1. GENERAL NOTES AND REQUIRED INFORMATION
a. We are pleased that you are visiting our websites/apps and thank you for your interest. We take the protection of your personal data very seriously and inform you in the following about the handling of your personal data when using our website. Personal data is data with which you can be personally identified.
b. The controller for data processing within the meaning of the General Data Protection Regulation (GDPR) is DÖRR GmbH, Messerschmittstr. 1, 89231 Neu-Ulm, Phone 0731-970370, E-mail firstname.lastname@example.org
c. The data contorller has appointed a data protection officer, who can be reached at: Dörr GmbH Datenschutz, Messerschmittstr. 1, 89231 Neu-Ulm, phone 0731-970370, mail email@example.com
2. PROCESSING OF PERSONAL DATA
a. Handling of personal data
Personal data is used exclusively for the purpose of contacting you, establishing a contract, defining the content, implementing or processing the contractual relationship (Art. 6 (1) (b) GDPR).
In addition, personal data will only be processed if we have received your consent to do so (Art. 6 (1) (a) GDPR) or if the processing of the data is necessary for our legitimate interests and if the assessment shows that there are no overriding interests, fundamental rights or freedoms on your part (Art. 6 (1) (f) GDPR).
We may use commissioned processors to process your personal data, but we will not disclose your personal data to third parties.
The data will be passed on to the shipping company commissioned with the delivery only for the fulfilment of the contract, insofar as this is necessary for the delivery of ordered goods. In order to process payments, the payment data required for this purpose will be passed on to the credit institution commissioned with the payment and, if applicable, to the commissioned and selected payment service provider.
Your personal data will be processed exclusively within the EU, unless otherwise stated below.
b. Usage data
When visiting the website, general technical information is collected. This information includes the IP address used, time, duration of the visit, browser type and, if applicable, the page of origin. For technical reasons, this usage data is registered in a log file and can be used and stored for the purpose of statistical analysis of this website. This usage data is not linked to your other personal data.
c. Registration data
Registration is required for the full use of the functions of our website. The registration data is collected through your corresponding entries and used for the specifically stated purpose in accordance with your consent (Art. 6 (1) (a) GDPR).
d. Sessions and cookies
3. DATA SECURITY
a. Our websites use SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the person responsible). You can recognise an encrypted connection by the string “https://” and the lock symbol in your browser bar.
b. All data on our website is secured by technical and organisational measures against loss, destruction, access, modification and distribution.
4. PRESENCE ON SOCIAL MEDIA PLATFORMS
We use the following social media platforms to present our company and for communication (we expressly refer to the data privacy policies and opt-out options linked below).
Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA)
YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland)
Pinterest (Pinterest Europe Ltd. Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland)
These social media platforms may process personal data outside the EU; please refer to the privacy policies of the social media platforms above.
The respective social media platforms may create usage profiles from your usage behaviour and the resulting interests and actions on your part and save cookies on your computer in which your usage behaviour is stored. If you have an account on the respective social media platform and are logged in, your usage behaviour can even be stored independently of the device. Your usage profile can be used, for example, to place advertisements that presumably correspond to your interests.
We process the personal data solely for the purpose of communicating with you via the social media platform you have chosen and for optimising our online presence and ensure that no interests on your part are affected here that outweigh this legitimate interest on our part (Art. 6 (1) (f) GDPR). Insofar as you have already given the respective operator of the social media platform effective consent to the corresponding data processing, the processing of your personal data will also be based on this consent (Art. 6 (1) (a) GDPR).
5. SERVICES OF THIRD-PARTY PROVIDERS
a. Google Analytics
This website uses the service “Google Analytics”, which is offered by Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) to analyse website usage by users. The service uses “cookies”, which are text files that are stored on your device. The information collected by the cookies is usually sent to a Google server in the USA and stored there.
IP anonymisation is used on this website. The IP address of the user is shortened within the member states of the EU and the European Economic Area. This shortening eliminates the personal reference of your IP address. Under the terms of the data processing agreement which the website operators have concluded with Google Inc., the latter uses the information collected to evaluate website use and website activity and provides services associated with internet use.
You have the option of preventing the cookie from being stored on your device by making the appropriate settings in your browser. It is not guaranteed that you will be able to access all functions of this website without restrictions if your browser does not allow cookies.
Furthermore, you can use a browser plug-in to prevent the information collected by cookies (including your IP address) from being sent to and used by Google Inc. The following link will take you to the corresponding plugin: https://tools.google.com/dlpage/gaoptout?hl=de
You can find more information about the use of data by Google Inc. here:
b. Social media links
We have our own social media pages with the third-party providers that can be reached via links from this website. By using the links, you will be directed to the respective websites of the third-party providers (e.g. Facebook, Youtube, Instagram, Pinterest). In order to avoid unnecessary data transfer, we recommend logging out of the respective third-party provider before using a corresponding link, so that usage profiles cannot be created by the third-party provider simply by using the link.
c. Use of YouTube
d. Google Web Fonts
We use so-called web fonts from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) in order to be able to display a uniform font on our website. These are automatically stored in your browser cache when you call up one of our pages in order to enable the desired display. If your browser does not support the web fonts used, a standard font of your computer may be used. Here, no interests of the users are affected which outweigh this technical necessity (Art. 6 (1) (f) GDPR).
Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq
6. YOUR RIGHTS
You can request information from us as to whether we process personal data about you and, if this is the case, you have a right to information about this personal data and to the further information mentioned in Art. 15 GDPR.
b. Right to rectification
You have the right to have inaccurate personal data concerning you corrected and may request that incomplete personal data be completed in accordance with Art. 16 GDPR.
c. Right to erasure
You have the right to request that we delete the personal data relating to you without delay. We are obliged to delete them immediately, in particular if one of the following reasons applies:
- Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
- You withdraw your consent on which the processing of your data was based and there is no other legal basis for the processing.
- Your data has been processed unlawfully.
The right to erasure does not exist insofar as your personal data is required for the assertion, exercise or defence of our legal claims.
d. Right to restriction of processing
You have the right to request us to restrict the processing of your personal data if:
- You dispute the accuracy of the data and we therefore must verify the accuracy,
- The processing is unlawful and you refuse the erasure and demand the restriction of use instead,
- We no longer need the data but you need it to assert, exercise or defend legal claims,
- You have objected to the processing of your data and it has not yet been determined whether our legitimate grounds outweigh your grounds.
e. Right to data portability
You have the right to receive the personal data relating to you that you have provided to us in a structured, commonly used and machine-readable format and you have the right to transfer this data to another controller without hindrance from us, provided that the processing is based on consent or a contract and the processing is carried out by us with the aid of automated processes.
f. Right of revocation
If the processing of your personal data is based on consent, you have the right to revoke this consent at any time.
g. General and right to lodge a complaint
The exercise of your above rights is in principle free of charge for you. In the event of complaints, you have the right to directly contact the supervisory authority responsible for us, the State Data Protection Commissioner.
7. DURATION OF STORAGE OF PERSONAL DATA
After the end of the purpose for which the data was collected, we only store your personal data for as long as this is required on the basis of the statutory (in particular tax) regulations.