Privacy policy

Version dated 29 August 2026. Convenience translation. The legally binding version is the German Datenschutzerklärung.

1. Controller

Moll & Wolf Widetrack 4x4 GbR
Johann-Sebastian-Bach-Straße 3
88097 Eriskirch
Germany

Phone: +49 15567 740411
E-mail: info@widetrack4x4.de
Websites: www.widetrack4x4.de / www.widetrack4x4.com

The controller within the meaning of the General Data Protection Regulation (GDPR) is the company named above.

2. General information on data processing

We process personal data of visitors to our website and of our customers only insofar as this is necessary to provide the website, to carry out pre-contractual measures, to perform contracts or to safeguard legitimate interests, or where consent has been given.

Processing is carried out in accordance with the GDPR, in particular on the basis of Art. 6 (1) GDPR (lawfulness of processing).

3. Provision of the website and hosting

Our website is hosted by the following provider:

IONOS SE
Elgendorfer Straße 57
56410 Montabaur
Germany

Our contracting partner is IONOS SE; the server is located within the European Union (Spain).

When you access our website, your browser automatically transmits information to the server of our hosting provider (e.g. IP address, date and time of access, page requested, browser type).

The processing of this data is technically necessary to display our website to you and to ensure stability and security; the legal basis is Art. 6 (1) (f) GDPR (legitimate interest in providing a functional and secure website).

The log data stored by the hosting provider is deleted or anonymised in accordance with technical requirements and legal obligations.

4. Cookies, browser storage and shop function (Ecwid by Lightspeed)

4.1 What is stored in your browser

On most pages of this website, no cookies are set and no data is stored in your browser. The only exception is the product page, into which our online shop (Ecwid by Lightspeed) is embedded. There, the shop system stores the following technically necessary entries in your browser:

The cart icon in the header reads from these entries on every page how many items are in the cart and displays the number. Nothing additional is stored in the process.

These entries are strictly necessary for us to provide the online shop with shopping cart that you use. The legal basis for storing and reading them is § 25 (2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act); no consent is required for this. The legal basis for the associated processing of personal data is Art. 6 (1) (b) GDPR (performance of a contract and pre-contractual measures) as well as our legitimate interest in providing a functional online shop under Art. 6 (1) (f) GDPR.

When the product page is opened, the shop's program files are retrieved from servers of Lightspeed Commerce Inc. and its infrastructure providers. For technical reasons, your IP address is transmitted in the process.

Statistics, analytics and marketing functions of the shop system are deactivated. In addition, we technically block the shop system's statistics counter in your browser. No tracking and no profiling take place.

5. Ordering in the online shop (guest checkout)

5.1 Scope of the data processed

When you order in our online shop (guest orders only, no customer account), we process in particular the following personal data:

5.2 Purposes and legal bases

This data is processed in order to receive, process, manufacture and deliver your order, to clarify any queries and to fulfil legal obligations (e.g. retention obligations under commercial and tax law).

The legal basis is Art. 6 (1) (b) GDPR (performance of a contract and implementation of pre-contractual measures); with regard to statutory retention obligations, Art. 6 (1) (c) GDPR.

5.3 Recipients of the data / internal processing

Within our company, only those departments have access to your data that need it to fulfil our contractual and legal obligations (e.g. order processing, accounting).

5.4 Processing in our own planning and manufacturing system

To process your order, to plan manufacturing and stock, and to document the safety-relevant components we manufacture, we process your order and contact data in an application we operate ourselves. This application runs on our own server, which we rent from IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany; the server is located within the European Union (Spain). This data is not passed on to any further third parties.

We process in particular surname, first name, company, address, e-mail address, telephone number, details of the order (order number, date, payment method, amount, items ordered) as well as the vehicle identification number (VIN) and the serial numbers of the components delivered to you.

The processing serves the performance of the purchase contract including manufacturing, delivery and queries (Art. 6 (1) (b) GDPR), the fulfilment of statutory retention obligations (Art. 6 (1) (c) GDPR) and our legitimate interest in the traceability of safety-relevant vehicle parts, in issuing and assigning the expert report for individual vehicle approval, and in handling warranty, product liability and any recall procedures (Art. 6 (1) (f) GDPR).

Once you complete an order in our online shop and it has been paid, the order data required for processing is transferred automatically from the shop system into this application.

The data is deleted as soon as it is no longer required for the purposes stated and no statutory retention obligations apply. Data that serves to link serial numbers and the vehicle identification number is kept for ten years so that we can meet our obligations arising from product safety and product liability.

Access to the application is limited to the partners authorised to represent the company and is protected by appropriate technical and organisational measures.

6. Payment transactions (advance payment/bank transfer, PayPal and Mollie)

6.1 Advance payment/bank transfer

If you select advance payment/bank transfer, you receive our bank details and initiate the payment yourself; in this context we only process the payment allocation (e.g. name, reference, amount) in our bank account records and our accounting.

The legal basis is Art. 6 (1) (b) GDPR (performance of the purchase contract) and Art. 6 (1) (c) GDPR (statutory retention obligations).

6.2 PayPal

When paying via PayPal, you are redirected to the pages of PayPal Europe S.à r.l. et Cie, S.C.A., or the payment is processed via the interfaces integrated there.

PayPal is the controller for the payment processing and the associated data processing; we only receive from PayPal the information required to process the order (payment confirmation, transaction ID, etc.).

Data processing in the course of payment processing via PayPal is carried out by PayPal on its own responsibility in accordance with its terms and privacy notices; please refer to the privacy policy applicable there.

The legal basis for passing on the data required for payment processing to PayPal is Art. 6 (1) (b) GDPR (performance of the payment and purchase contract).

So that PayPal can be offered as a payment method, the shop loads a program library from PayPal during the ordering process. In doing so, your browser transmits your IP address and technical device information to PayPal, and PayPal stores an identifier in your browser's local storage that serves the secure processing of the payment. The legal basis for this storage is § 25 (2) no. 2 TDDDG, and for the data transmission Art. 6 (1) (b) GDPR.

6.3 Mollie (credit card, Sofort and other payment methods)

For further payment methods, in particular credit card and Sofort (instant bank transfer), we use the payment service provider Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, Netherlands.

If you choose a payment method processed via Mollie, the data required for the payment (in particular name, amount, order number and the payment details you enter) is transmitted to Mollie or entered directly with Mollie; we do not receive payment details such as credit card numbers.

For the payment processing and the associated data processing, Mollie is the controller in accordance with its own privacy notices; we only receive the information required to process the order (payment confirmation, transaction ID).

The legal basis for passing on the data required for payment processing is Art. 6 (1) (b) GDPR (performance of the payment and purchase contract).

7. Shipping and logistics service providers

7.1 Shipping and delivery of the goods ordered

In order to perform the purchase contract, we transmit personal data to shipping and logistics service providers (e.g. DHL, GLS, DPD) so that they can deliver your order.

The data required for delivery is processed, in particular surname, first name, delivery address and, insofar as required for delivery, information about the goods ordered (e.g. parcel contents in the form of a product-related description, weight, dimensions).

The legal basis for this data processing is Art. 6 (1) (b) GDPR (performance of a contract), as the transfer of the data is necessary for the delivery of your order.

Under data protection law, shipping service providers are generally independent controllers; they process the data transmitted to carry out the delivery and for shipment tracking within the scope of their respective services.

Any further use of the data by the shipping service provider, in particular for its own advertising purposes, only takes place insofar as the provider demonstrates its own legal basis for this (e.g. your consent); we do not give separate consent for such purposes on your behalf.

7.2 (Optional) Transfer of the e-mail address for shipment notifications

At present we do not pass your e-mail address on to shipping service providers so that they can send you direct shipment notifications or status e-mails.

Should the transfer of the e-mail address to shipping service providers for direct shipment tracking be provided for in future, this will only take place if you expressly consent to it during the ordering process; in that case the legal basis would be Art. 6 (1) (a) GDPR (consent), which you can revoke at any time with effect for the future.

7.3 Storage period at shipping service providers

The delivery data stored by the shipping service provider is processed by the provider in accordance with the respective statutory retention periods and its own deletion concepts and is subsequently deleted or anonymised; in this respect, the data processing by the shipping service provider takes place on its own responsibility in accordance with its privacy notices.

Shipping and logistics service providers are recipients within the meaning of Art. 13 (1) (e) GDPR; as part of your data subject rights, you may request information about the recipients or categories of recipients to whom we have disclosed your personal data.

8. Contact by e-mail, telephone or contact form

If you contact us by e-mail or telephone, we process the contact details you provide and the content of your enquiry in order to process and answer it.

The legal basis is Art. 6 (1) (b) GDPR if the communication relates to the conclusion or performance of a contract, otherwise Art. 6 (1) (f) GDPR (our legitimate interest in answering enquiries).

The data is deleted as soon as your enquiry has been dealt with conclusively and no statutory retention obligations exist.

Our contact page offers a contact form. The details entered there (name, e-mail address, optionally vehicle and year, and your message) are processed by our own server and delivered to our mailbox by e-mail; the form data is not stored permanently on the server. To protect against automated messages, the form contains an additional field that is invisible to you and a limit on the number of messages per sender; your IP address is processed briefly for this purpose.

The legal basis and the deletion correspond to the preceding paragraphs of this section.

9. Social media links (Instagram)

Our website contains a plain text/image link to our Instagram profile.

When you visit our website, we do not transmit any data to Instagram (Meta Platforms) in this context; data processing by Instagram only takes place once you follow the link and open the Instagram platform in your browser.

The respective platform operator is solely responsible for the subsequent processing of personal data in accordance with its terms of use and privacy policy.

10. No web analytics, no tracking, no newsletter

We do not use any web analytics tools (e.g. Google Analytics), conversion tracking, marketing automation, CRM system for tracking or profiling purposes, or newsletter mailings.

No cross-device tracking takes place.

11. Storage period

Unless stated otherwise in this privacy policy, we store personal data only for as long as is necessary for the respective purposes or as we are legally obliged to do so (in particular due to retention obligations under commercial and tax law).

Retention obligations under commercial and tax law are generally ten years (§ 147 AO, § 257 HGB). Accordingly, we keep order and invoice data as well as the link between serial numbers and the vehicle identification number for ten years.

Once the respective purpose of processing no longer applies or the statutory retention periods have expired, the data is deleted or its processing restricted in accordance with the statutory provisions.

12. Your rights as a data subject

Under the GDPR you have the following rights with regard to the personal data concerning you:

To exercise your rights, you can contact us at any time using the contact details given in section 1.

13. Necessity of providing data

The provision of the personal data required for the conclusion and performance of the purchase contract is mandatory; without this data, a contract cannot be concluded or an order processed.

Otherwise, there is no legal obligation to provide us with personal data; however, failure to provide it may mean that certain functions of the website or the shop are not available or only available to a limited extent.

14. Changes to this privacy policy

We reserve the right to update this privacy policy in order to adapt it to changes in the legal situation, our services or technical developments.

The version of this privacy policy available at the time of your visit applies.