Privacy Policy
We appreciate your interest in our online services. Below, we provide information about how we process personal data when you use this website. Personal data refers to any information that can be used to identify you personally (e.g., name, address, email address, IP address).
1. Data Controller
Winim GmbH (IDES24)
Unnenberger Str. 5, 51709 Marienheide, Germany
2. Hosting and Server Log Files (Squarespace)
Our website is hosted by Squarespace (Squarespace Ireland Ltd., Ship Street Great, Dublin 8, Ireland; parent company Squarespace, Inc., New York, USA). When you visit the website, Squarespace automatically collects access data in server log files: IP address, date and time of access, pages visited, referrer URL, browser type and version, operating system, and device information. This data is used to provide the website, ensure stability, and maintain IT security, and is stored for a maximum of 30 days.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure and functional website).
Statistical visitor analysis (Squarespace Analytics / Activity Log) is disabled on our website; we do not use cookies for this purpose.
To the extent that data is transferred to the U.S., Squarespace, Inc. is certified under the EU-U.S. Data Privacy Framework (DPF). Details:
3. Cookies and Consent
Our website uses cookies and similar technologies. Cookies are small text files that are stored on your device. We distinguish between:
Technically necessary cookies that are required for the operation of the website (e.g., shopping cart, security, language selection). Legal basis: Section 25(2) of the German Telemedia Act (TDDDG), Article 6(1)(f) of the General Data Protection Regulation (GDPR).
Cookies that require your consent and are only set after you have given it (e.g., through integrated third-party services; see below). You can manage these via our cookie banner. Legal basis: Section 25(1) of the German Telemedia Act (TDDDG), Article 6(1)(a) of the General Data Protection Regulation (GDPR).
You can change your cookie settings at any time by clicking the "Cookie Settings" button at the bottom of the screen or through your browser settings. You may withdraw your consent at any time, effective for the future. For more details, please see our Cookie Policy.
4. Fonts (Google Fonts)
To ensure consistent font display, our website uses fonts from Google Fonts, which are loaded from servers operated by Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland; Google LLC, USA) when a page is accessed. In doing so, your IP address is transmitted to Google.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a consistent, appealing display). Google LLC is certified under the EU-US Data Privacy Framework. Details:
5. Contact and Inquiry Forms (Jotform & reCAPTCHA)
We use the Jotform service (Jotform Inc., 4 Embarcadero Center, San Francisco, USA) for inquiry and contact forms. The data entered into the form (e.g., name, email address, message) is processed by Jotform to handle your inquiry and transmitted to us.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures/performance of a contract) or Art. 6(1)(f) GDPR (efficient processing of inquiries).
To protect against automated submissions (spam), Google reCAPTCHA (Google Ireland Ltd./Google LLC, USA) may be used in the forms. In this process, data such as the IP address and user behavior are transmitted to Google; Google may set cookies for this purpose.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in spam and abuse protection) or Art. 6(1)(a) GDPR, where consent is required. Jotform and Google LLC are certified under the EU-US Data Privacy Framework. Details:and
We delete your form data as soon as processing is complete and there are no legal retention obligations.
6. Quote Configurator
On our quote pages, you can generate a customized quote as a PDF. The data you enter there (company name, contact person, address, email address, and the selected configuration) is processed to generate the quote and handle your request, and is transmitted to us and stored via the Google Apps Script service (Google Ireland Ltd., Dublin, Ireland; Google LLC, USA).
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures in response to your inquiry).
To display current prices, your browser also retrieves price data via Google Apps Script and the current currency exchange rate via the ExchangeRate API (open.er-api.com); for technical reasons, your IP address is transmitted in the process.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in displaying current prices). Google LLC is certified under the EU-US Data Privacy Framework. We delete offer data as soon as it is no longer required for processing and there are no legal retention obligations.
7. Embedded content and function libraries
Cloudflare (cdnjs): To provide functionality libraries (including PDF generation and icons), our website embeds files from cdnjs.cloudflare.com (Cloudflare, Inc., San Francisco, USA). In doing so, your IP address is transmitted to Cloudflare. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure, high-performance delivery). Cloudflare, Inc. is DPF-certified. Details:
Elfsight: For individual website elements (e.g., price tables, FAQ sections), we use widgets from Elfsight (Elfsight LLC), which are loaded via files.elfsightcdn.com; your IP address is transmitted in the process. Legal basis: Art. 6(1)(f) GDPR. Details:
Weglot (multilingualism): For multilingual content, we use Weglot (Weglot SAS, 138 Rue Pierre Joigneaux, 92270 Bois-Colombes, France). Among other things, your IP address and selected language are processed in order to provide the content accordingly. Legal basis: Art. 6(1)(f) GDPR. Details:
8. Redirects to Partner Offers (Affiliate)
On our website, you will find referral links (affiliate links) to our partner, Michael Management Corporation (MMC). If you click on such a link, you will leave our website and be redirected to MMC. Any purchase agreement for services offered there (e.g., SAP access or online training) is entered into exclusively between you and MMC; MMC is responsible for data processing on its site. For technical reasons, a referral ID (affiliate ID) is transmitted to MMC when you click the link so that a booking arranged through us can be assigned; this does not result in any additional costs for you. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the billing of arranged bookings). MMC’s privacy policy can be found at:https://www.michaelmanagement.com/privacy.php
9. Storage and Deletion
We retain personal data only for as long as is necessary for the respective purpose or as required by legal retention obligations. General retention periods: Server log files: 30 days · Contact and inquiry data: upon completion of processing · Contract and billing data: in accordance with legal retention periods (up to 10 years).
10. Your Rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). You may revoke any consent you have given at any time with future effect. Please direct inquiries to:
You also have the right to file a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf,
11. External Links and Changes
Our website may contain links to external websites, and we are not responsible for their content or privacy practices. This Privacy Policy is reviewed regularly and updated as needed.
As of June 2026
