Privacy Statement in accordance with DSGVO (General Data Protection Regulation)
I. Name and Address of the Responsible Party
The responsible party within the meaning of the General Data Protection Regulation and other national legislation of the member states as well as other data protection provisions is:
II. Name and address of the Data Protection Coordinator
The Data Protection Coordinator of the responsible party is:
Anton P. Speer
Dumrath & Fassnacht KG (GmbH & Co.)
Winsbergring 38, 22525 Hamburg
III. General Information on Data Processing
1. Scope of the Processing of Personal Data
We categorically collect and use personal data of our users only insofar as this is required for the provision of a functional website as well as of our contents and services.
2. Legal Basis of the Processing of Personal Data
To the extent that we obtain the consent of the person concerned for the processing operations of personal
data, Art. 6 (1) a) EU General Data Protection Regulation (GDPR) serves as legal basis for the processing of
For the processing of personal data required for the performance of a contract, where the person concerned is the contracting party, Art. 6 (1) b GDPR serves as legal basis. This also applies to processing operations required to carry out pre-contractual measures.
To the extent that processing of personal data is required for the fulfilment of a legal obligation that must be met by our company, Art. 6 (1) c GDPR serves as legal basis.
In case that vital interests of the person concerned or those of another natural person necessitate the processing of personal data, Art. 6 (1) d GDPR serves as legal basis.
If the processing is required to protect a legitimate interest of our company or that of a third party and if the interests, fundamental rights and fundamental freedoms of the person concerned do not outweigh the first-mentioned interest, Art. 6 (1) f GDPR serves as legal basis of the processing.
3. Data Deletion and Storage Period
The personal data of the person concerned are deleted or blocked as soon as the purpose of the storage ceases to exist. Further, data can be stored if this was intended by the European or national legislator in Union regulations, laws or other provisions governing the responsible party. Data is also blocked or deleted if a period of retention prescribed by the mentioned standards, unless the continued storage of the data is required for the purpose of the formation or implementation of a contract.
IV. Availability of the Website and Creation of Log Files
1. Description and Extent of Data Processing
Every time our internet site is called up, our system automatically captures data and information from the
computer system of the calling computer.
In doing so, the following data is collected:
- Information on the type of browser and the version used
- The operation system of the user
- Date and time of access
- Websites used for the system of the user to reach our internet site
- Websites which are called up by the system of the user via our website
The data is also stored in the log files of our system. This does not apply to the IP addresses of the user or other data enabling the assignment of the data to a user. Such data as well as other personal data of the user is not stored.
2. Legal Basis for the Data Processing
Legal Basis for the temporary storage of the data is Art. 6 (1) f GDPR.
3. Purpose of Data Processing
The temporary storage of the IP address by the system is required to enable delivery of the website to the
computer of the user. For this purpose, the IP address of the user must be stored for the duration of the
This is also the purpose of our legitimate interest in data processing in accordance with Art. 6 (1) f GDPR.
4. Duration of Storage
The data shall be deleted as soon as it is no longer required to fulfil the purpose of its collection. This is the case if the data is collected for the availability of the website, when each session has ended.
5. Option to object and remove
The collection of the data for the availability of the website and the storage of the data in log files is essential for the operation of the internet site. Therefore, there is no option to object on the part of the user.
a) Description and Extent of Data Processing
browser on the computer system of the user. If a user calls up a website, a cookie can be saved on the
operating system of the user. This cookie contains a distinctive character string, which enables clear
identification of the browser when the website is called up again.
b) Legal Basis for Data Processing
The legal basis for the processing of personal data by using cookies is Art. 6 (1) f GDPR.
c) Purpose of Data Processing
Cookies do not contain any personal information and serve only technical purposes.
This is also the purpose of our legitimate interest in the processing of personal data in accordance with Art. 6 (1) f GDPR.
d) Duration of Storage, Option to object and remove
VI. Contact and Registration Forms, E-mail Contact and Professional Account as well as Order Forms
1. Description and Extent of Data Processing
Our internet page provides various forms used for contacting us by electronic means as well as the order process. If a user takes this option, the data entered in the input screen are transmitted to us and stored. Such data are:
- First name
- Street and house number
- Postal code
- PO Box
- E-mail address for reply
- Message text
- Contact by telephone preferred
- Mailing of media data requested
- Offer until (for scheduling)
- Comment on product enquiry
- User name (for login in professional area)
- Password (for login in professional area)
- Number of items (for orders)
- VAT ID No. (for orders)
- Method of payment (for orders)
- Information on the type of browser and the version used
At the time of dispatch of the message, the following data are also saved:
- Date and time of message
In the course of the dispatching process, your consent for the processing of the data is obtained and reference
is made to this privacy statement.
Alternatively, contact can be made via the e-mail address provided. In this case, the personal data of the user transmitted in the e-mail are stored.
In this connection, the data shall not be passed to third parties. The data is used solely for the processing of the conversation.
2. Legal Basis for the Data Processing
If the consent of the user has been provided, the legal basis for the processing of the data is
Art. 6 (1) a GDPR.
Legal basis for the processing of the data that are transmitted when an e-mail is sent, is Art. 6 (1) f GDPR. If the e-mail contact is aimed at forming a contract, an additional legal basis for the processing is Art. 6 (1) b GDPR.
3. Purpose of Data Processing
The processing of personal data from the input screen assist us solely in dealing with making contact as well
as the correct handling of orders. In case of contact by e-mail, here lies also the required legitimate
interest in the processing of the data.
The other personal data processed during the dispatching process serve to prevent misuse of the contact form and to ensure the security of our IT systems.
4. Duration of Storage
The data shall be deleted as soon as it is no longer required to fulfil the purpose of its collection. For the
personal data from the input screen of the respective form and those that were sent by e-mail, this is the case
when the respective conversation with the user has finished. The conversation is finished when the
circumstances suggest that the matter in question has been resolved.
The personal data also collected during the dispatching process are deleted no later than after a period of seven days.
5. Option to object and remove
The user has the option at any time to revoke his consent to the processing of personal data; such revocation
can be communicated in writing, via fax or e-mail. If the user contacts us via e-mail, he can object to the
storage of his personal data at any time. In such case, the conversation cannot be continued.
All personal data saved during the contact shall be deleted in this case.
VII. Information on integrated Services
1. Web Analysis with Google Analytics
This website uses Google Analytics, a web analysis service by Google Inc., 1600 Amphitheatre Parkway, Mountain
View, CA 94043, USA, for the analysis of websites. Google Analytics uses so-called “cookies”, text files
stored on your computer that enable an analysis of your activity on the website. The information about your
activity on this website generated by cookies is usually transmitted to a Google server in the USA and stored
there. When activating the IP anonymisation on this website, Google will first abbreviate your IP address
within the EU member states and other signatories to the Treaty on the European Economic Area. The full IP
address will be transmitted to a Google server in the USA and abbreviated there in exceptional cases only.
Google will use this information on behalf of the operator of this website to analyse your use of the website,
prepare reports on website activities and to provide other services related to the use of the website and the
internet to the website operator. The IP address transmitted by your browser via Google Analytics is not
combined with other Google data. You can reject cookies on your computer by changing the settings of your
browser accordingly. However, please note that not all functions on our website may be fully available if you
reject cookies. You can also prevent the collection of data related to your website use generated by the
cookie (including your IP address) and its transmission to Google, as well as the processing of this data by
Google by downloading and installing the browser plugin under the following link:
As an alternative to a browser plug-in or within mobile devices browsers, please click on the link below to place an opt-out cookie to prevent future collection by Google Analytics on this website (this opt-out cookie only works on this browser and only for this domain, if you delete your cookies in this browser, you need to click this link again): Deactivate Google Analytics.
In view of the discussion on the use of analytical tools with full IP addresses, we would like to point out that this website uses Google Analytics with the add-on _anonymizeIp()”, and consequently IP addresses are processed only in a shortened way, in order to exclude a direct personal reference.
This website uses the product OpenStreetMap by FOSSGIS e.V., Römerweg 5, 79199 Kirchzarten in Germany to display
maps. By using this website, you consent to the collection, processing and use of data automatically collected
3. Google Tag Manager
This website uses Google Tag Manager by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, to manage the insertion of advertising. Google Tag Manager is a solution, which marketers can use for the administration of website tags via an interface. The tool Tag Manager itself (which implements the tags) is a domain without cookies and does not collect any personal data. The tool ensures that other tags are activated, which themselves potentially collect data. Google Tag Manager does not access this data. If a deactivation has been carried out on a domain or cookie level, these remain for all tracking tags that are implemented with Google Tag Manager.
4. Privacy Statement for the Use of Google AdSense
This website uses Google AdSense. This is a service provided by Google Inc., 1600 Amphitheatre Parkway,
which, due to being saved on the PC, Google can analyse the data of your use of our website. In addition, with
Google AdSense, web beacons are also used, invisible graphics enabling Google to analyse clicks on this website,
the traffic and similar information.
The information received via cookies and web beacons, your IP address as well as the delivery of advertising formats are transmitted to a Google Server located in the USA and stored there. Google potentially passes this collected information to third parties, if this is legally required or if Google instructs third parties to process the data. Google will, however, amalgamate your IP address with the other stored data.
With corresponding settings in your internet browser, you can prevent the storage of the named cookies on your PC. As a result, it is, however, possible that the contents of this website can no longer be used to the same extent. By using this website, you agree to the processing of the data on your specific person by Google in the manner and for the purposes described above.
Videos in the “YouTube” platform of the third-party provider Google LLC, 1600 Amphitheatre Parkway,
Mountain View, CA 94043, USA.
Privacy statement: https://policies.google.com/privacy ,
6. SIX Payment Service
If our clients use the payment services of SIX, the terms and conditions and the data protection notices of the
respective third-party providers, which can be retrieved within the respective websites or transaction
SIX Payment Services AG, Hardturmstrasse 201, 8005 Zürich
VIII. Rights of the Person concerned
If your personal data is processed, you are a concerned person within the meaning of GDPR and you have the following rights against the responsible party:
1. Right to Information
You can request confirmation from the responsible party as to whether personal data concerning your person are
processed by us.
If such processing is carried out, you can request the information from the responsible party on the following:
- the purposes for which personal data is processed;
- the categories of personal data that is processed;
- the recipients or categories of recipients to whom the personal data concerning your person has been disclosed or is yet to be disclosed;
- the intended duration of the retention of the personal data concerning your person or, if it is not possible to provide specific data on this query, the criteria for the determination of the duration of the storage;
- the existence of a right to correction or deletion of the personal data concerning your person, a right to restriction on the processing by the responsible party or a right of objection against this processing;
- the existence of a right to raise a complaint with a supervisory authority;
- all available information on the origins of the data, if the personal data are not collected from the person concerned;
- the existence of an automated decision-making including profiling in accordance with Art. 22 (1) and (4) GDPR and - at least in these cases - meaningful information on the rationale involved as well as the scope and the pursued objectives of such processing regarding the person concerned.
You have the right to request information on whether the personal data concerning your person are transmitted to a third-party country or to an international organisation. In this context, you can request to be informed about the appropriate guarantees in accordance with Art. 46 GDPR in conjunction with the transmission.
2. Right to Correction
You have a right to correction and/or completion against the responsible party, if the processed personal data concerning your person are incorrect or incomplete. The responsible party must carry out the correction immediately.
3. Right to Restriction of Processing
Under the following conditions you can request the restriction of processing of the personal data concerning your person:
- If you are disputing the accuracy of the personal data concerning your person for a duration, which enables the responsible party to verify the accuracy of the personal data;
- the processing is unlawful, and you decline the deletion of the personal data and instead request a restriction of the use of the personal data;
- the responsible party does not longer require the personal data for the purposes of the processing, you, however, require these for the assertion, exercise or defence of legal rights, or
- if you have raised an objection against the processing in accordance with Art. 21 (1) GDPR and it has not yet been determined, whether the legitimate reasons of the responsible party outweigh your reasons.
If the processing of the personal data concerning your person has been restricted, then these data, apart from
their storage, may only be processed with your consent or for the assertion, exercise or defence of legal
claims or for the protection of the rights of another natural or legal person or for reasons of a substantial
public interest of the Union or a member state.
If the processing has been restricted in accordance with the above-mentioned conditions, you shall be notified by the responsible party prior to the withdrawal of the restriction.
4. Right to Deletion
a) Obligation of Deletion
You can request the responsible party to immediately delete the personal data concerning your person, and the responsible party has an obligation to delete such data immediately, if one of the following reasons applies:
- The personal data concerning your person are no longer required for the purposes for which they were collected or otherwise processed.
- You revoke your consent the processing in accordance with Art. 6 (1) a or Art. 9 (2) a GDPR was based and there is no other legal basis for the processing.
- You raise an objection against processing in accordance with Art. 21 (1) GDPR, and there are no overriding legitimate reasons for the processing, or you raise an objection against processing in accordance with Art. 21 (2) GDPR.
- The personal data concerning your person were illegally processed.
- The deletion of the personal data is required to meet a legal obligation under European Union law or the right of the member states, by which the responsible party is governed.
- The personal data concerning your person has been collected in relation to information society services in accordance with Art. 8 (1) GDPR.
b) Information to Third Parties
If the responsible party has release the personal data concerning your person, and if it has an obligation in accordance with Art. Section 17 (1) GDPR to delete such data, it shall take reasonable measures including technical measures, having regard to the available technology and the costs of implementation, in order to inform the party responsible for the data processing, which is processing personal data, that you, as person concerned, have requested the deletion of all links to this personal data or of copies or replications of this personal data.
The right to deletion does not exist, to the extent that the processing is required
- for the exercise of the right to freedom of expression and information;
- for the fulfilment of a legal obligation, which requires the processing in accordance with European Union law or law of the member states by which the responsible party is governed, or to carry out a task, which is in the public interest or which is carried out in the exercise of public power, which has been transferred to the responsible party;
- for reasons of public interests in the area of public health in accordance with Art. 9 (2) h and i as well as Art. 9 (3) GDPR;
- for filing purposes that are in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Art. 89 (1) GDPR, insofar as the right named under section a) will probably render the realisation of the objectives of this processing impossible or have a serious adverse effect on the realisation of the objectives, or
- for the assertion, exercise or defence of legal claims.
5. Right to obtain Information
If you have asserted the right to correction, deletion or restriction of the processing against the responsible
party, the same has an obligation to notify all recipients to whom the personal data concerning your person
has been disclosed, of this correction or deletion of the data or restriction of processing, unless this
proves to be impossible or it is associated with disproportionate expenses.
You have the right against the responsible party to be notified of these recipients.
6. Right to Data Portability
You have the right to receive the personal data concerning your person, which you have provided to the responsible party, in a structured, common and machine-readable format. In addition, you also have the right to transmit this data to another responsible party without obstruction on the part of the responsible party, who was provided with the personal data, if
- if the processing is based on permission in accordance with Art. 6 (1) a GDPR or Art. 9 (2) a GDPR or on a contract in accordance with Art. 6 (1) b GDPR and
- the processing is carried out by way of an automated procedure.
In the exercise of this right you also have the right to seek that the personal data concerning your person
are transmitted directly by a responsible party to another responsible party, insofar this is technically
feasible. Freedoms and rights of other persons must hereby not be compromised.
The right to data portability does not apply to the processing of personal data, which is required for the performance of a task, which is in the public interest or which is carried out in the exercise of public power, which has been transferred to the responsible party.
7. Right of Objection
You have the right to object at any time to the processing of the personal data concerning your person, for
reasons arising out of your particular situation, such processing being carried out on the basis of
Art. 6 (1) e or f GDPR; this does also apply to profiling on the basis of these provisions.
The responsible party is no longer processing the personal data concerning your person, unless the responsible party can provide compelling reasons worthy of protection, outweighing your interests, rights and freedoms, or the processing is serving the assertion, exercise of defence of legal claims.
If the personal data concerning your person is processed for the purpose of direct advertising, you have the right to object at any time to the processing of the personal data concerning your person for the purpose of such advertising; this also applies to profiling, insofar as it is connected to such direct advertising.
If you are objecting to the processing for the purpose of direct advertising, then the personal data concerning your person shall no longer be processed for these purposes.
You have the option to exercise your right to object by means of automated procedures where technical specifications are used, in conjunction with the utilisation of information society services, irrespective of Directive 2002/58/EG.
8. Right of Revocation of the Declaration of Consent under Data Protection Law
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the legitimacy of the processing based on consent up to the point such consent was revoked.
9. Automated Decision in individual Cases including Profiling
You have the right, not to be subject to a decision exclusively based exclusively on automated processing, including profiling, which takes legal effect on you or which has a significant adverse effect on you in similar ways. This does not apply, if the decision
- on the formation or the implementation of a contract between yourself and the responsible party is required,
- is admissible due to legal provisions of the European Union or of the member states, by which the responsible party is governed, and if these legal provisions contain reasonable measures to safeguard your rights and freedoms as well as your legitimate interests or
- is made with your express consent.
However, these decisions must not be based on special categories of personal data in accordance with
Art. 9 (1) GDPR, if Art. 9 (2) a or g does not apply and reasonable measures for the protection of the rights
and freedoms as well as your legitimate interests have been taken.
With regard to the cases named in (1) and (3), the responsible party shall take reasonable steps to safeguard the rights and freedoms as well as your legitimate interests, whereby this includes at least the right to seek intervention of a person on the part of the responsible party, the right to present one’s own case and the right to contest the decision.
10. Right to raise a Complaint with a Supervisory Authority
Irrespective of another administrative or judicial remedy, you have the right to raise a complaint with a
supervisory authority, in particular in the member state of your residence, your place of employment or the
place where the possible infringement took place, if you are of the opinion that the processing of the personal
data concerning your person is in breach of the GDPR.
The supervisory authority where the complaint was submitted, shall inform the complainant of the status and outcome of the complaint including the option of a judicial remedy in accordance with Art. 78 GDPR.
IX. Overview of our Partners/Services and their Privacy Policies
- Google Analytics: https://policies.google.com/privacy?hl=de
- Google Adsense: https://www.google.de/intl/de/policies/technologies/ads/
- OpenStreetMap: https://wiki.osmfoundation.org/wiki/Privacy_Policy
- Google Tag Manager: https://policies.google.com/privacy?hl=de
- YouTube: https://policies.google.com/privacy?hl=de
- SIX Payment Service: https://www.six-payment-services.com/en/services/legal/privacy-statement.html
The legally binding form of the Privacy Statement in accordance with GDPR is the German form.
Version 1.1 dated 03.01.2019