Data protection
Data protection
General information
Controller
- Wall Universe GmbH
- Am Weiher 14
- 56766 Ulmen
- Deutschland
- E-Mail: info@wall-universe.de
- Telefonnummer: +49 2676 9599010
- Vertreten durch: Agnes Zinn
Hosting
This website is hosted by:
Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen
Germany
The processing is carried out on the basis of Art. 6 (1) lit. f GDPR (legitimate interest in the secure and efficient provision of our online services).
A Data Processing Agreement (DPA) has been concluded with the hosting provider.
Contact form
If you submit inquiries via our contact form, the information you provide, including your contact details, will be stored for the purpose of processing your request.
Legal basis: Art. 6 (1) lit. b GDPR (pre-contractual measures and contract performance).
Upload functions
If you upload documents (e.g., business registrations or other documents), these will be stored and processed for the purpose of handling your request and preparing contractual relationships.
Legal basis: Art. 6 (1) lit. b GDPR.
Newsletter
If you subscribe to our newsletter, we will use your email address exclusively for sending the newsletter.
Subscription is carried out using the double opt-in procedure.
Legal basis: Art. 6 (1) lit. a GDPR (consent).
You may withdraw your consent at any time with future effect.
Cookies
Our website uses cookies. Non-essential cookies are only set with your consent.
Currently, no analytics, tracking, or marketing tools such as Google Analytics or Meta Pixel are used.
AI-Supported Processing of Business Communications
The company partially uses AI-supported systems to assist in the processing of incoming business communications, particularly for the structuring, categorization, analysis, and internal assignment of trade inquiries, as well as the processing of product, pricing, and quotation information.
The following categories of data may be processed in particular:
Communication content
Contact details
Product and quotation data
Pricing and trade information
Sender information
The processing is carried out exclusively to support internal business processes.
No solely automated decision-making within the meaning of Art. 22 GDPR takes place. Final decisions and processing activities remain under the responsibility of company employees.
Legal bases: Art. 6 (1) lit. b GDPR and Art. 6 (1) lit. f GDPR.
Microsoft Azure / Cloud Services
For certain technical processing activities, cloud and AI services provided by the Microsoft group of companies are used, particularly Microsoft Azure and Azure OpenAI Services.
Where possible, processing takes place within data centers located in the European Union.
Where required under data protection law, Data Processing Agreements pursuant to Art. 28 GDPR are concluded with the service providers used.
Communication Channels
The company uses various communication channels to process business inquiries and communicate with customers, suppliers, and business partners.
These may include:
E-mail
Microsoft Teams
Potentially WhatsApp Business in the future
Where used, WhatsApp Business serves solely as an additional communication and inquiry channel. Automated AI-generated communication with customers or suppliers is currently not carried out.
Please do not transmit sensitive or highly confidential information via messenger services.
Data Retention Periods
Business and trade-related communication data is generally stored in accordance with applicable statutory retention obligations.
Tax and commercial law-related documents are generally retained for up to ten (10) years.
Technical log files as well as temporary test and system data are generally stored only for a limited period and subsequently deleted.
International Data Transfers
Where processing by certain service providers outside the European Union (EU) or the European Economic Area (EEA) cannot be excluded, such processing is carried out exclusively in compliance with applicable data protection requirements.
This includes, in particular:
The conclusion of Standard Contractual Clauses (SCCs);
The use of certified providers under the EU-U.S. Data Privacy Framework;
Or comparable safeguards provided for by law.
Rights of the data subjects
You have the right at any time to:
Obtain information about your stored personal data;
Request correction of inaccurate data;
Request deletion of your personal data;
Request restriction of processing;
Receive your data in a portable format (data portability).
You also have the right to lodge a complaint with the competent data protection supervisory authority.
