Privacy Policy
Thanks for checking out our online services! Here, we'll explain how we handle personal data when you use this website. Personal data is any info that can be linked to you personally (like your name, address, email, or IP address).
1. Controller
Winim GmbH (IDES24)
Unnenberger Str. 5, 51709 Marienheide, Germany
2. Hosting and Server Log Files (Squarespace)
Our website is hosted by Squarespace (Squarespace Ireland Ltd., Ship Street Great, Dublin 8, Ireland; parent company Squarespace, Inc., New York, USA). When you hit our site, Squarespace automatically grabs access data for server log files: your IP address, access date and time, pages you visited, referrer URL, browser type and version, OS, and device info. This data helps us keep the website running, stable, and secure, and it's stored for up to 30 days.
Legal basis: Art. 6 para. 1 lit. f GDPR (our legitimate interest in a secure and functional web presence).
We've actually deactivated statistical visitor analysis (Squarespace Analytics / Activity Log) on our site, so we're not using cookies for that.
If any data gets transferred to the USA, Squarespace, Inc. is certified under the EU-US Data Privacy Framework (DPF). You can find more details here:
3. Cookies and Consent
Our website uses cookies and similar tech. Cookies are just small text files that get stored on your device. We break them down into:
Technically necessary cookies, which are essential for the website to function (like for your shopping cart, security, or language selection). Legal basis: § 25 para. 2 TDDDG, Art. 6 para. 1 lit. f GDPR.
Cookies that need your consent, which are only set after you agree (e.g., by integrated third-party services, as detailed below). You can control these through our cookie banner. Legal basis: § 25 para. 1 TDDDG, Art. 6 para. 1 lit. a GDPR.
You can tweak your cookie settings anytime using the “Cookie Settings” button at the bottom of your screen or directly in your browser settings. And if you've given consent, you can withdraw it at any point for future effect. For more info, check out our Cookie Policy.
4. Fonts (Google Fonts)
To keep our fonts looking consistent, our website pulls them from Google Fonts. These are loaded from servers belonging to Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland; Google LLC, USA) whenever you load a page. Your IP address gets sent to Google during this process.
Legal basis: Art. 6 para. 1 lit. f GDPR (our legitimate interest in a consistent and attractive presentation). Google LLC is certified under the EU-US Data Privacy Framework. You can find more details here:
5. Contact and Inquiry Forms (Jotform & reCAPTCHA)
For our inquiry and contact forms, we use Jotform (Jotform Inc., 4 Embarcadero Center, San Francisco, USA). Any data you enter into the form (like your name, email, or message) gets processed by Jotform to handle your request and then sent to us.
Legal basis: Art. 6 para. 1 lit. b GDPR (pre-contractual measures/contract fulfillment) or Art. 6 para. 1 lit. f GDPR (for efficient inquiry processing).
To fend off automated entries (spam), we might use Google reCAPTCHA (Google Ireland Ltd./Google LLC, USA) in these forms. This involves sending data like your IP address and user behavior to Google, and Google might set cookies for this.
Legal basis: Art. 6 para. 1 lit. f GDPR (our legitimate interest in spam and abuse protection) or Art. 6 para. 1 lit. a GDPR, if consent is needed. Both Jotform and Google LLC are certified under the EU-US Data Privacy Framework. You can find more info here: and
We'll delete your form data once your request is handled and there are no legal retention requirements.
6. Quote Configurator
On our quote pages, you can generate a personalized quote as a PDF. The data you enter there (company, contact person, address, email, and your chosen configuration) is processed and transmitted to us via Google Apps Script (Google Ireland Ltd., Dublin, Ireland; Google LLC, USA) for creating your quote and handling your request. This data is also stored by us.
Legal Basis: Art. 6 Para. 1 lit. b GDPR (pre-contractual measures based on your request).
To display current prices, your browser also retrieves pricing data via Google Apps Script and the latest currency exchange rates via the ExchangeRate-API (open.er-api.com); this process technically transmits your IP address.
Legal Basis: Art. 6 Para. 1 lit. f GDPR (legitimate interest in displaying current prices). Google LLC is certified under the EU-US Data Privacy Framework. We delete quote data as soon as it's no longer needed for processing and no legal retention obligations apply.
7. Embedded Content and Function Libraries
Cloudflare (cdnjs): To provide function libraries (including PDF creation, icons), our website integrates files from cdnjs.cloudflare.com (Cloudflare, Inc., San Francisco, USA). Your IP address is transmitted to Cloudflare in this process. Legal Basis: Art. 6 Para. 1 lit. f GDPR (legitimate interest in secure, high-performance delivery). Cloudflare, Inc. is DPF-certified. Details:
Elfsight: For certain website elements (e.g., pricing tables, FAQ sections), we use Elfsight widgets (Elfsight LLC), which are loaded via files.elfsightcdn.com; your IP address is transmitted during this process. Legal Basis: Art. 6 Para. 1 lit. f GDPR. Details:
Weglot (Multilingualism): For multilingual content, we use Weglot (Weglot SAS, 138 Rue Pierre Joigneaux, 92270 Bois-Colombes, France). Data processed includes your IP address and chosen language to deliver the content accordingly. Legal Basis: Art. 6 Para. 1 lit. f GDPR. Details:
8. Redirects to Partner Offers (Affiliate)
On our website, you will find referral links (affiliate links) to our partner, Michael Management Corporation (MMC). When you click on one of these links, you will leave our website and be redirected to MMC. Any purchase agreement for services offered there (e.g.,Access online training) is concluded exclusively between you and MMC; MMC is responsible for data processing on its end. For technical reasons, a referral ID (affiliate ID) is transmitted to MMC when you click the link so that a booking facilitated through us can be tracked; this does not result in any additional costs for you. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in billing for facilitated bookings). You can find MMC’s privacy policy at:https://www.michaelmanagement.com/privacy.php
9. Storage and Deletion
We only store personal data for as long as it's necessary for the respective purpose or as required by legal retention obligations. General deletion periods: Server log files 30 days · Contact/inquiry data after processing is complete · Contract and invoice data according to legal retention periods (up to 10 years).
10. Your Rights
You have the right to information (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing based on Art. 6 Para. 1 lit. f GDPR (Art. 21). You can revoke any given consent at any time with future effect. For inquiries, contact:
You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority for us is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf,
11. External Links and Changes
Our website may contain links to external websites, and we don't take responsibility for their content or data protection practices. This privacy policy is regularly reviewed and updated as needed.
As of: June 2026
