Privacy Policy
Information on the processing of personal data on the website of interwayz GmbH in accordance with the General Data Protection Regulation (GDPR).
1. Controller
Hermann-Ritter-Straße 112
28197 Bremen
Germany
Email: info@interwayz.de
2. General Information
We process personal data only in accordance with applicable data protection law, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), the Telecommunications Digital Services Data Protection Act (TDDDG) and the Digital Services Act (DDG). Our website does not use analytics or advertising services or external form services. We only set cookies when you log in to the customer portal (section 8).
3. Hosting and Server Log Files
Our website is hosted by Render Services, Inc., 525 Brannan Street, Suite 300, San Francisco, CA 94107, USA (Render). When you visit the website, technical data transmitted by your browser is processed automatically: IP address, date and time of access, page requested, browser type and operating system, referrer URL and access status. This data is required to deliver the website and keep it secure.
The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure and stable operation of the website. We have concluded a data processing agreement with Render (Art. 28 GDPR). Render is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR); the EU Standard Contractual Clauses apply in addition. Log files are kept only as long as necessary for operation and security.
4. Delivery and Protection of the Website (Cloudflare)
For name resolution (DNS), fast delivery and protection against attacks we use Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (Cloudflare). All requests to our website pass through Cloudflare's servers, which process the technical data listed in section 3, including your IP address.
The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure and reliable provision of the website. Cloudflare is certified under the EU-U.S. Data Privacy Framework; the EU Standard Contractual Clauses apply in addition. More information: cloudflare.com/privacypolicy.
Our customer portal (portal.interwayz.de) also runs on Cloudflare; stored portal data is kept in the EU. We have concluded a data processing agreement with Cloudflare (Art. 28 GDPR).
5. Fonts
The fonts used on this website are hosted on our own server. No connection to Google Fonts or other font providers is made when the page loads.
6. Storage in Your Browser
Without logging in, we do not set cookies. On the home page your browser only notes for the duration of the session that the opening animation has already been shown (session storage, entry “iw-auftakt”), so that it does not run again on every visit. The entry contains no personal data and is deleted when you close the browser.
On your first visit we show a short cookie notice at the bottom of the page. If you click “Got it”, your browser permanently stores that the notice should not appear again (local storage, entry “iw-cookie-hinweis”). The entry contains no personal data and is not transmitted to us; you can delete it at any time in your browser settings.
For the cookies of the customer portal, see section 8.
7. Contact by Email and Email Drafts
The enquiry form on our contact page and some buttons (for example "Request account", "Apply", "Request" or "Place order") simply open a pre-filled email draft in your own email program. Our website does not store the content of the email; you decide whether to send it and what it contains. In the customer portal we only note that such a button was clicked (section 10).
If you send us an email, we process your details to handle your request. The legal basis is Art. 6(1)(b) GDPR where a contract or its preparation is concerned, otherwise Art. 6(1)(f) GDPR. Our mailboxes are operated by Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, as a processor within Microsoft 365. We delete the data once it is no longer needed for the purpose and no statutory retention obligations apply.
8. Customer Portal: Account and Login
Business customers can register for our customer portal. For this we process your name, business email address, telephone and company in order to review the registration and assign your account to your company. If you are already known to us as a contact, we take these details from our customer records. If several people use the same email address, we assign searches and quotations to the person selected. We inform you about the registration and activation by email. If we decline a registration, we delete it immediately; incomplete registrations are deleted after 7 days.
For activated accounts we also store the status of the access and the time of the last login. Changes to accounts are logged for traceability.
Login (password, verification codes) is handled by Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, as a processor with storage in Europe. We do not receive your password. We also send our emails via Microsoft (section 7).
The legal basis is Art. 6(1)(b) GDPR (performance or preparation of the business relationship). We delete an account when access is no longer needed or when you request deletion.
After login we set a session cookie ("__Host-iw_sitzung") that keeps you logged in for up to 12 hours of inactivity, and during the login process a cookie ("__Host-iw_login") for at most 10 minutes to protect it. Both cookies are technically necessary (Section 25(2) no. 2 TDDDG), contain no advertising or analytics identifiers and are only set when you log in. No further data is stored in the process.
9. Customer Portal: Orders, Prices and Quotations
Logged-in customers see the orders of their company. The data comes from our order system, which a provider based in Germany with servers in Germany operates for us as a processor (Art. 28 GDPR). The legal basis is Art. 6(1)(b) GDPR.
If you create a quotation in the portal, we store it with your details and your name; it is visible to your colleagues at the same company. The legal basis is Art. 6(1)(b) GDPR; we keep quotations in accordance with statutory retention obligations (Section 257 HGB, up to six years).
To protect against misuse, we evaluate how many queries an account makes within 24 hours (Art. 6(1)(f) GDPR).
10. Searches on the “Our network” page
We store searches by logged-in customers on the “Our network” page together with the result and your account in order to plan our services. We do not store your IP address.
The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is aligning our services with demand. Entries are deleted automatically after 24 months.
11. Job Applications
We accept applications by email to info@interwayz.de. We process your application data (name, contact details, cover letter, CV and any certificates) solely for the application process. The legal basis is Art. 6(1)(b) GDPR in conjunction with Section 26 BDSG.
If no employment relationship results, we delete your documents no later than six months after the end of the process, unless you have consented to longer storage.
12. Google Maps
On the "About us" and "Contact" pages you can display a map from Google Maps (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The map is only loaded when you click "Load map". Only then is a connection to Google's servers established and, among other things, your IP address transmitted to Google; this may involve a transfer to the USA. Google is certified under the EU-U.S. Data Privacy Framework.
The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw at any time with effect for the future by reloading the page. Google's privacy policy: policies.google.com/privacy.
13. Your Rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw any consent given at any time with effect for the future (Art. 7(3)).
To exercise your rights, simply send an email to info@interwayz.de.
14. Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of the Free Hanseatic City of Bremen.
15. Data Security
We apply technical and organisational security measures in accordance with Art. 32 GDPR. The website is delivered exclusively over encrypted HTTPS connections.
Last updated: October 2026