Privacy Policy

1. Controller

JW Tech GmbH
Auf der Ahl 33
65207 Wiesbaden
Germany
Email: contact@jw-tech.eu

2. Hosting and server logs

The shop is hosted on servers of IONOS SE in Germany. When the site is accessed, the server processes technically necessary data including the IP address, time, requested URL, transferred data volume, referrer, browser and operating-system information. Processing is based on our legitimate interest in secure and stable operation under Article 6(1)(f) GDPR. Web-server logs are currently rotated daily and generally retained for up to 14 days unless a security incident requires longer retention.

3. Customer account and registration

For registration and account use, we process master, contact and address data, hashed access credentials, and order and account history. This is necessary for pre-contractual steps and performance of contracts under Article 6(1)(b) GDPR. Required fields are needed for the account, delivery and billing. Optional information can be managed in the account.

4. Orders, payment and delivery

To process orders, we use customer, address, basket, price, tax, payment, shipping and communication data. The legal bases are Articles 6(1)(b) and 6(1)(c) GDPR. Data is disclosed to payment, shipping, IT or professional service providers only where necessary for the contract or legal obligations. Details of online payment providers will be added before they are activated.

5. JTL-Wawi and Shopware

Shopware provides the online shop and checkout. Order and customer data may be transferred to JW Tech's JTL-Wawi system for fulfilment, inventory management, invoicing and stock administration. Processing is based on Article 6(1)(b) GDPR and, for tax and commercial records, Article 6(1)(c) GDPR.

6. Search and AI product assistance

Normal searches are processed against the Shopware catalogue. Only when you deliberately request intelligent product assistance are your question and a limited set of catalogue candidates sent server-side to the AI gateway configured by JW Tech for one-time response processing. Account, payment and exact inventory data are not intentionally included. AI output cannot replace Shopware product facts, prices or availability.

7. Product search by photo

When you voluntarily upload a product image, it is technically validated, re-encoded and sent server-side to the private product matching service. It is used solely to identify similar product numbers. The temporary upload is deleted after the request, is not added to a learning or review library and is not used for training. Do not upload people, identity documents or other unnecessary personal content. The legal basis is the function requested by you under Article 6(1)(b) GDPR.

8. Contact

When you contact us, we process the supplied data to handle your request. Article 6(1)(b) GDPR applies to contractual or pre-contractual enquiries and Article 6(1)(f) GDPR to other enquiries. Data is deleted when the enquiry has been resolved and no statutory retention obligation applies.

9. Electronic withdrawal function

When you use the electronic withdrawal function, we process your name, the contract or order reference supplied, the identified scope of the withdrawal, your electronic contact address and language, together with the date and time of receipt. To limit abuse, the IP address is not stored in plain text but is hashed with a server-side secret as a non-public checking value. Processing is necessary to perform and document the withdrawal under Articles 6(1)(b) and 6(1)(c) GDPR. A storable text receipt is provided immediately and a copy is also sent to the email address supplied. Retention follows the applicable statutory evidence, limitation and record-keeping periods.

10. Retention

Account data is retained until the account is deleted or the purpose ends. Order, invoice and business records are generally retained for six, eight or ten years under commercial and tax law. We otherwise retain data only while claims remain possible or a legal obligation applies.

11. Recipients and international transfers

Recipients are limited to authorised internal teams and necessary hosting, IT, payment, shipping, ERP and professional service providers. Details of future online payment providers will be added before activation. For delivery to the United Kingdom or Switzerland, address and shipping data may be sent to carriers and customs participants there for contract performance. Other transfers outside the EEA take place only with a legal basis and appropriate safeguards.

12. Your rights

Subject to the GDPR, you have rights of access, rectification, erasure, restriction, portability and objection. Consent can be withdrawn for the future at any time. Contractual and statutory record-keeping duties remain unaffected. Send requests to contact@jw-tech.eu.

You may also complain to the Hessian Commissioner for Data Protection and Freedom of Information, Postfach 3163, 65021 Wiesbaden, Germany, email: poststelle@datenschutz.hessen.de.

13. Cookies and local storage

The shop uses technically necessary cookies and local storage for the Shopware session, basket, login, language, security and cookie preferences. They are required for the requested shop functions and are used under Section 25(2) TDDDG and Article 6(1)(b) or (f) GDPR. Non-essential analytics or marketing technologies may be activated only after explicit consent. The JW Tech theme currently includes no advertising or cross-site tracking service. Cookie choices can be reopened through the cookie settings.

14. Security and changes

We use appropriate technical and organisational measures including TLS, access controls and separated server-side credentials. This policy will be updated before new payment, analytics, marketing or other recipients are activated.

Last updated: 26 August 2026. Legal review is required before public sales begin.