Close

Data protection

We would like to inform you in the following about the processing of personal data in the context of the use of our internet pages.

1. Responsible party and contact details

W. MÜLLER GmbH
Am Senkelsgraben 20
D-53842 Troisdorf-Spich
Germany

Further information about our company can be found in our imprint. If you have any questions about the processing of your personal data or the exercise of your rights, please feel free to contact us at any time.


2. Data protection officer

Our external data protection officer is:

Lehmkühler Rechtsanwälte Steuerberater
– Data Protection –
Wilhelmstr. 40-42
D-53111 Bonn
Germany

Email: datenschutz(at)lehmkuehler-rechtsanwaelte.de

You can contact the data protection officer confidentially with any questions you may have about data protection in our company.


3. General information on data processing

We only process personal data to the extent necessary to provide this website, our content, and services, or if you have consented to this.
The legal basis for this is, in particular, Art. 6 (1) (a), (b), (c), (f) GDPR and § 25 TTDSG for the use of cookies and similar technologies.


4. Hosting and provision of the website

When you visit our website, data is automatically transmitted from your browser to our server and stored in log files.
This includes, in particular:

  • IP address of the end device
  • Date and time of access
  • Page/file accessed and amount of data transferred
  • Notification of successful retrieval (HTTP status code)
  • Referrer URL (previously visited page)
  • Browser type and version used, operating system, and Internet service provider.

The processing is carried out for the technical provision of the website, to ensure stability and security, and for error analysis (Art. 6 (1) (f) GDPR).
Log files are generally deleted after 30 days at the latest, unless longer storage is necessary for security or evidence reasons.


5. Cookies and similar technologies

Our website uses cookies and similar technologies (e.g., local storage) to provide basic functions, analyze usage, and improve our offering.

Technically necessary cookies
These are necessary for the operation and basic functions of the website (e.g., language selection, security, display, storage of your cookie settings).
The legal basis is Art. 6 (1) lit. f GDPR and § 25 (2) TTDSG.

Optional cookies (analysis)
These include, in particular, cookies and other storage technologies from Google Analytics 4 (GA4).
The storage of or access to information on your device is only carried out with your consent in accordance with Section 25 (1) TTDSG in conjunction with Art. 6 (1) lit. a GDPR.

You can change or revoke your consent at any time with future effect via our cookie banner/consent tool.


6. Consent/cookie management

When you first visit our website, a notification banner is displayed, allowing you to specify whether analysis cookies (Google Analytics 4) should be activated in addition to technically necessary cookies. Your selection is stored in a technically necessary cookie so that your preferences are taken into account on subsequent visits.

The legal basis for logging your consent is Art. 6 (1) lit. c GDPR in conjunction with Art. 7 GDPR and our legitimate interest in legally compliant proof (Art. 6 (1) lit. f GDPR).


7. Web analysis with Google Analytics 4 (GA4)

If you have given your consent, we use Google Analytics 4 (GA4), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, on this website.
GA4 uses cookies and similar technologies to evaluate usage behavior on our website, compile reports on website activity, and optimize our offerings.

7.1 Legal basis

The use of Google Analytics 4 is based exclusively on your consent (Art. 6 (1) (a) GDPR, § 25 (1) TTDSG).

7.2 Data processing and IP anonymization

GA4 processes the following types of data in particular: IP address (in anonymized form), device and browser information, approximate location data, click path, interactions with the website, and technical event data. We use GA4 with IP anonymization, which means that your IP address is truncated within the EU/EEA before transmission and no longer contains any personal references.

The standard storage period for event/usage data collected in GA4 is 24 months; after that, the data is automatically deleted or anonymized.

7.3 Third country transfer

The recipient is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
An adequacy decision by the EU Commission (EU-US Data Privacy Framework) may apply to the USA; in addition, standard contractual clauses and other protective measures are used to ensure an adequate level of data protection.

7.4 Revocation and opt-out

You can revoke your consent at any time via our cookie banner.
You can also prevent the storage of cookies by adjusting your browser software settings accordingly; however, this may limit the functionality of the website.


8. YouTube in the context of the Academy

On our website (e.g., in the "Academy" section), we link to free webinars and videos provided by us on the YouTube platform.
This content is not embedded directly in our pages, but can only be accessed via external links; only when you click on the link do you leave our website and switch to YouTube.

Data processing on YouTube is carried out exclusively by the platform operator (Google Ireland Limited or Google LLC) in accordance with its own data protection regulations; we have no influence on this processing.
If we receive personal data (e.g., comments or messages) via YouTube, we process this data for communication and public relations purposes on the basis of Art. 6 (1) lit. f GDPR.


9. Contact (contact form, email, telephone)

If you use our contact form or contact us by email/phone, we process your details (e.g., name, company, email address, phone number, message) in order to process your request.

Legal basis:

  • Art. 6 (1) (b) GDPR (contract initiation/contract fulfillment), if your request is aimed at concluding or executing a contract
  • Art. 6 (1) (f) GDPR (legitimate interest in responding to inquiries) in all other cases.

The data will only be stored for as long as is necessary to process your request or for as long as there are legal retention obligations.


10. Newsletter

If we offer a newsletter on our website, you can subscribe to it using the appropriate form. For the purpose of sending the newsletter, we process your email address and, if applicable, your name and other voluntary information.

Registration is done using a double opt-in procedure: after registering, you will receive an email in which you must confirm your registration.
The legal basis is your consent in accordance with Art. 6 (1) (a) GDPR; the registration process is logged on the basis of Art. 6 (1) (c) and (f) GDPR.

You can revoke your consent at any time with effect for the future, e.g., via the unsubscribe link in the newsletter or by sending a message to the above contact details.


11. Competitions/promotions

We occasionally hold competitions or other promotions (e.g., at trade fairs or online). In doing so, we process the data you provide (e.g., name, contact details, company name, if applicable) in order to conduct the competition, determine the winners, and notify them.

The legal basis for this is Art. 6 (1) (b) GDPR (conducting the competition or promotion).
Winner data is stored for longer in accordance with statutory retention obligations (e.g., tax documentation); all other participant data is deleted after the promotion has ended.


12. Installation evaluation and service calls

In the context of installation, service, or commissioning assignments, we may collect your contact details (e.g., name, company, position, contact details) and your evaluation of our assignment.
This may be done via feedback forms, evaluation sheets, or online surveys.

The purposes are, in particular, quality assurance, optimization of our services, and, if necessary, proof for customers.
The legal basis for this is Art. 6 (1) (b) GDPR (contract fulfillment) and Art. 6 (1) (f) GDPR (legitimate interest in improving our services).

The data will be stored for as long as it is necessary for evaluation and documentation; it will then be anonymized or deleted, provided that there are no legal retention obligations to the contrary.


13. Training courses, webinars, and online meetings (Microsoft Teams)

We use Microsoft Teams from Microsoft Corporation for training courses, product presentations, webinars, and online meetings.
Depending on the use, the following data categories are processed:

  • Master data (name, email address, company/organization, position if applicable)
  • Meeting metadata (date, time, duration, meeting ID)
  • Content data (chat messages, shared files, audio/video data, if applicable).

Legal basis:

  • Art. 6 (1) (b) GDPR, insofar as participation in training courses/webinars or meetings is necessary for the performance or initiation of a contract
  • Art. 6 (1) (f) GDPR (efficient and secure communication, internal training) in all other cases

Data processing takes place predominantly on servers within the EU/EEA; however, transfer to third countries (in particular the USA) cannot be ruled out.
Microsoft bases such transfers on standard contractual clauses and additional technical and organizational measures.

Recordings of training courses or webinars are only made if this is necessary and you have been informed of this in advance; if consent is required, the recording will only be made with your consent (Art. 6 (1) (a) GDPR).


14. Applications

You can apply to us by email or via the channels specified in our job advertisements.
We process your application data (e.g., contact details, resume, references, cover letter, correspondence) to decide whether to establish an employment relationship.

The legal basis is Art. 6 (1) (b) GDPR in conjunction with § 26 BDSG (initiation of an employment relationship).
After completion of the application process, your data will generally be deleted after six months at the latest, unless longer storage is necessary for legal defense or you have consented to longer storage.

15. Applicant and HR management with Personio

We use the "Personio" software from Personio SE & Co. KG, Seidlstraße 3, 80335 Munich, for applicant and personnel processes.
We use this to manage applications and internal HR processes; in particular, contact details, application documents, correspondence, and status information are processed.

Personio acts as a processor and processes personal data exclusively in accordance with our instructions and on the basis of a data processing agreement (Art. 28 GDPR). The legal basis is Art. 6 (1) lit. b GDPR in conjunction with § 26 BDSG, supplemented by Art. 6 (1) lit. c and f GDPR, insofar as legal obligations or organizational interests are affected.


16. Social media presence

We maintain company profiles on social networks in order to communicate with customers, interested parties, applicants, and partners and to provide information about our company.

We currently operate the following presences in particular:

When you visit our profiles, the platform operators process usage data for their own purposes (e.g., creation of usage statistics, interest-based advertising); we have only limited influence on this processing.
If we receive personal data there (e.g., comments, messages, interactions), we use it for communication and public relations purposes (Art. 6 (1) (f) GDPR).

In addition, the data protection information of the respective platform operators applies.


17. Recipients and categories of recipients

Depending on the purpose of the processing, the following categories of recipients may have access to your data:

  • IT service providers and hosters
  • Providers of analysis tools (Google)
  • Communication and collaboration service providers (e.g., Microsoft)
  • HR and applicant management service providers (Personio)
  • Newsletter/mailing service providers (if used)
  • Tax advisors, auditors, lawyers, authorities

We have data processing agreements in accordance with Art. 28 GDPR with all service providers who process personal data on our behalf.


18. Third country transfers

Personal data will only be transferred to countries outside the EU/EEA (e.g., the US) if:

  • there is an adequacy decision by the EU Commission in accordance with Art. 45 GDPR (e.g., EU-US Data Privacy Framework), or
  • there are appropriate safeguards in accordance with Art. 46 GDPR (in particular standard contractual clauses), or
  • you have expressly consented to this (Article 49(1)(a) GDPR), or
  • another permissible exception under Art. 49 GDPR applies.

In addition, technical and organizational measures are taken to ensure an adequate level of protection.


19. Storage period

Unless otherwise stated in this declaration, we only store personal data for as long as is necessary for the purposes stated.
Furthermore, we only store data if there are legal retention obligations (e.g. under commercial and tax law) or if we need data to assert, exercise, or defend legal claims.


20. Your rights

You have the following rights vis-à-vis us with regard to your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to certain processing (Art. 21 GDPR)
  • Right to withdraw consent with effect for the future (Art. 7(3) GDPR).

To exercise your rights, you can contact us or our data protection officer at any time (see sections 1 and 2).


21. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection law (Art. 77 GDPR). The supervisory authority responsible is, in particular, that of your habitual residence, your place of work, or the place of the alleged infringement.


22. Current status and changes to this privacy policy

This privacy policy is currently valid and was last updated in January 2026.
Further development of our website or changes in legal or regulatory requirements may necessitate adjustments to this privacy policy; the current version is available on this website at any time.



Last updated: February 6, 2026