Data privacy statement

Thank you for visiting the website of Westfalen AG. We place great importance on the secure and confidential use of your data, particularly under consideration of the currently valid statutory regulations.To meet these requirements, we have implemented technical and organisational measures to ensure compliance with the pertinent regulations.

You can, in principle, visit our websites without providing us with any personal data. To do this, you may need to make the necessary settings in your web browser.The data collected on these websites will be processed only for the stated purposes. Your data will not be provided to third parties unless required to fulfil the specific purpose or you have consented to the forwarding of your data.

Collection and processing of data when visiting the website 

When you visit this website, the following data will be logged and processed automatically in connection with the provision of services: date and time at which the page was viewed, URL viewed, browser used (user agent), success or failure of page view (view status), volume of data sent and received, runtime.

This data is processed for technical reasons to ensure the demand-driven provision of the service and may also be used to generate internal system and usage statistics. This does not, however, involve personally identifiable data. If statistics are created to tailor the website to reflect customer requirements, this will be done on a pseudonymous basis. 

Cookies are used on occasion when you visit this website. Cookies are saved in your browser to improve service quality. The cookies used are “session cookies” that automatically lose their validity at the end of the visit and may be deleted depending on the settings that you have made in your browser.You can prevent the use of cookies in general by making the relevant settings in your browser. This may, however, limit the range of functions offered by the website.

Analysis and statistics

This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”. These are text files placed on your computer that enable the website to analyse how you use the site. The information generated by the cookie about your use of the website will usually be transmitted to and stored by Google on servers in the United States. If IP anonymisation is active on this website, Google will, however, truncate your IP address beforehand within Member States of the European Union or other states that have signed up to the Agreement on the European Economic Area. Only in exceptional cases will the entire IP address first be transferred to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information  to evaluate your use of the website, compile reports on website activity and provide the website operator with other services relating to website and Internet use. The IP address transferred by your browser within the scope of Google Analytics will not be associated with any other data held by Google. You can prevent the storage of cookies by selecting the appropriate settings in your browser software. If you do so, however, please note that it may not be possible for you to use the full scope of this website’s functions. Furthermore, you can prevent Google from collecting and using data generated by the cookie and related to your use of the website (including your IP address) by downloading and installing the browser plug-in available at the following link (

You can prevent information from being recorded by Google Analytics by clicking the following link. This sets an opt-out cookie that prevents your data from being recorded during future visits to this website: Deactivate Google Analytics

You can find more information about the terms of use and data protection at or at Note that the code “anonymizeIp” has been added to Google Analytics on this website to ensure the anonymised entry of IP addresses (referred to as IP masking).

Online job applications

The online job application service of Westfalen AG ( uses a secure, encrypted connection. You can identify the secure connection by the prefix “https://” and the stored SSL certificate. 

As part of the Westfalen online application service, we require the following personal information from you: form of address, first name, last name, place of residence (house number, street, postcode, city, country), telephone number and e-mail address. Depending on the role that is being offered, we may require additional information, such as proof of your qualifications. You can provide this information to us at the relevant point. 

This data is used exclusively during the application procedure for the job vacancy or vacancies for which you have applied. The data is not forwarded to third parties. The applicant data is processed within Westfalen AG and, in some cases, its subsidiaries (depending on the job vacancy) only by persons involved in the application process. If the data that you provide and enter is to be used for other purposes, this requires your specific consent, which is clearly indicated at the relevant points. 

Once the application process is complete, we will delete your data unless storage of said data is required to comply with a statutory retention period.

Please use the online portal to apply for any job vacancies and do not send us your documents by e-mail. E-mail is not generally considered a secure means of communication.

Online shop/contact forms and ordering processes

The online shop of Westfalen AG uses a secure, encrypted connection. You can identify the secure connection by the prefix “https://” and the stored SSL certificate.

The data that you provide, such as your name, customer number, delivery address and e-mail address, is used exclusively to fulfil the business purpose and to process your order at Westfalen AG and its subsidiaries, as applicable. The contact data that you provide is also used to send you up-to-date version of safety data sheets.

Your data is not processed for any purposes that go beyond its use as a means to fulfil the business purpose. If the data that you provide is to be used for other purposes, this requires your specific consent, which is clearly indicated at the relevant points.

The storage period is based on the statutory retention obligations set out in Section 257 of the German Commercial Code and Section 147 of the German Tax Code (6 or 10 years).

Credit check

When you use the online shop, the data required to perform a check of your creditworthiness may be transmitted in accordance with the statutory provisions and under consideration of data protection requirements. For this service, the Westfalen Group uses the external service providers Creditreform Münster Riegel & Riegel KG, Scharnhorststr. 46, 48151 Münster, Germany and Schufa Holding AG, Kormoranweg 5, 65201 Wiesbaden, Germany. 


To subscribe to a newsletter, you need only provide your e-mail address. We will only use the e-mail address provided to send the relevant newsletter so that you can receive the requested information by e-mail on a regular basis.

You can unsubscribe from the requested newsletter again at any time. Information about how to unsubscribe is provided at the end of each e-mail newsletter. 

If the data that you provide and enter is to be used for other purposes, this requires your specific consent, which is clearly indicated at the relevant points.

We will store your data relating to the newsletter subscription until you unsubscribe from the newsletter with future effect.

Information requests

You have the right to receive information about the personal data held by Westfalen AG, how this personal data was collected and its intended use. We will be happy to accommodate such a request for information. In such cases, please send a written request for information to our data protection officer (contact details provided below).

Correction, deletion and objection

We will be happy to correct or delete your personal data upon request, as long as this does not contravene any retention periods stipulated by law. If it is not possible to delete your data, we will lock it instead. 

We will also delete your stored personal data automatically on a regular basis once the purpose for which it was originally saved is no longer applicable and if the deletion does not contravene any retention periods required by law.

Change to these provisions

We reserve the right to change this data privacy statement. A change to the data privacy statement may be required for technical reasons or for reasons relating to data protection law. Please therefore always refer to the currently valid version.

Name and address of the controller

The controller under the General Data Protection Regulation is:

Westfalen AG

Industrieweg 43

48155 Münster, Germany

Tel.: +49 (0)251 695-0


Register Court Münster HRB 186

VAT ID no. DE 12 61 17 135

Contact data of the data protection officer

By post:

Data Protection Officer

Westfalen AG

Industrieweg 43

48155 Münster


By e-mail:

Information under Article 13 GDPR (valid as of 25 May 2018)

Notes on the rights of the data subject

The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and where that is the case, access to the personal data and the information listed in Art. 15 GDPR.

The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her and, if applicable, to have incomplete personal data completed (Art. 16 GDPR).

The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay should one of the reasons listed individually in Art.17 GDPR apply – for example, if the data is no longer required for the intended purpose (right to deletion) – unless required to comply with statutory retention or archiving requirements.

The data subject shall have the right to demand the restriction of processing by the controller if one of the prerequisites set out in Art. 18 GDPR applies – for example, if the data subject has objected to said processing – for the duration of the verification by the controller.

The data subject shall have the right to transmit the personal data concerning him or her, which he or she has provided to a controller, to another controller (Art. 20 GDPR).

The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims (Art. 21 GDPR).

Every data subject shall have the right to lodge a complaint with a supervisory authority. The data subject may assert this right with a supervisory authority in the Member State of his or her habitual residence, place of work or place of the alleged infringement.

Before you contact the competent supervisory authority with a complaint, we ask that you first discuss this matter with our data protection officer.