Data Privacy Information and information about cookies


This data protection statement of wh-p GmbH Beratende Ingenieure, Curiestr. 2, 70563 Stuttgart, Germany, informs you about the processing of your personal data within our online offer at


I. Responsible body and data protection officer

1. This data protection information applies to data processing by:

wh-p GmbH Beratende Ingenieure
represented by the Managing Directors Dipl.-Ing. Karsten Held and Dipl.-Ing. Martin Stumpf
Curiestr. 2
70563 Stuttgart, Germany
Phone: +49 711 9788 40
Fax: +49 711 9788 419

2. Contact details of the company data protection officer:

wh-p GmbH Beratende Ingenieure
Curiestr. 2
70563 Stuttgart, Germany


II. Information on the processing of personal data

1. Terms and definitions

(1) The terms used, such as "personal data", "processing" or "data controller" correspond to the definitions in Art. 4 of the General Data Protection Regulation (GDPR). If you visit or use our online offer, you are an "affected person" as defined by the data protection regulations.

(2) "Personal data" means any information relating to an identified or identifiable natural person (hereinafter referred to as "affected person"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by assignment to an identifier such as a name, an identification number, location data, an online identifier (e.g. cookie) or to one or more special features which express the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.

(3) “Processing" means any operation carried out with or without the aid of automated procedures or any such series of operations relating to personal data, such as the collection, recording, organisation, arrangement, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or any other form of provision, alignment or linking, restriction, erasure or destruction.

(4) "Data controller" is the natural or legal person, authority, institution or other body which alone or together with others decides on the purposes and means of the processing of personal data.

2. Types of data and processing purposes

We process user-related data (e.g., names, addresses), contact data (e.g., e-mail, telephone numbers), usage data (e.g., visited websites, interest in content, access times) and meta/communication data (e.g., device information, IP addresses) for the purpose of using our online offer (including functions and contents), for contract fulfilment or in the pre-contractual area, for answering contact inquiries and communication with you as a user, for inclusion in our applicant database, for the purpose of security measures as well as for range measurement and marketing purposes.

3. Legal bases on the basis of which we process personal data:

In accordance with Art. 13 GDPR, we inform you about the legal basis of our data processing. Unless otherwise specified, the following shall apply:

Obtaining consent is based on Art. 6 para. 1 item a and Art. 7 GDPR;

the processing of personal data for the fulfilment of our services and the execution of contractual measures as well as the execution of pre-contractual measures, e.g. the answering of inquiries, is based on Art. 6 para. 1 item b GDPR;

the legal basis for the processing of personal data to fulfil our legal obligations is based on Art. 6 para. 1 item c GDPR;

the processing for the protection of our legitimate interests is based on Art. 6 para. 1 item f GDPR.

4. Passing on your personal data to third parties

(1) Insofar as we transfer personal data to third parties within the scope of our processing, disclose it to third parties or grant third parties access to the data, this is done on the basis of a legal permission (e.g. a transfer of the data to payment service providers for contract fulfilment), your consent, a legal obligation incumbent on us or on the basis of our legitimate interests (e.g. when using agents or web hosts).

(2) If we commission third parties with the processing of data on the basis of a so-called "order processing contract", this is done on the basis of Art. 28 GDPR.

5. Transfers of personal data to third countries

If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this takes place within the scope of the use of third-party services or the disclosure or transfer of data to third parties, we will only disclose the data in a third country if the special requirements of Art. 44 et seq. GDPR are complied with. This means, for example, processing is carried out on the basis of special guarantees, such as the officially recognised determination of a data protection level corresponding to the EU (e.g. for the USA by the "Privacy Shield") or compliance with officially recognised special contractual obligations (so-called "standard contractual clauses").

6. What rights do you have as the affected person?

(1) You have the right:

  • to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data, if this has not been collected by us, and the existence of automated decision-making including profiling and, if applicable, significant information on its details;
  • in accordance with Art. 16 GDPR, to demand without delay the correction of incorrect, or the completion of personal data stored by us;
  • to request the deletion of your personal data stored with us in accordance with Art. 17 GDPR, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
  • in accordance with Art. 18 GDPR, to restrict the processing of your personal data if you dispute the accuracy of the data, if the processing is unlawful but you reject the option to delete the data and we no longer need the data, but if you need it to assert, exercise or defend legal claims or if you have filed an objection to the processing in accordance with Art. 21 GDPR;
  • in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, current and machine-readable format or to request its transfer to another person responsible;
  • in accordance with Art. 7 para. 3 GDPR, to revoke your consent to us at any time. As a result, we are no longer allowed to continue processing data based on this consent in the future and
  • to complain to a supervisory authority pursuant to Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our head office.

(2) If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 item f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection to direct advertising. In the latter case, you have a general right of objection, which we will implement without specifying a particular situation. If you would like to make use of your right of revocation or objection, simply send an e-mail to

7. Deletion of data

The data processed by us will be deleted or its processing restricted in accordance with Art. 17 and 18 GDPR. Unless otherwise stated, the data stored by us will be deleted as soon as it is no longer required for its intended purpose and there are no legal storage obligations to prevent deletion. If the data is not deleted because it is necessary for other and legally permissible purposes, its processing is restricted, e.g. by blocking.

8. Establishing contact

If you contact us (e.g. by e-mail, telephone or via social media), your details will be processed in accordance with Art. 6 para. 1 item b) or item f) GDPR. We will store your details for the duration of communication with you until your enquiry has been answered. We delete your request and personal data if they are no longer necessary. We only deviate from this if another legal basis of Art 6 GDPR exists (e.g. your consent for further use).

9. Log files

Every time you visit our website, our system does not record any log files.

10. E-mail contact

(1) It is possible to contact us electronically via the e-mail address provided. In this case, the user's personal data transmitted by e-mail will be stored. In this context, the data will not be passed on to third parties. The data will only be used to process the communication with you or for application purposes.

(2) The legal basis for the processing of data transmitted by sending an e-mail is Art. 6 para. 1 item f GDPR. If the e-mail contact is intended for the conclusion of a contract, then additional legal basis for the processing is Art. 6 para. 1 item b GDPR.

(3) The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. This is the case when the communication with the user is finished. The communication is terminated when it can be inferred from the circumstances that the facts in question have been finally clarified.

(4) You have the possibility to revoke your consent to the processing of personal data at any time. If you contact us by e-mail, you can object to the storage of your personal data at any time. In such a case, the communication cannot be continued. In this case, please send an e-mail to or contact us by telephone or in writing at the above-mentioned contact details. All personal data stored in the course of contacting us will be deleted in this case.

11. Data processing by host provider Domainfactory

(1) Our website  is hosted by the Internet provider Domainfactory. Their data protection regulations are available at

(2) The hosting services used by us serve the operation of this online offer and thus the provision of the following services: Computing capacity, storage space, database services, technical security and maintenance.

(3) In doing so we, or our host provider as our contract processor, process user-related data, contact data, content data, usage data, meta and communication data of visitors to our online offer on the basis of our legitimate interests in the provision of our online offer pursuant to Art. 6 para. 1 item f GDPR.

(4) Domainfactory also creates server log files. These log the type of browser used to access this website, the pages accessed, the operating system, the host name of the accessing computer (IP address), the time the page was accessed and the referrer URL (referring page). This data cannot be assigned by us to specific persons.

12. COOKIE NOTE: The use of cookies and their prevention

(1) "Cookies" are small files that are stored on the computers of the users of an online offer. Different data can be stored. A cookie is primarily used to store information about a user (or the device on which the cookie is stored) during or after his or her visit to an online offer. Temporary cookies, or "session cookies" or "transient cookies", are cookies that are deleted after a user leaves an online offer and closes their browser. In such a cookie, for example, a login status can be stored.

(2) We use so-called session cookies for our online offer. They serve on the one hand, the user-friendliness of the website (e.g. storage of log-in data), and on the other hand they serve to collect statistical data of the website use and to be able to analyse this for the purpose of improving the offer. They are automatically deleted at the end of your visit. No user-related data is stored in these cookies. A consolidation with any personal data provided by you does not take place.

 (3) The legal basis is Art 6 para. 1 item f GDPR.

(4) If you want to prevent cookies from being stored on your computer, you can deactivate the corresponding option in the system settings of your browser. Stored cookies can be deleted in the system settings of the browser.

(5) A comprehensive objection to the use of cookies used for online marketing purposes may be declared for a large number of services, in particular in the case of tracking, via the US website or the European website In addition, cookies can be stored by deactivating them in the browser settings.

(6) The exclusion of cookies can lead to restrictions on the use of our online offer.

13. Communication via Facebook and Instagram

(1) We maintain online presences within social networks and platforms in order to communicate with interested parties and to inform them about our services. When calling up the respective networks and platforms, the terms and conditions and the data processing principles of the respective operator apply.

(2) Our website contains links to the external social networks Facebook and Instagram. The links on our website are marked with the Facebook or Instagram logo.

(3) So-called social plugins are not used on our site, i.e. unless you explicitly follow the corresponding links, no data will be transferred to Facebook or Instagram.

(4) If you follow these links, your browser will connect to the appropriate social network. Data, e.g. your IP address, is transmitted so that the visit to our site can be assigned to your possibly existing user account of the social network. You can prevent this assignment by previously logging out of your Facebook or Instagram account by clicking on the link.

(5) The purpose and scope of data collection and processing by Facebook or Instagram and also your rights and setting options for the protection of your privacy can be found in the data privacy information of the respective provider.

(6) We process your data only in the context of communication with you on social networks and platforms.

14. Google Maps

This website uses the Google Maps API, a map service of Google Inc. "("Google"), to display an interactive map. By using Google Maps, information about your use of this website (including your IP address) may be transmitted to and stored by Google on servers in the United States. Google may transfer the information obtained to third parties if this is required by law or if third parties process this data on behalf of Google. Google will not associate your IP address with any other data held by Google. Nevertheless, it would be technically possible for Google to identify at least individual users on the basis of the data received. It is possible that personal data and personality profiles of users of the Google website could be processed for other purposes over which we do not have, and cannot have any, influence.

You can easily deactivate the Google Maps service to prevent data transfer to Google: To do this, deactivate JavaScript in your browser.

Further information on terms of use and data protection can be found under:



Status 24 May 2018