Germany | Austria
Customer Inquiry

Privacy Policy

Last updated: 16 September 2026

We are pleased that you are visiting our website. Protecting your personal data is an important concern for us. Below, we inform you about which data is processed when you visit our website and for what purpose.

Controller within the meaning of the GDPR:
wilkon e.K.
Owner: Markus Endres
Ulmenstraße 52d
90443 Nürnberg, Germany
Phone: +49 911 6004458-0
E-mail: info@wilkon.de

Our data protection officer:
You can reach our data protection officer at:
Sven Lenz
Deutsche Datenschutzkanzlei
Bahnhofstraße 50
87435 Kempten
Germany

E-mail: lenz@deutsche-datenschutzkanzlei.de

You can also contact us directly on data protection matters: datenschutz@wilkon.de

Legal bases for processing:
We process personal data only on the basis of the applicable data protection laws. Depending on the processing, we rely on one of the following legal bases:

  • your consent (Art. 6 (1) (a) GDPR)
  • performance of a contract or pre-contractual measures (Art. 6 (1) (b) GDPR)
  • compliance with a legal obligation (Art. 6 (1) (c) GDPR)
  • protection of our legitimate interests, provided your interests do not override them (Art. 6 (1) (f) GDPR)

Accessing our website (server log files)
When our website is accessed, the web server automatically records information that your browser transmits. This is:

  • the page accessed and the date/time of access
  • the volume of data transferred and a message about successful retrieval
  • the browser type used and its version
  • the operating system and the requesting IP address
  • where applicable, the previously visited page (referrer)

This data is technically necessary in order to display the website to you, to ensure its stability and security and to fend off attacks. The legal basis is our legitimate interest in a secure and functional online offering (Art. 6 (1) (f) GDPR). The access logs are deleted automatically after four weeks at the latest, error logs after ten weeks at the latest, unless they are required to investigate a security-related incident.

Hosting and processing on our behalf
Our website is operated on our own servers, located in a data centre in Germany. The technical operation of these servers is carried out on our behalf by wilkon Systems GmbH & Co. KG, Ulmenstraße 52d, 90443 Nürnberg, Germany. It processes the data arising in this context — in particular the access data described above — exclusively on our behalf and according to our instructions. We have concluded a contract on processing on our behalf with the company in accordance with Art. 28 GDPR. The legal basis is Art. 6 (1) (f) GDPR (provision of a secure online offering). We do not otherwise pass on your data to third parties. A transfer only takes place where you have consented, where we are legally obliged to do so, or where it is necessary to enforce our rights.
Cookies and local storage
We only use technically necessary cookies and comparable storage technologies. These are required for the operation of the website, which is why no consent is needed for them (§ 25 (2) TDDDG). We therefore do not need a cookie banner. In detail:
  • pll_language — a cookie of the multilingual function that stores the language you selected. It is set only for the duration of your visit and is deleted automatically when you close your browser.
  • Session storage for YouTube videos — short-term storage in your browser for your decision to load videos (see below). This also ends with your visit.
  • plausible_ignore — is only set if you actively object to reach measurement, and remains in place until you delete your website data.
We do not set any other cookies. We do not use marketing or tracking cookies.
Contact and inquiry form
You can use our inquiry form to request a quotation for our services. In doing so, we process the details you enter:
  • Details about your company: company name, address, postcode, town and country
  • Details about the property: name, address, postcode, town and country
  • Your contact details: name, telephone number and e-mail address
  • Details about your inquiry: the scope of services required and your comments
Personal data in this context are in particular your name, telephone number and e-mail address; the remaining details relate mainly to your company. The transmission is encrypted. The legal basis is Art. 6 (1) (b) GDPR where your inquiry serves the initiation or performance of a contract, otherwise our legitimate interest in responding to your inquiry (Art. 6 (1) (f) GDPR). If you write to us directly by e-mail, we process the details you provide on the same basis. Your inquiry is delivered to us by e-mail and handled there. Only a technical copy of the sending process remains on the web server; it is deleted automatically after 14 days and serves solely to trace an inquiry that failed to arrive. We retain the inquiry itself for as long as is necessary to handle it, and beyond that within the retention periods under commercial and tax law (in particular § 257 HGB, § 147 AO).
Reach measurement with Plausible For reach measurement we use Plausible Analytics, which we operate ourselves on our own server within the EU. No data is passed on to third parties.

Plausible works without cookies. Your IP address and browser identifier are combined with a random value that changes daily to form an irreversible identifier, which merely distinguishes page views within a single day; the IP address itself is not stored. Recognition beyond that day or across several websites is not possible. The pseudonymised identifier is processed for the duration of one day. The daily rotating salt is deleted at the end of each day. The remaining anonymised statistical data may be stored indefinitely.
The legal basis is our legitimate interest in a data-minimising analysis to improve our offering (Art. 6 (1) (f) GDPR). You can object at any time (see “Right to object”) or deactivate the measurement for this browser directly here — your decision is stored locally in your browser for this purpose.

Embedding of YouTube videos
On individual pages we embed videos from the YouTube platform. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The videos are not loaded automatically. Instead, you first see a preview with a notice. Only when you actively start the video by clicking on it is a connection established to YouTube’s servers and the video loaded. In the process, personal data (in particular your IP address) may be transmitted to YouTube. A transfer to the USA may take place; Google is certified under the EU-US Data Privacy Framework, for which an adequacy decision by the EU Commission exists.

The legal basis is your consent, which you grant by actively starting the video (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). Your decision is stored only for the duration of your visit in the browser (session storage); you can revoke it at any time by clicking on Revoke consent directly under a video. You can find details of the data processing by Google at: https://policies.google.com/privacy

Fonts
We use exclusively fonts that are stored locally on our own server. When the website is accessed, no connection is established to third-party servers (such as Google Fonts); no personal data is transmitted to third parties for this purpose.
SSL/TLS encryption
For security reasons, this website uses transport encryption (SSL/TLS). You can recognise an encrypted connection by the padlock symbol in your browser’s address bar and by the address beginning with “https://”.

Your rights as a data subject
Within the framework of the statutory requirements, you have the right at any time to:

  • information about your processed data (Art. 15 GDPR)
  • rectification of inaccurate data (Art. 16 GDPR)
  • erasure of your data (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • objection to the processing (Art. 21 GDPR)

You can revoke any consent you have given at any time with effect for the future. The lawfulness of the processing carried out up to the revocation remains unaffected. To exercise your rights, a message to the following address is sufficient: datenschutz@wilkon.de

Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data. For this purpose, you can contact the supervisory authority of your habitual residence, your place of work or the place of the alleged infringement (Art. 77 GDPR). The supervisory authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 27
91522 Ansbach, Germany
https://www.lda.bayern.de

Protection of Minors
Persons under the age of 16 may not provide us with personal data without the consent of their parent or legal guardian. Persons under the age of 16 may only provide us with personal information if they have the explicit consent of their parent or legal guardian. Such data will be processed in accordance with this Privacy Policy.

Right to object
Where we process your data on the basis of our legitimate interests (Art. 6 (1) (f) GDPR), you have the right to object at any time, on grounds relating to your particular situation, to that processing (Art. 21 GDPR). We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. An informal message to datenschutz@wilkon.de is sufficient.

Validity and amendment of this privacy policy
As our website develops further or due to changed legal requirements, it may become necessary to amend this policy. You will always find the current version on this page.

Your Inquiry

Night Audit / Front Office Services

How can we reach you?

Hotel location details

Company details:

(only if different from the hotel)

Please tell us which service you need:

By submitting this form, the details you provide will be processed by wilkon e.K. for the sole purpose of handling your enquiry. Your data will be processed strictly for that purpose. For more information on how we process your data, please see our privacy notice.