1. Data protection at a glance
The following information aims to provide a simple overview of what happens to your personal data when you visit the Walter website and/or register for the Walter Toolshop.
How do we collect your data?
Firstly, your data is collected when you share it with us, for example when registering for an account or placing an order. Secondly, data is automatically collected by our IT systems when you visit our website. This data is primarily technical (e.g. the Internet browser and operating system you are using, or the time at which you accessed our site) and is collected automatically when you access our website.
What do we use your data for?
Part of the data is collected to ensure that the website can be provided correctly. Other data can be used to analyse your user behaviour.
What rights do you have where your data are concerned?
You have the right to obtain information about the origin, recipient(s) and purpose of the personal data stored about you, at any time and at no charge. You also have the right to request the rectification, restriction of processing or erasure of this data. You can contact us at any time for this purpose, or even if you just have more questions about data protection. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
Analytical tools and third-party tools
Sharing information with parties outside of Walter
Walter does not sell, trade, or otherwise transfer your personal data to outside parties except as provided below based on Walter’s legitimate interests to provide you with the high quality, useful products, and services you have come to expect from Walter. We may transfer your data outside the EU and EEA only if we have assured an adequate level of protection in the receiving country such as through our intra-group data transfer agreement, the European Commission’s Standard Contractual Clauses with third parties or as otherwise required under national data protection law.
- We may disclose information about online visitors, customers and registered persons to our web hosting partners and other third parties who assist us in operating our websites, conducting our business or providing services to you, if these third parties guarantee the confidentiality of your data. For further details, please refer to the applicable information on cookies.
- Walter is entitled to pass on data on online and offline visitors, customers, registered persons or suppliers to other Walter companies if this is necessary to respond to a request from you.
- We are entitled to pass on data on online and offline visitors, customers and digitally or physically registered persons within Walter Group and to business partners of Walter (e.g. authorized dealers) so that they can offer you relevant Walter products and services and we can jointly organize product demonstrations and other events.
- We may need to disclose information about online and offline visitors, customers, and digitally or physically registered persons to the appropriate authority or other third parties in order to enforce our privacy policies or to represent legal, proprietary or security concerns of Walter. Due to legal obligations, we may also be obliged to pass on your data to state authorities.
2. General notes and required information
Information about the entity responsible
The entity responsible for data processing is:
Derendinger Strasse 53
72072 Tübingen, Germany
Telephone: +49 (0) 70 71 701-0
Withdrawing your consent to data processing
Many data processing operations are only possible with your express consent. You can withdraw consent you have previously given at any time by sending us an informal e-mail. The lawfulness of data processing that has taken place before you withdraw your consent will remain unaffected by this.
Right to lodge a complaint with a supervisory authority
In event of infringement of data protection law, the data subject (affected party) has the right to lodge a complaint with a supervisory authority.
This could be in particular:
- the German State Commissioner for Data Protection and Freedom of Information which regulates Walter AG, the parent company of the Walter group
- the government authority in the country of the Walter company that collected your data
- the authority in the country where you believe a violation of your personal data rights occurred
German State Commissioner for Data Protection and Freedom of Information
Königstrasse 10 a
70173 Stuttgart, Germany
Telephone: +49 (0) 7 11/61 55 41-0
Fax: +49 (0) 7 11/61 55 41-15
Right to data portability
You have the right to have data that we process by automated means on the basis of your consent or in order to fulfil a contract supplied to you or a third party in a commonly used, machine-readable format. Should you request that your data be transferred directly to a different controller, this request will only be granted if it is technically feasible.
SSL and TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or queries that you send to us in our capacity as the site operator. You can tell when the connection is encrypted because the browser address bar changes from "http://" to "https://" and the padlock symbol is displayed in your browser bar.
When SSL or TLS encryption is enabled, the data that you send to us cannot be read by third parties.
Encrypted payments on this website
After the conclusion of a contract subject to fees, if there is the option to send us your payment details (e.g. account number in the case of a direct debit authorisation), this data will be required to process the payment. Payments via common payment methods (Visa/MasterCard, direct debit) will be made solely over an encrypted SSL or TLS connection. You can tell when the connection is encrypted because the browser address bar changes from "http://" to "https://" and the padlock symbol is displayed in your browser bar.
When communication is encrypted, the payment details that you send us cannot be read by third parties.
Provision of information, restriction of processing and erasure
As part of the applicable legal provisions, you have the right to get information about the personal data we hold about you, its origin, recipient(s) and the purpose of the data processing, as well as the right to rectification, restriction of processing and erasure of this data, without charge and at any time. You can raise a request regarding the personal data we hold about you
under this address In addition to this you can contact us at any time regarding other questions about personal data at the address:
3. Data protection officer
We have appointed a data protection officer for our company:
Data protection officer
c/o Walter AG
Derendinger Strasse 53
72072 Tübingen, Germany
4. Data collection on our website
Most of the cookies we use are session cookies. They are deleted automatically at the end of your visit. Other cookies continue to be stored on your device until you delete them. By using these cookies, we can recognise your browser the next time you visit.
Server log files
The site provider collects and stores information automatically in server log files, which your browser sends to us automatically. These include:
- Browser type and version
- Operating system used
- Referrer URL
- Host name of the computer accessing the site
- Time of the server request
- IP address
This data is not merged with other sources of data.
The basis for this data processing is Article 6(1b) GDPR, which permits data processing in order to fulfil a contract or for measures prior to the conclusion of a contract.
If you send us queries using our contact form or by e-mail, your information from the query form, including the contact details you specify, is stored by us in order to process your query and in the event of follow-up questions, and potentially forwarded to the relevant Walter organisation at the national level for processing. We will not share this data with third parties without your consent.
The data you enter in the contact form is therefore processed solely on the basis of your consent (Article 6(1a) GDPR). You can withdraw this consent at any time by sending us an informal e-mail. The lawfulness of data processing operations that have taken place before you withdraw your consent will remain unaffected by this.
We will retain the data you enter in the contact form until you request its erasure, withdraw your consent to its storage or the purpose for which it was stored no longer exists (e.g. if your query has been processed and completed). Mandatory statutory provisions – particularly retention periods – remain unaffected.
Registration in the Toolshop
We use the data you enter when registering in order to utilise the Toolshop and Walter GPS. The required information requested when you register must be provided in full. Otherwise we will reject your registration. In the event of significant changes, for example to the services we offer or where changes are required from a technical standpoint, we use the e-mail address you provide during the registration process in order to keep you informed. The data you enter during the registration process is processed on the basis of your consent (Article 6(1a) GDPR). You can withdraw consent you have previously given at any time by sending us an informal e-mail. The lawfulness of data processing that has already taken place will remain unaffected by withdrawal of consent. We store the data collected during the registration process for as long as you remain registered on our website, after which it is deleted. Statutory retention periods remain unaffected.
Processing data (customer data and contract data)
We only collect, process and use personal data if this is necessary to establish, structure or modify the legal relationship (contract data). This takes place on the basis of Article 6(1b) GDPR, which permits data processing in order to fulfil a contract or for measures prior to the conclusion of a contract. We only collect, process and use personal data via use of our website (usage data) if this is necessary to enable the user to use the service or to bill the user for their use of the service. The customer data collected is deleted after the order has been completed or the business relationship ends. Statutory retention periods remain unaffected.
Transfer of data to third parties upon conclusion of a contract
We only transfer personal data to third parties if this is necessary in order to execute the contract, for example to the company entrusted with delivering the goods or the financial institution tasked with processing the payment. Data transfers beyond this scope do not take place, or only take place if you have expressly consented to the transfer. Your data will not be transferred to third parties, for example for advertising purposes, without your express consent. The basis for this data processing is Article 6(1b) GDPR, which permits data processing in order to fulfil a contract or for measures prior to the conclusion of a contract.
Data transfer to payment exchanges information systems
Our company is a member of several payment exchanges information systems (e.g. Credit Reform, Bureau Van Dyke, Bisnode, CESR, etc.) and participates in the exchange of payment information systems operated by these companies. This is a payment experience pool, where the participants from various industry sectors inform about payment experiences and vice versa in return benefit of the input of other participants.
For this purpose, we give information about your payment behavior shown to us into these information systems. The legal basis for the transmission of payment experience data to these systems is Article 6 (1b) GDPR.
Transfers of data upon conclusion of a contract for services and digital content
We only transfer personal data to third parties if this is necessary in order to execute the contract, for example to the financial institution tasked with processing the payment. Data transfers beyond this scope do not take place, or only take place if you have expressly consented to the transfer. Your data will not be transferred to third parties, for example for advertising purposes, without your express consent. The basis for this data processing is Article 6(1b) GDPR, which permits data processing in order to fulfil a contract or for measures prior to the conclusion of a contract.
5. Analysis tools and advertising material
This website uses functions provided by the Google Analytics web analytics service. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics cookies are stored on the basis of Article 6(1f) GDPR.
We have activated IP anonymisation on this website. This means that your IP address is truncated by Google within member states of the European Union or other states party to the Agreement on the European Economic Area before it is transferred to the USA. Only in exceptional cases is the complete IP address transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide to the website operator other services associated with website usage and Internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google.
You may prevent the saving of cookies by selecting the appropriate settings in your browser software. We would like to point out, however, that if you do this, you may not be able to use all the functions of this website to the full extent. Furthermore, you can prevent the collection of data generated by the cookie and related to your usage of the website (including your IP address) being sent to and processed by Google by downloading and installing the browser plug-in available under the following link:
Objecting to data collection
You can prevent Google Analytics from recording your data by clicking the link below. This places an opt-out cookie on your system, which prevents your data from being collected during future visits to this website by deactivating Google Analytics.
More information on how user data is handled in Google Analytics can be found in Google's data privacy and security policy here:
Commissioned data processing
We have concluded a contract on commissioned data processing with Google and implemented in full the strict provisions of the German data protection authorities in our use of Google Analytics.
Google AdWords and conversion tracking
This website uses Google AdWords. AdWords is an online advertising program provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (hereinafter referred to as "Google").
We use conversion tracking as part of Google AdWords. If you click on an advert operated by Google, this places a conversion tracking cookie on your system. Cookies are small text files stored on the user's computer by the Internet browser. These cookies are no longer valid after 30 days and are not used to personally identify the user. If the user visits certain pages on this website and the cookie has not yet expired, Google and ourselves can detect that the user has clicked on the ad and been forwarded to this page.
Every Google AdWords customer receives a different cookie. The cookies cannot be tracked past the websites of AdWords customers. The information collected using the conversion cookie serves to generate conversion statistics for AdWords customers who have elected to use conversion tracking. The customer learns the total number of users who have clicked on their advert and been forwarded to a page with a conversion tracking tag. They do not, however, receive information that can be used to identify users personally. If you do not wish to participate in tracking, you can easily opt out of its use by deleting the Google conversion tracking cookie via the user settings of your Internet browser. You will then not be included in the conversion tracking statistics.
Conversion cookies are stored on the basis of Article 6(1f) GDPR. The owner of the website has a legitimate interest in analysing user behaviour in order to optimise both their website and their advertising.
Google Tag Manager
We use Google Tag Manager (GTM) for tracking and analysis. GTM does not collect any personal information. It is a tool that automatically updates the code snippets of tags that collect sensitive information. GTM does not use this information. Even in cases where you reject cookies or deactivate URL-based session tracking, the tags managed by GTM remain activated. Google Tag Manager cookies are stored on the basis of Article 6(1f) GDPR. You can find further information at
Analysis by wiredminds
Our website uses tracking pixel technology provided by wiredminds GmbH (www.wiredminds.de) to analyse visitor behaviour. This may entail the collection, processing and storage of data which can be used to generate user profiles under pseudonyms. Where possible and practical, these user profiles are anonymised in full. Cookies can be used for this purpose. Cookies are small text files stored in the Internet browser of the visitor and used to recognise the browser on subsequent visits. The data collected, which may include personal data, is transferred to wiredminds or collected by wiredminds directly. wiredminds is permitted to use data left during a visit to a website to create anonymised user profiles. The data obtained in the process will not be used to personally identify users to this website without the explicit consent of the data subject, and is not combined with personal data concerning the bearer of the pseudonym. If IP addresses are collected, they are immediately anonymised by way of deleting the last block of numbers.
Opt out of website tracking. Please note that this will also place a cookie which stores the information that you have opted out of anonymised usage data collection. You will need to click on the link again if you delete your browser cookies or use a different browser the next time you visit our site. The storage of wiredminds cookies is based on Article 6(1f) GDPR.
Visual Website Optimizer
Visual Website Optimizer On our website we use the web analysis service Visual Website Optimizer ("VWO"). This service is operated by Wingify, 14th Floor, KLJ Tower North, Netaji Subhash Place, Pitam Pura, Delhi 110034, India. With the help of VWO, pseudonymised visitor data are collected, evaluated and stored on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes in accordance with Art. 6 Para. 1 lit. f DSGVO. This data can be used to create and evaluate pseudonymised user profiles for the same purpose. "VWO" places a cookie on your computer for this purpose. The information generated by the cookie about your use of this website and your IP address will be transmitted to and stored by Wingify on a server in India. Further information on the cookies used can be found at this link[https://vwo.com/knowledge/what-are-the-cookies-stored-by-vwo/]. The user's IP address is part of the information collected but is pseudonymised immediately after collection and before it is stored in order to exclude any possibility of personal reference. The stored data is regularly deleted. You can prevent or delete the storage of cookies by setting your browser software accordingly. You can also opt-out of the collection of data generated by the cookie and associated with your use of the website (including your IP address) to Wingify and the processing of this data in aggregate under this link[https://vwo.com/opt-out/. Further details on the handling of your personal data can be found under the following link: https://vwo.com/privacy-policy/.
If you delete your browser cookies or use a different browser on your next visit, you have to click the link again. The storage of Dynatrace cookies is based on article 6 (1f) DSGVO. More information is available at https://www.dynatrace.com/support/help/how-to-use-dynatrace/data-privacy-and-security/
Customer data analysis to improve our services and products
If you are logged in with your Toolshop account, we may also use your personal data for the purpose of improving and developing our services and products. In this context, your browsing behaviour on the Walter website and in the Walter Toolshop may be matched to your customer account. This date is not passed on to third parties. The legal basis for this is a legitimate interest in accordance with Article 6(1f) GDPR. The legitimate interest lies in being able to offer you tailored products and improve our services and products. You have the right to lodge an objection to this processing at any time.
If subscribe to our newsletter, we need you to provide us with an e-mail address. Additional data is either not collected or is only collected on a voluntary basis. We use this data solely to send you the requested information and we do not share it with third parties.
The data is processed solely on the basis of your consent (Article 6(1a) GDPR). You can withdraw your consent to storing the data, the e-mail address and its use to send the newsletter at any time, for example by using the "Unsubscribe" link in the newsletter. The lawfulness of data processing operations that have already taken place will remain unaffected by withdrawal of consent.
The data we store for the purpose of managing newsletter subscriptions is stored by us until you unsubscribe from the newsletter, after which it is erased. Data that we store for other purposes (e.g. e-mail addresses for the Toolshop) remain unaffected by this.
This website uses inxmail to send newsletters. The provider of this service is inxmail GmbH
Wentzingerstrasse 17, 79106 Freiburg, Germany. inxmail is a service which enables organisation and analysis of our newsletter distribution system. The data you enter for the purpose of receiving the newsletter (such as your e-mail address) is stored on inxmail servers.
The newsletters we send through inxmail allow us to analyse the behaviour of the recipients. For example, they enable us to analyse how many recipients open the newsletter message and how often each link in the newsletter is clicked, in addition to other aspects. The data is processed on the basis of your consent (Article 6(1a) GDPR). You can withdraw this consent at any time by unsubscribing from the newsletter. The lawfulness of data processing operations that have already taken place will remain unaffected by withdrawal of consent.
If you do not wish inxmail to perform any analyses, you must unsubscribe from the newsletter. We provide a corresponding link in each newsletter message for this purpose. You can also unsubscribe from the newsletter directly on the website. The data we store for the purpose of managing newsletter subscriptions is stored by us until you unsubscribe from the newsletter, after which it is erased both from our servers and those of inxmail. Data that we store for other purposes (e.g. e-mail addresses for the Toolshop) remain unaffected by this. We have concluded a contract on commissioned data processing with inxmail and implemented in full the strict provisions of the German data protection authorities in our use of inxmail.
7. Plug-ins and tools
In order to locate content and events, we integrate maps provided by Bing Maps in our website using the embed function or as an iframe. Bing Maps is a service provided by Microsoft.
It is necessary to store your IP address in order to use the functions provided by Bing Maps. This information is generally transferred to a Microsoft server in the USA and stored there. The provider of this website has no influence over this data transfer.
We use Bing Maps in the interests of displaying our online services in an appealing way and to make it easier to discover the locations we specify on the website. This constitutes a legitimate interest in accordance with Article 6(1f) GDPR.
8. Payment provider
We may offer the option of paying by PayPal in the Toolshop. This payment service is provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as "PayPal"). If you opt to pay by PayPal, the payment details you enter will be transferred to PayPal.
Your data is transferred to PayPal on the basis of Article 6(1a) GDPR (consent) and Article 6(1b) GDPR (processing in order to fulfil a contract). You can withdraw your consent to this data processing at any time.