1. Name and contact details of the controller responsible for data processing and of the company data protection officer
Our company data protection officer can be reached at the above address or at firstname.lastname@example.org.
2. The collection and storage of personal data, the type and purpose of use
a) When visiting the website
When you visit our website, the browser on your device automatically sends information to the server on our website. This information is temporarily stored in a so-called log file. The following information is recorded without action on your part and stored until it is automatically deleted:
• Date and time of access
• Volume of data transmitted
• Log indicating whether access was successful
• Description of the type of web browser used
• Operating system used
• Page previously visited
• Your IP address
We process this data for the following reasons:
• To ensure comfortable use of our website
• To evaluate system security and stability and
• For other administrative purposes.
The lawful basis for processing data is Art. 6(1)(f) GDPR. Our legitimate interest follows from the reasons for data collection listed above. Under no circumstances will we use the data collected to draw any conclusions regarding you.
If you have subscribed to our e-newsletter, we will process the personal data you have provided us with to keep you up-to-date on what's new at Duravit AG.
You agree to us sending you newsletters regularly by e-mail to the specified e-mail address. Regarding the e-newsletter, we check beforehand that you are the owner of the e-mail address provided or that the owner agrees to receive the newsletter.
We will process the data on the basis of your consent in accordance with Art. 6(1)(a) GDPR.
You can revoke your consent to us processing your data at any time via the unsubscribe link in each e-mail, or by sending an e-mail to the mailbox email@example.com.
c) Contact forms
If you have any questions, you can contact us using the contact form provided on our website. You will need to provide your name, e-mail address and a message in order to receive a reply.
Further information is provided voluntarily.
We will process data provided for the purpose of us establishing contact on the basis of your specific request in accordance with Art. 6(1)(a) GDPR.
d) User account
On our website you can choose to register a user account.
Your name, address and e-mail address are required for registration. Further information is provided voluntarily.
A user account offers the following features:
• Download basket
• Reminder list and
• Data overview
The data will be processed on the basis of your specific request in accordance with Art. 6(1)(b) GDPR. Your data will not be used or passed on in any other way.
3. Data disclosure
Your personal data will not be transferred to third parties for purposes other than those listed below.
We will only pass on your personal data to third parties if:
• Disclosure is required pursuant to Art. 6(1)(f) GDPR and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
• A legal obligation exists in accordance with Art. 6(1)(c) GDPR, or
• It is legally permissible and necessary for the handling of the contractual relationship with you pursuant to Art. 6(1)(b) GDPR.
We use so-called cookies in some areas of our website. These elements allow your computer to be identified as a technical device when you visit our website and facilitate using our services - particularly during follow-up visits.
However, in general, you also have the option to set your Internet browser so that you are informed of cookies so that you can accept or refuse them or delete existing cookies.
Cookies do not allow a server to read private data from your computer or data stored on another server. They will do no damage to your computer and do not contain viruses.
5. Use of Google Analytics
We use Google Analytics, a web analytics service from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google is certified under the Privacy Shield Agreement and thus warrants that it complies with European privacy legislation (see https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active ).
Google Analytics uses so-called “cookies” – text files that are stored on your computer to allow an analysis of your use of the website. The information about your use of the website generated by the cookie is usually sent to a Google server in the USA, where it is saved. However, in the event that IP anonymization is activated on this website, Google will abbreviate your IP address in advance within member states of the European Union or in other countries within the European Economic Area that are party to the agreement. Only in exceptional cases is the full IP address sent to a Google server in the USA and abbreviated there. Google will use this information on our behalf to analyze your use of the website, compile reports on website activity and provide us with other services relating to website and Internet use. The IP address provided by your browser for Google Analytics purposes is not merged with other data held by Google. You can prevent cookies from being stored by using the appropriate setting in your browser; however we would like to point out that if you block cookies it may mean that you are unable to benefit from the full range of functions offered by this website. You can also prevent collection of data generated by the cookie in reference to your website usage (including your IP address) by Google, and processing of this data by Google, by downloading the browser plug-in from the following link (http://tools.google.com/dlpage/gaoptout?hl=de) and installing it.
Please note that to ensure anonymous logging of IP addresses (so-called IP masking), on this website Google Analytics has been extended with the code ‘gat._anonymizeIp()’.
You can also prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will then be set which prevents further collection of your data when you visit this website. This is particularly recommended when accessing our site via mobile devices.
Art. 6(1)(f) GDPR serves as the lawful basis for the use of the aforementioned analysis tool: the processing takes place for the analysis of the usage behaviour and is therefore necessary to protect our legitimate interests.
6. Use of Google's Marketing Services
We use the marketing and remarketing services ("Google marketing services" for short) of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
The information about your use of the website generated by the cookie or tags is usually sent to a Google server in the USA, where it is saved. However, due to the activation of IP anonymization on this website, Google will abbreviate your IP address in advance within member states of the European Union or in other countries within the European Economic Area that are party to the agreement. User data is therefore processed within the context of Google marketing services in pseudonymized form; i.e. Google does not, for example, store and process the names or e-mail addresses of users, but rather the relevant cookie-related data within pseudonymous user profiles. This means that, from Google's point of view, the ads are not managed and displayed for a specifically identified person, but rather for the cookie holder, regardless of who this cookie holder is.
This does not apply if a user has expressly allowed Google to process the data without pseudonymization. The information collected by Google marketing services about users is transmitted to Google and stored on Google's servers in the United States.
One of the Google marketing services we use is the online advertising program "Google AdWords". In the case of Google AdWords, each AdWords customer receives a different "conversion cookie". Cookies cannot therefore be traced through the websites of AdWords customers. The information collected by the cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers see the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that personally identifies users.
We can also use the "Google Tag Manager" to integrate and manage Google analysis and marketing services within our website.
If you wish to opt out of interest-based advertising through Google marketing services, you can use the setting and opt-out options provided by Google: http://www.google.com/ads/preferences.
Art. 6(1)(a) GDPR serves as the lawful basis for the use of the aforementioned marketing service.
7. Use of YouTube videos
We use video components from YouTube. YouTube is an Internet video portal that allows registered users to post video clips and other users to view, rate and comment on them free of charge.
YouTube is operated by YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.
Each time you call up a page on which a YouTube component (YouTube player) is integrated, the Internet browser on your computer is automatically prompted to download a display of the corresponding YouTube component from YouTube. You can find more information on YouTube at https://www.youtube.com/yt/about/de/ As part of this process, YouTube and Google are informed about which specific sub-page of our website you are visiting.
If you are logged in to YouTube at the same time, YouTube recognizes which specific sub-page of our website you are visiting when you call up a sub-page containing a YouTube video. This information is collected by YouTube and Google and assigned to your YouTube account.
YouTube and Google receive information via the YouTube component that you have visited our website whenever you are logged in to YouTube at the same time as visiting our website, regardless of whether you click on a YouTube video or not. If you do not want this information to be transmitted to YouTube and Google, you can prevent its transfer by logging out of your YouTube account before visiting our website.
You can also prevent an automatic connection being established at any time by choosing the appropriate settings in your Internet browser; our site can then still be used – even if you cannot watch videos.
The data protection regulations published by YouTube, which are to be found at https://www.google.de/intl/de/policies/privacy/, provide information about how personal data are collected, processed and used by YouTube and Google.
We do not store any personal data within YouTube. Personal data are not transmitted to other recipients.
Art. 6(1)(f) GDPR serves as the lawful basis for the use of the above-mentioned analysis tool: processing takes place for the purposes of the demand-oriented design of our website.
8. Storage period
Data stored by us will be deleted as soon as you revoke any consent or if the data is no longer required for its intended use and the deletion is not contrary to any legitimate interests or lawful storage obligations.
If the data cannot be deleted because it is needed for other, lawfully permissible purposes, its processing is restricted. This means that the data is blocked and will not be processed for other purposes. This applies, for example, to user data that must be retained for commercial or tax reasons.
In accordance with legal requirements, the data is stored for 6 years in accordance with § 257 (1) HGB (e.g. commercial letters, accounting records, etc.) and for 10 years in accordance with § 147 (1) AO (e.g. commercial and business letters, tax-related documents).
9. Rights of the data subject
You have the following rights:
a. Right of access
You have the right to request confirmation from us as to whether personal data concerning you is being processed.
b. Rectification/Erasure/Restriction of processing
Furthermore, you have the right to require us to:
• Immediately delete personal data concerning you (right of erasure) and
• Restrict processing (right to restriction of processing).
c. Right to data portability
You have the right to receive personal data concerning you, with which you have provided us, in a structured, commonly used and machine-readable format and the right to transmit this data to another controller.
d. Cancellation rights
You have the right to revoke your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
e. Right to object
If the processing of personal data concerning you is necessary for the performance of a task which is in the public interest (Art. 6 para. 1 (e) GDPR) or for the protection of our legitimate interests (Art. 6 para. 1 (f) GDPR), you have a right to object.
f. Right to lodge a complaint
If you believe that the processing of personal data concerning you violates the GDPR, you have the right to lodge a complaint to a supervisory authority, without prejudice to any other remedies.
10. Changes to the data privacy statement
We reserve the right to adapt this data privacy statement in the event of any changes to the legal situation, our services and data processing. However, this only applies with regard to statements on data processing. If user consents are required or sections of the data privacy statement contain provisions on the contractual relationship with users, the changes will only be made with the users' consent.
Users should regularly check this data privacy statement for changes.