BrandsDE/ENBook Appointment
BrandsBook AppointmentImprintPrivacyDE/EN

Legal

Privacy

We take the protection of your personal data seriously. This statement summarises which data we process — clearly and completely.

Last updated: 7 July 2026

Controller

The controller responsible for data processing on this website is:

  • Stefan Wittmann GmbH
  • Volmerswerther Str. 32
  • 40221 Düsseldorf
  • Germany

Phone: +49 211 58589690

Email: buero@agentur-wittmann.de

Represented by the Managing Director Stefan Wittmann. Further details can be found in our imprint.

General information

This privacy policy explains which personal data we process when you visit this website, for which purposes and on which legal basis. Personal data is any information that can be used to identify you personally.

We treat your personal data confidentially and in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

Your rights

At any time you have the right to:

  • request information about the data we store about you (Art. 15 GDPR),
  • request the correction of inaccurate data (Art. 16 GDPR),
  • request the erasure of your data (Art. 17 GDPR),
  • request the restriction of processing (Art. 18 GDPR),
  • receive or have your data transferred in a common format (Art. 20 GDPR),
  • object to the processing (Art. 21 GDPR),
  • withdraw any consent given, with effect for the future (Art. 7(3) GDPR).

To exercise these rights, an informal message to buero@agentur-wittmann.de is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, https://www.ldi.nrw.de.

Hosting

This website is hosted by Vercel. The provider is Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. On our behalf, Vercel processes the technical data your browser transmits when accessing the website (see “Server log files”). The legal basis is our legitimate interest in providing the website securely and efficiently (Art. 6(1)(f) GDPR).

A data processing agreement (Art. 28 GDPR) is in place with Vercel. Where data is transferred to the USA, this is done on the basis of the EU Commission's Standard Contractual Clauses (Art. 46 GDPR).

Server log files

Each time the website is accessed, the hosting provider automatically collects information in so-called server log files, which your browser transmits:

  • page visited and time of access
  • amount of data transferred and confirmation of a successful request
  • browser type and version
  • operating system used
  • referrer URL
  • shortened or otherwise processed IP address

This data is not merged with other data sources. Processing serves to ensure trouble-free operation and the security of the website (Art. 6(1)(f) GDPR). The logs are deleted after a short period unless they are needed to investigate security incidents.

Contact and appointment requests

If you contact us via the form on this website or by email, we process the data you provide in order to handle your request. Via the appointment form we collect:

  • name
  • company or store
  • email address
  • postal address
  • preferred date and time (optional)
  • selected brands (optional)
  • your message

Providing this data is necessary to handle your request. The legal basis is the initiation or performance of a contract (Art. 6(1)(b) GDPR), the consent you give by submitting the form (Art. 6(1)(a) GDPR), and our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).

We store the request until the purpose of processing no longer applies and then delete it, unless statutory retention periods apply. You may withdraw any consent given at any time.

Email delivery via Brevo

To technically deliver the requests submitted via the contact form to our mailbox, we use the sending service Brevo (Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany). Brevo processes the form data solely to transmit the email to us. A data processing agreement (Art. 28 GDPR) is in place with Brevo. The legal basis is Art. 6(1)(b) and (f) GDPR.

Reach measurement

We use our own privacy-friendly reach measurement provided by Labelloop to statistically evaluate the use of this website and improve our offering. No cookies are set and no data is passed on to advertising third parties.

The following is collected:

  • a random, pseudonymous session identifier (stored in your browser's local storage, see “Local storage”),
  • pages accessed and events triggered (e.g. page view, click, form submission),
  • the label of clicked controls and internal target paths,
  • the referrer page, provided it originates from this website (external referrers are discarded),
  • device category (mobile/tablet/desktop) and screen size,
  • the public campaign codes utm_source, utm_medium and utm_campaign, if present and valid; these codes must not contain personal information.

We do not read form contents for analytics; the evaluation is pseudonymous. Reach measurement starts only after your current, explicit choice in the privacy notice. The legal basis is consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG). You can refuse or withdraw consent at any time through Analytics settings at the foot of every page. Do Not Track and an analytics opt-out stop collection. Withdrawal stops future collection and removes this website’s browser identifier and tab attribution, but does not automatically erase events already collected. New analytics events collected under this notice have a retention period of 365 days, followed by regular automatic cleanup. This new cleanup rule does not apply to older records. Refusal does not affect website access or inquiry submission.

Local storage

We store your choice in local storage (wittmann_consent), together with a versioned receipt and time (labelloop_analytics_consent_receipt). A choice is valid for up to 180 days; an older value alone does not enable analytics. Only after consent do we store a pseudonymous browser identifier (labelloop_website_analytics_session_agentur-wittmann). Valid campaign attribution is stored only in the current tab’s session storage. Withdrawal clears the analytics identifier and attribution; these are also cleared when an expired or invalid choice is checked. The stored choice remains until replaced or you clear browser storage.

Fonts

This website uses the “Montserrat” typeface, which is embedded locally on our server. When the pages load, no connection is made to third-party servers (such as Google Fonts) and no personal data is transferred to third parties for this purpose.

SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the “https://” in your browser's address bar.

Status and changes

This privacy policy is dated 7 July 2026. As the website evolves or legal requirements change, it may become necessary to update this policy. The current version is always available on this page.

Agentur Stefan Wittmann
Showroom Düsseldorf · since 1986

buero@agentur-wittmann.de
BrandsBook AppointmentImprintPrivacy
© 2026 Agentur Stefan WittmannDüsseldorf, Germany

May we measure visits, clicks, confirmed inquiries and campaign codes through Labelloop? We use a pseudonymous browser ID, page paths and device size, without form contents or advertising trackers. Your choice lasts up to 180 days and can be withdrawn at any time in Analytics settings. New analytics events are retained for 365 days, followed by regular automatic cleanup. Privacy