Data protection

Privacy Policy 

The responsible party within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:

Dittrich GmbH & Co. KG
Immanulestraße 3
32427 Minden

represented by the personally liable partner
Dittrich Beteiligungs-GmbH
Immanuelstraße 3
32427 Minden

Managing Director Marianne Dittrich

Commercial Register: HRA 8937
Register court: District Court of Bad Oeynhausen

Your data subject rights

You can exercise the following rights at any time using the contact details provided by our data protection officer:

  • Information about your data stored by us and its processing (Art. 15 GDPR),
  • Correction of incorrect personal data (Art. 16 GDPR),
  • Deletion of your data stored by us (Art. 17 GDPR),
  • Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR),
  • Objection to the processing of your data by us (Art. 21 GDPR) and
  • Data portability, provided that you have consented to data processing or have concluded a contract with us (Art. 20 GDPR).

If you have given us your consent, you can revoke it at any time with effect for the future.

You can lodge a complaint with a supervisory authority at any time, for example, the competent supervisory authority in the federal state in which you live or the authority responsible for us as the responsible body.

A list of supervisory authorities (for the non-public sector) with addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html .

Collection of general information when visiting our website

Type and purpose of processing:

When you access our website, i.e., if you do not register or otherwise provide information, general information is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address, and similar information. 

They are processed in particular for the following purposes:

  • Ensuring a smooth connection to the website,
  • Ensuring smooth use of our website,
  • Evaluation of system security and stability as well as
  • for further administrative purposes.

We do not use your data to draw conclusions about you personally. We may statistically evaluate this type of information to optimize our website and the technology behind it.

Legal basis:

The processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

Recipient:

Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

Storage period:

The data will be deleted as soon as it is no longer required for the purpose for which it was collected. For data used to provide the website, this is generally the case when the respective session ends.

Provision required or necessary:

The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. Furthermore, individual services may be unavailable or restricted. For this reason, an objection is excluded. 

Cookies

Type and purpose of processing:

Like many other websites, we also use so-called "cookies." Cookies are small text files that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website. 

This gives us certain data such as IP address, browser used and operating system.

Cookies cannot be used to launch programs or transmit viruses to a computer. The information contained in cookies allows us to facilitate navigation and ensure our websites are displayed correctly.

Under no circumstances will the data we collect be passed on to third parties or linked to personal data without your consent.

Of course, you can also view our website without cookies. Internet browsers are generally set to accept cookies. You can generally disable cookies at any time via your browser settings. Please use the help function of your Internet browser to learn how to change these settings. Please note that individual features of our website may not work if you have disabled cookies.

Storage period and cookies used:

If you allow us to use cookies through your browser settings or consent, the following cookies may be used on our websites:

List of cookies

-

-

-

The storage period is: 30 days

To the extent that these cookies may (also) affect personal data, we will inform you about this in the following sections.

You can delete individual cookies or all cookies via your browser settings. You can also find information and instructions on how to delete these cookies or block their storage in advance. Depending on your browser provider, you can find the necessary information at the following links:

  • Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen
  • Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
  • Google Chrome: https://support.google.com/accounts/answer/61416?hl=de
  • Opera: http://www.opera.com/de/help
  • Safari: https://support.apple.com/kb/PH17191?locale=de_DE&viewlocale=de_DE

Registration on our website

Type and purpose of processing:

When you register to use our personalized services, some personal data is collected, such as your name, address, contact and communication details (e.g., telephone number and email address). Once you are registered with us, you can access content and services that we offer only to registered users. Registered users also have the option of changing or deleting the data provided during registration at any time. Of course, we will also provide you with information about the personal data we have stored about you at any time.

Legal basis:

The processing of the data entered during registration is based on the user’s consent (Art. 6 (1) (a) GDPR).

If the registration serves to fulfill a contract to which the data subject is a party or to carry out pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 (1) (b) GDPR.

Recipient:

Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

Storage period:

Data will only be processed in this context as long as the corresponding consent has been obtained. After that, it will be deleted unless legally required to retain it. To contact us in this regard, please use the contact details provided at the end of this privacy policy.

Provision required or necessary:

The provision of your personal data is voluntary and based solely on your consent. Without the provision of your personal data, we cannot grant you access to the content and services we offer.

Newsletter

Type and purpose of processing:

Your data will be used exclusively to send you the newsletter you have subscribed to via email. Your name is provided so that we can address you personally in the newsletter and, if necessary, to identify you if you wish to exercise your rights as a data subject.

To receive the newsletter, simply provide your email address. When you register to receive our newsletter, the data you provide will be used exclusively for this purpose. Subscribers may also be informed by email about circumstances relevant to the service or registration (e.g., changes to the newsletter offering or technical issues).

For effective registration, we require a valid email address. To verify that the registration was actually made by the owner of the email address, we use the "double opt-in" process. For this purpose, we log the newsletter subscription, the sending of a confirmation email, and the receipt of the requested response. No further data is collected. The data is used exclusively for sending the newsletter and is not shared with third parties.

Legal basis:

Based on your express consent (Art. 6 (1) (a) GDPR), we will regularly send you our newsletter or similar information by email to the email address you provided. 

You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time with future effect. A corresponding link is included in every newsletter. You can also unsubscribe directly on this website at any time or notify us of your revocation using the contact option provided at the end of this privacy policy.

Recipient:

Recipients of the data may be contract processors.

Storage period:

In this context, the data will only be processed as long as the corresponding consent has been obtained. After that, it will be deleted.

Provision required or necessary:

The provision of your personal data is voluntary and solely based on your consent. Without your consent, we unfortunately cannot send you our newsletter.

Contact form

Type and purpose of processing:

The data you enter will be stored for the purpose of individual communication with you. For this purpose, you must provide a valid email address and your name. This will be used to assign the request and subsequently respond to it. Providing additional data is optional.

Legal basis:

The processing of the data entered into the contact form is based on a legitimate interest (Art. 6 (1) (f) GDPR).

By providing this contact form, we want to make it easy for you to contact us. The information you provide will be stored for the purpose of processing your inquiry and for possible follow-up questions.

If you contact us to request a quote, the data entered in the contact form will be processed to carry out pre-contractual measures (Art. 6 (1) (b) GDPR).

Recipient:

Recipients of the data may be contract processors.

Storage period:

Data will be deleted no later than 6 months after the request has been processed.

If a contractual relationship is entered into, we are subject to the statutory retention periods according to the German Commercial Code (HGB) and will delete your data after these periods have expired. 

Provision required or necessary:

Providing your personal data is voluntary. However, we can only process your request if you provide us with your name, email address, and the reason for your request.

Use of Google Analytics

Type and purpose of processing:

This website uses Google Analytics, a web analysis service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter: “Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website is usually transferred to a Google server in the USA and stored there. However, due to the activation of IP anonymization on these websites, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data held by Google.

The purpose of data processing is to evaluate website usage and compile reports on website activity. Further related services are then provided based on website and internet usage.

Legal basis:

The data is processed on the basis of the user’s consent (Art. 6 (1) (a) GDPR).

Recipient:

The recipient of the data is Google as the data processor. For this purpose, we have concluded a corresponding data processing agreement with Google.

Storage period:

The data will be deleted as soon as it is no longer required for our recording purposes.

Third country transfer:

Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework . 

Provision required or necessary:

The provision of your personal data is voluntary and based solely on your consent. If you deny access, this may result in functional limitations on the website.

Revocation of consent:

You can prevent cookies from being saved by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link: Browser Add-On to deactivate Google Analytics .

In addition to, or as an alternative to, the browser add-on, you can prevent Google Analytics from tracking our websites by clicking this link . This will install an opt-out cookie on your device. This will prevent Google Analytics from tracking data for this website and this browser in the future, as long as the cookie remains installed in your browser.

Profiling:

Using the tracking tool Google Analytics, we can evaluate the behavior of website visitors and analyze their interests. For this purpose, we create a pseudonymous user profile.

Use of script libraries (Google Webfonts)

Type and purpose of processing:

In order to display our content correctly and graphically appealing across all browsers, we use “Google Web Fonts” from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”) to display fonts on this website.

The privacy policy of the library operator Google can be found here: https://www.google.com/policies/privacy/

Legal basis:

The legal basis for the integration of Google Webfonts and the associated data transfer to Google is your consent (Art. 6 (1) (a) GDPR). 

Recipient:

Accessing script libraries or font libraries automatically triggers a connection to the library's operator. It is theoretically possible—although currently unclear whether and, if so, for what purposes—that the operator collects Google data in this case.

Storage period:

We do not collect any personal data through the integration of Google Webfonts.

Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/ .

Third country transfer:

Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework .

Provision required or necessary:

The provision of personal data is neither legally nor contractually required. However, correct display of the content may not be possible using standard fonts.

Revocation of consent:

The JavaScript programming language is regularly used to display the content. You can therefore object to data processing by deactivating JavaScript in your browser or installing a JavaScript blocker. Please note that this may result in functional limitations on the website.

SSL encryption

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) over HTTPS.

Processors used

The following organizations, companies or persons have been commissioned by the operator of this website to process data:

MailChimp

This website uses the services of MailChimp to send newsletters. The provider is Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.

MailChimp is a service that, among other things, can be used to organize and analyze the distribution of newsletters. If you enter data for the purpose of subscribing to the newsletter (e.g., email address), this data will be stored on MailChimp's servers in the USA.

MailChimp is certified under the EU-US Privacy Shield. The Privacy Shield is an agreement between the European Union (EU) and the United States designed to ensure compliance with European data protection standards in the United States.

With the help of MailChimp, we can analyze our newsletter campaigns. When you open an email sent with MailChimp, a file contained in the email (a so-called web beacon) connects to MailChimp's servers in the USA. This makes it possible to determine whether a newsletter message has been opened and, if so, which links have been clicked. Technical information is also recorded (e.g., time of retrieval, IP address, browser type, and operating system). This information cannot be assigned to the respective newsletter recipient. It is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better tailor future newsletters to the interests of the recipients.

If you do not want MailChimp to analyze your data, you must unsubscribe from the newsletter. We provide a link for this in every newsletter message. You can also unsubscribe directly from the newsletter on the website.

Data processing is based on your consent (Art. 6 (1) (a) GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

The data you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter. After you unsubscribe from the newsletter, the data will be deleted from both our servers and the MailChimp servers. Data stored by us for other purposes (e.g., email addresses for the members' area) will remain unaffected.

For more information, please see MailChimp’s privacy policy at: https://mailchimp.com/legal/terms/ .

Shopify

This website uses the services of Shopify, a service of Shopify Inc., 126 York Street, Suite 200, Ottawa, ON, Canada, K1N 5T5. Shopify provides an e-commerce platform through which we offer our products for sale.

Shopify stores your data on its own server. If you are located in the EU, the European Economic Area (EEA), or Switzerland, your data will be processed and stored in Ireland by Shopify International Ltd. However, Shopify points out that, in order to provide a smooth service, data may also be transferred to other regions, including the USA and Canada. Shopify strictly adheres to the EU-US and Swiss-US data protection agreements (EU-US Privacy Shield Framework ( https://www.privacyshield.gov/EU-US-Framework ).

If you select a direct payment gateway to complete your purchase, Shopify will store your credit card information. Your personal data is transmitted over the internet using PCI-DSS (Payment Card Industry Data Security Standard) encryption during the order process. Your purchase transaction data is stored only for as long as necessary to complete the transaction. After that, your purchase transaction data is deleted. For more information, please see Shopify's Terms of Use at http://www.shopify.com/legal/terms and their Privacy Policy at http://www.shopify.com/legal/privacy.

Changes to our privacy policy

We reserve the right to amend this privacy policy to ensure it always complies with current legal requirements or to implement changes to our services in the privacy policy, for example, when introducing new services. The new privacy policy will then apply to your next visit.

As of June 2019