Data protection

1. Responsible person

DBT Digital Building Technology GmbH & Co. KG

Data Protection Officer
Weseler Straße 539
48163 Münster
E-mail: info@wibutler.com

2. General information on data processing

We take the protection of your personal data very seriously. Personal data is only processed on the website (www2.wibutler.com) and webshop (shop.wibutler.com) insofar as this is necessary to provide our content, to provide our services or to safeguard legitimate interests. If consent is required, we process your data on the basis of Art. 6 para. 1 lit. a GDPR.

3. Website hosting

Our website is hosted by STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin. When you visit the website, STRATO automatically saves server log files (e.g. IP address, time, browser type).

Legal basis: Art. 6 para. 1 lit. f GDPR
Purpose: Provision and safeguarding of web operations
Order processing: There is an AV contract with STRATO

4. Cookies and Consent Tool (Complianz)

Our website uses cookies - for functionality (e.g. language settings) as well as for statistical and marketing purposes. On your first visit, you will be asked for your consent via the consent tool „Complianz“ (Complianz B.V., Netherlands).

Legal basis: Art. 6 para. 1 lit. a GDPR, § 25 para. 1 TDDDG
Revocation: Possible at any time via the „Cookie settings“ button

5. Server log files

When you visit the website, the following data is automatically processed by STRATO:

• IP address
• Date and time of the enquiry
• Browser type and version
• Referrer URL
• Operating system

This data cannot be assigned to specific persons and is not merged with other data sources.

Purpose: Security and functionality of the website
Legal basis: Art. 6 para. 1 lit. f GDPR

6. Data processing in the context of forms

We offer various forms:

a) Request for quotation

• Data: Name, e-mail, telephone if applicable, company, message
• Purpose: Quotation dispatch incl. PDF via Gmail
• Legal basis: Art. 6 para. 1 lit. b GDPR

b) Contact / Support

• Data: Name, e-mail, telephone if applicable, message
• Purpose: Editing
• Legal basis: Art. 6 para. 1 lit. b/f GDPR

c) Event registration

• Data: Name, e-mail, company if applicable, telephone
• Legal basis: Art. 6 para. 1 lit. b GDPR
  

d) Newsletter

• Data: E-mail, name if applicable
• Procedure: After submitting the form, a double opt-in email is sent via CleverReach if the marketing checkbox is activated.
• Legal basis: Art. 6 para. 1 lit. a GDPR

e) Registration and creation of a user account for the Professional Smart Building Cockpit 

• Data: Name, e-mail, company if applicable, telephone, billing address, property address for first property, 
• Purpose: Creation of a user account, creation of an initial property for use,  
• Legal basis: Art. 6 para. 1 lit. b GDPR

In addition, we reserve the right to use other forms for similar purposes (e.g. lead capture at events) for a limited period of time. These are always based on the tools listed above and request the same information.

7. Zapier

Zapier Inc. (USA) is used as middleware. There is no storage by Zapier, only automated forwarding.
Legal basisArt. 6 para. 1 GDPR, protection via standard contractual clauses (Art. 46 GDPR)

8. Gmail

We use Gmail (Google Ireland Ltd.) for automated and semi-automated email communication - for example, to send offers or other relevant information that you request via our forms. The communication may contain personal content and is triggered by the system via Zapier.

9. Google services

• Google Tag Manager
• Google Analytics (with IP anonymisation, browser plug-in opt-out link)
• Google Ads with conversion tracking
• Google Maps & reCAPTCHA
  

Purpose: Web analytics, security, advertising, map display
Legal basisConsent via cookie banner (Art. 6 para. 1 lit. a GDPR)
Third country transferStandard contractual clauses

10. SalesViewer

This website uses SalesViewer® technology from SalesViewer® GmbH to collect and store data for marketing, market research and optimisation purposes on the basis of the website operator's legitimate interests (Art. 6(1)(f) GDPR).

For this purpose, a javascript-based code is used to collect company-related data and the corresponding utilisation. The data collected using this technology is encrypted using a non-reversible one-way function (known as hashing). The data is immediately pseudonymised and is not used to personally identify the visitor to this website.

The data stored within the framework of SalesViewer® will be deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations.

You can object to the collection and storage of data at any time with effect for the future by clicking on this link to prevent SalesViewer® from collecting data on this website in the future. An opt-out cookie for this website will be stored on your device. If you delete your cookies in this browser, you must click on this link again.
We use SalesViewer® from SalesViewer GmbH for the pseudonymised recognition of B2B visitors. The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR. An opt-out cookie is set when you use the opt-out link.

11. Newsletter with CleverReach

Registration takes place via double opt-in. Anonymised opening and click tracking may take place. Your data will not be passed on to other companies. You can revoke your consent at any time.

12. Use of the chatbot

On our website, we offer you the opportunity to get in touch with us via a chatbot.
The chatbot is integrated into our website via a code snippet and provided via the Zapier service (Zapier Inc., 548 Market St. #62411, San Francisco, CA 94104, USA).
Zapier uses a language model from (OpenAI, L.L.C., 3180 18th Street, San Francisco, CA 94110, USA) to process the requests.

The use of the chatbot is voluntary. By opening and using the chat, you accept our privacy policy.
Of course, you can also contact us at any time via other channels.

Purpose and type of data processing

The chatbot is used for technical support (support) and for product and application advice.
Depending on the purpose, the following data may be processed:

• for general support enquiries: only the text messages you have entered,
• For counselling requests: additional personal data entered voluntarily, such as name, e-mail address, telephone number or company.

To improve our service, chat histories are automatically analysed according to keywords and a sentiment score is determined. Profiling or automated decision-making within the meaning of Art. 22 GDPR does not take place.

Legal basis

The processing takes place on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interest).
Our legitimate interest lies in the efficient processing of customer enquiries, technical support and the further development of our range of services.
You decide for yourself whether and what information you share via the chat.

Recipients and data transfer to third countries

Processing is carried out by Zapier and OpenAI, both based in the USA. It cannot be ruled out that data may also be processed on servers outside the European Union.
Standard contractual clauses of the EU Commission pursuant to Art. 46 GDPR are used to secure these transfers. Nevertheless, there is a risk that US authorities may gain access to the transferred data due to national laws.

Data will not be passed on to third parties unless it is necessary to process your enquiry.
In future, automated forwarding to internal systems (e.g. Asana or Gmail) may take place in order to process enquiries efficiently. Here, too, processing will be carried out exclusively for the stated purpose.

Storage duration

The data collected as part of the chat communication is stored for the duration of the communication and then deleted after 30 days at the latest, provided there are no statutory retention obligations or further processing is required.

13. Data processing in the webshop

Our online shop is based on Shopware 6 and we process the following personal data as part of the ordering process:

• Account type (private/business)
• First name, surname
• E-mail address
• Telephone number
• Address (billing and delivery address, if applicable)
  

Customer account

A customer account can be created voluntarily. The data stored there will remain stored until you request its deletion.

Contract processing and disclosure to third parties

In order to fulfil your order, we pass on your data to service providers insofar as this is necessary for the execution of the contract (Art. 6 para. 1 lit. b GDPR). This includes in particular

• Shipping service provider (e.g. DHL)
• Payment service providers (e.g. PayPal, credit card providers)

Depending on the product ordered, the transfer is either automated or manual.

Payment methods

You can pay by invoice, PayPal or credit/debit card. Further data may be processed by the respective payment service provider. For their privacy policies, please refer to the respective provider websites.

Order communication

In the course of order processing, you will receive automated emails (e.g. order and dispatch confirmation) via our system - technically via Gmail.

Tracking

The same tracking concept applies in the shop as on the website. Google Analytics and Google Ads are used. Consent is given in the shop via a separate Shopware cookie banner.

14. Applications

For applications, we process your data (contact details, documents, interview notes) in accordance with § 26 BDSG, Art. 6 para. 1 lit. b and, if applicable, lit. a GDPR. In the event of rejection, we store the data for max. 6 months. With consent to the talent pool max. 2 years.

15. Storage duration

Form data remains in the connected tools until a deletion request is made or the purpose no longer applies. Applicant data: 6 months, talent pool: 2 years. Statistical cookies: according to settings.

16. Rights of data subjects

You have the right to:

• Information, correction, deletion
• Restriction, transferability
• Revocation of consents granted
• Objection (Art. 21 GDPR)
• Complaint to a data protection authority

17. Data security

Our website is SSL-encrypted. We use technical and organisational security measures to protect your data.

18. Amendment of this declaration

This declaration is regularly updated and adapted to legal, technical or organisational changes.

Status: October 2025