- Fully automatic coffee machines
- Portafilter machines
- Filter coffee machines
Data protection overview
Use of our online shops
1. Creation of a user account
When you register for a WMF Professional Coffee Machines online shop customer account, you create a personal customer account. Registration is possible as part of an order or at any time independently of a purchase.
A) Scope of processing
When you register for a customer account, we collect and process the following data:
Salutation (optional)
First name and surname
E-mail address
Password (encrypted)
After completing registration, you can enter billing and delivery addresses for order transactions and view past orders in the online shop.
B) Purpose of processing
This data is processed in order to:
Enable you to manage your orders
Offer you faster and simpler order processing
Grant you access to your order history.
C) Legal basis of the processing
Legal basis here is section 6(1)(1)(b) GDPR for the fulfilment of a contractual relationship or for the implementation of pre-contractual measures.
D) Storage period
Your personal data will be stored for the duration of your customer account. After deletion of the account, your data will be stored in accordance with the statutory retention obligations or deleted immediately, provided there are no legal obligations.
Irrespective of this, we are required under commercial and tax law to store your data for a period of up to ten years.
E) Recipients of the data
The recipients of the data are our web agencies and our web hosting service providers who work for us as part of order processing. Your data may also be passed on to third parties if this is necessary to fulfil the contract (e.g. shipping service providers, payment providers) or if there is a legal obligation to do so.
F) Cancellation
You can change your stored data within the customer account yourself. You can also delete the account with effect for the future and thus prevent further data processing. This relates exclusively to your account for the online shop. The storage of past orders in our systems due to tax law requirements remains unaffected by this.
2. Ordering products
If you wish to order goods from our online shop, a contract can only be concluded with us if you provide the personal data we require for the purpose of processing your order.
A) Scope of processing
Mandatory information is labelled as such; all other information is voluntary. The processed data categories are contact data, company data, customer data, personal data, order data, delivery data, invoice data and payment data.
B) Purpose of the processing
We will process data you have provided for processing contract initiation, orders and order processing.
C) Legal basis for processing
The processing of your data is carried out in accordance with section 6(1)(1)(b) GDPR for the fulfilment of a contractual relationship or for the implementation of pre-contractual measures.
D) Storage period
Your data will be processed for as long as is required for the existing customer relationship. Irrespective of this, we are required under commercial and tax law to store your data for a period of up to ten years.
3. Payment
If you select payment type “Credit Card” or "Paypal", your payment information will be processed. For this purpose, we are transmitting your data to our payment service provider Adyen.
Payment processing follows the highest security requirements. All data is transmitted encrypted up to 256 Bit SSL and thereby protected from unauthorised access by third parties. We will process your payment information for the purpose of payment processing.
In cooperation with Adyen (Adyen N.V., Simon Carmiggeltstraat 6-50, 1011 DJ in Amsterdam; Netherlands), the payment is processed with the selected payment method. Adyen acts as the responsible party. Payment service provider Adyen hereby checks the creditworthiness and handles the financial processing of the order. We hereby transmit the following data to Adyen:identity data, address data, contact data, payment information, IP address.
For details on the processing of your personal data by Adyen, please refer to Adyen's privacy policy.
4. Delivery
We are transmitting your personal data and delivery data to the transport service provider to process your order and deliver your order. Legal basis here is section 6(1)(1)(b) GDPR.
The transport service provider is the responsible party for processing within the framework of the delivery.