Privacy Policy

Last updated 2026-09-09. This policy informs you under Articles 13 and 14 GDPR about the personal data we process when you visit our websites, contact us or buy a machine.

1. Controller

Controller: Wensday Invest spółka z ograniczoną odpowiedzialnością, trading as Müller Machinery, ul. Święty Marcin 29/8, 61-806 Poznań, Poland, telephone +49 176 30536502, e-mail info@muellermachinery.com.

Data protection officer: not appointed (no legal obligation to appoint one)

2. Websites and hosting

Our websites (muellermachinery.com, .de, .pl, .eu) are hosted by Amazon Web Services (Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg) and delivered through the CloudFront network. Storage region: Frankfurt am Main, Germany (AWS region eu-central-1) for our content management system and the order data stored in it; the pages are delivered through the AWS CloudFront network. When you visit, connection data are processed (IP address, date and time, page requested, browser and operating system, referrer) under Article 6(1)(f) GDPR (secure, stable delivery). Server logs are deleted after 30 days at the latest unless a security incident requires longer retention. A data processing agreement under Article 28 GDPR is in place with AWS. Product data are loaded from our own server api.muellermachinery.com, which receives your IP address (Article 6(1)(f)).

3. Cookies and consent {#cookies}

Our websites use no analytics, advertising or tracking cookies. We do not use Google Analytics or comparable analytics services. Strictly necessary storage (language choice, cart, checkout session) rests on Regulation 5(5) of the Irish ePrivacy Regulations 2011 and Article 6(1)(b) and (f) GDPR. During checkout our payment provider Stripe sets the cookies needed for the payment and fraud prevention (section 7). Consent management: not required, as we use no cookies or services that need consent.

4. Fonts

If our pages load fonts from Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), your IP address is transmitted to Google only after your consent (Article 6(1)(a)); otherwise fallback fonts are loaded from our server. Google is certified under the EU-US Data Privacy Framework.

5. Contact (telephone, e-mail, form, WhatsApp, marketplaces)

When you call, write, use our enquiry form or contact us via a marketplace or WhatsApp, we process the data you provide (name, contact details, content of the enquiry, machine of interest, delivery location) to answer and to prepare a quotation (Article 6(1)(b) and (f)). WhatsApp is operated by WhatsApp Ireland Limited (Meta); metadata may be transferred to Meta Platforms, Inc. in the USA (EU-US Data Privacy Framework). We use WhatsApp only if you write to us there or ask for it.

6. Quotation, contract and delivery

To perform the contract we process name, address, delivery address, contact details, VAT number of traders, contract and payment data, and the machine's serial number and operating hours (Article 6(1)(b)). Enquiries, quotations and contracts are kept in our customer management system. For delivery, name, address and telephone number are passed to the haulier. EU VAT numbers are checked in the European Commission's VIES system (Article 6(1)(c)).

7. Payment

For bank transfers we process the transfer data (Article 6(1)(b)). PayPal payments are handled by PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg; we receive the payment confirmation and the address on file. Card, Apple Pay and Google Pay payments in the online checkout are processed by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland. Stripe receives the payment data directly in its payment form; your full card details never reach our server. Stripe processes data for payment execution and fraud prevention (Article 6(1)(b) and (f)), including through Stripe, Inc. in the USA (EU-US Data Privacy Framework). We receive the confirmation, the payment method and the last four card digits.

7a. Newsletter

If you subscribe to our newsletter we process your e-mail address and the time of subscription on the basis of your consent (Article 6(1)(a) GDPR; Regulation 13 of the ePrivacy Regulations 2011). We use double opt-in: you receive an e-mail with a confirmation link and the newsletter is sent only after you confirm. Subscription, confirmation, IP address and timestamp are logged as proof of consent. Sending provider: Brevo (Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin), processing within the European Union, data processing agreement (Article 28). The provider measures opens and clicks; you can prevent this by disabling image loading in your mail client. You can unsubscribe at any time via the link in every e-mail or by writing to info@muellermachinery.com; withdrawal takes effect for the future.

7b. Customer reviews

Reviews (first name, abbreviated surname, town, text, rating) are published on the basis of your consent (Article 6(1)(a)). To ensure that reviews come from actual buyers we match them against our invoice data (Article 6(1)(f)).

8. Warranty and service

Warranty and service cases are documented (serial number, hours, description, photos, contact details) for the warranty period and statutory retention periods (Article 6(1)(b) and (c)).

9. Recipients and transfers outside the EU

Recipients are the providers named in this policy (hosting, payment, haulage, communication), our accountants and, where required by law, authorities. Transfers to the USA take place only to recipients certified under the EU-US Data Privacy Framework or on the basis of standard contractual clauses (Article 46(2)(c)).

10. Retention

Contract and invoice data are kept for five years from the end of the tax year concerned (Polish tax and accounting law) and, where Irish law requires it, for six years. Enquiries without a contract are deleted no later than twelve months after the last contact. Warranty files are kept until the warranty and limitation periods expire.

11. Your rights

You have the right of access (Article 15), rectification (Article 16), erasure (Article 17), restriction (Article 18), data portability (Article 20) and to object to processing based on Article 6(1)(f) (Article 21). You may withdraw consent at any time with effect for the future by writing to info@muellermachinery.com.

12. Complaint to a supervisory authority

You have the right to lodge a complaint with a supervisory authority (Article 77 GDPR). Our lead supervisory authority is the Prezes Urzędu Ochrony Danych Osobowych (PUODO), ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl. You may also contact the Data Protection Commission, 6 Pembroke Row, Dublin 2, D02 X963, Ireland, dataprotection.ie, or the authority of your country of residence.

13. Changes

We update this policy when our processing or the law changes. The version published at https://www.muellermachinery.com/datenschutz/ applies.