Data protection

We take data protection seriously

Thank you for your interest in our company. We place great value on data protection. Personal data is always processed in accordance with the General Data Protection Regulation and in compliance with the relevant country-specific data protection provisions. Personal data is only collected to the extent technically required on this website. The data collected will never be sold or released to third parties for any reason under any circumstances. The following declaration gives you an overview of how we guarantee this protection and which type of data is collected for which purpose.

Data Controller

Wanzl GmbH & Co. KGaA 
Rudolf-Wanzl-Strasse 4 
89340 Leipheim
Telephone: +49(0)8221/729-0 
E-mail address: 

Contact details for our local Data Protection Officer (UK & Ireland): 

Wanzl Ltd 
Data Protection Officer 
Europa House, Heathcote Lane 
Warwick, CV34 6SP
United Kingdom
Telephone: +44 (0)1926 451951 
E-mail address: 

Any data subject may contact our Data Protection Officer at any time with any questions and suggestions regarding data protection.

Personal data

Personal data means any information relating to an identified or identifiable natural person (“data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Data processing on this website

Wanzl GmbH & Co. KGaA automatically collects and stores information in its server log files which your browser sends to us. This information comprises:

  • Browser type/version
  • Operating system used 
  • Referrer URL (the previously visited page)
  • Host name of the accessing computer (IP address) 
  • Time of the server request

Wanzl  GmbH & Co. KGaA cannot attribute this data to any specific person. This data is not merged with other data sources and is deleted after a statistical analysis.

Disclaimer of liability

Pursuant to Section 7, Paragraph 1 of the German Telemedia Act (Telemediengesetz), we are responsible in our capacity as a service provider for our own information that we store for use, under general legislation. We are, however, not responsible in our capacity as a service provider for any external data transmitted by third parties within a communication network or to which third parties allow access for use, pursuant to Section 8, Paragraph 1 of the Telemedia Act. In accordance with Section 10 of the Telemedia Act, we are also not responsible for any external data that we save on behalf of a user, in so far as we have no knowledge of any unlawful activity or of the data nor, in the event of any claims for damage, knowledge of any acts or circumstances as a result of which unlawful activity or information becomes apparent or we have taken action immediately to remove the information or block access to it as soon as we become aware of it. We assume no liability for any links on our website to third-party sites, since we have no control over their content. The operators of such sites bear exclusive responsibility for their content. All links were checked for unlawful content at the time of publication on our website and did not contain any legal infringements. It is not possible to permanently monitor these links without any specific indications of legal infringements.

Contacting us via the website

The website allows you to contact us using a contact form. 

When you use the contact form, the following mandatory details are stored: (1) First name(s) and surname, (2) industry, (3) position, (4) address and (5) e-mail address of the data subject. 

  • First name(s)
  • Surname
  • Industry
  • Position
  • Mailing address
  • Address
  • E-mail address 

If a data subject makes contact with the data controller via a contact form, the personal data sent by the data subject is automatically stored. Such personal data sent by a data subject to the data controller is stored for the purposes of processing or making contact with the data subject. This personal data is not shared with third parties.


The web pages use cookies in several places. They serve to make our service more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser. Most of the cookies we use are called “session cookies”. These are deleted automatically at the end of your visit. Cookies do not cause any damage to your computer and do not contain viruses. 

Managing cookies Most Internet browsers allow you to block cookies. If you do not consent to the use of these cookies, please deactivate them for your browser as described in the guide at or use an automatic deactivation tool if available. Some of the services associated with the Wanzl web pages will not function correctly if cookies are deactivated.


If you would like to receive the newsletter offered on the website, we need a valid e-mail address and information that allows us to check that you are the owner of the provided e-mail address or that the owner of the address consents to receive the newsletter. No other data is collected. You can withdraw your consent at any time to the storage of data and the e-mail address and to the use of this information to send the newsletter. 

Google Analytics

This website uses Google Analytics, a web analysis service from Google Inc. (“Google”). Google Analytics uses “cookies” – text files that are saved on your computer and that enable your use of the website to be analysed. The information that is generated by the cookie regarding your use of this website (including your IP address) is transmitted to a Google server in the USA, where it is saved. Google will use this information to analyse your use of the website, compile reports on your website activities for the website operator, and provide additional services associated with the use of the website and use of the Internet.

Google may also pass this information on to third parties where this is required by law or where third parties are processing this data on behalf of Google. Google will not under any circumstances link your IP address with other data from Google. It is possible to prevent cookies being installed by configuring the relevant setting in your browser software; however, it should be noted that, should you do so, you may be unable to make full use of all the functions of this website as a result. Through the use of this website, you express your consent to the processing of data collected by Google about you in the manner described above and for the purposes previously mentioned.

You can furthermore prevent the recording of the data relating to your use of the website (including your IP address) created by the cookie and also prevent it from being processed by Google by downloading and installing the browser plug-in available from the following link. The link is:


This website uses Piwik, a piece of open-source software for statistical analysis of visits to the site. Piwik uses cookies. Cookies are small text files that are saved in a user’s browser. These are used to analyse how this website is used. During this process, data is collected, processed and  stored on servers in Germany in order to create anonymous usage profiles. The data includes the name of the accessed website, file, date and time of access, the transferred volume of data, notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address and the requesting provider. The personal IP address is anonymised immediately after processing (IP-based company identification) by deleting the last number block (masking) and is not linked with the cookies or other data. Users can opt out of cookie tracking by changing the settings in their browser software or by clicking the following  link .

Google DoubleClick

This website uses Google DoubleClick cookies (Floodlights). DoubleClick is a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Cookies are small text files that are saved in a user’s browser. These are used to analyse how this website is used. The collected data is used only for statistical purposes and in an anonymised form. Your browser is assigned a pseudonym identification number (ID). DoubleClick cookies do not contain any personal data. You can opt out of the use of cookies by downloading and installing the browser plug-in available from the following link in the DoubleClick deactivation extension section. Alternatively, you can deactivate the DoubleClick cookies on the Digital Advertising page using the following link 


Our site uses a Facebook plugin. You can recognise this from the “Like” button on our site. An overview of Facebook plugins is available from the following link:

Like with Google Plus, this sends information such as your IP address to the Facebook server.
If you are logged into Facebook, you can link content on our site directly to your profile, which involves Facebook collecting the personalised information relating to your visit to our website. 
We have no control or knowledge of how the data transmitted to Facebook is used or to what extent it is collected.

You can view Facebook’s data policy here:


The data controller has integrated YouTube components on this website. YouTube is an Internet video portal that enables video publishers to upload video clips for free and permits other users to watch, rate and comment on these videos for free. YouTube enables all manner of videos to be published, which means that entire films and television programmes, as well as music videos, trailers or videos made by users themselves are available via the Internet portal. 

YouTube is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043- 1351, USA. 

Each time one of the pages operated by the data controller that features integrated YouTube components (YouTube video) is accessed on this website, the YouTube component automatically prompts the Internet browser on the data subject’s IT system to download a display of the corresponding YouTube component from YouTube. You can find out more about YouTube here: . As part of this technical process, YouTube and Google are informed which specific page on our website the data subject visited. If the data subject is logged in to YouTube at the same time, YouTube detects which specific page of our website the data subject is visiting when the page containing a YouTube video is opened. This information is collected by YouTube and Google and assigned to the data subject’s relevant YouTube account. YouTube and Google then always receive information through the YouTube component indicating that the data subject has visited our website if the data subject is logged in to YouTube at the time of visiting our website; this happens regardless of whether the data subject clicks on a YouTube video or not. If the data subject does not wish this information to be sent to YouTube and Google, they can prevent this by logging out of their YouTube account before accessing our website.

Customers and business partners

We process personal data that we receive from you as part of our business relationship. We also process – insofar as this is required for the provision of our services – personal data that we have received permissibly (for example in order to complete orders, fulfil contracts or where you have given consent) from other companies in the Wanzl Group, external business partners, service providers or other third parties (such as credit reports). We also process personal data that we have obtained permissibly from publicly available sources (such as records of debtors, commercial registers, press, media, Internet) and are permitted to process. Personal data that we process as part of the business relationship: name, address, contact details, tax classification, order information, payment details, bank account, contract information, credit data, sales data, communication data, documentation data (e.g. use of our website, newsletter).

Purpose and legal basis of processing

We process personal data in accordance with data protection legislation:

Based on your consent (Article 6(1)a GDPR) 

If you have granted us consent to process personal data for specific purposes, it is lawful for us to perform this processing based on your consent. You can withdraw consent at any time. 

To perform contractual obligations (Art. 6(1)b GDPR)

If it is necessary to process personal data for the performance of a contract to which the data subject is party, such as in the case of processing operations required for goods to be delivered or for performance or counter-performance to be provided, processing is based on Article 6(1)b GDPR. The same applies for processing operations required for pre-contractual steps, such as in the event of enquiries about our products or services. 

Based on legal requirements or in the public interest (Article 6(1)c, Article 6(1)e GDPR) 

We also process your personal data if this is required by law or if it is in the public interest, for example in order to meet tax obligations. 

To protect the vital interests of the data subject or of another natural person (Article 6(1)d GDPR) 

In rare cases, it could be necessary to process personal data to protect the vital interests of the data subject or of another natural person. This would be the case, for example, if a visitor to our company site were to be injured and that person’s name, age, health insurance information or other vital information needed to be given to a doctor, a hospital or another third party. 

In the context of legitimate interest (Article 6(1)f GDPR) 

If necessary, we process your data, beyond the actual performance of the contract, for the purposes of upholding the legitimate interests pursued by us or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject (e.g. credit report, advertising, market research, opinion research, asserting legal claims and defence in the event of legal disputes, to guarantee IT security, action for business management and the development of products and services).

Who receives your data?

Within the Wanzl Group, your data is received by the bodies that need it to perform our contractual and legal obligations. Our data processors may also receive this data for these stated purposes. Your data may also be received by suppliers and service providers for the performance of the business relationship, or public bodies and institutions if there is a legal or regulatory obligation. The data may also be received by bodies for which you have granted us consent to share data with.

Duration of storage, erasure and blocking of personal data

The duration of storage for personal data is determined by the purpose of processing and the relevant statutory retention period. Provided it is no longer required for performance or initiation of a contract, the relevant data is deleted or blocked once there is no longer a purpose for processing and in accordance with the statutory retention period.

Transfer of personal data

Data is only transferred in the context of contractual performance to companies in the Wanzl Group or suppliers and service providers, which may also be in countries outside of the EU. No data is sent to international organisations. Data is only transferred if the EU Commission has confirmed an adequate level of data protection or other adequate data protection guarantees are in place (e.g. EU standard contractual clauses).

Rights of the data subject

Right to confirmation

Every data subject has the right to obtain confirmation from the data controller regarding whether the data controller has processed personal data concerning the data subject.

Right to information 

Every data subject has the right to receive information at any time and at no cost from the data controller regarding the personal data stored in relation to the data subject. 

Right to rectification 

Every data subject has the right to obtain without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed. 

Right to erasure (right to be forgotten) 

Every data subject has the right to obtain from the data controller the erasure of personal data concerning him or her without undue delay where one of the following grounds applies and the processing is not necessary: 

  • The personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed. 
  • The data subject withdraws the consent on which the processing is based according to point (a) of Article 6(1) or point (a) of Article 9(2) GDPR, and where there is no other legal ground for the processing. 
  • The data subject objects to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) GDPR.
  • The personal data has been unlawfully processed.
  • The personal data has to be erased for compliance with a legal obligation in Union or Member State law to which the data controller is subject.
  • The personal data has been collected in relation to the offer of information society services referred to in Article 8(1) GDPR. 

Right to restriction of processing 

Every data subject has the right to obtain from the data controller restriction of processing where one of the following applies: (1) The accuracy of the personal data is contested by the data subject, for a period enabling the data controller to verify the accuracy of the personal data. (2) The processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of its use instead. (3) The data controller no longer needs the personal data for the purposes of the processing, but the personal data is required by the data subject for the establishment, exercise or defence of legal claims. (4) The data subject has objected to processing pursuant to Article 21(1) GDPR pending the verification whether the legitimate grounds of the data controller override those of the data subject. 

Right to data portability 

Every data subject has the right to receive the personal data concerning him or her, which he or she has provided to a data controller, in a structured, commonly used and machine-readable format. 

Right to object

Every data subject has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions. The data controller shall no longer process the personal data in this case unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or unless the processing is required for the establishment, exercise or defence of legal claims. Where personal data is processed for direct marketing purposes, the data subject has the right to object at any time to processing of personal data concerning him or her for such marketing. Where the data subject objects to processing for direct marketing purposes, the personal data will no longer be processed for such purposes. 

You can lodge your objection with the following: 

Wanzl GmbH & Co. KGaA
Rudolf-Wanzl-Str. 4 
89340 Leipheim, Germany 
E-mail address: 

Right to withdraw consent 

Every data subject has the right to withdraw his or her consent to the processing of personal data at any time.

Obligation to provide data

Please note that the provision of personal data is in some cases prescribed by law (e.g. tax legislation) or contractual regulations (e.g. details for a contractual partner). It may also be necessary for a data subject to provide us with personal data, which subsequently needs to be processed by us, in order to conclude a contract. The data subject is, for example, obliged to provide us with personal data when concluding a contract with our company. Failure to provide personal data would make it impossible for the contract with the data subject to be concluded.

Automated decision-making

As a responsible company, we do not use automatic decision-making or profiling.

Data protection for job applications and in the application process

The data controller collects and processes the personal data of applicants in order to carry out the application process. The data may also be processed electronically. This is particularly the case if an applicant sends the associated application documents to the relevant data controller electronically, for example by e-mail or via a web form on the website. If the relevant data controller concludes a contract of employment with an applicant, the transferred data will be stored in accordance with the legal requirements in order to handle the employment relationship. If the data controller does not conclude a contract of employment with the applicant, the application documents will be deleted six months after the applicant has been informed that they were unsuccessful, provided that deletion does not contravene any other legitimate interests of the relevant data controller. These legitimate interests include, for example, the burden of proof in the event of a lawsuit in accordance with the German General Act on Equal Treatment (AGG).

Where can you lodge a complaint?

If you would like to raise a complaint, you can contact the Data Protection Officer named above or the data protection supervisory authority that is responsible for us: Bayerisches Landesamt für Datenschutzaufsicht, Promenade 27, 91522 Ansbach, Germany, telephone +49(0)981/531300.

Issued: 16/05/2018