and to communicate with you. The legal basis for the data processing is Art. 6 para. 1 lit. b) GDPR. 

After registration, you fill out a questionnaire to complete your profile. For this purpose, we ask for your date of birth, telephone number, graduation and marital status. You are also asked to provide information about your home country and sex life. The legal basis for the data processing is Art. 6 para. 1 lit. a) in conjunction with Art. 9 para. 2 lit. a) GDPR (your consent) and Art. 6 para. 1 lit. b) GDPR (implementation of the agreement). 

We will then ask you by e-mail whether you are interested in a product test. In this case, we need the postal address to send the product. If we deliver test products to you, we pass on your name and address to the commissioned shipping company. The legal basis for the data processing is Art. 6 para. 1 lit. a) in conjunction with Art. 9 para. 2 lit. a) GDPR and Art. 6 para. 1 b) GDPR. 

In the context of tests, we ask for your opinion on the product as well as your preferences and your opinion on other topics. We need all this data to improve our products and services or to develop new products and services. The data is pseudonymised immediately after it is collected. This means that no WOW Tech employee can allocate the results of the surveys to a specific person. The legal basis for the data processing is Art. 6 para. 1 lit. a) in conjunction with Art. 9 para. 2 lit. a) GDPR and Art. 6 para. 1 lit. b) GDPR. 

For the administration of our tester database, we use the service provider QuestionPro GmbH, Friedrichstraße 171, 10117 Berlin. QuestionPro is a German company that provides software that can be used to complete and evaluate questionnaires online. QuestionPro is strictly bound by instructions as our so-called order processor. Since QuestionPro must be able to provide us with technical support, QuestionPro employees working for us have access to personal data. QuestionPro employees are bound to confidentiality.   

We will only store your personal data for the duration of this agreement or until you withdraw your consent. If this agreement is terminated or consent is revoked, we will delete your data immediately, unless we are obliged to store it for a longer period of time in accordance with Article 6 para. 1 lit. c) of the GDPR due to tax and commercial law or other legal storage and documentation obligations (in accordance with the German Commercial Code (HGB) or the German Tax Code (AO)). 



For registration and participation in our competitions, we require your e-mail address and name as mandatory data. We use this data for the duration and for the implementation of the respective competition (including drawing the winner(s), notifying the winners and, if applicable, losers, publishing the names of the winners, if applicable, sending the prize). If the prizes are provided by someone other than us, we will send the winners’ personal data to that prize sponsor or its service provider. The legal basis for the data processing is Art. 6 para. 1 lit. b) GDPR. We will delete your data six months after the end of the competition. The winner’s data will be deleted three years after the end of the competition. 


Storage period 

Unless we have already informed you in detail about the storage period, we delete personal data when they are no longer required for the aforementioned processing purposes and no statutory retention obligations prevent deletion. 


Other processors 

Within the WOW Tech Group, many systems and technologies are shared. This enables us to offer you a better service. For this reason, those companies and departments within the WOW Tech Group that need to access your data in order to fulfil our contractual and legal obligations or to perform their respective functions will receive access to your data. 

We also work with service providers who assist us in providing our services on this website. These service providers process data solely on our behalf and under our instructions and only for the purposes described in this privacy policy. In addition to the service providers mentioned in this privacy policy, these may include, in particular, data centres that store our website and databases, IT service providers that maintain our systems, as well as consulting companies, website service providers, order processing providers, customer service providers, marketing service providers and other service providers.  

In addition, disclosure may take place in connection with official enquiries, court orders and legal proceedings if it is necessary for legal prosecution or enforcement (Art. 6 para. 1 lit. c) GDPR). 

In some cases, our contractual partners also process data in countries outside the EEA. In order to ensure the protection of your personal rights also in the context of these data transfers, we make use of the standard contractual clauses of the EU Commission when structuring the contractual relationships with the recipients in third countries. This is a so-called suitable guarantee within the meaning of Art. 46 para. 2 lit. c) GDPR. 

We have concluded standard contractual clauses with processors who are based in a third country or who process data in a third country. You can request a copy from the respective data controller. 


Obligation to provide data 

The provision of your data is not required by law and is voluntary. However, the provision of your data is necessary for the use of certain services. This applies, for example, to your usage data, without which we cannot technically offer our website content. In the case of required data, failure to provide it will mean that the service or function in question cannot be provided. We will inform you when you enter data if the provision is required for the respective service or function. These data are marked as mandatory fields. In the case of required data, failure to provide it will result in the relevant service or function not being able to be provided. In the case of optional data, failure to provide it may mean that we are unable to provide our services in the same form and to the same extent as usual. 


Data security 

We use a modern encryption process to protect your data from unwanted access. This prevents unauthorised persons from accessing the data. Your data is then transferred from your computer to the server and vice versa via the Internet using 256-bit TLS encryption (Transport Layer Security Version 1.2). You can recognise this by the fact that the lock symbol on the status bar of your browser is closed and the address line begins with https://. 


Your rights as a data subject 

As a user, you have the right to request information about what data we have stored about you and for what purpose this data is stored. In addition, you can correct incorrect data or have such data deleted if its storage is inadmissible or no longer necessary. If the legal requirements are met, you have the right to data portability and the right to restrict data processing. You also have the right to complain to a supervisory authority about the data processing that is taking place. 

If data processing is based on your consent, you have the possibility to revoke this consent at any time without giving reasons and with effect for the future. 


Right of objection 

You have the right to object to the processing of your personal data on grounds relating to your particular situation. The prerequisite for this is that the data processing is based on a balance of interests. 

You have the right to object to the processing of your data for direct marketing purposes at any time. This also applies to profiling in connection with direct advertising. 

Unless otherwise described above, please contact the office mentioned in the imprint to assert your data protection rights. 


Contact details of the data protection officer 

Our external data protection officer will be happy to provide information on the subject of data protection under the following contact details: 


datenschutz nord GmbH
Konsul-Smidt-Straße 88
28217 Bremen
E-Mail: [email protected] or [email protected]