Privacy policy

Data protection statement

We are delighted by your interest in our company. Data protection is a particularly high priority for the management of weekview e.K. It is generally possible to use the weekview e.K. websites without providing any personal data. However, if a data subject wishes to make use of special services offered by our company via our website, processing of personal data may become necessary. Where the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the data subject.

The processing of personal data, such as a data subject's name, address, email address or telephone number, is always carried out in line with the General Data Protection Regulation and in accordance with the country-specific data protection provisions applicable to weekview e.K. Through this privacy policy we wish to inform the public about the nature, scope and purpose of the personal data we collect, use and process. Data subjects are also informed of the rights to which they are entitled by means of this privacy policy.

As the controller, weekview e.K. has implemented numerous technical and organisational measures to ensure the most complete protection possible of the personal data processed via this website. Nevertheless, internet-based data transmissions can in principle have security gaps, so absolute protection cannot be guaranteed. For this reason, every data subject is free to transmit personal data to us by alternative means, for example by telephone.

1. Definitions

The privacy policy of weekview e.K. is based on the terminology used by the European legislator when adopting the General Data Protection Regulation (GDPR). Our privacy policy should be easy to read and easy to understand, both for the public and for our customers and business partners. To ensure this, we would like to explain the terminology used in advance.

In this privacy policy we use, among others, the following terms:

• Personal data: All information relating to an identified or identifiable natural person.
• Data subject: Any identified or identifiable natural person whose personal data is processed by the controller.
• Processing: Any operation performed on personal data, with or without the aid of automated procedures.
• Restriction of processing: The marking of stored personal data with the aim of limiting their future processing.
• Profiling: Any form of automated processing of personal data used to evaluate certain personal aspects.
• Pseudonymisation: The processing of personal data in such a way that it can no longer be attributed to a specific person without the use of additional information.
• Controller: The natural or legal person who determines the purposes and means of the processing of personal data.
• Processor: A natural or legal person who processes personal data on behalf of the controller.
• Recipient: A person to whom personal data is disclosed.
• Third party: A person other than the data subject, the controller, the processor and the persons who, under the direct authority of the controller or the processor, are authorised to process the personal data.
• Consent: Any freely given, specific and informed indication of the data subject's wishes by which they signify agreement to the processing of personal data relating to them.

2. Name and address of the controller

The controller within the meaning of the General Data Protection Regulation is:

weekview e.K.
Schatzbogen 60
81829 Munich
Germany
Tel.: +49 89 90157771
Email: ob@weekview.de
Website: www.weekview.de

3. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of your personal data infringes the General Data Protection Regulation.

The supervisory authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 27, 91522 Ansbach, lda.bayern.de. You may also contact the supervisory authority of your habitual residence or place of work.

4. Collection of general data and information

Each time the weekview e.K. website is accessed by a data subject or an automated system, it records a range of general data and information. This general data and information is stored in the server log files. The following may be recorded:

1. the browser types and versions used,
2. the operating system used by the accessing system,
3. the website from which an accessing system reaches our website (known as a referrer),
4. the sub-pages accessed on our website via an accessing system,
5. the date and time of access to the website,
6. an internet protocol address (IP address),
7. the internet service provider of the accessing system, and
8. other similar data and information that serves to avert danger in the event of attacks on our information technology systems.

When using this general data and information, weekview e.K. draws no conclusions about the data subject. Rather, this information is required in order to:

1. deliver the content of our website correctly,
2. optimise the content of our website and the advertising for it,
3. ensure the long-term functioning of our information technology systems and the technology behind our website, and
4. provide law enforcement authorities with the information required for prosecution in the event of a cyber attack.

This anonymously collected data and information is evaluated by weekview e.K. statistically, with the aim of increasing data protection and data security within our company. The anonymous data in the server log files is stored separately from all personal data provided by a data subject.

5. Hosting and provision of the website

Our website is hosted by an external service provider. The personal data arising in the course of operation – in particular the access data described in this privacy policy and all data entered via the website – is processed on its servers in Germany.

The host processes this data exclusively on our instructions. The basis for this is a data processing agreement pursuant to Art. 28 GDPR. It is used in the interest of a secure, fast and reliable provision of our offering; the legal basis is Art. 6(1)(f) GDPR, unless the processing already serves the performance of a contract pursuant to Art. 6(1)(b) GDPR.

6. Cookies

The websites of weekview e.K. use cookies. Cookies are text files that are placed and stored on a computer system via an internet browser. They make it possible to provide the users of this website with more user-friendly services.

We distinguish between two types:

• Technically necessary cookies – these are required for the website to work. They include the session ID, the contents of the basket, the login status and the cookie choice you have made. The legal basis is Section 25(2) no. 2 TDDDG in conjunction with Art. 6(1)(f) GDPR. Without these cookies you would not be able to complete an order.
• Non-essential cookies – for example for convenience functions or reach measurement. They are only set if you have given your consent via our cookie notice. The legal basis is Section 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR.

You can withdraw your consent at any time with effect for the future – just as easily as you gave it. To do so, use our Cookie settings page, which you can also reach at any time via the footer of our website. The lawfulness of the processing carried out up to the point of withdrawal remains unaffected. You can also prevent cookies from being set at any time by adjusting your internet browser settings, and delete cookies that have already been set. This is possible in all common internet browsers. If you disable the setting of cookies, some functions of our website may not be fully usable.

7. SSL and TLS encryption

For security reasons, and to protect the transmission of confidential content, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that your browser's address bar begins with „https://“ and a padlock symbol is displayed. When encryption is active, the data you transmit to us cannot be read by third parties.

8. Registration on our website

A data subject has the option of registering on the controller's website by providing personal data. Which personal data is transmitted to the controller in the process is determined by the relevant input form. The personal data entered by the data subject is collected and stored exclusively for internal use by the controller and for its own purposes. The controller may arrange for the data to be passed on to one or more processors, who likewise use the personal data exclusively for internal purposes.

Registering on the controller's website also stores the IP address assigned by the data subject's internet service provider (ISP), together with the date and time of registration. This data is stored in order to prevent misuse of our services and to help investigate any criminal offences committed. In this respect, storing this data is necessary to protect the controller. It is not passed on to third parties unless there is a legal obligation to do so or the disclosure serves criminal prosecution.

9. Customer account and guest ordering

In our shop you can order either with a customer account or as a guest. If you create a customer account, we store the details you provide permanently, so that you do not have to enter everything again for future orders and can view your order history. The legal basis is Art. 6(1)(b) GDPR.

You can have your customer account deleted at any time via your customer area or by sending us a message. Data that we are required to retain under commercial or tax law remains unaffected; its processing is restricted for the duration of the retention period.

With a guest order we do not create a permanent customer account. The order data itself is nevertheless subject to the statutory retention periods.

10. Order processing and performance of the purchase contract

When you place an order in our online shop, we process the data required for it. This is in particular your form of address, first and last name, billing and delivery address, email address, company and VAT identification number where applicable, the items ordered, the payment and shipping method chosen and – if you provide it – your telephone number.

The processing serves the performance of the purchase contract concluded with you and the implementation of pre-contractual measures. The legal basis is Art. 6(1)(b) GDPR. Without this data we can neither accept, dispatch nor invoice your order.

We pass the data required to perform the contract on to the service providers you have chosen – to the shipping service provider for delivery and to the payment service provider to process the payment. You will find further details in the relevant sections of this privacy policy.

Order and invoice data is subject to the retention obligations under commercial and tax law set out in Section 257 HGB and Section 147 AO. We therefore store it for six or ten years respectively; the period begins at the end of the calendar year in which the order was placed. For the duration of the retention obligation, the processing of the data is restricted and it is kept solely to fulfil these statutory obligations. The legal basis for this is Art. 6(1)(c) GDPR.

We check the VAT identification numbers of business customers for intra-Community supplies to the extent required by law. The legal basis is Art. 6(1)(c) GDPR in conjunction with the VAT documentation requirements.

11. Payment methods and payment service providers

To process your payment we use different service providers depending on the payment method chosen. If you select one of these payment methods, we transmit the data required for payment processing – in particular name, address, email address, invoice amount and order data – to the relevant provider. The legal basis is Art. 6(1)(b) GDPR, as the transmission is necessary to perform the purchase contract.

The payment service providers process the transmitted data as independent controllers and are subject to their own privacy policies. Your full payment details – such as credit card number or bank details – are entered directly with the relevant provider; we do not receive or store this data.

In detail, we use:

• PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg) – for PayPal, credit and debit card, SEPA direct debit, „Pay Later“ and other procedures handled via PayPal. Privacy information: paypal.com/de/webapps/mpp/ua/privacy-full
• Shopware Payments (Shopware AG, Ebbinghoff 10, 48624 Schöppingen, incorporating Adyen N.V.) – for credit and debit card, Apple Pay, Google Pay, Klarna and other procedures. Privacy information: shopware.com/de/datenschutz
• Klarna (Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden) – for the payment methods offered by Klarna. To decide whether the payment contract can be concluded, Klarna carries out identity and, where applicable, credit checks on its own responsibility and may obtain information from credit agencies. We have no influence on this check; it is carried out under Klarna's own responsibility. Privacy information: klarna.com/de/datenschutz
• Amazon Pay (Amazon Payments Europe s.c.a., 38 avenue John F. Kennedy, 1855 Luxembourg) – if you pay using the address and payment details stored in your Amazon account. Privacy information: pay.amazon.de/help/201751600

With payment in advance, cash on delivery and purchase on account, no transmission to a payment service provider takes place. In these cases the payment data is processed exclusively by us and our bank in order to handle the payment transaction.

12. Disclosure of personal data to our shipping service provider

To deliver your order we pass the data required for shipping on to our shipping service provider. This is DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn.

Only the details necessary for delivery are transmitted, namely name and delivery address together with – if you select them during the order process – the details of a Packstation or post office branch. The legal basis for this is Art. 6(1)(b) GDPR, as the transmission is necessary to perform the purchase contract concluded with you. Without this disclosure we could not deliver your order.

We do not transmit your email address or your telephone number to the shipping service provider. We inform you about the shipping status and tracking exclusively ourselves, by email. The shipping service provider therefore does not send any delivery notifications or other messages.

DHL Paket GmbH processes the transmitted data as an independent controller within the meaning of the GDPR, in order to perform the transport contract and comply with its legal obligations. You can find information on data processing at DHL at dhl.de/datenschutz.

For deliveries to countries outside the European Union – to Switzerland, for example – name and address are additionally transmitted to the customs and postal authorities there, insofar as this is necessary for customs clearance and delivery. The legal basis is Art. 6(1)(b) and (c) GDPR in conjunction with Art. 49(1)(b) GDPR.

The data is deleted once delivery is complete and the retention periods under commercial and tax law have expired.

13. Product reviews

You have the option of reviewing the products we offer. In doing so, we process the name you provide, the review text, the star rating and the date of submission. Only the name you provide and the content of your review are published.

The legal basis is Art. 6(1)(a) GDPR. Submitting a review is voluntary; you suffer no disadvantage whatsoever if you do not. You can request the deletion of your review at any time. Reviews are checked by us before publication.

Please note that in a review you make voluntarily provided information about yourself publicly accessible. We therefore recommend not including any information in reviews that would allow conclusions to be drawn about particularly sensitive circumstances.

14. Subscribing to our newsletter

On the weekview e.K. website, users are given the opportunity to subscribe to our company's newsletter. Which personal data is transmitted to the controller when subscribing to the newsletter is determined by the input form used for this purpose.

weekview e.K. informs its customers and business partners at regular intervals by newsletter about the company's offers. Our company's newsletter can generally only be received by a data subject if (1) the data subject has a valid email address and (2) the data subject registers for the newsletter. For legal reasons, a confirmation email is sent using the double opt-in procedure to the email address first entered by a data subject for the newsletter. This confirmation email serves to verify whether the owner of the email address, as the data subject, has authorised receipt of the newsletter.

When you sign up for the newsletter, we also store the IP address assigned by the internet service provider (ISP) to the computer system used by the data subject at the time of registration, together with the date and time of registration. Collecting this data is necessary in order to be able to trace any later misuse of a data subject's email address, and serves the legal protection of the controller.

The personal data collected when signing up for the newsletter is used exclusively to send our newsletter. Newsletter subscribers may also be informed by email if this is necessary for the operation of the newsletter service or for a related registration. The personal data collected as part of the newsletter service is not passed on to third parties. The subscription to our newsletter may be cancelled by the data subject at any time. Consent to the storage of personal data may be withdrawn at any time. For the purpose of withdrawal, a corresponding link can be found in every newsletter. It is also possible to unsubscribe from the newsletter at any time directly on the controller's website, or to notify the controller by other means.

15. Newsletter tracking

The newsletters of weekview e.K. contain what are known as tracking pixels. A tracking pixel is a miniature graphic embedded in emails that are sent in HTML format, in order to enable log file recording and log file analysis. This makes it possible to carry out a statistical evaluation of the success or failure of online marketing campaigns. Using the embedded tracking pixel, weekview e.K. can see whether and when an email was opened by a data subject and which links in the email were clicked by the data subject.

Personal data collected via the tracking pixels contained in the newsletters is stored and evaluated by the controller in order to optimise newsletter delivery and to tailor the content of future newsletters even better to the interests of the data subject. This personal data is not passed on to third parties. Data subjects are entitled to withdraw the relevant declaration of consent at any time. Following a withdrawal, this personal data is deleted by the controller. weekview e.K. automatically interprets unsubscribing from the newsletter as a withdrawal.

16. Contact options via the website

Due to statutory requirements, the weekview e.K. website contains details that enable quick electronic contact and direct communication with us, including a general email address. If a data subject contacts the controller by email or via a contact form, the personal data transmitted by the data subject is stored automatically. Such personal data, transmitted on a voluntary basis, is stored for the purpose of handling the enquiry or contacting the data subject. This personal data is not passed on to third parties.

17. Comment function in the blog on the website

weekview e.K. offers users the opportunity to leave individual comments on specific blog posts on a blog. If a data subject leaves a comment, then in addition to the comments left by the data subject, information on the time the comment was entered and the user name (pseudonym) chosen by the data subject is stored and published. The IP address assigned by the data subject's internet service provider (ISP) is also logged. This storage of the IP address takes place for security reasons and in case a data subject infringes the rights of third parties or posts unlawful content through a comment. This collected personal data is not passed on to third parties unless such disclosure is required by law or serves the legal defence of the controller.

18. Use of Google Ads Customer Match

As part of our online marketing we use the „Customer Match" function of Google Ads. In doing so, personal data such as your email address is transmitted to Google in encrypted form, so that you can be recognised across Google services (such as Google Search, YouTube, Gmail or the Google Display Network) as part of targeted advertising campaigns and addressed accordingly.

The transmission only takes place if you have previously given us your express consent (for example as part of a newsletter sign-up via the double opt-in procedure). The data transmission is encrypted and serves exclusively to match against existing Google accounts, without Google storing the data permanently or using it in any other way.

The data processing takes place on the basis of your consent pursuant to Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future.

You can find further information on data processing in connection with Google Customer Match at:
support.google.com/google-ads/answer/6334160

Please note: The analysis and marketing services described in the following three sections are currently in preparation and are not yet active on this website. As soon as we use them, this will only happen after your express consent via our cookie notice.

19. Use of Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies and similar technologies to evaluate the use of our website. Among other things, the pages accessed, the time spent, the approximate location, the device type and browser and a shortened IP address are recorded. We use these evaluations to understand the reach and use of our offering and to improve our website.

It is used exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. Without your consent, no cookies are set and no data is transmitted to Google. You can withdraw your consent at any time on our Cookie settings page.

A transfer of your data to the United States to Google LLC cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework; the transfer is therefore based on an adequacy decision of the European Commission, supplemented by standard contractual clauses. You can find further information on data processing by Google at policies.google.com/privacy.

20. Use of Google Tag Manager

We use Google Tag Manager provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Tag Manager is not itself an analytics tool and does not store any personal data in cookies. It serves solely to manage and deliver the services we use. When Tag Manager is loaded, however, your IP address is transmitted to Google.

Tag Manager is only loaded once you have consented to the services delivered through it. The legal basis is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. You can withdraw your consent at any time on our Cookie settings page.

21. Use of the Meta pixel (Facebook and Instagram)

This website uses the Meta pixel provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. The pixel allows us to see how visitors behave on our website after clicking on an advert on Facebook or Instagram, and thus to evaluate the effectiveness of our advertising. Visitors to our website can also be recognised within the Meta services in order to show them relevant advertising there.

The data collected is not directly visible to us; we receive aggregated evaluations only. For the collection and transmission of the data we are jointly responsible with Meta within the meaning of Art. 26 GDPR; Meta is solely responsible for the subsequent further processing.

It is used exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. You can withdraw your consent at any time on our Cookie settings page.

A transfer to the United States cannot be ruled out; Meta Platforms Inc. is certified under the EU-US Data Privacy Framework. Further information: de-de.facebook.com/privacy/policy.

22. Links to social networks

In the footer of our website you will find links to our profiles on social networks and other platforms. These are simple links only, not embedded content or buttons provided by those providers. No data is therefore transmitted to these providers when you merely visit our website.

Only when you click on one of these links are you forwarded to the relevant provider's site, and a data transfer to that provider takes place. The respective provider is responsible for the processing of your data on those platforms; please consult their information on the scope of the processing.

23. Data protection provisions for third-party providers

Our website may integrate components and services from third-party providers. These third-party providers may collect, store and process personal data. It is important to note that these third-party providers have their own data protection provisions and that we have no control over their practices. Data subjects should consult the privacy policies of these third-party providers for further information.

24. Routine erasure and blocking of personal data

The controller processes and stores a data subject's personal data only for the period necessary to achieve the purpose of storage, or where this has been provided for by the European legislator or another legislator in laws or regulations to which the controller is subject. If the purpose of storage ceases to apply or a prescribed storage period expires, the personal data is routinely blocked or erased in accordance with statutory requirements.

25. Duration for which personal data is stored

The criterion for the duration of the storage of personal data is the respective statutory retention period. Once the period has expired, the corresponding data is routinely erased, provided it is no longer required for the performance or initiation of a contract.

26. Rights of the data subject

a) Right to confirmation
Every data subject has the right to obtain confirmation from the controller as to whether personal data concerning them is being processed.

b) Right of access
Every data subject has the right to obtain from the controller, free of charge and at any time, information about the personal data stored about them and a copy of that information.

c) Right to rectification
Every data subject has the right to obtain the immediate rectification of inaccurate personal data concerning them.

d) Right to erasure (right to be forgotten)
Every data subject has the right to obtain from the controller the erasure without delay of personal data concerning them, where one of the grounds set out in the GDPR applies.

e) Right to restriction of processing
Every data subject has the right to obtain restriction of processing from the controller where one of the conditions set out in the GDPR is met.

f) Right to data portability
Every data subject has the right to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used and machine-readable format, and to transmit that data to another controller.

g) Right to object
Every data subject has the right to object at any time to the processing of personal data concerning them which is carried out on the basis of Art. 6(1)(e) or (f) GDPR.

h) Automated individual decision-making, including profiling
Every data subject has the right not to be subject to a decision based solely on automated processing — including profiling — which produces legal effects concerning them or similarly significantly affects them.

i) Right to withdraw consent under data protection law
Every data subject has the right to withdraw consent to the processing of personal data at any time.

27. Legal basis of the processing

Art. 6(1)(a) GDPR serves our company as the legal basis for processing operations for which we obtain consent for a specific processing purpose. Where the processing of personal data is necessary for the performance of a contract, the processing is based on Art. 6(1)(b) GDPR. The same applies to processing operations that are necessary to carry out pre-contractual measures. Where our company is subject to a legal obligation, the processing is based on Art. 6(1)(c) GDPR. In rare cases, the processing of personal data may become necessary in order to protect the vital interests of the data subject or of another natural person. The processing would then be based on Art. 6(1)(d) GDPR. Processing operations that are necessary to safeguard a legitimate interest of our company or of a third party, provided the interests, fundamental rights and freedoms of the data subject do not override them, are based on Art. 6(1)(f) GDPR.

28. Legitimate interests in the processing pursued by the controller or a third party

Where the processing of personal data is based on Art. 6(1)(f) GDPR, our legitimate interest is the conduct of our business activities for the benefit of the well-being of all our employees and our shareholders.

29. Statutory or contractual requirements to provide personal data

We would like to point out that the provision of personal data is in part required by law or may also arise from contractual arrangements. On occasion, concluding a contract may require a data subject to provide us with personal data that must subsequently be processed by us. A failure to provide the personal data would mean that the contract with the data subject could not be concluded.

30. Existence of automated decision-making

As a responsible company, we do not use automated decision-making or profiling.

This privacy policy was developed and created internally in order to ensure optimal protection of the personal data we process.

Last updated: August 2026. This privacy policy was developed and created internally in order to ensure optimal protection of the personal data we process.