Data Privacy Statement for the iwis Group

In the text below, Joh. Winklhofer Beteiligungs GmbH & Co. KG, iwis motorsysteme GmbH & Co. KG, iwis antriebssysteme GmbH & Co. KG, iwis antriebssysteme GmbH and iwis systemtechnik GmbH are collectively referred to as “iwis”.



iwis is committed to ensuring the fair, transparent processing of personal data. We want our visitors and customers to understand what kind of personal data we collect, and when. According to the definition in Article 4 GDPR, personal data means any  information related to an identified or identifiable natural person. We collect the personal data of individuals who visit our website, submit a contact request, fill in an enquiry form, place an order in the Web Shop or submit a job application.

When you visit our website:

Please read our information on cookies.

When you fill in an enquiry form:

We collect your contact data and information about your enquiry.

When you place an order in the Web Shop:

We process all the personal data you have submitted for registration purposes (in particular title, name, address, e-mail address, telephone number, fax number, bank details) strictly in accordance with GDPR regulations.

When you submit a contact request:

We collect your contact data and information about your contact request.

When you submit a job application:

We record your contact data, your written application, your CV and certificates / testimonials.

When you sign up for a newsletter:

We record your contact data and information about your interests.



We want our visitors and customers to be able to exercise their rights as data subjects effectively. You have the right to know who controls your data and who you can address in your country of residence if you have any queries. We also want to ensure that you know the reasons and legal basis for collecting and processing your personal data. As data controller of your personal data, we are responsible for processing your personal data collected on or via our website.


Data controller for your data is:

Joh. Winklhofer Beteiligung GmbH & Co. KG

Albert-Roßhaupter-Str. 53

81369 Munich, Deutschland

Telephone: +49 89 76909-0

Telefax: +49 89 76909-1333


As data controller, iwis determines the purpose and means of processing your personal data. You can submit queries about your data here.

In accordance with Art. 6 Para.1 S.1 f) GDPR we only share the data collected, to the extent required for the performance of a contract, with other companies in the Joh. Winklhofer Beteiligungs GmbH & Co. KG Group (namely: iwis antriebssysteme GmbH, Contacta Antriebstechnik GmbH, iwis motorsysteme GmbH & Co. KG and their respective Managing Partners iwis Motorsysteme Geschäftsführungs GmbH, iwis antriebssysteme GmbH & Co. KG and their respective Managing Partners iwis Antriebssysteme Geschäftsführungs GmbH and iwis systemtechnik GmbH).

In the event that data are collected and stored on our behalf by third parties, such third parties shall be contractually obliged to protect all such data under the provisions of Art. 28 GDPR.


PART II: What is the purpose and legal basis for processing your personal data?

When you visit our website:

Please read our information on cookies.

When you submit a contact request:

Purpose: the personal data we collect enables us to process and reply appropriately to your specific request.

Legal basis: as we collect your personal data in order to process your request, we use it exclusively for the processing of the respective request, in particular for correspondence and for the preparation and substantiation of a contract (Art. 6 Para. 1 S.1 GDPR).

When you submit a job application:

Purpose: the personal data collected enables us to process your application.

Legal basis: we collect your personal data in relation to a potential employment contract on the grounds that this is one of the necessary steps prior to entering into a contract.

NB: we will not process your personal data for any other purpose than the purpose stated above. Data are only collected and stored on our behalf by third parties that are contractually obliged to protect data within the meaning of Art. 28 GDPR.

When you place an order in the Web Shop:

Purpose: following your consent, we use your personal data, which we collect to the extent necessary for the substantiation, determination of content or amendment of the contract (inventory data), exclusively for the performance of the contract e.g. for delivery of the goods to the address stated.

Legal basis: Art. 6 Para. 1 S.1 GDPR

When you fill in an enquiry form:

Purpose: the personal data we collect enables us to process and respond appropriately to your specific enquiry.

Legal basis: as we collect your personal data for the purpose of processing your enquiry, this is done on the legitimate grounds of performance of a contract in accordance with Art. 6 Para. 1 S.1 b) GDPR

When you sign up for a newsletter:

Purpose: if you wish to receive the newsletter offered on the website, we require your valid e-mail address and certain information that allows us to check that you are the owner of the e-mail account, or that the account owner has agreed to receive the newsletter. No other data are collected.

You may withdraw your consent to storage of your data, the e-mail address and its use for reception of the newsletter at any time. A link for you to withdraw your consent is provided in every newsletter and on our website. You can also withdraw your consent by informing us via the Contact possibilities stated in this document.

Legal basis: as we collect your personal data in order to process your request, we do so only after receiving your consent in accordance with Art. 6 Para. 1 S.1 a) GDPR.



iwis can share your personal data with recipients within the company. These recipients are given access to your data for the above-mentioned purposes. Data can be shared with recipients in the following categories:

  • Marketing
  • Human Ressources
  • Sales
  • Engineering

iwis will not share your personal data with external recipients (third parties) who intend to use the data for direct marketing purposes, unless you have given your special consent for us to do so.



How long are my personal data stored?

In accordance with the principles of data avoidance and data minimisation, we do not store your personal data for any longer than is necessary for the fulfilment of a legitimate purpose, for example to fulfil a contract with you or comply with the legally required minimum storage period. We have implemented deadlines for data erasure and a regular review process to ensure that your personal data are not stored for longer than is necessary. 


What are your rights and how can you exercise them?

The right to withdraw your consent: you have the right to withdraw your consent for data processing via the usual iwis contact channels at any time.

Right to object to processing of personal data: you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you, including profiling. iwis will then no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if data processing serves to establish, exercise or defend legal claims.

Direct marketing: the right to object applies in particular direct marketing. You have the right to object at any time to processing, including profiling, of personal data concerning you to the extent that it is related to such direct marketing.

Right of access to information: you have the right to receive confirmation from us whether or not personal data related to you are being processed. If they are, you have the right to access information concerning your personal data and how they are processed.

Right to rectification: you have the right to demand immediate rectification if we hold any personal data concerning you that are incorrect. Taking into account the purposes of the processing, you are entitled to demand the completion of incomplete personal data, including by means of providing a supplementary statement.

Right to erasure (‘right to be forgotten’): you have the right to demand the erasure of personal data without undue delay unless this would contravene GDPR Art. 17 Para. 3.

Right to restriction of processing: you have the right to demand the restriction of processing where one of the following applies: if you contest the accuracy of the data,  processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead; if we no longer need your personal data but you require them for the establishment, exercise or defence of legal claims; or, if you have objected to processing of the data, pending verification of whether our legitimate grounds as data controller override your own grounds as data subject.

Right to data portability: you have the right to receive the personal data that you have provided to iwis in a structured, commonly used and machine-readable format, and to transmit those data to another data controller without hindrance from iwis.

Exercising your rights: you may exercise your rights by contacting iwis (see Part I) or your local data protection officer (DPO) (see Part VI).

You also have the right to complain to the responsible supervisory authority (see Part VI).


What do we do in the case of third parties to whom personal data has been disclosed?

NB: iwis will notify all recipients to whom personal data has been disclosed about any rectification, erasure or restriction of processing of personal data, unless such notification proves to be impossible or involves unreasonable effort. We will inform you about these recipients on request.



Data transfer via the internet is never completely secure or error-free, and stored data are not completely invulnerable. However, the technical and organisational measures employed by iwis and its partners nevertheless guarantee an appropriate level of security and confidentiality of your personal data; this includes the prevention of unauthorised access to data, and ensuring that no unauthorised persons can use either the data or the devices on which the data are processed.

We use various security measures, including sophisticated encryption and authentication tools, to safeguard the security and integrity of your personal data. Your personal data are stored in firewall-protected secure networks that are only accessible to a restricted number of persons with special access rights and bound by a non-disclosure agreement concerning these data. Any information you submit to us is stored on secure servers.



Your right to complain to our local data protection partner

In the event of a complaint, please contact our Data Protection Officer:

Mr. Günther Cesar

Joh. Winklhofer Beteiligung GmbH

Albert-Roßhaupter-Str. 53

81369 Munich, Deutschland



Your right to complain to the responsible supervisory authority:

You also have the right to submit your complaint to the German supervisory authority:

*Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)

Promenade 27

91522 Ansbach

*Bavarian Federal State Bureau for Data Protection Supervision



Data processing on this website

Log files information is automatically created by your browser, transmitted to us and stored. The information consists of:

  • Name of the requested file
  • Browser type/version and operating system used
  • Page from which the file requested
  • Access status (file transferred, file not found etc.)
  • Complete IP address of computer which sent the request
  • Date and time of server request
  • Data volume transferred.

On technical safety grounds, in particular as a means of preventing cyber-attacks on our web server, we store these data for a period of seven days in accordance with Art. 6 Para. 1 S. 1 f) GDPR, after which they are erased. The data are stored exclusively for this purpose and processed in anonymised form for statistical purposes; they are not synchronised with any other data inventories or transmitted to third parties, even in part.


Cookies or other tracking methods may be used to analyse use of the website. We use cookies to improve the quality of our services and to obtain a better understanding of how visitors use our website. Most internet browsers are set by default to accept cookies. If you wish, you can change the setting to prevent the storage of cookies on your computer.

To do this, change your browser settings as follows:

If you use MS Internet Explorer, first select menu item «Extras», then «Internet Options»; here, select «Data Privacy» or «Security» and finally the desired level of  «Data Privacy» or «Security».

In Firefox, first select «Extras» from the menu, then «Settings»; next, select «Data Privacy» and untick the box «Accept Cookies».

Switching off cookies will restrict or block the functioning of applications that require the use of cookies.

Google Tag Manager

We use Google Tag Manager on our website to facilitate the integration and management of our tags. Tags are small code elements which, among other functions, help to measure traffic and visitor behaviour, register the impact of online advertising and social media channels, create remarketing and address specific target groups, and test and optimise websites. We only use the Google Analytics tag. If you have selected deactivation, this will be taken into account by Google Tag Manager.
Google Tag Manager only registers which tags have been activated. No further personal data is collected or stored.

More information on Google Tag Manager is available here:

Google Analytics

Since an agreement was reached between Hamburg’s Data Privacy and Freedom of Information Officer and Google on the basis of the Düsseldorf Committee’s resolution on the data privacy-compliant design of analytical processes for internet reach measurement, the data privacy-compliant and unobjectionable use of Google Analytics has been possible under certain conditions. We are committed to fulfilling these conditions. We would particularly like to advise you that the code “gat._anonymizeIp();” has been added to Google Analytics on this website to guarantee the anonymised registration of IP addresses (so-called IP Masking).

Your attention is also drawn to the following information on the use of Google Analytics:
This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Joh. Winklhofer Beteiligungs GmbH & Co. KG has concluded an agreement with Google Inc. as a data processor within the meaning of Art. 28 GDPR. This website uses Google Analytics, a web analytics service provided by Google Inc.  Google Analytics uses so-called “cookies”, small text files that are stored on your computer and enable an analysis of how you use this website.  As a rule, the information generated by the cookies about your use of this website is sent to a Google server in the USA and stored there. However, if you have previously activated the IP anonymization function on this website, Google will abbreviate your IP address within member states of the European Union or European Economic Area member states.
Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and abbreviated there. Acting on behalf of the operators of this website, Google will use this information to analyse your use of the site, compile reports on activities on the site and provide other services to the website operator in connection with use of this website and the internet. The IP address transmitted to Google Analytics by your browser will not come into contact with any other data in Google’s possession.
You can disable the storage of cookies by changing your browser software settings accordingly; however, please be advised that you may not be able to use all functions on this website to their full extent if you choose this option. In addition, you can prevent the collection and transmission to Google of the data related to your use of this site (including your IP address) and generated by the cookie, as well as processing of the data by Google, by downloading and installing the browser plug-in available under the following link:

You can disable tracking by Google Analytics by clicking on the link below. This will install an opt-out cookie on your device which will prevent data collection by Google Analytics on future visits to this website: Deactivate Google Analytics

More information on terms of use and data privacy is available at or
We also use Google Analytics to evaluate data from AdWords and the DoubleClick cookie for statistical purposes. If you would prefer us not to do this, you can deactivate the function via the advertising preferences manager (


Links to other websites

Our website may contain links to other third-party websites. We accept no liability for the data privacy regulations on these websites.


Data privacy modifications

In order to ensure that our data privacy statement always complies with current legal requirements, we reserve the right to make modifications at any time. This also applies if the data privacy statement needs to be adapted because of the introduction of new or updated services e.g. the provision of a new service. The new data privacy statement will then take effect on your next visit to our website.


Questions and feedback

You are welcome to submit your questions and suggestions concerning our data privacy regulations at any time. Please contact us via the channels set out in Part I.


You have a specific question or would you simply like to learn more about us?
Find our contact information below or use our Contact Form.