The following notes give a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. Detailed information can be found in the following sections of this privacy policy.
Data on this website is processed by the website operator. Their contact details can be found in the section “Controller”.
Some data is provided by you, for example in a contact, inquiry or application form, when you subscribe to the newsletter or when you place an order. Other data is collected by our IT systems automatically when you visit the website (mainly technical data such as browser, operating system or time of the page view) or after your consent (visitor statistics, videos).
Part of the data is collected to ensure that the website is provided without errors. With your consent we analyse the use of the website statistically. We process inquiries, bookings and orders in order to handle and fulfil them.
You have the right to receive information about the origin, recipients and purpose of your stored personal data free of charge at any time. You also have the right to request the correction, deletion or restriction of processing of this data. You can withdraw any consent you have given at any time with effect for the future. You also have the right to lodge a complaint with the competent supervisory authority. You can contact us at any time about this and any other questions on data protection.
We host the content of our website with IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany (hereinafter IONOS). When you visit our website, IONOS records various log files including your IP address. Details can be found in the IONOS privacy policy: https://www.ionos.de/terms-gtc/terms-privacy.
IONOS is used on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in presenting our website as reliably as possible. We have concluded a data processing agreement with IONOS.
We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. Please note that data transmission over the internet (e.g. when communicating by email) can have security gaps. Complete protection of data against access by third parties is not possible.
The controller responsible for data processing on this website is:
Training Base Weeze GmbH & Co. KG
Flughafen-Ring 16
47652 Weeze
Germany
Phone: +49 160 975354039
Email: datenschutzbeauftragter@tb-weeze.de
The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.
We have appointed a data protection officer:
Mr Thorsten Damm
c/o Verband Holz+ Kunststoff
Bierstadter Straße 39
65189 Wiesbaden
Germany
Phone: +49 611 17360
Email: datenschutzbeauftragter@vhk.de
Unless a more specific storage period is stated in this privacy policy, your personal data remains with us until the purpose for processing no longer applies. If you make a justified request for deletion or withdraw your consent, your data will be deleted unless we have other legally permissible reasons for storing it (e.g. retention periods under tax or commercial law); in the latter case, the data will be deleted once these reasons no longer apply.
If you have consented to data processing, we process your data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR if special categories of data under Art. 9(1) GDPR are processed. In the case of explicit consent to the transfer of personal data to third countries, processing is also based on Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or to access to information on your device, processing is additionally based on Section 25(1) TDDDG (German Telecommunications Digital Services Data Protection Act). Consent can be withdrawn at any time. If your data is required to perform a contract or to take pre-contractual steps, we process it on the basis of Art. 6(1)(b) GDPR. To comply with a legal obligation, we process data on the basis of Art. 6(1)(c) GDPR. Processing may also be based on our legitimate interest under Art. 6(1)(f) GDPR. The following sections state the legal basis that applies in each case.
We only pass personal data on to external bodies if this is necessary to perform a contract, if we are legally obliged to do so (e.g. disclosure to tax authorities), if we have a legitimate interest under Art. 6(1)(f) GDPR in the disclosure, or if another legal basis permits it. When using processors, we only pass on personal data on the basis of a valid data processing agreement.
Many processing operations are only possible with your express consent. You can withdraw consent you have already given at any time, on this website for example via the link “Cookie settings” at the bottom of every page. The lawfulness of the processing carried out before the withdrawal remains unaffected.
If data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data; this also applies to profiling based on these provisions. If you object, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims (objection under Art. 21(1) GDPR).
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing; this also applies to profiling insofar as it is related to such direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (objection under Art. 21(2) GDPR).
In the event of breaches of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work or place of the alleged infringement. This right is without prejudice to any other administrative or judicial remedies.
You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer to another controller, this will only be done where technically feasible.
Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of the processing and, where applicable, a right to correction or deletion of this data.
You have the right to request the restriction of the processing of your personal data. This right exists in particular:
if you dispute the accuracy of the data we have stored, for the duration of our review,
if the processing was or is unlawful and you request restriction instead of deletion,
if we no longer need your data but you need it to exercise, defend or assert legal claims,
if you have lodged an objection under Art. 21(1) GDPR, as long as it has not yet been determined whose interests prevail.
Apart from being stored, restricted data may only be processed with your consent, for the establishment, exercise or defence of legal claims, to protect the rights of another person or for reasons of important public interest.
For security reasons and to protect the transmission of confidential content such as inquiries, applications or orders, this site uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in the address bar and the lock symbol in your browser.
Our website uses cookies and your browser's local storage. Only the following are technically necessary and set without consent:
a session cookie and a security cookie (protecting the forms against misuse, CSRF), which expire after 2 hours of inactivity,
the cookie “cc_cookie”, which stores your choice in the cookie banner (storage period 6 months),
the contents of your shopping cart in your browser's local storage, as soon as you add something to the cart.
The legal basis is Section 25(2) no. 2 TDDDG, because this storage is strictly necessary for the service you requested, and Art. 6(1)(f) GDPR; our legitimate interest lies in providing the website securely and without technical errors. For storing your consent, Art. 6(1)(c) GDPR is an additional legal basis, as we must be able to demonstrate consent.
All other services (visitor statistics with Matomo, videos from Vimeo) are only loaded after your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG).
We obtain your consent via a cookie banner that we run ourselves on our server (open-source software “CookieConsent”). No data is transferred to third parties. You can change or withdraw your choice at any time via the link “Cookie settings” at the bottom of every page.
The fonts used on this website are hosted locally on our server. No connection to third-party servers (e.g. Google Fonts) is made when the page loads.
The provider of the pages automatically collects and stores information in so-called server log files, which your browser transmits automatically. These are:
browser type and version
operating system used
referrer URL
host name of the accessing computer
time of the server request
IP address
This data is not merged with other data sources. It is collected on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in the technically error-free presentation and the security of our website.
If you send us a message via the contact form or the inquiry form for trainings and seminars (including “Register interest”), we process your details, including your contact data, to handle the inquiry and any follow-up questions. Your details are stored in our content management system and forwarded by email to the responsible contact persons at our company. You receive a confirmation by email. We do not pass this data on to third parties without your consent.
Processing is based on Art. 6(1)(b) GDPR if your inquiry is related to the performance of a contract or is necessary to take pre-contractual steps. In all other cases, processing is based on our legitimate interest in handling the inquiries sent to us effectively (Art. 6(1)(f) GDPR).
The data remains with us until you ask us to delete it or the purpose for storing it no longer applies (e.g. after your inquiry has been dealt with). Mandatory statutory provisions, in particular retention periods, remain unaffected.
If you contact us by email or phone, your inquiry including all resulting personal data will be stored and processed by us for the purpose of handling it. The legal basis is Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR. The storage period is the same as for the contact form.
If you book a seminar or place an order in the shop via our website, we process the data required for this (e.g. name, organisation, address, email address, phone number, participants, chosen payment method) to perform the contract. The legal basis is Art. 6(1)(b) GDPR. You receive a confirmation by email.
We only pass your data on to third parties insofar as this is necessary to perform the contract, for example to the shipping company commissioned with the delivery or to the bank commissioned with processing the payment. We keep invoice and contract data for the duration of the retention periods under commercial and tax law (up to 10 years) (Art. 6(1)(c) GDPR).
We send confirmations and notifications from the forms, bookings and orders via the service Amazon Simple Email Service (SES). The provider is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg (hereinafter AWS). The emails are sent via servers in Frankfurt am Main, Germany. AWS processes the email addresses of sender and recipient and the content of the email.
The service is used on the basis of Art. 6(1)(b) GDPR insofar as the email serves to handle your inquiry or a contract, and otherwise on the basis of our legitimate interest in reliable email delivery (Art. 6(1)(f) GDPR). We have concluded a data processing agreement with AWS. A transfer to the USA cannot be ruled out; it is based on the standard contractual clauses of the EU Commission. Amazon.com Inc. is also certified under the EU-US Data Privacy Framework (DPF). Further information: https://aws.amazon.com/privacy/.
With your consent, this website uses the open-source web analytics service Matomo. It lets us see which pages are viewed when and from which region the views come. Log data such as IP address, referrer, browser and operating system is processed. Matomo does not set any cookies on this website.
Matomo is only loaded once you agree to the category “Statistics” in the cookie banner. The legal basis is your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw your consent at any time via “Cookie settings”.
Matomo is not hosted by an external analytics provider but on a server in Germany operated by us or on our behalf. The analytics data is not passed on to third parties.
If you would like to receive our newsletter, we need your email address. We also store the language in which you subscribed. No further data is collected. After subscribing, you receive an email in which you confirm your subscription (double opt-in). Only then are you added to the mailing list. The time and IP address of the subscription and the confirmation are logged so that we can prove the subscription.
We use Brevo to send the newsletter. The provider is Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany. The data you enter is stored on the servers of Sendinblue GmbH in the EU. We have concluded a data processing agreement with Brevo.
Brevo enables us to analyse our newsletters, for example whether a newsletter was opened and which links were clicked. If you do not want this analysis, you have to unsubscribe from the newsletter. Every newsletter contains an unsubscribe link for this purpose.
Processing is based on your consent (Art. 6(1)(a) GDPR). You can withdraw this consent at any time. The lawfulness of the processing already carried out remains unaffected by the withdrawal.
Your data is stored until you unsubscribe and is then deleted from the mailing list. After unsubscribing, your email address may be stored in a blocklist if this is necessary to prevent future mailings (Art. 6(1)(f) GDPR). The blocklist data is only used for this purpose. For more details, see Brevo's privacy policy: https://www.brevo.com/legal/privacypolicy/.
On some pages we embed videos from the video portal Vimeo. The provider is Vimeo.com, Inc., 330 West 34th Street, 5th Floor, New York, New York 10001, USA.
The videos are only loaded when you click on the video and agree to loading it, or when you have agreed to the category “External media” in the cookie banner. Only then is a connection to Vimeo's servers established. Vimeo receives your IP address and the information which of our pages you visited, even if you do not have a Vimeo account. Vimeo may use cookies or comparable recognition technologies. If you are logged in to your Vimeo account, Vimeo can assign your browsing behaviour to your profile.
The legal basis is your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG; it can be withdrawn at any time via “Cookie settings”. The data transfer to the USA is based on the standard contractual clauses of the EU Commission. The company is certified under the EU-US Data Privacy Framework (DPF): https://www.dataprivacyframework.gov/participant/5711. Further information: https://vimeo.com/privacy.
On our website we link to our profiles on Facebook, Instagram, LinkedIn, YouTube and X. These are simple links; no data is transferred to these networks when you visit our website. Only when you follow a link do the privacy policies of the respective provider apply.
We protect our forms against automated entries with an invisible check field and a limit on requests per IP address. We do not use any third-party services for this.
You can apply to us, for example by email, by post or via the application form on our website. We process the personal data associated with your application (e.g. contact data, application documents, notes from interviews) insofar as this is necessary to decide on establishing an employment relationship. The legal basis is Section 26 BDSG (German Federal Data Protection Act, initiation of an employment relationship), Art. 6(1)(b) GDPR (general initiation of a contract) and, if you have given consent, Art. 6(1)(a) GDPR. Consent can be withdrawn at any time.
Applications via the form are stored in our content management system and sent with the uploaded documents by email to the department responsible for applications at our company. Within our company, only persons involved in processing your application have access.
If your application is successful, your data will be stored on the basis of Section 26 BDSG and Art. 6(1)(b) GDPR for the purpose of the employment relationship.
If we cannot offer you a position, you decline an offer or withdraw your application, we keep your data on the basis of our legitimate interest (Art. 6(1)(f) GDPR) for up to 6 months after the end of the application process. The data is then deleted and physical documents are destroyed. The retention serves in particular as evidence in the event of a legal dispute. If it is foreseeable that the data will be needed beyond this (e.g. because of an impending or pending legal dispute), it will only be deleted once this purpose no longer applies. Longer retention is also possible if you have given consent (Art. 6(1)(a) GDPR) or if statutory retention obligations prevent deletion.
Last updated: October 2026