GDPR

Last updated: July 2026

Our commitment to the GDPR

Winnen Gesellschaft für Elektro- und Kommunikationstechnik mbH is committed to protecting personal data in accordance with the EU General Data Protection Regulation (GDPR). This page summarises your rights and how to exercise them. It complements our Privacy Policy.

Controller

Your rights as a data subject

• Right of access (Art. 15) — obtain confirmation of whether we process your data and a copy of it.
• Right to rectification (Art. 16) — have inaccurate data corrected.
• Right to erasure (Art. 17) — have your data deleted where legal grounds apply.
• Right to restriction (Art. 18) — restrict processing in certain circumstances.
• Right to data portability (Art. 20) — receive your data in a structured, machine-readable format.
• Right to object (Art. 21) — object to processing based on legitimate interests.
• Right to withdraw consent (Art. 7(3)) — withdraw consent at any time, without affecting prior processing.

How to exercise your rights

To exercise any of these rights, contact us at info@winnen.ai. We will respond within the statutory time frame (generally one month). We may need to verify your identity before acting on a request.

Data processing & hosting

Personal data is processed and stored within Germany / the European Union. Where we engage processors, we conclude data processing agreements in accordance with Art. 28 GDPR. We implement appropriate technical and organisational measures to protect your data.

International transfers

We aim to keep all processing within the EU/EEA. Should any transfer to a third country be necessary, we ensure appropriate safeguards under Chapter V GDPR (e.g. EU Standard Contractual Clauses).

Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen).