We are committed to safeguarding the privacy of our website visitors.

This policy applies whenever we act as the data controller for individuals' personal data. In other words, we are responsible for defining the purposes and methods of processing this data. We are committed to handling personal information securely and transparently, ensuring compliance with relevant data protection laws and safeguarding individuals' rights.

Our website uses cookies to enhance user experience and improve our services. Where cookies are not strictly necessary for the operation of our website, we will request your consent upon your first visit. You have the option to manage your cookie preferences at any time to ensure compliance with data protection regulations.

In this section, we outline the general categories of personal data we process. Additionally, where we collect personal data from third-party sources rather than directly from you, we provide details on its origin and specific categories.

Contact Data: We may process information that allows us to communicate with you. This may include your name, email address, phone number, postal address, and social media identifiers.

Account Data: When you create or manage an account on our platform, we may process details such as your account identifier, name, email address, business name, account creation and modification dates, website settings, and marketing preferences.

Transaction Data: We may process information related to transactions, including purchases of goods and services made through our website. This data may include your name, contact details, payment information (such as card details or other payment methods), and transaction history.

Communication Data: We may process information contained in messages exchanged between you and us, including emails, contact form submissions, and other forms of communication. This may include the message content and any metadata associated with such communications.

Usage Data: To enhance our services and maintain security, we may collect data about how you interact with our website. This may include your IP address, geographic location, browser type and version, operating system, referral sources, session duration, page views, navigation patterns, and service usage trends. This data is collected through analytics tracking systems.


We are committed to handling your personal data responsibly, ensuring compliance with relevant data protection laws, and implementing appropriate security measures to safeguard your information.

In this section, we outline the purposes for which we process personal data and the corresponding legal justifications.

Operations – We process personal data to manage and operate our website, fulfill orders, provide services, process payments, issue invoices, and handle credit control. This processing is based on our legitimate interests, ensuring the efficient administration of our website, services, and overall business operations.

Relationships and Communications – We may process contact, account, transaction, and communication data to manage relationships with customers and service users, handle support requests, and respond to inquiries. This does not include direct marketing. The legal basis for this processing is our legitimate interests, namely maintaining effective communication and ensuring smooth business interactions.

Direct Marketing – We may use contact, account, and transaction data to create, target, and send marketing communications via email, SMS, postal mail, fax, or telephone. The legal basis for this processing is our legitimate interests, namely promoting our business, informing users of relevant offers, and engaging with potential and existing customers. You have the right to opt out of marketing communications at any time.

Research and Analysis – We process usage and transaction data to analyze and improve our website and services, optimize user experience, and enhance security. This processing is based on our legitimate interests, such as improving functionality, ensuring security, and making data-driven business decisions.

Record Keeping – We may process personal data to create and maintain databases, keep backup copies, and store business records. The legal basis for this is our legitimate interests, ensuring we retain necessary information for compliance and efficient business operations.

Security and Fraud Prevention – We process personal data to maintain security, detect and prevent fraud, and protect our website, users, and business from unauthorized access or criminal activities. This processing is based on our legitimate interests, ensuring a safe and secure digital environment.

Insurance and Risk Management – Personal data may be processed as part of obtaining and maintaining insurance coverage, managing risks, and seeking professional legal or financial advice. The legal basis for this processing is our legitimate interests, ensuring adequate risk protection for our business.

Legal Claims – Where necessary, we process personal data to establish, exercise, or defend legal claims in court or through alternative dispute resolution. This processing is based on our legitimate interests, protecting and enforcing our legal rights and those of others.

Legal Compliance and Vital Interests – In certain cases, we may process personal data to comply with legal obligations or to protect an individual’s vital interests. This applies where processing is required by law or necessary to safeguard the life, health, or safety of a person.We are committed to handling personal data with transparency, ensuring compliance with applicable data protection laws, and implementing appropriate security measures to safeguard your information.

We understand the importance of protecting your personal data and are committed to maintaining its confidentiality and security.  This section explains the limited circumstances in which we may share your personal data with third parties.  We will never sell your personal data.

Service Providers:We engage certain trusted third-party service providers to assist us in operating our website and providing our services. These service providers have access to your personal data only to the extent necessary to perform specific tasks on our behalf and are contractually obligated to protect your data and use it only for the purposes we specify.  These service providers include:  

Website Hosting: Your personal data will be stored on the secure website database hosted by our providers at https://webflow.com/, https://mailchimp.com, and https://analytics.google.com/. These providers may process data such as your IP address, browsing activity, and information you provide through forms on our website. We have data processing agreements in place with these providers to ensure your data is handled in compliance with applicable data protection laws.

Payment Processing:  Financial transactions relating to our website and services are handled by our secure payment services providers. We will share transaction data with our payment services providers only to the extent necessary for the purposes of processing your payments, refunding such payments, and dealing with complaints and queries relating to such payments and refunds. These providers are PCI DSS compliant and employ robust security measures to protect your financial information.  

Professional Advisors: We may disclose your personal data to our insurers and/or professional advisers, such as lawyers and accountants, insofar as reasonably necessary for the purposes of obtaining or maintaining insurance coverage, managing risks, obtaining professional advice, and complying with legal obligations.  These professionals are bound by confidentiality obligations.  

In addition to the specific disclosures of personal data set out in this Section 4, we may disclose your personal data where such disclosure is necessary for:

Compliance with Legal Obligations: We may disclose your personal data to comply with applicable laws, regulations, legal processes, or governmental requests. This may include responding to subpoenas, court orders, or other legal demands.  

Establishment, Exercise, or Defence of Legal Claims: We may disclose your personal data where such disclosure is necessary for the establishment, exerci
se, or defence of legal claims, whether in court proceedings or in an administrativor out-of-court procedure.  

 

This Section 5 details our practices for managing how long we keep personal information and when we delete it.  These procedures are in place to ensure we meet our legal responsibilities concerning the retention and deletion of such data.We will not keep personal data we process for any reason longer than is needed for that specific reason, or those reasons.

Notwithstanding the other provisions of this Section 5, we may retain your personal data where such retention is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.

This Section 6 outlines your rights regarding your personal data under applicable data protection law.  We want to make sure you understand these rights and how you can exercise them.

Your Key Rights:You have the following principal rights concerning your personal data:

(a) Right of Access: You have the right to obtain confirmation from us as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and certain related information (e.g., the purposes of the processing, the categories of personal data concerned, the recipients to whom the personal data have been or will be disclosed, the envisaged period for which the personal data will be stored, the existence of the right to request rectification or erasure of personal data or restriction of processing of personal data concerning you, the right to lodge a complaint with a supervisory authority, the source of the information, the existence of automated decision-making, including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you).  

(b) Right to Rectification: You have the right to request that we correct any inaccurate personal data we hold about you and to complete any incomplete personal data.  

(c) Right to Erasure ("Right to be Forgotten"):  You have the right to request that we erase your personal data under certain circumstances (e.g., the personal data are no longer necessary for the purposes for which they were collected or processed, you withdraw consent on which the processing is based and there is no other legal ground for the processing, you object to the processing and there are no overriding legitimate grounds for the processing, the personal data have been unlawfully processed, the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which we are subject, the personal data have been collected in relation to the offer of information society services referreto in Article 8(1) GDPR).  

(d) Right to Restriction of Processing:
You have the right to request that we restrict the processing of your personal data under certain circumstances (e.g., the accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data, the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead, we no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims, you have objected to processing pursuant to Article 21(1) GDPR pending the verification whether the legitimate grounds of the controller overridethose of the data subject).  

(e) Right to Object to Processing:
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions. We shall no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.  

(f) Right to Data Portability: You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from us to which the personal data have been provided, as long as the processing is based on consent pursuant to point (a) of Article 6(1) GDPR or point (a) of Article 9(2) GDPR or on a contract pursuant to point (b) of Article 6(1) GDPR, and the processing is carried out by automated means.  

(g) Right to Complain to a Supervisory Authority: You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement of the GDPR.  The contact details of supervisory authorities can be found at: https://edpb.europa.eu/about-edpb/board/members  

(h) Right to Withdraw Consent: If we are processing your personal data based on your consent, you have the right to withdraw that consent at any time.  Withdrawing your consent will not affect the lawfulness of any processing we carried out before you withdrew your consent.    

Exercising Your Rights: These rights are subject to certain limitations and exceptions as detailed in the GDPR and national data protection laws.  For more detailed information about your rights, please visit the websites linked below. To exercise any of these rights, please contact us by email at contact@wtlbl-collection.com or by writing to us.  We will respond to your request within one month, although we may extend this period in complex cases.

We may use cookies for the following purposes:

(a) authentication and status - we may use cookies to identify you when you visit our website and as you navigate our website, and to help us determine if you are logged into our website;

(b) personalisation - we may use cookies to store information about your preferences and to personalise our website for you;

(c) security - we may use cookies as an element of the security measures used to protect user accounts, including preventing fraudulent use of login credentials, and to protect our website and services generally;

(d) analysis - we may use cookies to help us to analyse the use and performance of our website and services; and

(e) cookie consent - we may use cookies to store your preferences in relation to the use of cookies more generally.

Our service providers utilize cookies, and these cookies might be stored on your device when you access our website.We employ Google Analytics, which gathers data about website usage through cookies. This data helps generate reports on how our website is used. You can explore Google's data practices at https://www.google.com/policies/privacy/partners/ and their privacy policy at https://policies.google.com/privacy.We also use MailChimp, which collects website usage information via cookies. This information is used to improve the performance and features of Mailchimp Sites.  Their privacy policy and data usage details are available at https://mailchimp.com/legal/.Additionally, we utilize Hubspot, which gathers website usage data through cookies to create better and more targeted user experiences.  You can review Hubspot's privacy policy at https://legal.hubspot.com/privacy-policy.

We may update this policy from time to time by publishing a new version on our website. You should check this page occasionally to ensure you are happy with any changes to this policy.

This website is owned and operated by WTLBL GmbH (in Gründung). We are currently in the process of being registered in the German Handelsregister.

You can contact us by email, using the email address published on our website contact@wtlbl-collection.com.

You can contact our representative with respect to our obligations under data protection law in the EU at dataprotection@wtlbl-collection.com.