Data processing agreement

We take the responsible handling of all personal data that you provide us whenever you contact us or request information seriously, complying with all relevant statutory data protection regulations while doing so. This is why we treat your personal information with the utmost care and in accordance with all applicable regulations on privacy protection. We have contracted the services of, a professional and dependable third-party data protection service provider, whose consulting services will ensure our data protection policy remains in compliance with the EU GDPR.

Processing data (customer-related and contract-related data)

We collect, process and use personal data only to the extent required for establishing, structuring or modifying legal relationships (master data). We collect, process and use personal data that is gathered while using our website (usage data) only to the extent required for the user to be able to use or invoice our services.

As a general rule, you are not required to reveal your identity while using our online services.

If asked on our website to provide personal data (such as name, address or email address), e.g. in connection with contact forms or during login/registration, you will be providing this information on a voluntary basis. We use this information for purposes pertaining to our own business (such as the supply of the requested material/information).

We provide a contact form on our website which you can use to submit any type of question you may have. The information marked as mandatory on this form is required for us to sort and reply to your request. Disclosure of the remaining information is voluntary. Based on your voluntarily given consent, we process the data necessary to make contact with us in accordance with Article 6, paragraph 1, sentence 1, letter a of the GDPR.


Some of our web pages use so-called cookies. Cookies do not harm your computer and do not contain any viruses. Cookies help make our website more user-friendly, efficient and secure. Cookies are small text files that are stored on your computer and are saved by your browser.

The majority of the cookies we use are what are known as ‘session cookies’. These are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognise your browser when you next visit.

You can change your browser settings such that you will be notified when a cookie is about to be set. You also have the option to specify if you want to allow or refuse cookies on a general basis or only in particular cases. Lastly, you can set up your browser such that cookies will be deleted automatically when the browser is closed. Disabling cookies may limit the functionality of this website.

Analytics services

Our website uses a web analytics service named Piwik. Piwik uses cookies, which are stored on your computer and which allow us to analyse how our website is used. To this end, the usage data generated by the cookies (including your shortened IP address) is transferred to our servers and stored for the purpose of usage analytics. This is designed to help us optimise our website. Your IP address is immediately anonymised during this process so that we remain unable to identify you personally as a user. The information generated by the cookie on how you use this website is not passed on to third parties. You can disable the use of cookies by configuring your browser accordingly. However, you may not be able to fully use all of the functions of this website as a result.

Google Tag Manager

This website uses Google Tag Manager. This service makes it possible to manage website tags via a user interface. Google Tag Manager merely implements tags. This means: No cookies and no personal data are used and entered, respectively. Google Tag Manager does, however, trigger other tags, which may record data if applicable. However, Google Tag Manager will not access this data. If carried out on the domain or the cookie level, a deactivation will remain in place for all tracking tags if these are implemented with Google Tag Manager.


On certain pages of our website, 2W GmbH & Co. KG has implemented plug-ins supplied by other providers.

Contact form

If you use our contact form to submit a request, the information you provide on the contact form including your contact information will be stored for the purpose of processing your request and in case there are any follow-up questions. The data you provided will be deleted again once your request has been completed and all retention periods under tax or commercial law have elapsed.

You can revoke your consent - given, for example, to receive advertising or information about our company that may interest you - at any time with effect for the future and without the need to provide reasons. You can use the aforementioned contact form for this purpose. We do not pass on this information without your consent. Contact occurs via email:

Transfer of data

We will disclose your personal data to third parties only to the extent permissible by law [e.g. within the scope of Article 6 of the GDPR] and/or to the extent necessary. For some of the order data processing mandated by law we use the services of third-party providers. However, the final responsibility for data processing remains with us. On some pages of our website we also use third-party plug-ins provided by such companies as Facebook, etc.

Liability for contents of our own

The contents provided on the pages of our website have been prepared with utmost care. However, we do not assume any liability for the correctness, integrity or currentness of the contents. As a service provider, we are responsible for our own contents presented on these pages in accordance with the provisions of the applicable laws.

Rights of the data subjects

We hereby inform you that - pursuant to Article 15 et seq. GDPR - you have the right to obtain information on the personal data concerned and to demand rectification or deletion of the data concerned or to limit or object to its processing. You are, furthermore, entitled to exercise your right to data portability. Likewise, under Article 77 of the GDPR, you have the right to complain to a data protection supervisory authority if you consider the processing of your personal data to be in violation of the provisions set forth in the GDPR. If the processing is based on Article 6, paragraph 1, letter a of the GDPR or Article 9, paragraph 2, letter a of the GDPR (Consent), you also have the right to revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent granted previously until its revocation.

Right to information, Art. 15 GDPR

You have the right to request at any time and at no cost information about your personal data stored with us as well as about its origin and recipients and about the purpose of data processing (especially about the processing purpose, the recipients of the data, the storage period, etc.)

Right to rectification, Art. 16 GDPR

You have the right to demand the rectification of the data stored about you, if the data proves to be incorrect or incomplete. This includes the right to complete incomplete personal data by providing supplementary statements or notifications.

Right to erasure, Art. 17 GDPR

You have the right to demand the erasure of your personal data.

This is possible, for instance, if the data is no longer needed for the purpose for which it was originally collected or if the data has to be erased on the basis of legal requirements. However, this right can be excluded in individual cases.

Right to restriction of processing, Art. 18 GDPR

You have the right to restrict the processing of your personal data. This is possible if your data has been recorded incorrectly or the processing of the data is unlawful. If processing is restricted, the data may only be processed in narrowly defined cases.

Right of data portability, Art. 20 GDPR

You have the right to demand that the data concerning you be returned to you or a specified controller in a conventional, electronic, machine-readable data format if you provided this data yourself.

Right to object, Art. 21 GDPR

You have the right to object to the processing of the personal data concerning you for reasons that arise from your specific situation, with effect for the future, if the data processing takes place to protect legitimate interests (cf. Art. 6, paragraph 1, letters e), f) GDPR). If you lodge an objection, an evaluation will take place as to whether legal requirements exist for the processing of your data and, if this is not the case, your data will not be processed any further.

Right to lodge a complaint with a supervisory authority, Art. 77 GDPR

You have the right to lodge a complaint with a supervisory authority of the Union or member states any time in case of any violations of data protection regulations.

You may also at any time turn to the data protection officer at the Data Protection Authority of Bavaria to report any violations of data protection regulations:


Change to our data protection regulations

We reserve the right to amend this data processing agreement from time to time so that it always complies with the current legal requirements or to reflect a change of services in the data processing agreement, e.g. the introduction of new services. The new data processing agreement will then be in effect for your next visit.


Please submit by email any requests for information or disclosure or any objections to the processing of your data to our data protection coordinator:

Contact information of the external data protection officer retained by 2W GmbH & Co. KG

Information according to Article 5 of the TMG:
ER Secure GmbH