Information pursuant to Art. 13, 14 GDPR for the website wrap-kit.de
Liudmyla Ivanivna Osypenko
Sole proprietor (FOP) under Ukrainian law
vul. Patona 9, 79040 Lviv, Ukraine
Email: info@wrap-kit.de
Phone / WhatsApp: +49 176 898 682 69
As we are established outside the EU and our website specifically targets individuals in Germany, we have appointed Prighter Group, together with its local branches, as our representative and your point of contact for the following region:
Prighter provides you with an easy way to exercise your data protection rights (e.g. access to or erasure of your personal data). If you wish to contact us via our representative, Prighter, or exercise your data subject rights, please visit the following website: app.prighter.com/portal/19852986293
We provide you with an easy way to submit data protection requests – for example, to access or erase your personal data. If you wish to exercise your data subject rights, please visit our Trust Center: app.prighter.com/portal/19852986293
You also have the right to lodge a complaint with a competent data protection supervisory authority (Art. 77 GDPR), in particular in the member state of your habitual residence.
When you access this website, our hosting provider automatically collects information transmitted by your browser: IP address, date and time of the request, page accessed, referrer URL, browser type and version, and operating system used. This data is used exclusively for the technical provision and security of the website. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in stable and secure operation).
Hosting provider: HOSTINGER, UAB, Švitrigailos str. 34, LT-03230 Vilnius, Republic of Lithuania.
If you contact us via the contact form, email or WhatsApp, we process the data you provide (e.g. name, email address, phone number, message content, and any uploaded vehicle photos) to handle your request. The legal basis is Art. 6(1)(b) GDPR.
The information you submit via the contact form (name, email address, phone number, vehicle, message and consent details) is stored on our server outside the publicly accessible web directory, in order to process and keep track of your request. The legal basis is Art. 6(1)(b) GDPR.
In addition, we maintain an internal processing register (technically implemented as a Google Sheet) to track the processing status of your request (e.g. "qualified", "quote sent", "order placed"). This register contains only technical identifiers and — provided you have consented to the use of your data for advertising purposes (cookie consent, see Section 6) — your email address and phone number, in order to measure the success of our advertising activities as part of Google Ads Enhanced Conversions (see Section 6.1). Your name and the content of your message are not included in this register.
To prevent automated multiple submissions (spam), we briefly store a hash value of your IP address (not the IP address itself in plain text) together with the time of your request. We also use a randomly generated technical key to detect and prevent the accidental double submission of the same form. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the functional, misuse-free operation of the contact form).
We use WhatsApp Business, a service provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, part of the Meta group of companies (Meta Platforms, Inc., USA), to communicate with customers. When you contact us via WhatsApp, WhatsApp/Meta processes your phone number and the content of your messages; this may involve a transfer of data to the USA, which Meta states is based on the EU-US Data Privacy Framework and, additionally, on EU Standard Contractual Clauses. Further information: whatsapp.com/legal/privacy-policy. Using WhatsApp is voluntary – you can alternatively reach us by email.
Before you are redirected via a WhatsApp button on our website, your browser generates a short, random internal reference code (e.g. "WK-A7F42"), which we store on our server together with the landing page you visited, campaign data (UTM parameters, click IDs) and the status of your cookie consent. Your phone number and the content of your message are not recorded in this process; these remain exclusively with WhatsApp/Meta. The reference code serves solely to allow a later WhatsApp inquiry to be matched to the same advertising click. The legal basis is Art. 6(1)(f) GDPR.
Our business email address is operated via Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, USA). A data processing agreement pursuant to Art. 28 GDPR is in place with Google. Here too, a transfer of data to the USA is possible, based on the Data Privacy Framework or Standard Contractual Clauses.
This website uses cookies and comparable technologies. Technically necessary cookies required for operating the website are used on the basis of Section 25(2) No. 2 TDDDG (German Telecommunications-Digital-Services-Data Protection Act) or Art. 6(1)(f) GDPR.
All other services – in particular the analytics and advertising tools listed below – are, apart from the exception described in section 6.1 regarding so-called Consent Mode, activated only after you have given your express consent. The legal basis is Section 25(1) TDDDG and Art. 6(1)(a) GDPR. You give your consent via our own cookie consent banner built into this website. You may withdraw your consent at any time with effect for the future via the "Cookie Settings" link in the website footer. The lawfulness of processing carried out before withdrawal remains unaffected.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. With your consent, Google sets cookies to measure whether and via which ad you reached our website, and to display interest-based advertising to you where applicable. Data may be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework, and EU Standard Contractual Clauses apply in addition.
Regardless of your consent, our website also transmits a so-called cookieless signal to Google (Consent Mode). Only your IP address, information about your browser or device (user agent), and the URL you visited are transmitted – no cookies are set and no identifiers are used that would allow the data to be linked to you personally. Google uses this anonymised signal solely for the statistical modelling of advertising conversions, for example for visitors who have declined the use of cookies. The legal basis for this is our legitimate interest in reliably measuring the success of our advertising activities (Art. 6(1)(f) GDPR).
If you have consented to the advertising use of your data and have contacted us via the contact form, we additionally transmit your email address and phone number to Google via the "Enhanced Conversions" feature or the Google Ads Data Manager. Google converts this information into one-way hash values (SHA-256) immediately upon transmission, before matching it with existing Google accounts; we are unable to reverse this into plain text. The purpose is to more accurately determine which advertisement led to an inquiry or a subsequent business transaction. The legal basis is Art. 6(1)(a) GDPR (your consent given via the cookie consent banner).
Provider: Google Ireland Limited, address as above. With your consent, we use Google Analytics 4 to analyse the use of our website (e.g. pages visited, time spent, approximate region of origin) in order to improve our offering. IP addresses are shortened by Google Analytics 4 by default and are not stored permanently. Here too, a transfer to Google LLC in the USA is possible, based on the grounds stated above.
We use Microsoft Clarity, a service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA (or Microsoft Ireland Operations Limited for users in the EU), to analyse user behaviour on our website. Clarity creates session recordings and heatmaps showing how visitors interact with the website (clicks, scrolling behaviour, mouse movements). Input in form fields is masked by default and is not captured in plain text.
Processing only takes place if you have given your consent via our cookie banner ("Accept all"). You can withdraw your consent at any time via the "Cookie Settings" link in the footer; from that point on, Clarity will no longer be loaded.
Storage period: Session recordings (playback data) are stored for 30 days. Heatmaps, aggregated click data, and sessions marked as favourites are stored for 9 months. After these periods expire, the data is automatically and irrevocably deleted from the servers.
Microsoft processes Clarity data exclusively on servers in the USA; Microsoft does not currently offer EU data residency for this service. The transfer is based on appropriate safeguards (EU-US Data Privacy Framework or Standard Contractual Clauses). Further information can be found in Microsoft's privacy statement: privacy.microsoft.com/en-us/privacystatement and clarity.microsoft.com/privacy.
Legal basis: Art. 6(1)(a) GDPR (consent).
The fonts used on this website are served locally from our own server. No connection is made to Google servers or other external font providers, so no IP address is transmitted to third parties in this respect.
We store personal data only for as long as necessary for the respective purposes or as required by statutory retention periods (e.g. tax law requirements).
This website uses SSL/TLS encryption, recognisable by the "https://" prefix in your browser's address bar.
We reserve the right to amend this privacy policy in order to adapt it to changes in the legal situation or to changes in our offering and data processing.
Last updated: 11 September 2026