Privacy Policy
We appreciate your interest in our online services. Below, we provide information about how we process personal data when you use this website. Personal data refers to any information that can be linked to you personally (e.g., name, address, email address, IP address).
1. Data Controller
Winim GmbH (IDES24)
Unnenberger Str. 5, 51709 Marienheide, Germany
2. Hosting and Server Log Files (Squarespace)
Our website is hosted by Squarespace (Squarespace Ireland Ltd., Ship Street Great, Dublin 8, Ireland; parent company Squarespace, Inc., New York, USA). When you visit the website, Squarespace automatically collects access data in server log files: IP address, date and time of access, pages viewed, referrer URL, browser type and version, operating system, and device information. This data is used to provide the website, ensure stability, and maintain IT security, and is stored for a maximum of 30 days.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure and functional website).
Statistical visitor analysis (Squarespace Analytics / Activity Log) is disabled on our website; we do not use cookies for this purpose.
To the extent that data is transferred to the U.S., Squarespace, Inc. is certified under the EU-U.S. Data Privacy Framework (DPF). Details:
3. Cookies and Consent
Our website uses cookies and similar technologies. Cookies are small text files that are stored on your device. We distinguish between:
Technically necessary cookies that are required for the operation of the website (e.g., shopping cart, security, language selection). Legal basis: Section 25(2) of the TDDDG, Article 6(1)(f) of the GDPR.
Cookies that require consent and are set only after you have given your consent (e.g., through integrated third-party services; see below). You can manage these via our cookie banner. Legal basis: Section 25(1) of the TDDDG, Article 6(1)(a) of the GDPR.
You can change your cookie settings at any time by clicking the “Cookie Settings” button at the bottom of the screen or through your browser settings. You can revoke any consent you have given at any time, effective for the future. For more details, please see our Cookie Policy.
4. Fonts (Google Fonts)
To ensure consistent font display, our website incorporates fonts from Google Fonts, which are loaded from servers operated by Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland; Google LLC, USA) when a page is accessed. In doing so, your IP address is transmitted to Google.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a consistent, appealing display). Google LLC is certified under the EU-U.S. Data Privacy Framework. Details:
5. Contact and Inquiry Forms (Jotform & reCAPTCHA)
For inquiry and contact forms, we use the Jotform service (Jotform Inc., 4 Embarcadero Center, San Francisco, USA). The data entered into the form (e.g., name, email address, message) is processed by Jotform to handle your inquiry and transmitted to us.
Legal basis: Art. 6(1)(b) GDPR (precontractual measures/performance of a contract) or Art. 6(1)(f) GDPR (efficient processing of inquiries).
To protect against automated submissions (spam), Google reCAPTCHA (Google Ireland Ltd./Google LLC, USA) may be used in the forms. In this process, data such as the IP address and user behavior are transmitted to Google; Google may set cookies for this purpose.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in protecting against spam and abuse) or Art. 6(1)(a) GDPR, to the extent that consent is required. Jotform and Google LLC are certified under the EU-US Data Privacy Framework. Details:and
We delete your form data as soon as processing is complete and there are no legal retention requirements.
6. Quote Configurator
On our quote pages, you can generate a customized quote as a PDF. The data you enter there (company name, contact person, address, email address, and the selected configuration) is processed to generate the quote and handle your request, and is transmitted to us and stored via the Google Apps Script service (Google Ireland Ltd., Dublin, Ireland; Google LLC, USA).
Legal basis: Art. 6(1)(b) GDPR (precontractual measures in response to your request).
To display current prices, your browser also retrieves price data via Google Apps Script and the current currency exchange rate via the ExchangeRate API (open.er-api.com); for technical reasons, your IP address is transmitted in the process.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in displaying current prices). Google LLC is certified under the EU-U.S. Data Privacy Framework. We delete quote data as soon as it is no longer necessary for processing and there are no legal retention requirements.
7. Embedded Content and Function Libraries
Cloudflare (cdnjs): To provide function libraries (including PDF generation and icons), our website integrates files from cdnjs.cloudflare.com (Cloudflare, Inc., San Francisco, USA). In doing so, your IP address is transmitted to Cloudflare. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure, high-performance delivery). Cloudflare, Inc. is DPF-certified. Details:
Elfsight: For certain website elements (e.g., price tables, FAQ sections), we use widgets from Elfsight (Elfsight LLC), which are loaded via files.elfsightcdn.com; your IP address is transmitted in the process. Legal basis: Art. 6(1)(f) GDPR. Details:
Weglot (multilingual support): For multilingual content, we use Weglot (Weglot SAS, 138 Rue Pierre Joigneaux, 92270 Bois-Colombes, France). Among other things, your IP address and selected language are processed in order to provide the content accordingly. Legal basis: Art. 6(1)(f) GDPR. Details:
8. Redirects to Partner Offers (Affiliate)
On our website, you will find referral links (affiliate links) to our partner, Michael Management Corporation (MMC). When you click on such a link, you will leave our website and be redirected to MMC. Any purchase agreement for services offered there (e.g., SAP-Access , or online training) is entered into exclusively between you and MMC; MMC is responsible for data processing on its end. For technical reasons, a referral ID (affiliate ID) is transmitted to MMC when you click on the link so that a booking facilitated through us can be tracked; this does not result in any additional costs for you. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the billing of facilitated bookings). You can find MMC’s privacy policy at:https://www.michaelmanagement.com/privacy.php
9. Storage and Deletion
We store personal data only for as long as it is necessary for the respective purpose or as required by statutory retention obligations. General retention periods: Server log files—30 days; contact and inquiry data—after processing is complete; contract and billing data—in accordance with statutory retention periods (up to 10 years).
10. Your Rights
You have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16), to have it erased (Art. 17), to restrict processing (Art. 18), to data portability (Art. 20), and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). You may withdraw any consent you have given at any time, effective for the future. Please direct inquiries to:
You also have the right to file a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf,
11. External Links and Changes
Our website may contain links to external websites, and we are not responsible for their content or privacy practices. This Privacy Policy is reviewed regularly and updated as needed.
As of June 2026
