Privacy policy

Data protection declaration and information in accordance with Art. 13 GDPR


Thank you for visiting our website and for your interest in our services. We attach great importance to the protection of your privacy as a user of our website and strictly adhere to data protection regulations when collecting, processing and using. This applies in particular to the processing of your personal data.

In the following, we will inform you about our data protection measures for the use of our internet services.


Name and contact details of the person responsible

Wunschgutschein GmbH
Dr. Andreas Betzer, Verena Argauer, Valentin Schütt
Bahnhofstrasse 43
59929 Brilon

Phone: +49 (0) 211-7817580


Name and contact details of the data protection officer

Oliver Baldner
bITs GmbH
Detmolder Strasse 204
33100 Paderborn
Phone: +49 (0) 5251-6889480


Purposes for which the personal data are processed and the legal basis for processing:
Purposes of processing Legal basis
Upload files

The legal basis depends on the type of files uploaded. Possible legal bases can be:

Art. 6 para. 1 lit. b GDPR (required to fulfill a contract or to carry out pre-contractual measures)

Art. 88 GDPR in conjunction with Section 26 (1) BDSG (establishment of an employment relationship)

Implementation of evaluations of usage behavior with Google Analytics Art. 6 para. 1 lit.f GDPR (legitimate interest of the person responsible)
Provision of our offers in accordance with our terms and conditions Art. 6 para. 1 lit. b GDPR (required to fulfill a contract with the data subject)
Processing of technical information in order to provide the service and to be able to optimize the presentation of the information retrieved by the visitor on the respective terminal device of the visitor to the website. Art. 6 para. 1 lit.f GDPR (legitimate interest of the person responsible)
Integration of external fonts from Google Art. 6 para. 1 lit.f GDPR (legitimate interest of the person responsible)
Use of maps from the "Google Maps" service Art. 6 para. 1 lit.f GDPR (legitimate interest of the person responsible)
Control of the website and needs-based design of processes during use through the use of cookies Art. 6 para. 1 lit.f GDPR (legitimate interest of the person responsible)

If your personal data are processed to safeguard the legitimate interests of the person responsible in accordance with Art. 6 Paragraph 1 lit. If techniques for range measurement are used, you will be informed separately in this data protection declaration and you will be given the opportunity to object. Our legitimate interest in range measurement is used for the analysis, optimization and economic operation of our website.

Categories of personal data that are processed

When using our website, the following data is processed for organizational and technical reasons:

  • IP addresses of the visitors
  • Name of the pages accessed
  • Date and time of access
  • Name of the browser used
  • Operating system name
  • Name of the search engine or the external link
  • Name of the downloaded files
If you use our online services and send us your personal data via our forms, the personal data you provide will be processed to fulfill the respective purpose. You will be informed separately about the type and scope of the respective processing before you send your personal data.


If you have not objected to tracking by Google Analytics or the use of cookies, we will evaluate the use of our website. These include:

  • pages viewed
  • Bounce rate
  • Length of stay on the respective page
As a matter of principle, we do not know the identity of the user and we do not take any measures to obtain the relevant information from other sources. We evaluate this technical data anonymously and only for statistical purposes in order to be able to continuously optimize our website and to make the internet offers even more attractive. This anonymous data is stored separately from personal information on secure systems. Your personal data and your privacy are therefore protected at all times.


Recipients of your personal data

Your personal data will only be passed on to third parties on the basis of your consent or a legal permission. Your personal data will only be transmitted to state institutions and authorities entitled to receive information within the framework of the relevant laws or if we are obliged to do so by a court decision. Our employees are bound to secrecy and to comply with the provisions of data protection laws. For the technical implementation of the services made available, we have commissioned corresponding companies who process your personal data on our behalf. These are:

contractor Service rendered

Domain Factory

Hosting the website
Domain Factory Rental and operation of virtual servers as part of order processing in accordance with Art. 28 GDPR
Google Ireland Ltd. Web tracking with Google
Use of cookies

This website uses so-called cookies. These are small text files that are sent from our web server to your browser and saved on your computer's hard drive. No personal data is saved, only an individual pseudonym. This information is used e.g. B. to recognize you while you are navigating our website and to make it easier for you to navigate.

You can set your browser so that it informs you about the placement of cookies. This makes the use of cookies transparent for you. Alternatively, you can view this website without cookies. You can preset this in your respective browser. Please note that some functions of the website may then no longer be partially or completely available.

This cookie policy was created and updated by the company
This cookie table was created and updated by the CookieFirst consent management platform.


Google Analytics traffic analysis

This website uses Google Analytics, a web analysis service from Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and that enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. IP anonymization is activated for this website. For this purpose, your IP address will be shortened and saved without the last octet. This means that we know from which network a request comes, but not from which computer. Your IP address is usually shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address will only be sent to a Google server in the USA and shortened there in exceptional cases. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the operator of this website with other services related to the use of our website and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install:

Use of external services

Our website uses content from third parties. These can be videos, fonts, or scripts. The respective purposes and the legal basis on which we use this content are explained in detail in the section "Purposes for which the personal data is processed and the legal basis for processing". In order to display the content of the third-party offers used, it is necessary for technical reasons that your IP address is transmitted to the respective provider. We have no influence on how the respective third party provider uses your personal data. However, below we provide you with an overview of all third-party services used by this website. If available, we also provide you with the respective link to the data protection declaration of the third party provider so that you can access the information on the processing of your personal data there and, if available, point out an option to object.


We use the rating platform Trustpilot, which is operated by TrustPilot A / S, Pilestraede 58, 5th floor, 1112 Copenhagen, Denmark. When ordering via our website, an invitation will be generated with your consent to submit a rating via Trustpilot. Your surname, first name, email address and a reference number (order number for clear allocation) will be transmitted to Trustpilot. An evaluation of our company can be found on the pagehttps://de.trustpilot.combe delivered. These data are used solely to verify the authenticity and address the user. A customer account must be opened with Trustpilot for the evaluation. Further information on data processing by Trustpilot:


External service Privacy policy Opposition possibility
Integration of external fonts from Google link link
Links to other websites

Our website contains links to other websites. We have no influence on whether their operators comply with data protection regulations. Despite careful content control, we assume no liability for the content of external links. The operators of the linked pages are solely responsible for their content.

Your safety

We use technical and organizational measures to protect your data from unauthorized access, loss, manipulation or destruction. Our security measures are constantly updated in line with technological developments. All communication between your device and our servers is exclusively encrypted. This applies both to the download of documents or information that we offer you via our website and to information that you provide to us via the contact form or the application form.

Duration of storage

The personal data that you have made available to us will be automatically deleted if the purposes of the processing no longer apply. In detail, the following storage periods apply:

Category of stored data Deletion period
Technical data and logs to ensure the operation of the website 6 months
Web tracking data At the time of web tracking, your IP address is anonymized by deleting the last octet. No processing of personal data takes place in the further course of the analysis.
Rights of data subjects / right of appeal

According to Art. 15 GDPR, you have the right to request information about your personal data processed by us. In particular, you can obtain information about the processing purposes, the category of your personal data processed, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of the right to correction, deletion, restriction of processing or objection, The existence of a right to lodge a complaint with a supervisory authority, the origin of your data, if we have not collected it, as well as the existence of automated decision-making including profiling and, if necessary, meaningful information on their details.

According to Art. 16 GDPR, you have the right to immediately request the correction of incorrect personal data or the completion of your personal data stored by us.

In accordance with Art. 17 GDPR, you have the right to request the deletion of your personal data stored by us, unless there is a legal basis that entitles or obliges us to continue storing the data.

According to Art. 18 GDPR, you have the right to request that the processing of your personal data be restricted if

  • the correctness of the personal data is contested by you for a period that enables us to check the correctness of the personal data,
  • the processing is unlawful and you refuse to delete the personal data and instead request that the use of the personal data be restricted,
  • we no longer need the personal data for the purposes of processing, but you need the data to assert, exercise or defend legal claims,
  • You have lodged an objection to the processing in accordance with Article 21 (1) GDPR, as long as it has not yet been determined whether our legitimate reasons outweigh your reasons.


According to Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another person responsible.

According to Art. 77 GDPR, you have the right to complain to a supervisory authority if you are of the opinion that the processing of your personal data violates the GDPR.

Right to withdraw consent

According to Art. 7 Para. 3 GDPR, you have the right to revoke your once given consent to us at any time. As a result, we are no longer allowed to continue the data processing based on this consent in the future. The legality of the processing carried out on the basis of the consent up to the point of revocation is not affected by the revocation.

Right to object

If your personal data are processed on the basis of legitimate interests in accordance with Art. 6 Para. 1 S. 1 lit.f GDPR, you have the right to object to the processing of your personal data in accordance with Art there are reasons for this that arise from your particular situation.

Provision of your personal data

Personal data is information about your identity. This includes, for example, information such as name, address, telephone number or the e-mail address. In principle, you do not have to disclose personal data in order to use this website. In certain cases, however, we need your name and address as well as other information so that we can provide the requested services.

We will point this out to you where this is necessary. In addition, we only save and process data that you provide voluntarily or automatically. If you make use of consulting services, as a rule only such data is collected that is required to provide the services. If we ask you for further data, it is voluntary information. The personal data you provide will only be processed for the purposes that have been communicated to you and explained below.

Change of data protection regulations

We reserve the right to change the security and data protection measures at any time, in particular if this becomes necessary due to technical developments. In these cases, we will also adapt this information on data protection accordingly. Please therefore note the current version of this data protection declaration.

Questions, suggestions, complaints

If you have any further questions about the information on data protection and the processing of your personal data, you can contact our data protection officer directly using the contact details given above.