Privacy Policy

1. Controller

Wolk & Nikolic Aftersales Intelligence GmbH
Sachsenring 69
50677 Cologne
Germany

Email: info@wolk-aftersales.de
Website: https://www.wolk-aftersales.com

You can contact our data protection officer by post at the address above with the addition “Data Protection Officer”.

2. Scope of this policy

This policy covers processing in connection with the public website, contact and lead forms, newsletters and press mailings, customer communications, our online portals, market research activities, online panels, surveys, and similar promotions.

3. Server logs and website delivery

When you visit the website, our servers process technical data transmitted by your browser. This may include IP address, date and time of access, requested page, referrer URL, browser type and version, operating system, language settings, access status, and transferred data volume.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to deliver the website securely, maintain technical stability, detect misuse, and improve performance.

4. Cookies and browser storage

The website uses cookies and browser storage for consent management, analytics, advertising measurement, form routing, and technical functionality. You can restrict cookies in your browser settings; some functions may then no longer work as intended. Where information is stored on or accessed from your device, the applicable German legal basis includes Section 25 TDDDG. Consent is not required for storage or access that is strictly necessary to provide a digital service expressly requested by the user.

5. Consent management

The website uses WebToffee Cookie Consent to display the cookie banner, store consent preferences, and log consent decisions via the WordPress endpoint /wp-json/wcc/v1/consent_logs. The legacy Avada/Fusion privacy module is also present in the page stack.

The consent banner offers “Customize”, “Reject All” and “Accept All” options. Consent can be changed via the “Cookie Settings” control.

6. Google Analytics, Google Ads and Google tag

The website loads Google tag scripts from www.googletagmanager.com. In the technical review, the following IDs were observed: G-WF67M1GL5T, G-ETK1SL5728 and AW-1032360901.

Google Analytics is used through the MonsterInsights / Google Analytics for WordPress integration. Google Ads and DoubleClick requests were also observed for conversion and audience measurement. The processing helps us understand website usage and measure campaigns. Where required, processing is based on your consent under Art. 6(1)(a) GDPR; otherwise, technical delivery and security-related processing may be based on Art. 6(1)(f) GDPR.

Google may process data on servers outside the European Economic Area. Further information is available in Google’s privacy policy: https://policies.google.com/privacy.

7. Google Fonts

During the technical review, Rubik font files were loaded from fonts.gstatic.com. This means the audited live page does not use Google Fonts exclusively from local hosting. When fonts are requested from Google, technical request data such as IP address and browser information may be transmitted to Google.

8. Google Maps

No Google Maps iframe or Google Maps API request was loaded during the technical review of the Privacy Policy page itself. Other pages, especially contact pages, may embed Google Maps. If you open a page with an embedded Google Map, data such as IP address, browser data and page context may be transmitted to Google.

9. Bitrix24 CRM forms

The website loads scripts and assets from crm.wolk-aftersales.de for CRM form handling. In the technical review, Bitrix24 form loader scripts and form app assets were observed. If you submit a form, the data you provide, page context and attribution data may be processed in Bitrix24 CRM for enquiry routing and follow-up.

Depending on the form, this may include name, company, position, email address, telephone number, message content, selected interest, source page and technical metadata. The legal basis is Art. 6(1)(b) GDPR for pre-contractual or contractual communication and Art. 6(1)(f) GDPR for efficient B2B enquiry handling.

10. Ecwid shop integration

The website includes Ecwid shop resources and preconnects to Ecwid-related domains such as app.ecwid.com, ecomm.events and CloudFront domains. These resources support shop functionality and may process technical request data when loaded or used.

11. YouTube

The live website includes YouTube Embed Plus and Avada YouTube-related scripts. On the audited Privacy Policy page, no YouTube iframe was loaded. On pages containing videos, YouTube or YouTube privacy-enhanced embeds may be loaded only when the video feature is used or displayed. When YouTube is loaded, Google may process technical and usage data.

12. Social media links

The website may link to our corporate profiles on external social networks. These are ordinary links. Personal data is not transmitted to those providers by the link itself before you click it. Once you follow a link, the privacy policy of the respective provider applies.

13. Email, newsletters and press mailings

If you contact us by email or subscribe to communications, we process the data you provide in order to respond, send requested information and document the communication. Depending on the specific process, this may include name, company, role, email address, telephone number, message content, registration time, confirmation time and IP address used for registration.

For newsletters, press releases, survey invitations and customer communications, we may use external email distribution providers. Messages may contain tracking pixels or link tracking to measure delivery, opening and click behaviour. You can withdraw consent or object to marketing communications at any time by using the unsubscribe link or contacting us.

14. Portals and customer platforms

When you use our portals as part of a contractual relationship, login and usage data may be processed. This can include username, email address, login times, session duration, accessed dashboards, selected filters, saved settings, exports, and technical log data. The processing is necessary to provide the portal, secure access, support customers and improve the service.

15. Market research and online surveys

If you participate in online panels, surveys, interviews or similar research activities, we process the data necessary to conduct and evaluate the research. Survey links may lead to third-party survey platforms. Processing may include contact data, response data, technical access data and participation metadata. The legal basis may be consent, contract performance or legitimate interests, depending on the specific research setup.

16. Recipients, processors and third-country transfers

We only share personal data where this is permitted by law, necessary for the relevant service, required by contract, based on consent, or required by legal obligation. Processors and service providers are selected with care and bound by appropriate agreements. Where data is transferred outside the European Economic Area, we use appropriate safeguards such as adequacy decisions, standard contractual clauses or other lawful transfer mechanisms.

17. Storage and deletion

We store personal data only for as long as needed for the stated purpose, to comply with statutory retention obligations, to document consent or objections, or to establish, exercise or defend legal claims. Data is deleted or restricted when the purpose no longer applies and no legal retention obligation remains.

18. Your rights

Subject to the conditions of the GDPR, you have the right to access, rectification, erasure, restriction of processing, data portability and objection. Where processing is based on consent, you may withdraw consent at any time with effect for the future.

You may also lodge a complaint with a competent data protection supervisory authority.

The competent supervisory authority for North Rhine-Westphalia is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW), Postfach 20 04 44, 40102 Düsseldorf, Germany, https://www.ldi.nrw.de.