Privacy Policy

1. Name and contact details of the controller and the data protection officer

If you have any questions regarding the collection, processing or use of your personal data, for information, correction, blocking or deletion of personal data as well as for the revocation of a given consent or the objection to a certain use of data, please contact us directly as the responsible party:

The responsible party within the meaning of Article 4 para. of the General Data Protection Regulation (GDPR) and other data protection provisions and national data protection laws of the respective member states is:

The DÜPERTHAL connect application is offered by DÜPERTHAL SICHERHEITSTECHNIK GMBH & CO. KG, Frankenstraße 3, 63791 Karlstein, hereinafter referred to as DÜPERTHAL.

Contact details and legal information about the provider:

Fax: +49 6188 9139-121

E-mail: info@dueperthal.com

represented by: the management: Franz-Josef Hagen, A. Robert Hanning

Aschaffenburg Local Court HRA No. 3229

Personally liable partner:

DÜPERTHAL Beteiligungs GmbH, 33813 Oerlinghausen, Germany

Lemgo Local Court HRB No. 4193

Data Protection Officer:

You can reach our external data protection officer at:

ubb GmbH
Walter-Bröker-Ring 8
32756 Detmold
Tel +49 (5231) 70 93 44
email@ubb.gmbh

2. Information on the processing of personal data

2.1 Meaning and scope

In the following, we inform you about the collection of personal data when using our website. Personal data is all data that can be specifically related to a person, such as name, address and an e-mail address. Personal data is therefore information that relates to an identified or identifiable natural person. We process, and in particular collect and use such data only if and insofar as this is necessary for the provision of our website and our services.

2.2 Legal basis for data processing

The processing of personal data requires a legal basis legitimising such processing. The following legal bases come into consideration in this case:

Art. 6 para. 1 letter a GDPR: Personal data comprising the consent of the data subject may be processed;
Art. 6 para. 1 letter b GDPR: Personal data required for the performance of a contract may be processed. This also applies to the processing of personal data for necessary, pre-contractual measures;
Art. 6 para. 1 letter c GDPR: Personal data necessary for the performance of a legal obligation of the controller may be processed;
Art. 6 para. 1 letter d GDPR: Personal data necessary for the protection of vital interests of the data subject or another natural person may be processed;
Art. 6 para. 1 letter e GDPR: Personal data necessary for the performance of a task carried out in the public interest or for the exercise of official authority vested in the controller may be processed;
Art. 6 para. 1 letter f GDPR: Personal data necessary to protect the legitimate interests of the controller or a third party may be processed unless the interests, fundamental rights and freedoms of the data subject override this interest.

The legal basis on which the processing is based is also specifically stated in this declaration for each processing activity.

Consent given by the data subject within the meaning of Art. 6 para. 1 letter a GDPR may be revoked by the data subject at any time. However, the lawfulness of the processing carried out on the basis of the consent until revocation remains unaffected by this. (For more on this, see point 4)

2.3 Storage period and deletion of personal data

Personal data processed by us will be deleted after storage is no longer necessary. If legal retention periods conflict with this, processing will be restricted accordingly. The storage period is specifically stated for each processing activity in this declaration.

3. Processing activities

3.1 Visit to our website (general): Protocol and log files

When you visit our website, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security:

IP address
Date and time of the request
Time zone difference from Greenwich Mean Time (GMT)
Content of the request (specific page)
Access status/HTTP status code
Data volume transferred in each case
Website from which the request comes
Browser
Operating system and its interface
Language and version of the browser software.

Legal basis: Art. 6 para. 1 p. 1 letter f GDPR

Purpose of the processing:

The personal data collected in this context is processed by us exclusively for the operation of our website, i.e. for the realisation of the technical presentation, the comfortable use and also the security of the website. For this reason, we also have a legitimate interest in the processing within the meaning of Art. 6 para. 1 letter f.

Storage period:

We delete the data accruing in this context as soon as it is no longer required for the aforementioned purpose. Data that are necessary for the provision of our website are deleted at the end of the respective session. We store parts of this data for up to a maximum of 7 days in order to be able to clarify any attacks on our site.

Processing of such data, which is absolutely necessary for the provision of our website, is essential. The user therefore has no right to object. The above-mentioned storage is carried out directly by us and/or the hosting provider commissioned by us.

3.2 Use of cookies and comparable processing

In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and assigned to the browser you are using. These cookies make it possible to uniquely identify the browser when our website is called up again. Cookies are used to make the website as a whole more user-friendly and effective. Some elements of our website require identification even after a page change.

Our website uses the following types of cookies, the scope and functionality of which are explained below:

Transient cookies (a)
Persistent cookies (b)

a) Transient cookies are automatically deleted when you close the browser. These include in particular the session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognised when you return to our website. The session cookies are deleted when you log out or close the browser.
b) Persistent cookies are automatically deleted after a predefined period of time, which may vary depending on the cookie. You can delete the cookies in the security settings of your browser at any time.

When you access our website for the first time, you will be informed by an information banner about the use of cookies and referred to this data protection declaration. You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you may then not be able to use all the functions of this website.

Legal basis: Art. 6 para. 1 p. 1 letter f GDPR

Purpose of the processing:

The personal data collected in this context with technically necessary cookies are processed by us exclusively for the operation of our website, i.e. for the realisation of the technical presentation and/or to simplify the use of our website.

Analysis cookies are used to improve the quality of our website and its offerings.

For these reasons, we also have a legitimate interest in the processing within the meaning of Art. 6 para. 1 letter f.

Storage period, deletion and possibility to object:

The cookies are stored on your computer and transmitted from this computer to our website. In this respect, only you have the option of restricting and preventing the use of cookies through settings on your internet browser. You can also delete cookies that have already been saved at any time.

Diese Cookie-Richtlinie wurde erstellt und aktualisiert von der Firma CookieFirst.com.

3.2.1 Google Analytics

We use Google Analytics on our website. This is a web analytics service provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses cookies. Google Analytics can also use invisible graphics. This makes it possible to evaluate, for example, visitor traffic on our website. Information determined about the use of our website (including the user's IP address) is transmitted to a Google server, which may be located in the USA or other third countries, and stored there. Such data may be transferred by Google to Google's contractors.

Data processed and categories of data:

IP address
Device identifiers
Online characteristics (including cookie IDs)

For further information please visit
https://policies.google.com/privacy?hl=de#infocollect and
https://privacy.google.com/businesses/adsservices/

When using Google Analytics, IP addresses are anonymised: Your IP address will be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. The full IP address is only transmitted to a Google server located in the USA in exceptional cases and truncated there.

For the use of Google Analytics, a contract for commissioned processing has been concluded with Google in accordance with Art. 28 GDPR. Google processes the data in order to evaluate your use of the website, to summarise website activities and to provide us with further services regarding the use of our website. Google may transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf.

In the event that personal data is processed by (sub-)processors in third countries that do not offer an adequate level of data protection, Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043 USA, provides specific contractual conditions (i.e. standard data protection clauses, available at https://privacy.google.com/businesses/processorterms/mccs). The permissibility of the transfer is therefore based on the agreement of standard data protection clauses in accordance with Art. 46 para. 2 letter c of the GDPR in order to provide adequate safeguards with regard to the protection of the privacy and fundamental rights and freedoms of individuals for the transfer of the personal data concerned.

Legal basis: Art. 6 para. 1 letter a GDPR.

Google is authorised to use subcontractors in connection with the commissioned processing. A list of these is available at https://privacy.google.com/businesses/subprocessors/ can be viewed.

Purpose of the processing:

The integration of Google Analytics allows us to analyse user behaviour on our website and thus continuously improve our content.

Storage period, deletion and revocation options:

Personal data processed in this regard is only stored for as long as necessary for the purpose described or as required by law.

You have a right of withdrawal in relation to the processing of data using cookies: You can prevent the processing of your personal data by Google Analytics by clicking on the "Cookie settings" link in the footer area of the website and choosing the setting you want in the cookie banner that then opens. However, you may not be able to use our website or use it to its full extent if this data is not processed.

You can prevent the processing of your personal data by Google Analytics by installing the following browser plug-in https://tools.google.com/dlpage/gaoptout?hl=de

You can influence the processing of your personal data by Google Analytics by adjusting the cookie settings of your browser (e.g. delete cookies).

You can find more information regarding the processing of personal data in relation to Google Analytics in Google's privacy policy https://support.google.com/analytics/answer/6004245?hl=de

You can view more information regarding Google's privacy settings at the link https://privacy.google.com/take-control.html?categories_activeEl=sign-in

You are neither legally nor contractually obliged to provide your personal data within the scope of Google Analytics and this is also not required for the conclusion of a contract. However, if you do not provide this data, you may not be able to use our website or not be able to use it to its full extent.

3.2.2 Google Ads

On our website, we use Google Ads or, in this context, conversion tracking. It is an advertising/analytics service provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads and the conversion tracking that takes place in this context mean that when you click on an advertisement placed by us on or via Google, a cookie is set on your terminal device. With the help of this cookie, the use of the websites you visit can be analysed, collected information (including your IP address) is transmitted to a Google server and stored. This server may be located in the USA or other third countries. The cookies set in this context become invalid after 30 days. Within this period, the cookie can be evaluated by us and by Google showing that a click on the advertisement has taken you to our website. Since the cookie is specific to the GoogleAds customer, it can be tracked across GoogleAds customers' websites.

In the case of processing of personal data by (sub-)processors in third countries that do not offer an adequate level of data protection, Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043 USA, provides specific contractual conditions (i.e. standard data protection clauses, available at https://privacy.google.com/businesses/processorterms/mccs). The permissibility of the transfer is therefore based on the agreement of standard data protection clauses in accordance with Art. 46 para. 2 letter c of the GDPR in order to provide adequate safeguards with regard to the protection of the privacy and fundamental rights and freedoms of individuals for the transfer of the personal data concerned.

Legal basis: Art. 6 para. 1 letter a GDPR.

Purpose of the processing:

The integration of Google Ads allows us to analyse user behaviour with regard to our advertisements and our website and thereby continuously improve our advertisements and website content.

Storage period:

Personal data processed in this regard is only stored for as long as necessary for the purpose described or as required by law.

You can make the desired settings for personalised advertising under the following link https://support.google.com/ads/answer/2662922?hl=de

You can influence the processing of your personal data by Google Analytics by adjusting the cookie settings of your browser (e.g. delete cookies).

You can view more information regarding Google's privacy settings at the link:
https://privacy.google.com/take-control.html?categories_activeEl=sign-in

You can also find more information in Google's privacy policy at:
https://policies.google.com/privacy

3.2.3 Google Tag Manager

We use the Google Tag Manager on our website. This is a service provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

We use Google Tag Manager so that certain codes and services can be easily and properly deployed on our website. With its help, tags can be inserted and triggered, whereby Google may process information and possibly also personal data when a tag is triggered. Collected information is transmitted to a Google server that may be located in the USA or other third countries.

In the case of processing of personal data by (sub-)processors in third countries that do not offer an adequate level of data protection, Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043 USA, provides specific contractual conditions (i.e. standard data protection clauses, available at https://privacy.google.com/businesses/processorterms/mccs) The permissibility of the transfer is therefore based on the agreement of standard data protection clauses in accordance with Art. 46 para. 2 letter c of the GDPR in order to provide adequate safeguards with regard to the protection of the privacy and fundamental rights and freedoms of individuals for the transfer of the personal data concerned.

Data or categories of data:

Online characteristics (including cookie IDs)
IP address

Detailed information can also be found at the following link:
https://policies.google.com/privacy?hl=de

Legal basis: Art. 6 para. 1 letter a GDPR.

Purpose of the processing:

We have concluded an order processing agreement with Google for the processing of personal data by the Google Tag Manager (Art. 28 GDPR). The purpose of the data processing by Google is to trigger the tags embedded in our website and the correct execution of related services on our website. The processed data may be transmitted by Google to third parties. This is possible in particular if this is required by law or if Google has commissioned third parties to process this data. The purpose of using the Google Tag Manager is ultimately a simple and simplified and structured embedding of different services as well as an improvement of the associated loading times.

Storage period:

Personal data processed in this regard is only stored for as long as necessary for the purpose described or as required by law.

If you have deactivated certain tracking services, the deactivation generally applies to all affected tracking tags used by the Google Tag Manager.

You have a right of withdrawal in relation to the processing of data using cookies: You can prevent the processing of your personal data by the Google Tag Manager by clicking on the "Cookie settings" link in the footer of the website and choosing the setting you want in the cookie banner that then opens. However, you may not be able to use our website or use it to its full extent if this data is not processed.

You are neither legally nor contractually obliged to provide your personal data within the scope of the Google Tag Manager and this is also not required for the conclusion of a contract. However, if you do not provide this data, you may not be able to use our website or not be able to use it to its full extent.

3.2.4 Google Maps

We use Google Maps on our website to show our location and to provide directions. Google Maps is a service provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

When you call up Google Maps, which is embedded as a component in our website, Google sets a cookie in your web browser. User settings and data are processed, in particular to display our location, to provide directions and to calculate a route. Personal data (including your IP address) is transmitted to a Google server and processed by it. This server may be located in the USA or other third countries. In the course of data processing, it is possible for Google to determine which website is the starting point of the request and to which IP address the location and map data should be transmitted.

Legal basis: Art. 6 para. 1 letter a GDPR

Purpose of the processing:

This also constitutes our legitimate interest within the meaning of Art. 6 para. 1 letter f GDPR in the processing, in particular in optimising the functionality of our website.

You have a right of withdrawal in relation to the processing of data using cookies: You can prevent the processing of your personal data by Google Maps by clicking on the "Cookie settings" link in the footer area of the website and choosing the setting you want in the cookie banner that then opens. However, you may not be able to use our website or use it to its full extent if this data is not processed.

The use of Google Maps, related services and information is subject to the Google Terms of Use ( https://policies.google.com/terms?gl=DE&hl=de) and the Additional Terms of Use for Google Maps/Google Earth (https://www.google.com/intl/de_de/help/terms_maps/ ).

Further information can also be found under the following links
https://adssettings.google.com/authenticated
https://policies.google.com/privacy

3.2.5 Meta Pixel

We use Meta Pixel on our website to help us target our marketing (e.g. advertisements) more effectively and efficiently. Meta Pixel is a service of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

When our website or associated sub-pages are called up, this "tracking pixel" is also loaded, registering that a page is called up. Visitors can thus be added to a Custom Audience, i.e. groups of visitors can be created and matched and, in particular, visitors can be addressed with more suitable advertisements. Collected information (including your IP address) is transmitted to a server of Meta Platforms Ireland Limited and stored. This server may be located in the USA or other third countries. In particular, this information allows conclusions to be drawn as to which page you visited the page with the Meta Pixel from and which other, subsequent pages you accessed via buttons on the page with the Meta Pixel.

We use the product "Advertisements" of Meta Platforms Ireland Limited. In particular, your activities on the websites and products of Meta Platforms Ireland Limited are decisive for certain advertisements being displayed to you (e.g. "Likes" given, profile information you have stored in your user account, etc.). Similarly, advertisements may be displayed based on the location of the device you are using or based on the location information stored in your profile on Meta Platforms Ireland Limited platforms or pages (e.g. in your Facebook or Instagram profile) and/or based on your activities on other websites and apps from which data has been transmitted to Meta Platforms Ireland Limited using Meta business tools (in particular the "Meta Pixel"). If you are registered on platforms or pages of Meta Platforms Ireland Limited or logged into your account, Meta Platforms Ireland Limited can assign collected data to your user account. If you are not registered or logged in, Meta Platforms Ireland Limited may nevertheless determine and store identifying features (e.g. IP address). Meta Platforms Ireland Limited provides you with detailed information on the product "Advertisements" and the associated data processing under the following link: https://www.facebook.com/about/ads.

In the event that personal data is processed by (sub-)processors in third countries that do not offer an adequate level of data protection, Meta Platforms Ireland Limited provides specific contractual terms and conditions (i.e. standard data protection clauses, available at: https://www.facebook.com/legal/EU_data_transfer_ad...). The permissibility of the transfer is therefore based on the agreement of standard data protection clauses in accordance with Art. 46 para. 2 letter c of the GDPR in order to provide adequate safeguards with regard to the protection of the privacy and fundamental rights and freedoms of individuals for the transfer of the personal data concerned.

Personal data or categories of data:

All information from the HTTP header. This standard protocol includes in particular the IP address, information on the web browser, page location, document, referrer and information on the visitor to a website.
Pixel-specific data, in particular the Meta Pixel ID and the cookie.
In addition, when using the pages or platforms of Meta Platforms Ireland Limited, activities, device/profile location, profile data (in particular age, gender, interests, etc.) as well as the data and data categories resulting in this respect from the information pursuant to section 3.9 Visit to our Facebook fan page or section 3.10 Visit to our Instagram profile.

Detailed information can also be found at the following link:
https://de-de.facebook.com/business/m/privacy-and-...

Legal basis: Art. 6 para. 1 letter a GDPR

Purpose of the processing:

In this context, our legitimate interest within the meaning of Art. 6 para. 1 letter f GDPR in the processing, in particular in optimising and increasing the efficiency of marketing activities (e.g. advertisements), is also given.

You have a right of withdrawal in relation to the processing of data using cookies: You can prevent the processing of your personal data by Meta Platforms Ireland Limited by clicking on the link "Cookie settings" in the footer of the website and choosing the setting you want in the cookie banner that then opens. However, you may not be able to use our website or use it to its full extent if this data is not processed.

You are neither legally nor contractually obliged to provide your personal data within the scope of the Meta Pixel and this is likewise not required for the conclusion of a contract. However, if you do not provide this data, you may not be able to use our website or not be able to use it to its full extent or less suitable advertisements may be displayed.

You can use the following link to determine which types of adverts you would like to receive when you are logged into Facebook:
https://www.facebook.com/settings?tab=ads

Further information can also be found under the following links
https://www.facebook.com/about/privacy
https://www.facebook.com/business/help/74247867912...

3.2.6 Integration of YouTube videos

We have integrated YouTube videos into our online offer, which are stored on https://www.YouTube.com and can be played directly from our website. These are all integrated in "extended data protection mode", i.e. no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos will the data mentioned below be transferred. We have no influence on this data transmission.

By visiting the website, YouTube receives the information that you have accessed the corresponding sub-page of our website. In addition, the data referred to in sections 3.1 and 3.2 of this declaration will be transmitted. This takes place regardless of whether YouTube provides a user account via which you are logged in or whether no user account exists. If you are logged in to YouTube, your data will be directly assigned to your account. If you do not wish assignment to your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or designing its website according to needs. Such an evaluation is carried out in particular (even for users who are not logged in) for the provision of needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact YouTube to exercise this right.

Legal basis: Art. 6 para. 1 s. 1 letter f GDPR.

Purpose of the processing:

The data is processed for the integration of videos and optimisation of our advertising pages. YouTube also processes the data for the provision and optimisation of its own offering (see also below). This processing serves to protect our legitimate interests in the optimal marketing of our offering, which outweigh our interests in the context of a balancing of interests.

Storage period, deletion and possibility to object:

This access data is not evaluated and/or stored by us. YouTube also processes the data for the provision and optimisation of its own offering.

For more information on the purpose and scope of data collection and its processing and storage by YouTube, please refer to YouTube's privacy policy.

There you will also receive further information on your rights and setting options to protect your privacy:

YouTube is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA;

You can find more detailed information in the privacy notices of YouTube and Google, which you can access here https://policies.google.com/privacy

You can find information on Google's privacy settings at https://privacy.google.com/take-control.html?categories_activeEl=sign-in

Possibility to object (opt-out): Opt-out plugin: https://tools.google.com/dlpage/gaoptout?hl=de, settings for the display of advertisements https://adssettings.google.com/authenticated.

You can also find out more about your right to object to us under section 4 of this data protection declaration. However, an objection might result in you not being able to use our website or not being able to use it to its full extent.

3.2.7 Integration of Vimeo videos

We have integrated Vimeo videos into our online offering, which can be found at https://vimeo.com and can be played directly from our website.

By visiting the website, Vimeo receives the information that you have accessed the corresponding sub-page of our website. In this respect, the following types of data are regularly processed: Usage data (e.g. websites visited, interest in content, access times); meta/communication data (e.g. device information, IP addresses); contact data (e.g. e-mail, telephone numbers); content data (e.g. entries in online forms).

In addition, the data referred to in sections 3.1 and 3.2 of this declaration will be transmitted. This occurs regardless of whether Vimeo provides a user account via which you are logged in or whether no user account exists. If you are logged in to Vimeo, your data will be directly assigned to your account. If you do not wish to be associated with your profile on Vimeo, you should log out before activating the button. Vimeo stores your data as usage profiles and uses them for the purposes of advertising, market research and/or designing its website in line with requirements. Such an evaluation is carried out in particular (even for users who are not logged in) for the provision of needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact Vimeo to exercise this right. Please note that Vimeo may use Google Analytics for this purpose.

Legal basis: Art. 6 para. 1 s. 1 letter f GDPR.

Purpose of the processing:

The data is processed for the integration of videos and optimisation of our advertising pages. Vimeo also processes the data for the provision and optimisation of its own offering (see also below). This processing serves to protect our legitimate interests in the optimal marketing of our offering, which outweigh our interests in the context of a balancing of interests.

Storage period, deletion and possibility to object:

This access data is not evaluated and/or stored by us. Vimeo also processes the data for the provision and optimisation of its own offering.

For further information on the purpose and scope of data collection and its processing and storage by Vimeo, please refer to Vimeo's privacy policy.

There you will also receive further information on your rights and setting options to protect your privacy:

Vimeo is a service of Vimeo Inc, Attention: Legal Department, 555 West 18th Street New York, New York 10011, USA.

You can find more information in Vimeo's privacy policy, which you can access here https://vimeo.com/privacy

Vimeo may use Google Analytics, please refer to Google's privacy policy https://policies.google.com/privacy

Further information and opt-out options for Google Analytics can be found at https://tools.google.com/dlpage/gaoptout?hl=de and also at https://adssettings.google.com/

3.2.8 Integration of Adobe TypeKit fonts

We have integrated elements, web fonts from Adobe TypeKit fonts into our online offering.

By visiting the website, Adobe receives the information that you have accessed the corresponding sub-page of our website. In this respect, the following types of data are regularly processed: Usage data (e.g. web pages visited); meta/communication data (e.g. device information, IP addresses).

Adobe also collects the following data:

Fonts provided
ID of the web project
JavaScript version of the web project (string)
Type of web project (string "configurable" or "dynamic")
Embedding type (whether you are using the JavaScript or CSS embedding code)
Account ID (identifies the customer from whom the web project originates)
Service that provides the fonts (e.g. Adobe Fonts)
Server that provides the fonts (e.g. Adobe Fonts server or corporate CDN)
Host name of the page on which the fonts are loaded
The time the web browser takes to download the fonts
The time from downloading the fonts with the web browser to applying the fonts
Whether an ad blocker is installed to determine if the ad blocker is interfering with the proper tracking of page views
Operating system and browser version

In addition, the data referred to in sections 3.1 and 3.2 of this declaration will be transmitted.

Legal basis: Art. 6 para. 1 s. 1 letter f GDPR.

Purpose of the processing:

The data is processed for the integration of elements and optimisation of our advertising pages. Adobe also processes the data for the provision and optimisation of its own offering. This processing serves to protect our legitimate interests in an optimal presentation and marketing of our offering, which prevail in the context of a balancing of interests.

Storage period, deletion and possibility to object:

This access data is not evaluated and/or stored by us. Adobe also processes the data for the provision and optimisation of its own offering.

For more information on the purpose and scope of data collection and its processing and storage by Adobe, please refer to Adobe's privacy policy https://www.adobe.com/de/privacy/policies/adobe-fonts.html

There you will also receive further information on your rights and setting options to protect your privacy:

Adobe TypeKit is a service of Adobe Systems Software Ireland Limited; 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland

For more information on how to object to Adobe's data processing, please refer to Adobe's privacy policy in this regard, which you can access here https://www.adobe.com/de/privacy.html

3.3 Contact form and e-mail contact

When contacting us via our contact form or via one of our e-mail addresses, the data you provide (your e-mail address and, if applicable, further personal data provided by you, such as your name and telephone number) will be processed by us in order to answer your questions and/or to initiate and/or process a possible customer relationship, if and to the extent that this is necessary for this purpose. In this respect, we also save the date and time of transmission.

The data will not be passed on to third parties in this context.

Important notice:

For security reasons, we recommend that you only transmit e-mails in encrypted form. There are considerable risks in transmitting unencrypted messages. Therefore, please do not send us any sensitive data by unencrypted e-mail.

Legal basis:

Use of the contact form:

general request / message: Art. 6 para. 1 letter a GDPR (voluntary consent)
Message for the preparation, initiation of the conclusion of a contract - in particular the conclusion and/or execution of a contract: Art. 6 para. 1 letter b GDPR

Sending an e-mail:

General request / message: Art. 6 para. 1 letter f GDPR
Message for the preparation, initiation of the conclusion of a contract - in particular the conclusion and/or execution of a contract: Art. 6 para. 1 letter b GDPR

Purpose of the processing:

The personal data collected in this context will be processed by us exclusively and only to the extent necessary for the processing of the contact or the execution of the contract. In this context, our legitimate interest within the meaning of Art. 6 para. 1 letter f in the processing, in particular in the correct allocation and response to messages, is also given.

Storage period:

We delete the data accruing in this context, unless you have consented to further processing, after the storage is no longer necessary, i.e. usually when the purpose pursued has been achieved. If there are legal obligations to retain data, we restrict the processing.

3.4 Contacting by telephone and hotline

If you contact us by telephone or via our hotline, the data you provide (e.g. your e-mail address and, if applicable, other personal data provided by you, such as your name and telephone number) will be processed by us in order to answer your questions and/or to initiate and/or process a possible customer relationship, if and to the extent that this is necessary for this purpose. In this respect, we also save the date and time of transmission.

The data will not be passed on to third parties in this context.

Legal basis:

General request / message: Art. 6 para. 1 letter a GDPR, if voluntary consent has been given, otherwise based on our legitimate interest pursuant to Art. 6 para. 1 letter f GDPR
Message for the preparation, initiation of the conclusion of a contract - in particular the conclusion and/or execution of a contract: Art. 6 para. 1 letter b GDPR

Purpose of the processing:

The personal data collected in this context will be processed by us exclusively and only to the extent necessary for the processing of the contact or the execution of the contract. This also constitutes our legitimate interest in the processing within the meaning of Art. 6 para. 1 letter f, in particular in the correct allocation and response to messages.

Storage period:

3.5 Contact by letter (post) and fax

If you contact us by letter or fax, the data you provide (e.g. your fax number, your e-mail address and, if applicable, other personal data provided by you, such as your name and your telephone number) will be processed by us in order to answer your questions and/or to initiate and/or process a possible customer relationship, if and to the extent that this is necessary for this purpose. In this respect, we also save the date and time of transmission.

The data will not be passed on to third parties in this context.

Legal basis:

General request / message: Art. 6 para. 1 letter a GDPR, if voluntary consent has been given, otherwise based on our legitimate interest pursuant to Art. 6 para. 1 letter f GDPR
Message for the preparation, initiation of the conclusion of a contract - in particular the conclusion and/or execution of a contract: Art. 6 para. 1 letter b GDPR

Purpose of the processing:

The personal data collected in this context will be processed by us exclusively and only to the extent necessary for the processing of the contact or the execution of the contract. This also constitutes our legitimate interest within the meaning of Art. 6 para. 1 letter f in the processing of data in particular in the correct allocation and response to messages.

Storage period:

3.6 Newsletter

With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent.

We use the so-called double-opt-in procedure to register for our newsletter. This means that after your registration, we will send you an e-mail to the e-mail address you provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration, your information will be blocked and automatically deleted after one month. In addition, we store your IP addresses and the times of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.

The only mandatory information for sending the newsletter is your e-mail address. The provision of further, separately marked data is voluntary and will be used to address you personally. After your confirmation, we store your e-mail address for the purpose of sending you the newsletter.

Legal basis: Art. 6 para. 1 s. 1 letter a GDPR

Purpose of the processing:

Collection of the e-mail address: Delivery of the double opt-in e-mails and subsequent delivery of the newsletter

Collection of other personal data within the scope of the newsletter registration: Prevention of misuse of our service and the email address provided.

Storage period:

You can revoke your consent to receive the newsletter and unsubscribe at any time. You can revoke your consent by clicking on the link provided in every newsletter e-mail and by sending an e-mail to info@dueperthal.com

You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time, for example via the "unsubscribe" link in the newsletter.

The data protection measures are always subject to technical updates. For this reason, we ask you to inform yourself about our data protection measures at regular intervals by consulting our data protection declaration.

3.7 Registration and ordering

On our websites you can order some of our products and services. You can place such an order – if and to the extent offered – as a guest without prior registration or via a customer account created after registration.

Within the scope of this registration, personal data will be requested from you, transmitted to us and stored by us. In this respect, your IP address and the date and time of registration are also stored. Data is only passed on to third parties if and to the extent that this is technically necessary. The following data are requested: Salutation, first name, last name, email address, address, telephone number and optional if applicable: Date of birth, fax, mobile number, VAT number and, if applicable, a different billing/delivery address.

Legal basis: Art. 6 para. 1 letter b GDPR.

Purpose of the processing:

Registration enables you to maintain a user account, which you can use, for example, to view the specific contract data after placing an order in our system. The data is collected in order to be able to identify you as a customer, to be able to guarantee order processing, service and sales contract requirements (such as warranty rights) and invoicing, to enable communication between you and us, and to be able to guarantee the technical functionality of the site. The data is used to this extent for contract initiation and contract processing.

Storage period:

The data is deleted as soon as it is no longer required to achieve the purpose. This is the case with registration without subsequent purchase as soon as you cancel or change your registration. If the registration is followed by the conclusion of a contract or other pre-contractual measures, the data is deleted as soon as it is no longer required for the fulfilment of the contract. Even after the conclusion of a contract, there may be a right to further storage in order to fulfil contractual or legal obligations. We are obliged by commercial and tax law to store your address, payment and order data for a period of ten years. However, we restrict processing after two years, i.e. your data is only used to comply with legal obligations.

You have the option at any time to cancel a completed registration and/or to have the stored data changed.

3.8 Use of the DÜPERTHAL connect application

Within the scope of the use of the DÜPERTHAL connect application, personal data is collected from you, transmitted to us and stored by us. In this respect, your IP address and the date and time of the respective log-in are also stored. Data is only passed on to third parties if and to the extent that this is technically necessary. In this respect, your user data in particular will be processed.

Legal basis: Art. 6 para. 1 letter b GDPR.

Purpose of the processing:

The processing is carried out exclusively for the technical implementation and safeguarding of the DÜPERTHAL connect application.

Storage period:

The data is deleted as soon as it is no longer required to achieve the purpose. For revision backup, the data is kept for the duration of the contractually agreed backup times. Even after the conclusion of a contract, there may be a need for further storage in order to fulfil contractual or legal obligations. Due to commercial and tax law requirements, we are obliged to store order-related data for a period of ten years. However, we restrict processing after two years, i.e. your data is only used to comply with legal obligations.

You have the option at any time to cancel a completed registration and/or to have the stored data changed.

3.9 Payment processing

You can select different payment methods in our order process via the payment service provider Mollie B.V. for processing the payment. For the available payment methods, please refer to the further contract conditions and information details on contract processing.

By selecting a payment option, the data subject consents to the transmission of personal data to the payment service provider (Mollie B.V.) and the payment method provider (e.g. PayPal, Klarna, credit card provider) required for payment processing, which usually includes the first name, last name, address, email address, IP address, telephone number, mobile phone number or other data, in particular such data that is directly related to the respective purchase and/or is necessary for payment and purchase processing.

Legal basis: Art. 6 para. 1 letter a GDPR; in the context of payment and contract processing with regard to necessary data, primarily Art. 6 para. 1 letter b GDPR. Under certain circumstances, we may have an additional, legitimate interest in the disclosure of data, insofar as the use serves the purpose of fraud prevention and security of our offers. (Art. 6 para. 1 letter f GDPR).

Purpose of the processing:

The data is collected in order to be able to identify you as a customer, to be able to guarantee the order processing, in particular the payment processing, as well as to be able to guarantee the security and functionality of the payment processing.

Storage period:

Your personal data exchanged between the payment service provider and/or the payment method provider and us may be transmitted by the payment service provider and/or the payment method provider to credit reference agencies for the purpose of checking identity and creditworthiness.

Your data may be disclosed by the payment service provider and/or the payment method provider to companies or subcontractors affiliated with the payment service provider and/or the payment method provider if this is necessary to fulfil the contractual obligations or if the data is to be processed on behalf of the payment service provider and/or the payment method provider. You have the option at any time to revoke your consent to the handling of personal data vis-à-vis the payment service provider and/or the payment method provider. However, a revocation does not affect personal data that must necessarily be processed for payment processing.

The current privacy policy of Mollie B.V. can be found at https://www.mollie.com/de/privacy

3.10 Applications and application procedure

When you send us an application and/or further application documents, we process the data you send us in order to identify and select suitable potential employees (f/m/d). As part of the implementation of these procedures, there is also further communication with the applicants (f/m/d), e.g. to conduct an interview. As part of these measures, we provide further information for data processing.

Legal basis: Art. 88 para. 1 GDPR in conjunction with Section 26 para. 1 of the federal data protection act (BDSG)

Purpose of the processing:

Identification and selection of new employees (f/m/d) to strengthen our team.

Storage period:

If no employment relationship is established following the application, the application documents will be deleted six months after rejection (Art. 17 para. 3 letter b GDPR). If, on the other hand, an employment relationship is established, the necessary data will be processed further for the duration of the employment relationship (Art. 88 para. 1 GDPR in conjunction with 26 BDSG).

4. Data subjects' rights

You have the following rights in relation to personal data relating to you:

Right of access (Art. 15 GDPR):

You have the right to obtain information about the purposes of processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period or at least criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of the processing of personal data concerning you or an objection in this respect, the existence of a right of appeal to the supervisory authority, the origin of your data, insofar as this has not been collected by us, as well as the existence of automated decision-making, including profiling – at least with regard to the logic involved in this respect.

Right to rectification (Art. 16 GDPR):

You have the right to rectification of any inaccurate and/or incomplete personal data we hold about you.

Right to erasure (Art. 17 GDPR):

You have the right to erasure with regard to your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;

Right to restriction of processing (Art. 18 GDPR):

You have the right to restrict the processing of personal data relating to you, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defence of legal claims or you have objected to the processing pursuant to Art. 21 GDPR;

Right to data portability (Art. 20 GDPR):

You have the right to receive the personal data relating to you that you have provided to us in a structured, commonly used and machine-readable format. You have the right to transfer this data to another controller without hindrance from us, provided that the processing is based on consent pursuant to Art. 6 para. 1 letter a GDPR or Art. 9 para. 2 letter a GDPR or on a contract pursuant to Art. 6 para. 1 letter b GDPR and the processing is carried out with the aid of automated procedures.

When exercising this right, you also have the right to have the personal data concerning you transferred directly from us to another controller, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this.

The right to data portability shall not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Right to object to processing (Art. 21 GDPR):

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 para. 1 s. 1 letter f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, insofar as there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which is implemented by us without specifying a particular situation.

If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

If you wish to exercise your right of revocation or objection, simply send an e-mail to info@dueperthal.com

Right to revoke the declaration of consent under data protection law:

You have the right to revoke your declaration of consent under data protection law at any time. Such revocation of consent shall not affect the lawfulness of our processing carried out on the basis of consent until revocation.

If you wish to exercise your right of revocation or objection, simply send an e-mail to info@dueperthal.com

Right to object to automated decision-making in individual cases, including profiling:

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision is necessary for the conclusion or performance of a contract between you and us, is subject to legal provisions of the European Union or the Federal Republic of Germany, is permissible and these legal provisions contain appropriate measures to protect your rights and freedoms as well as your legitimate interests or is made with your express consent.

However, these decisions must not be based on special categories of personal data pursuant to Art. 9 para. 1 of the GDPR, unless Art. 9 para. 2 letter a or g of the GDPR applies and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests.

With regard to the aforementioned cases, we take reasonable measures to safeguard your rights and freedoms as well as your legitimate interests, including at least the right to obtain the intervention of a person responsible, to express your point of view and to contest the decision.

5. Right to complain to the supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes applicable data protection law.

The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.

The supervisory authority responsible for us for matters relating to data protection law is the

Bayerisches Landesamt für Datenschutzaufsicht

(Bavarian State Office for Data Protection Supervision)

Promenade 18, 91522 Ansbach, Germany

Phone: +49 (0) 981 180093-0

Fax: +49 (0) 981 180093-800

E-mail: poststelle@lda.bayern.de

6. Data security: Encryption and TOM

Our website is SSL-encrypted (Secure Socket Layer) in conjunction with the highest level of encryption supported by your browser. As a rule, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead.

You can tell whether the respective sub-page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.

We also use appropriate technical and organisational security measures (TOM) to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments and adapted to the current state of the art.

7. Links to external websites of other providers

If we link and/or refer to websites of third parties, the respective operators of these sites are responsible for the processing of data in accordance with data protection law. As soon as you leave our site and visit an offer of a third party, the data protection provisions presented there by the person responsible for the respective offer apply.

8. Up-to-dateness and amendment of this privacy policy

This privacy policy is currently valid and was last revised on: 05 February 2022 (v1.1).

Due to the further development of our website and offers or due to changed legal or official requirements, it may become necessary to change this data protection declaration. You can access and print out the current data protection declaration at any time on our website under "Data protection information".

Privacy Policy

TAKE YOUR CHANCE NOW

Get advice now