Thank you for your interest in our company. We take data protection seriously. In principle, you can use our website without providing any personal data. If a data subject wants to use services of our enterprise via our website, processing of personal data could become necessary.
If processing of personal data is necessary and if there is no legal basis for such processing, we will always obtain the consent of the data subject. The processing of personal data (e.g. the name, address, e-mail address, or telephone number of a data subject) shall always be in line with the General Data Protection Regulation (GDPR), and in accordance with the country-specific data protection regulations applicable to us.
With the following data protection declaration, we would like to inform the public about the type, scope and purpose of the personal data collected, used and processed by us. Likewise, data subjects are informed by this data protection declaration about the rights to which they are entitled.
As the controller, we have implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through our website. However, data transmissions via the Internet can fundamentally contain security vulnerabilities. Therefore, 100% protection cannot be guaranteed. Therefore, every data subject can of course also transmit personal data to us alternatively, e.g. by telephone.
This data protection declaration is based on the definitions used by the European Directive and Regulation Maker when adopting the DSGVO (Article 4 DSGVO). This privacy statement should be both easy to read and easy to understand for any person. To ensure this, we would first like to explain the terms used. In this privacy statement, these definitions are used, among others:
- "personal data" any information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
- "data subject" means any identified or identifiable natural person whose personal data are processed by the controller.
- "Processing" any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
- "restriction of processing" the marking of stored personal data with the aim of limiting their future processing;
- "profiling" any type of automated processing of personal data consisting in using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects relating to that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or change of location;
- "controller" means the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for under Union or Member State law;
- "recipient" means a natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or not a third party. However, public authorities that may receive personal data in the context of a specific investigative task under Union or Member State law shall not be considered as recipients; the processing of such data by the aforementioned authorities shall be carried out in accordance with the applicable data protection rules in accordance with the purposes of the processing;
- "third party" means a natural or legal person, public authority, agency or other body, other than the data subject, the controller, the processor and the persons who are authorized to process the personal data under the direct responsibility of the controller or the processor;
- "Consent" of the data subject means any freely given specific, informed and unambiguous indication of his or her wishes in the form of a statement or other unambiguous affirmative act by which the data subject signifies his or her agreement to the processing of personal data relating to him or her.
2. Name and contact details of the controller.
This privacy notice applies to data processing by: Controller: Dashfactory GmbH, represented by the Managing Director Mr. Sandro Beck, e-mail: firstname.lastname@example.org, phone: +49 (0)123 - 666666, 3. Collection and storage of personal data and the nature and purpose of their use.
a) When visiting the website You can generally use our website without disclosing your identity. When you call up our website, information is automatically sent to our website server by the browser used on your end device. This information is temporarily stored in a so-called log file.
The following information is collected without your intervention and stored until automated deletion:
- IP address of the requesting computer,
- Date and time of access,
- Name and URL of the accessed file,
- website from which the access was made (referrer URL),
- browser used and, if applicable, the operating system of your computer as well as the name of your access provider.
The aforementioned data is processed by us for the following purposes:
- Ensuring a smooth connection setup of the website,
- Ensuring a comfortable use of our website,
- Evaluation of system security and stability as well as
- For other administrative purposes.
The legal basis for the data processing is Art. 6 para. 1 p. 1 lit. f DSGVO.
b) When using our contact form For questions of any kind, we offer you the opportunity to contact us via a form provided on our website. In doing so, it is necessary to provide a valid e-mail address so that we know from whom the inquiry originates and so that we can answer it. Further information can be provided voluntarily. It is your free decision whether you want to enter this data in the contact form.
Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO on the basis of your voluntarily given consent. The personal data collected by us for the use of the contact form will be automatically deleted after completion of your request.
c) When registering for the newsletter
If you register for our newsletter, we will use the data required for this purpose or separately provided by you to send you our e-mail newsletter on a regular basis based on your consent pursuant to Art. 6 (1) p. 1 lit. a DSGVO. Unsubscribing from the newsletter is possible at any time and can be done either by sending a message to the described contact option or via a link provided for this purpose in the newsletter. After unsubscribing, we will delete your e-mail address unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this statement.
d) When ordering via our website
You can either place orders via our website as a guest without registering, or register in our store as a customer for future orders. A registration has the advantage for you that you can log in directly with your e-mail address and password in our store in case of a future order without having to enter your contact data again. Your personal data will be entered into an input mask and transmitted to us and stored. If you place an order via our website, we collect the following data first, both in the case of a guest order and in the case of registration in the store:
- Salutation, first name, last name,
- a valid e-mail address,
- telephone number (landline and/or mobile phone) The collection of this data takes place,
- to be able to identify you as our customer
- to be able to process, fulfill and handle your order;
- for correspondence with you;
- for invoicing purposes;
- to process any liability claims that may exist, as well as to assert any claims against you;
- to ensure the technical administration of our website;
- to manage our customer data.
As part of the ordering process, consent is obtained from you to process this data. The data processing is carried out in response to your order and/or registration and is necessary according to Art. 6 para. 1 p. 1 lit. b DSGVO for the aforementioned purposes for the appropriate processing of your order and for the mutual fulfillment of obligations arising from the purchase contract. The personal data collected by us for the processing of your order will be stored until the expiry of the legal obligation to keep records and then deleted, unless we are obliged to store data for a longer period of time in accordance with Article 6 (1) sentence 1 lit. c DSGVO due to tax and commercial law storage and documentation obligations (from HGB, StGB or AO) or you have consented to storage beyond this in accordance with Article 6 (1) sentence 1 lit. a DSGVO.
4. Passing on of data
Your personal data will only be passed on to third parties by us to the service partners involved in the processing of the contract, such as the logistics company commissioned with the delivery and the credit institution commissioned with payment matters. In cases where your personal data is passed on to third parties, however, the scope of the transmitted data is limited to the necessary minimum. In the case of payment via PayPal, credit card via PayPal, direct debit via PayPal or "purchase on account" via PayPal, we will pass on your payment data to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal or "purchase on account" via PayPal.
The result of the credit check in terms of statistical probability of non-payment is used by PayPal for the purpose of deciding whether to provide the respective payment method. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognized mathematical-statistical procedure. Among other things, address data is included in the calculation of the score values. Further information on data protection can be found in the PayPal data protection principles: https://www.paypal.com/de/webapps/mpp/ua/privacy-full Your personal data will not be transferred to third parties for purposes other than those mentioned above.
We also only pass on your personal data to third parties if:
- you have given your express consent to this in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO,
- the disclosure is required under Art. 6 (1) p. 1 lit. f DSGVO for the assertion, exercise or defense of legal claims and there is no reason to believe that you have an overriding legitimate interest in not disclosing your data,
- in the event that there is a legal obligation for disclosure pursuant to Art. 6 (1) p. 1 lit. c DSGVO, as well as
- this is legally permissible and necessary according to Art. 6 para. 1 p. 1 lit. b DSGVO for the processing of contractual relationships with you. As part of the ordering process, consent is obtained from you for the transfer of your data to third parties.
The data processed by cookies is necessary for the aforementioned purposes to protect our legitimate interests and those of third parties in accordance with Art. 6 (1) p. 1 lit. f DSGVO. Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a notice always appears before a new cookie is created. However, the complete deactivation of cookies may mean that you cannot use all the functions of our website.
6. Links to third-party websites
The links published on our website are researched and compiled by us with the greatest possible care. However, we have no influence on the current and future design and content of the linked sites. We are not responsible for the content of the linked pages and expressly do not adopt the content of these pages as our own. For illegal, incorrect or incomplete contents as well as for damage, which develops from the use or non-use of the information, alone the offerer of the WebSite, to which one referred, is responsible. The liability of the person who merely refers to the publication by a link is excluded. We are only responsible for external references if we have positive knowledge of them, i.e. also of possible illegal or punishable content, and if it is technically possible and reasonable for us to prevent their use.
7. Analysis and tracking tools
The tracking measures listed below and used by us are carried out on the basis of Art. 6 (1) p. 1 lit. f DSGVO. With the tracking measures used, we would like to ensure a needs-based design and the ongoing optimization of our website. On the other hand, we use the tracking measures to statistically record the use of our website and evaluate it for the purpose of optimizing our offer for you. These interests are to be regarded as legitimate within the meaning of the aforementioned provision. The respective data processing purposes and data categories can be found in the corresponding tracking tools.
a) Google Analytics
For the purpose of demand-oriented design and ongoing optimization of our pages, we use Google Analytics, a web analytics service provided by Google Inc (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter "Google"). In this context, pseudonymized usage profiles are created and cookies (see under item 5) are used. The information generated by the cookie about your use of this website such as - browser type/version, - operating system used,
- referrer URL (the previously visited page),
- host name of the accessing computer (IP address),
As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent the collection by Google Analytics by clicking on the aforementioned link. An opt-out cookie will be set, which prevents the future collection of your data when visiting our website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again. Further information on data protection in connection with Google Analytics can be found under the following link in the Google Analytics help: https://support.google.com/analytics/answer/6004245?hl=de
b) Google Adwords Conversion Tracking
In order to statistically record the use of our website and evaluate it for the purpose of optimizing our website for you, we also use Google Conversion Tracking. In this process, Google Adwords sets a cookie (see section 5) on your computer if you have accessed our website via a Google ad. These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of the Adwords customer's website and the cookie has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. Each Adwords customer receives a different cookie. Cookies can therefore not be tracked across Adwords customers' websites.
The information obtained using the conversion cookie is used to create conversion statistics for Adwords customers who have opted for conversion tracking. The Adwords customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you do not wish to participate in the tracking process, you can also refuse the setting of a cookie required for this - for example, via a browser setting that generally disables the automatic setting of cookies. You can also disable cookies for
8. Social media plugins
We use social plugins of social networks (e.g. Facebook, Twitter, Google+) on our website on the basis of Art. 6 para. 1 p. 1 lit. f DSGVO in order to make our company better known through them. The underlying promotional purpose is to be regarded as a legitimate interest within the meaning of the DSGVO. The responsibility for data protection-compliant operation is to be ensured by their respective providers. The integration of these plugins by us takes place by way of the so-called two-click method in order to protect visitors to our website as best as possible.
a) Facebook Social media plugins from Facebook are used on our website in order to make their use more personal.
9. Data subject rights
You have the right - In accordance with Art. 15 DSGVO, to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data, if it was not collected from me, as well as the existence of automated decision-making, including profiling and, if applicable, meaningful information about its details;
- in accordance with Art. 16 DSGVO, to demand the immediate correction of incorrect or completion of your personal data stored by us;
- pursuant to Art. 17 DSGVO, to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;
- pursuant to Art. 18 DSGVO, to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing pursuant to Art. 21 DSGVO;
- pursuant to Art. 20 DSGVO, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller;
- in accordance with Art. 7 (3) DSGVO, to revoke your consent once given to us at any time. This has the consequence that we may no longer continue the data processing, which was based on this consent, for the future; and
- complain to a supervisory authority in accordance with Art. 77 DSGVO. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this purpose.
10. Right of objection
If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) p. 1 lit. f DSGVO, you have the right to object to the processing of your personal data pursuant to Art. 21 DSGVO, provided that there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which will be implemented by us without specifying a particular situation. If you wish to exercise your right of revocation or objection, it is sufficient to send an email to: email@example.com.
11. Data security
Within the website visit, we use the widespread SSL procedure (Secure Socket Layer) in connection with the highest encryption level supported by your browser. As a rule, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is encrypted by the closed key or lock symbol in the lower status bar of your browser. We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
Data protection authorities require the conclusion of a commissioned data processing agreement for the permissible use of Google Analytics. A corresponding template is offered by Google at http://www.google.com/analytics/terms/de.pdf. Source: Sample privacy statement created by attorney Andreas Gerstel (http://www.anwaltblog24.de/)