Privacy Policy

Privacy Policy of WEIGANG Group 

Welcome to our website and thank you for your interest in our company. We take the protection of your personal data very seriously. We process your data in accordance with applicable personal data protection legislation, in particular the GDPR and our country-specific implementation laws, which provide comprehensive information about the processing of your personal data by WEIGANG Group and your rights.

Personal data is any information that makes it possible to identify a natural person. This includes, in particular, your name, date of birth, address, telephone number, email address and IP address. Anonymous data is available if no personal reference to the individual/user can be made.

Anonymous data exists when no personal reference to the user can be established. 


Responsible office and data protection office


P.O. 1140 - 96104 Ebern, Germany
Bahnhofstraße 27 - 96106 Ebern, Germany

Contact information

Phone: +49 9531 61 - 222
Fax: +49 9531 61 - 221




Contact the Data Protection Officer:


Your rights as a data subject

We would first like to notify you of your rights as a data subject. These rights are set out in Articles 15 - 22 GDPR, and include:

  • The right of access (Art. 15 GDPR),

  • The right to rectification (Art. 16 GDPR),

  • The right to data portability (Art. 20 GDPR),

  • The right to object to data processing (Art. 21 GDPR),

  • The right to erasure / right to be forgotten (Art. 17 GDPR),

  • The right to restriction of data processing (Art. 18 GDPR).

To exercise these rights, please contact: The same applies if you have any questions regarding data processing in our company. You also have a right of appeal to the relevant data protection supervisory authority.


Right to object

Please note the following with respect to your right to object:

When we process your personal data for the purpose of direct marketing, you have the right to object to this data processing at any time without providing the reasons for such objection. This also applies to profiling insofar as it is associated with direct marketing.
If you object to the processing for direct marketing, we will no longer process your personal data for such purposes. The objection is free of charge and can be made informally, where appropriate to:

Should we process your data to protect legitimate interests, you may object to such processing at any time for reasons that arise from your specific situation; this also applies to profiling based on these provisions.

We will then cease to process your personal information unless we can demonstrate compelling legitimate grounds for processing such information that outweigh your interests, rights and freedoms, or the processing is intended to assert, exercise or defend legal claims.


Purposes and legal bases of data processing

The processing of your personal data complies with the provisions of the GDPR and all other applicable data protection regulations. Legal bases for data processing arise in particular from Art. 6 GDPR. We use your data to initiate business, to fulfil contractual and legal obligations, to conduct the contractual relationship, to offer products and services and to consolidate customer relationships, which may include marketing and direct marketing. Your consent also constitutes a data protection regulation. In this respect, we will inform you of the purposes of data processing and the right to withdraw your consent. If the consent also relates to the processing of special categories of personal data, we will explicitly notify you in the consent process, Art. 88 (1) GDPR. Processing of special categories of personal data within the meaning of Art. 9 (1) GDPR may only take place where necessary on the grounds of legal regulations and there is no reason to assume that your legitimate interests should prevail to the exclusion of processing such data, Art. 88 (1) GDPR.


Data transfers / Disclosure to third parties

We will only transmit your data to third parties within the scope of given statutory provisions or based on consent. In all other cases, information will not be transferred to third parties unless we are obliged to do so owing to mandatory legal regulations (disclosure to external bodies, including the supervisory authorities or law enforcement authorities).


Data recipients / categories of recipients

In our organisation, we ensure that only individuals who are required to process the relevant data to fulfil their contractual and legal obligations are authorised to handle personal data.
In many cases, service providers assist our specialist departments to fulfil their tasks. The necessary data protection contract has been concluded with all service providers


Transfers of personal data to third countries 

A transfer of data to third countries (outside the European Union or the European Economic Area) shall only take place if required by law or if you have provided your consent for such a transfer.


Period of data storage

We store your data for as long as such is required for the relevant processing purposes. Please note that numerous retention statutory periods require that data must be stored for a specific period of time. This relates in particular to retention obligations for commercial or fiscal purposes (e.g. commercial code, tax code, etc.). The data will be routinely deleted after use unless a further period of retention is required. We may also retain data if you have given us your permission to do so, or in the event of any legal disputes and we use the evidence within the statutory limitation period, which may be up to 30 years; the standard limitation period is 3 years.


Secure transfer of data 

In order to protect the data stored by us against accidental or intentional manipulation, loss, destruction or access by unauthorized persons, we use appropriate technical and organizational security measures. The security levels are continuously checked in cooperation with security experts and adapted to new security standards. The data exchange from and to our website is always encrypted. We offer HTTPS as the transmission protocol for our website, in each case using the current encryption protocols. It is also possible to use alternative communication channels (e.g. by mail)


Obligation to provide data

A range of personal data is required to establish, implement and terminate the obligation and the fulfilment of the relevant contractual and legal obligations. The same applies to the use of our website and the various functions we provide. We have summarised the relevant details in the above point. In some cases, legal regulations require data to be collected or made available. Please note that it will not be possible to process your request or execute the underlying contractual obligation without this information.


Data categories, sources and origin of data

The data we process is defined by the relevant context: it depends on whether, for example, you place an order online, enter a request on our contact form or if you want to send us an application or submit a complaint. Please note that we may also provide information at specific points for specific processing situations separately where appropriate, e.g. when uploading application documents or when making a contact request.


We collect and process the following data when you visit our website:

  • Name of the Internet service provider

  • Web browser and operating system used

  • Information on the website from which you visited us

  • The IP address by your allocated Internet service provider

  • Files accessed, volume of data transferred, downloads/file export

  • Information on websites accessed on our site, including date and time

For reasons of technical security (in particular to safeguard against attempts to attack of our web server), this data is stored in accordance with Article 6 (1) lit f GDPR. Anonymisation takes place no later than after seven days by abbreviating the IP address so that no reference is made to the user.


Where applicable: we collect and process the following data as part of a contact request:

  • Name, first name

  • business concern

  • Company address (street, house number, postcode, city)

  • phone

  • position

  • email address

  • Information on wishes and interests (message)


Automated decisions in individual cases

We do not use purely automated processing to make decisions.


Cookies  (Art. 6 para. 1 lit. f EU DS-GMO / Art. 6 para. 1 lit. a EU DS-GMO with consent)

Our Internet pages use so-called cookies in several places. They serve to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser (locally on your hard drive). These cookies enable us to analyse how users use our websites. In this way we can design the website content according to the visitor's needs. In addition, cookies enable us to measure the effectiveness of a particular ad and to have it placed depending, for example, on the user's thematic interests. Most of the cookies we use are so-called "session cookies". These are automatically deleted after your visit. Permanent cookies are automatically deleted from your computer if they are valid (usually six months) or if you delete them yourself before they expire. Most web browsers automatically accept cookies. However, you can usually change the settings of your browser if you prefer not to send the information. You can still use the offers on our website without restrictions (exception: configurators). We use cookies to make our website more user-friendly, effective and secure. In addition, we use cookies, which enable us to analyse how users use our websites. In this way, we can design the content according to the needs of the visitors. In addition, cookies enable us to measure the effectiveness of a particular ad and to have it placed depending, for example, on the user's thematic interests. Cookies are stored on the user's computer and transmitted to our site. Therefore, you as a user also have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Furthermore, cookies that have already been set can be deleted at any time via an Internet browser or other software programs. This is possible in all common internet browsers. Please note: If you deactivate the setting of cookies, not all functions of our website may be fully usable.


Web tracking

This website uses the Piwik open source web analytics software program ( to collect and store data for marketing and optimization purposes. Piwik uses so-called "cookies". These are text files which are stored on your computer and which enable us to analyse the use of the website. The information generated by the cookie about the use of this website (including your IP address) remains on the server of Hetzner Online GmbH and is not passed on to third parties unless required by law. The data is recorded anonymously. Under no circumstances will further information be assigned to your IP address. If you access pages and files within this offer and are asked to enter information about yourself, we point out that this is not encrypted and therefore the information can be taken note of or falsified by unauthorized persons. The collection and storage of data can be revoked at any time with effect for the future. If you do not agree to the storage and use of your data, you can deactivate the storage via the cookie notice. In this case, an opt-in cookie is stored in your browser which prevents Matomo from saving usage data. If you delete your cookies, the Matomo Opt-In cookie will also be deleted.


Links to other providers

Our website also contains clearly identifiable links to the Internet sites of other companies. Although we provide links to websites of other providers, we have no influence on their content, and no guarantee or liability can therefore be assumed for such. The content of these pages is always the responsibility of the respective provider or operator of the pages.
The linked pages were checked at the time of linking for potential legal violations and identifiable infringements. No illegal content was identified at the time of linking. However, a permanent content control of the linked pages is not reasonable without concrete evidence of an infringement and, upon notification of a violation of rights, such links will be promptly removed.


Notes on data protection within social media

Our company is represented in various social media networks to communicate with registered customers as well as with interested parties to be able to inform them about our quotations. We advise that, the responibility for this platform and their functions remains with the individual user.  (such as commenting, share, evaluate) Furthermore we advise that, your data can be processed outside the euro area. US-supplier who are certified to `Privancy-Shield` are obligated to observe the European data protection standards. Your data can be used for promotion purposes and for market researches.  For example, usage profiles will be created via usage-behavior and the interests resulting. Thus it is possible to place interest-related advertisements outside the platform, by means of stored cookies. Notwithstanding the above, also data collected outside your terminal can be stored in your usage profile (particularly if you are registered at such a platform.) We as a provider of such information service don`t collect or process data from your use of our service. We only process personal data to ensure our legitimate interests including effective information acquisition and communication with our users (pursuant to Article 6 (1) lit. f. EU-DS-GVO.) If the respective providers request to consent for processing of data, the legal basis that justifies such processing will be defined in Article 6 (1) lit. a., Article 7 EU-DS-GSVO.


Possibility to appeal

If you take part of such a social media network and disagree about the collection or concatenation data through our presence you´ll have to:

  • Log off from the networks before using our web site

  • Delete cookies from your software

  • Close programs and restart the browser

After a renewed registration you will be identifiable again. For a detailed description about the processing of data and the possibilities to appeal (Opt-Out), we refer to the following linked information of provider. Also in case of provide details or claim user rights, please contact the provider to guarantee a quick and efficient implementation. They will have the necessary access on database to take steps and provide information. If you still need help, you also can contact us directly.


Further information

Copyright notices: If you publish pictures, videos, music etc. on our website, please notice that you potentially lose the copyrights. This could involve legal consequences.


User profiles / web tracking procedure: etracker

Our website uses the analysis service etracker. The provider is etracker GmbH, Erste Brunnenstraße 1 20459 Hamburg Germany. The data can be used to create user profiles under a pseudonym. Cookies may be used for this purpose. Cookies are small text files that are stored locally in the cache of your Internet browser. The cookies make it possible to recognize your browser again. The data collected with etracker technologies will not be used to personally identify visitors to our website without the separately given consent of the person concerned and will not be combined with personal data about the bearer of the pseudonym. You can object to the collection and storage of data at any time with effect for the future. To prevent your visitor data from being collected and stored in the future, you can obtain an opt-out cookie from etracker via the following link. This will ensure that no visitor data from your browser will be collected and stored by etracker in future: OptOut. This sets an opt-out cookie called "cntcookie" from etracker.  Further information can be found in the etracker data protection regulations:


Contact form / Contact by e-mail (Art. 6 par. 1 lit. a, b EU-DS-GMO)

There is a contact form on our website which can be used for electronic contact. If you write to us using the contact form, we will process the information you provide in the contact form to contact you and answer your questions and requests, in accordance with the principle of data economy and data avoidance, in that you only have to provide the data that we absolutely need to contact you. This is name / first name, business concern, company adress (street, house number, postcode, city), phone, position, email address and the message field itself. In addition, your IP address is processed for technical reasons and for legal protection. All other data are voluntary fields and can be entered optionally (e.g. for more individual answers to your questions). If you contact us by e-mail, we will process the personal data provided in the e-mail solely for the purpose of processing your inquiry. If you do not use the offered forms to contact us, no further data will be collected.


Web shop

We process the data provided by you within the scope of the order form solely to execute and fulfil the underlying contractual relationship, unless you agree to further use. The principle of data minimisation and data avoidance is observed here, as we only request data that is required to perform the contract or fulfil our contractual obligations (i.e. your name, address, email address and the payment data for the specific payment method you have chosen) or to collect data that is mandatory under the law.

Your IP address will also be processed for technical reasons and legal protection. If this data is not provided, we will have to decline the conclusion of the contract, as we cannot then perform the contract or will be obliged to terminate an existing contract, where appropriate. You can of course provide additional data on a voluntary basis.


Registration / Customer account

Users can provide personal data to enable them to register on our website. The advantage here is that you can, in particular, view your order history and save your data to use for your next order, without having to re-submit it.

Registration is therefore necessary to perform a contract (via our online shop) with you or required to implement pre-contractual measures, or possible if guest access is provided as an option.

The principle of data minimisation and data avoidance is observed here, as only the mandatory data fields required for registration are marked with an asterisk (*).

  • Name, first name

  • salutation
  • email adress

  • street, house number, postcode, city

  • passwort

  • country


When ordering in our online shop, we also require the billing address information for the delivery (first name, last name, company name, address). If the delivery address is different from the billing address, the delivery address details mentioned above must also be provided.

When you register on our website, the user’s IP address and the date and time of registration are also stored (technical background data). Activate the "Register now" to consent to the processing of your data.

Please note: We will encrypt the password you entered which will be stored with us. Our company employees cannot view this password and cannot therefore assist you if you forget it.

In this event, use the "Forgotten password" function, which will send you an automatically generated new password by email. No employee is authorised to request your password by telephone or in writing. Please never disclose your password should you receive such requests.

Upon completion of the registration process, your data will be stored with us for use in the protected customer area. When you log in to our website with your email address as your username and your password, this data will be made available to you on our website (e.g. for orders in our online shop). Completed orders can be tracked in the order history. You can specify changes to the billing or delivery address here.

Registered persons are free to amend/correct the billing or delivery address in the order history. You can also contact our customer service team, who will be happy to apply any changes / corrections. You can of course cancel or delete the registration or your customer account.


Payment systems (Art. 6 Abs. 1 lit. a, b EU-DS-GVO)

In our what if we fly online shop you can select to pay on invoice, immediate transfer or PayPal. In order to proceed accordingly, the relevant payment data is collected to perform and process your order. The payment system we use implements SSL encryption to protect your data. Your IP address will also be processed for technical reasons and legal protection.

The principle of data economy and data avoidance is observed in that you only need to provide us with the data that we need to carry out the payment processing and thus the execution of the contract or to whose collection we are legally obliged. Without this data, we will unfortunately have to refuse to conclude the contract, as we will then not be able to carry it out. The payment system used by us uses SSL encryption for the protected transmission of your data.

Note on PayPal: PayPal is a PayPal (Europe) S.à.r.l. et Cie, S.C.A company,22-24 Boulevard Royal, L-2449 Luxembourg. If the data subject selects “PayPal” as an option during the order process in our online shop, the data subject’s information will be automatically sent to “PayPal”.

By selecting this payment option, the data subject consents to the transfer of personal data required for payment processing. The personal data transmitted to PayPal is generally a first name, last name, address, email address, IP address, telephone number, mobile phone number or other data required for payment processing.

Personal data associated with the relevant order is also necessary to execute the purchase contract. Details on data protection at PayPal can be found at: