Privacy policy

This is a convenience translation. The German version of this privacy policy is authoritative.

This privacy policy explains which personal data is processed when you visit this website or contact us, for what purpose, and which rights you have (Art. 13 GDPR).

1. Controller

The controller responsible for data processing on this website is:

Thomas Wilmes Ingenieurbüro GmbH & Co. KG
Marienweg 12
34414 Warburg
Germany

Represented by its general partner, which in turn is represented by its managing director Thomas Wilmes (details in the imprint).

Phone: +49 172 9713330
E-mail: info@thomas-wilmes.de

No data protection officer has been appointed, as the statutory requirements (§ 38 of the German Federal Data Protection Act, BDSG) are not met. For any questions about data protection, please use the contact details above.

2. Key points at a glance

• Google Analytics (statistics) is only loaded if you expressly consent in the cookie notice. Without consent no analytics cookies are set and no data is sent to Google. We do not set advertising cookies.
• Fonts, images and videos are hosted on our own server. No content is loaded from Google Fonts, YouTube, Google Maps or other third parties.
• The contact form transmits your details encrypted to our server, which forwards them to us by e-mail; they are not stored there. The spam protection runs on our own server, without third parties and without cookies.
• Your browser stores your choice in the cookie notice (strictly necessary) and, only if you allow it there, your layout in the cabinet planner and the Google Analytics cookies. You can withdraw your consent at any time.

3. Hosting of the website

Our website runs on our own server, rented from Henrik Kramer e.K. (Prepaid-Hoster), Kurpromenade 48, 23743 Grömitz, Germany. The server is located in a data centre in Offenbach am Main (Germany). When your browser requests our pages, our web server processes the following data as technically necessary:

• the IP address of the requesting device,
• date and time of the request,
• the requested address (URL) and, where applicable, the previously visited page (referrer),
• browser type and operating system (user agent),
• amount of data transferred and status code.

This processing is necessary to deliver the website and to protect it against attacks. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing the website securely and reliably.

The hosting provider acts as our processor (Art. 28 GDPR). The data is processed exclusively in Germany; no transfer to third countries takes place.

Name resolution (DNS) for our domain is provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. This only translates the domain name into the address of our server; the website itself is not retrieved via Cloudflare. DNS queries are usually made not by your device but by your internet provider's DNS resolver. Where personal data is processed in this context, any transfer to the USA is based on the European Commission's adequacy decision on the EU-US Data Privacy Framework of 10 July 2023 (Art. 45 GDPR). Further information: cloudflare.com/privacypolicy.

4. Access data and logs

We ourselves do not evaluate access data for statistical or marketing purposes and do not create user profiles. Our web server logs requests (requested address, time, status code, user agent, IP address). We use these logs solely for troubleshooting and to fend off attacks: if an IP address repeatedly requests typical attack targets (for example non-existent administration or configuration files), it is automatically blocked for 24 hours. The logs are deleted automatically after seven days. The legal basis is Art. 6(1)(f) GDPR (troubleshooting and security).

The web server does not set any cookies.

5. Cookies, notice banner and local storage in your browser

We do not set advertising cookies. Analytics cookies are only set by Google Analytics with your consent (section 6). At most the following entries may be stored in your browser. The two local storage (localStorage) entries never leave your device and are not transmitted to us or to third parties.

Entry	Purpose	Retention
tw-consent	Remembers, without any identifier, which choice you made in the notice on cookies and local storage, so that it does not reappear on every visit and your choice is applied. Strictly necessary (§ 25(2) no. 2 TDDDG).	12 months, after which the notice is shown again
wilmes-schaltschrank-plan	Stores your layout in the cabinet planner (placed components, cables, arrangement) so that it is still there on your next visit. Only created if you have allowed the "Convenience" category in the notice and use the planner (consent, § 25(1) TDDDG).	Until you delete the plan, withdraw your consent via "Cookie settings" (the entry is then deleted immediately) or clear the site data in your browser
_ga, _ga_<ID> (cookies)	Google Analytics: distinguishes visitors by a randomly generated identifier and assigns page views to a visit. Only set if you have allowed the "Statistics" category in the notice (consent, § 25(1) TDDDG); details in section 6.	13 months or until you withdraw your consent via "Cookie settings" (the cookies are then deleted)

On your first visit we show a notice with the equally prominent buttons "Accept all" and "Necessary only"; the optional categories (convenience, statistics) are not pre-selected. You can change or withdraw your choice at any time with effect for the future via the "Cookie settings" link in the footer of every page or via the button at the end of this page. The entries can also be deleted via your browser settings. The website can be used without restriction without consent.

6. Web analytics with Google Analytics

If you consent to the "Statistics" category in the cookie notice, we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Without your consent Google Analytics is not loaded; no cookies are set and no data is transmitted to Google.

Google Analytics sets the cookies "_ga" and "_ga_<ID>" (lifetime 13 months) and collects information about your use of the website: pages visited, time on page, date and time, the previously visited page (referrer), approximate region, browser, operating system, device type and screen resolution, and a randomly generated identifier of your browser. Google Analytics does not store IP addresses; Google uses the IP address only briefly to derive the approximate region. Google Signals, linking with Google advertising services and personalised advertising are disabled. Usage data is deleted automatically after two months.

The purpose is the statistical analysis of how our website is used in order to improve its content and usability. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can withdraw your consent at any time with effect for the future via the "Cookie settings" link in the footer of every page or via the button at the end of this page; the Google Analytics cookies are then deleted.

Google processes the data as our processor on the basis of the Google Ads Data Processing Terms (Art. 28 GDPR). Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework; the transfer is based on the European Commission's adequacy decision of 10 July 2023 (Art. 45 GDPR) and, as a fallback, on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). Further information: business.safety.google/privacy and policies.google.com/privacy.

7. Contacting us

You can reach us by e-mail, by phone or via the contact form. We process the information you provide (name, e-mail address and message, and optionally company, phone number and topic) in order to answer your enquiry.

When you submit the contact form, your details are transmitted encrypted (HTTPS) to our web server and forwarded from there by e-mail to our mailbox. The content is not stored on the web server. To prevent abuse, the server processes your IP address to limit the number of requests per connection; it is kept in memory only and discarded after one hour at the latest. Only the time and result of sending are logged, without content, names, e-mail or IP addresses.

For spam protection we use ALTCHA, which runs entirely on our own server: while you fill in the form, your browser solves a small computational task in the background, and our server checks the result. No data is transmitted to third parties, no cookies are set and no user profile is created. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in protection against automated spam).

The legal basis is Art. 6(1)(b) GDPR where your enquiry concerns a contract or pre-contractual measures, and otherwise Art. 6(1)(f) GDPR (legitimate interest in answering business enquiries).

Our e-mail mailbox is operated by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany, as our processor (Art. 28 GDPR). Further information: all-inkl.com/datenschutzinformationen.

We delete enquiries once they have been dealt with and no further communication is to be expected. If an enquiry leads to a business transaction, we retain the correspondence in accordance with statutory obligations (commercial and business letters for six years, accounting records for eight years; § 257 of the German Commercial Code (HGB), § 147 of the German Fiscal Code (AO)).

8. Customers, prospects and business partners

To initiate, perform and invoice orders, we process master, contact and contract data of our customers, suppliers and their contact persons (Art. 6(1)(b) GDPR; for contact persons of legal entities Art. 6(1)(f) GDPR). We retain invoicing and accounting records in accordance with commercial and tax law (Art. 6(1)(c) GDPR). This processing takes place outside the website.

9. Links to social networks and Google Maps

The buttons for sharing articles (LinkedIn, X, Facebook, WhatsApp), the link to Thomas Wilmes' LinkedIn profile and the link to Google Maps on the contact page are plain links. No data is transmitted to these providers when our page loads; no plugins or scripts of these providers are embedded. Only when you click such a link do you reach the respective provider's site, which then processes data under its own responsibility. The provider's privacy policy applies.

10. Fonts, images and videos

All fonts (Lato, Poppins, Manrope), images and videos on this website are hosted on our own server (section 3). No connections to Google Fonts, YouTube, Vimeo or other third parties are established when the page loads.

11. No obligation to provide data, no automated decision-making

You are neither legally nor contractually obliged to provide us with personal data. Without your contact details, however, we cannot answer an enquiry. No automated decision-making, including profiling (Art. 22 GDPR), takes place.

12. Your rights

With regard to personal data concerning you, you have the following rights against us:

• right of access (Art. 15 GDPR),
• right to rectification (Art. 16 GDPR),
• right to erasure (Art. 17 GDPR),
• right to restriction of processing (Art. 18 GDPR),
• right to data portability (Art. 20 GDPR),
• right to withdraw any consent given at any time with effect for the future (Art. 7(3) GDPR).

To exercise your rights, an informal message to info@thomas-wilmes.de or to the address in section 1 is sufficient.

13. Right to object

Right to object under Art. 21 GDPR: Where we process your data on the basis of Art. 6(1)(f) GDPR (legitimate interest), you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. An informal message to info@thomas-wilmes.de is sufficient.

14. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. The authority responsible for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia)
Kavalleriestraße 2–4
40213 Düsseldorf, Germany
Postal address: Postfach 20 04 44, 40102 Düsseldorf, Germany
Phone: +49 211 38424-0
E-mail: poststelle@ldi.nrw.de
www.ldi.nrw.de

15. Data security

The website is delivered exclusively over encrypted HTTPS (TLS). In accordance with Art. 32 GDPR, we take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access.

16. Changes to this privacy policy

We will update this privacy policy whenever changes to the website or to the legal situation require it. The version published on this page at the time applies.

Last updated: October 2026