Last updated: June 2026

1. Data Controller

WTMT GmbH
Oberrimbach 1
84419 Obertaufkirchen
Germany
Email: info@wtmt.de
Phone: +49 (0)8082 / 2718808

2. Supervisory Authority

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany

3. Hosting (JTL-Shop)

Our website is hosted by JTL-Software-GmbH, Rheinstr. 7, 41836 Hückelhoven, Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with JTL. Legal basis: Art. 6(1)(f) GDPR.

4. Server Log Files

When you visit our website, the following data is automatically collected: IP address, date and time of the request, browser type and version, operating system and referrer URL. Retention period: max. 14 days. Legal basis: Art. 6(1)(f) GDPR.

5. Cookies & Consent Management

We use the consent management tool provided by JTL-Shop. Non-essential cookies are only set after your consent pursuant to Art. 6(1)(a) GDPR. You can revoke your consent at any time via the fingerprint icon in the bottom left corner.

6. Google Services

We use services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. These include: Google Analytics 4, Google Ads (including Conversion Tracking and Remarketing), Google Tag Manager and Google reCAPTCHA.

Data processed may include: IP address (anonymised for Analytics), device information, usage behaviour, purchase activity and ad interactions.

Processing is based exclusively on your consent (Art. 6(1)(a) GDPR). Data may be transferred to the USA. Google is certified under the EU-US Data Privacy Framework.

Further information: https://policies.google.com/privacy

7. Microsoft Advertising

We use Microsoft Advertising by Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. A tracking tag is used to record conversions from Microsoft advertisements. Legal basis: your consent pursuant to Art. 6(1)(a) GDPR. Data may be transferred to the USA (Data Privacy Framework).

Further information: https://privacy.microsoft.com/en-gb/privacystatement

8. Meta Pixel (Facebook & Instagram)

We use the Meta Pixel by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. It is used to measure the effectiveness of advertisements and to create audiences (Custom Audiences). Data may be transferred to the USA (Data Privacy Framework). Legal basis: your consent pursuant to Art. 6(1)(a) GDPR.

Further information: https://www.facebook.com/privacy/policy/

9. YouTube

We embed videos from YouTube on our website, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you play a video, a connection to YouTube's servers is established. Data is transmitted to YouTube, including which page you have visited. If you are logged into your YouTube/Google account, YouTube may associate your browsing behaviour with your personal profile. Legal basis: your consent pursuant to Art. 6(1)(a) GDPR.

Further information: https://policies.google.com/privacy

10. Vimeo

We embed videos from Vimeo on our website, a service of Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA. When you play a video, a connection to Vimeo's servers is established. Data is transmitted to Vimeo, including which page you have visited. Legal basis: your consent pursuant to Art. 6(1)(a) GDPR.

Further information: https://vimeo.com/privacy

11. Newsletter (Brevo)

We use Brevo (Brevo Deutschland GmbH, Köpenicker Str. 126, 10179 Berlin, Germany) for our newsletter. Registration uses a double opt-in procedure. Data processed: email address, name (if provided), usage data (opens, clicks). Legal basis: Art. 6(1)(a) GDPR. You can revoke your consent at any time (unsubscribe link in every email).

Further information: https://www.brevo.com/de/legal/privacypolicy/

12. Payment Providers

Depending on the payment method you choose, your payment data will be transmitted to the following service providers:

PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg. Privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Amazon Pay: Amazon Payments Europe S.C.A., 38 avenue J.F. Kennedy, 1855 Luxembourg. Privacy policy: https://pay.amazon.de/help/201751600

Instant bank transfer / Klarna: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden. Privacy policy: https://www.klarna.com/de/datenschutz/

Google Pay: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Apple Pay: Apple Distribution International Ltd., Hollyhill Industrial Estate, Cork, Ireland.

Legal basis: Art. 6(1)(b) GDPR (performance of contract).

13. Shipping Service Provider

To process shipments, we share your name and delivery address with DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany. Legal basis: Art. 6(1)(b) GDPR.

14. Contact Form and Email Contact

If you contact us via contact form or email, your details will be stored for the purpose of processing your enquiry. Legal basis: Art. 6(1)(b) GDPR (for contractual enquiries) or Art. 6(1)(f) GDPR (for other enquiries).

15. Customer Account

When you create a customer account, we store your data (name, address, email, order history) for the duration of the account. Legal basis: Art. 6(1)(b) GDPR. You may request the deletion of your account at any time.

16. Social Media Links

Our website contains links to Facebook, Instagram and YouTube. When you click on these links, data is transmitted to the respective provider. We do not use social media plugins that transmit data upon page load.

17. Retention Period

We store personal data only for as long as necessary for the respective purposes or as required by statutory retention obligations (in particular commercial and tax retention periods of up to 10 years pursuant to Section 257 HGB and Section 147 AO).

18. Your Rights

You have the following rights regarding your personal data: access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), objection to processing (Art. 21 GDPR) and withdrawal of consent with effect for the future.

19. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany.

20. Data Security

Our website uses SSL/TLS encryption for security purposes. We also employ appropriate technical and organisational measures to protect your data in accordance with Art. 32 GDPR.