Privacy notice
Last updated: 10 September 2026. This notice applies to www.willystorz-medical.de and the product catalogue at shop.willystorz-medical.de.
Diese Datenschutzerklärung auf Deutsch lesen
1. Controller and contact details
Willy Storz GmbH
Eisenbahnstraße 35/1
78604 Rietheim-Weilheim,
Germany
Telephone: +49 7461 2961
Email:
Please use these contact details for privacy enquiries or to exercise your rights.
2. Website and product catalogue
Our website provides information about our company and products for business customers. The product catalogue does not offer online purchases, product enquiry submissions, customer registration or newsletter subscriptions. We do not request customer, delivery or payment details there. Technical connection data is nevertheless processed when you visit the pages. You can contact us by email or telephone.
3. Hosting, connection data and security
Our websites are hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. A data processing agreement under Article 28 GDPR is in place with IONOS.
When pages are requested, data processed includes the IP address, time, requested address, HTTP status, volume of data transferred and information supplied by the browser about the browser, operating system and, where applicable, referring page. We need this information to deliver, maintain and secure our websites and investigate technical errors. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is safe and reliable operation.
The retention of technical logs depends on their necessity for operation, troubleshooting and abuse prevention and on the hosting provider’s deletion cycles. Where a specific security incident occurs, relevant entries may be required until it has been resolved or for establishing, exercising or defending legal claims. Our pages are transmitted using HTTPS encryption.
IONOS provides hosting access statistics under the name WebAnalytics. According to IONOS, these statistics do not use analytics cookies, and IP addresses are anonymised for statistical analysis. The technical access data is processed to understand reach and operation, based on our legitimate interest under Article 6(1)(f) GDPR. For further details, see the IONOS privacy information about WebAnalytics (German).
4. Cookies and locally hosted fonts
The websites use technically necessary session cookies. The catalogue may also use security cookies with names such as “csrf[…]” to protect requests against manipulation. They contain technical identifiers and are configured as session cookies. A browser setting that restores previous sessions may extend their availability.
Storing or accessing strictly necessary information is based on section 25(2)(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG). Where personal data is processed, the basis is Article 6(1)(f) GDPR; our interest is the secure provision of the requested pages. You can delete or block cookies in your browser, although this may restrict individual technical functions.
Fonts used for the design of our pages are served from our own domains. This does not involve a request to Google Fonts. Our websites do not use Google reCAPTCHA. The following section explains the optional map feature.
5. Google Maps – only with consent
You can enable a Google Maps map on the contact page. The provider for users in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The map is initially blocked. A connection to Google is established only when you select “Allow Google Maps”.
Once enabled, Google receives technical data such as your IP address and browser information, as well as information about your interaction with the map. Google may use cookies or similar storage technologies and associate information with an existing Google account. We embed the map to show our location. Consent under Article 6(1)(a) GDPR and, for storage or access on your device, section 25(1) TDDDG is optional. Our address remains available without the map.
Your permission applies only to the current page view and is not stored permanently by us. Selecting “Disable map” beside the map stops further connections from this embedded map. The map is initially blocked again on a new page view. Withdrawal takes effect for the future and does not affect processing that has already occurred. Our website cannot delete data already sent to Google or cookies set by Google. You can manage these through your browser and Google settings.
Data may be processed by Google LLC in the United States and other Google group companies. Google cites its EU-US Data Privacy Framework certification and, where required, standard contractual clauses for relevant transfers. Details and information on obtaining these safeguards are available in Google’s international data transfer information. Google’s own purposes, retention practices and controls are explained in its privacy policy.
Once enabled, the map loads its own resources, including fonts, from Google. These are part of the optional map feature you have activated.
6. Contact by email, telephone or post
If you contact us, we process the contact details you provide, your message and information needed to handle your enquiry. Recipients include responsible members of our company and necessary IT and email service providers acting as processors. Information is also disclosed where necessary to handle your request or fulfil a legal obligation.
Article 6(1)(b) GDPR applies to contracts or pre-contractual steps with you. For business customers’ contact persons and other enquiries, processing is based on Article 6(1)(f) GDPR; our legitimate interest is business communication and handling the enquiry. Statutory obligations are based on Article 6(1)(c) GDPR.
The necessary retention period depends on completion of the matter, statutory retention obligations and, where applicable, establishing, exercising or defending legal claims. Documents qualifying as commercial or business correspondence are subject to the relevant statutory periods. Data no longer required must be deleted; data subject to retention obligations is needed only for those purposes. This also applies to data from previous enquiries or customer accounts. Converting the website into a product catalogue does not end these statutory obligations.
7. Job applications
If you apply through the contact channels shown in our vacancies, we process your contact information, application documents and information required during the selection process to decide whether to establish an employment relationship. The basis is section 26(1) of the German Federal Data Protection Act (BDSG). People involved in recruitment and necessary IT service providers have access. Please provide only information necessary for your application.
Once recruitment is complete, further retention depends on whether documents are required to establish employment, fulfil statutory obligations or establish, exercise or defend legal claims. Inclusion in a candidate pool beyond these purposes requires separate consent.
8. Your rights
Subject to the statutory conditions, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). You may withdraw consent at any time for the future without affecting the lawfulness of earlier processing.
Where processing is based on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation under Article 21 GDPR. You may object to direct marketing at any time without giving a reason.
You may complain to a supervisory authority, particularly in your country of residence, at your place of work or where the suspected infringement occurred. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg.
You are not required to provide customer or contact details simply to browse our website. We cannot technically deliver pages without the necessary connection data, and we may be unable to handle your enquiry without the information it requires. This website does not use automated decisions producing legal or similarly significant effects or corresponding profiling.