Privacy Policy

This Privacy Policy informs you about the nature, scope and purpose of the processing of personal data (hereinafter briefly referred to as "data") in connection with the provision of our services, as well as within our online offering and the associated websites, functions and content, and external online presences, such as our social media profiles (hereinafter collectively referred to as the "Online Offering"). With regard to the terminology used, such as "processing" or "controller", we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).

Controller

Andreas Pohl
Strada Principala 280
Jud. Alba, ROMANIA

info@dupa-gard.com
Imprint: https://www.dupa-gard.com/impressum

Types of Data Processed

Inventory data (e.g. personal master data, names or addresses).
Contact data (e.g. email addresses, telephone numbers).
Content data (e.g. text entries, photographs, videos).
Usage data (e.g. websites visited, interest in content, access times).
Meta/communication data (e.g. device information, IP addresses).

Categories of Data Subjects

Visitors and users of the Online Offering (hereinafter collectively referred to as "Users").

Purpose of Processing

Provision of the Online Offering, its functions and content.
Responding to contact enquiries and communicating with users.
Security measures.
Reach measurement/marketing.

Terminology Used

"Personal data" means any information relating to an identified or identifiable natural person (hereinafter referred to as the "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g. a cookie) or one or more specific characteristics that express the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

"Processing" means any operation or set of operations performed on personal data, whether or not by automated means. The term is broad and covers practically any handling of data.

"Pseudonymisation" means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data is not attributed to an identified or identifiable natural person.

"Profiling" means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's work performance, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.

The "Controller" is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

A "Processor" is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the Controller.

Relevant Legal Bases

In accordance with Article 13 GDPR, we inform you of the legal bases for our data processing. For users within the scope of the General Data Protection Regulation (GDPR), i.e. the EU and the EEA, the following applies unless the legal basis is specified in this Privacy Policy:

The legal basis for obtaining consent is Article 6(1)(a) and Article 7 GDPR;

The legal basis for processing data to fulfil our services, carry out contractual measures and respond to enquiries is Article 6(1)(b) GDPR;

The legal basis for processing data to fulfil our legal obligations is Article 6(1)(c) GDPR;

In the event that the vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) GDPR serves as the legal basis.

The legal basis for processing required to perform a task carried out in the public interest or in the exercise of official authority vested in the Controller is Article 6(1)(e) GDPR.

The legal basis for processing data to protect our legitimate interests is Article 6(1)(f) GDPR.

The processing of data for purposes other than those for which they were originally collected is governed by the provisions of Article 6(4) GDPR.

The processing of special categories of personal data (in accordance with Article 9(1) GDPR) is governed by the provisions of Article 9(2) GDPR.

Security Measures

In accordance with legal requirements, taking into account the state of the art, implementation costs and the nature, scope, circumstances and purposes of processing, as well as the varying likelihood and severity of risks to the rights and freedoms of natural persons, we implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk.

These measures include, in particular, safeguarding the confidentiality, integrity and availability of data through the control of physical access to the data, as well as access to the data itself, data entry, disclosure, ensuring availability and separation of data. Furthermore, we have established procedures to ensure the exercise of data subject rights, the deletion of data and responses to threats to data. We also take the protection of personal data into account during the development or selection of hardware, software and procedures, in accordance with the principle of data protection by design and data protection by default.

Cooperation with Processors, Joint Controllers and Third Parties

If, in the course of our processing activities, we disclose data to other persons and companies (processors, joint controllers or third parties), transfer data to them or otherwise grant them access to the data, this is done only on the basis of a legal permission (e.g. if the transfer of data to third parties, such as payment service providers, is necessary for the fulfilment of a contract), if users have given their consent, if a legal obligation provides for this, or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).

If we disclose data to other companies within our corporate group, transfer data to them or otherwise grant them access to the data, this is done in particular for administrative purposes as a legitimate interest and, beyond that, on a basis that complies with legal requirements.

Transfers to Third Countries

If we process data in a third country (i.e. outside the European Union (EU), the European Economic Area (EEA) or the Swiss Confederation), or if this occurs in the context of using third-party services or disclosing or transferring data to other persons or companies, this is done only if it is necessary for the fulfilment of our (pre-)contractual obligations, on the basis of your consent, due to a legal obligation or on the basis of our legitimate interests.

Subject to legal or contractual permissions, we process data in a third country, or have it processed there, only if the legal requirements are met. This means that processing takes place, for example, on the basis of special guarantees, such as the officially recognised determination of a level of data protection equivalent to that of the EU (e.g. for the USA through the "Privacy Shield"), or compliance with officially recognised specific contractual obligations.

Rights of Data Subjects

You have the right to request confirmation as to whether relevant data is being processed and to obtain information about this data, as well as further information and a copy of the data in accordance with legal requirements.

In accordance with legal requirements, you have the right to request the completion of data concerning you or the correction of inaccurate data concerning you.

In accordance with legal requirements, you have the right to request that relevant data be deleted without delay, or alternatively, in accordance with legal requirements, to request a restriction on the processing of the data.

You have the right to request that the data concerning you which you have provided to us be received in accordance with legal requirements and to request its transfer to other Controllers.

Furthermore, in accordance with legal requirements, you have the right to lodge a complaint with the competent supervisory authority.

Right to Withdraw Consent

You have the right to withdraw any consent you have given, with effect for the future.

Right to Object

You may object at any time to the future processing of data concerning you in accordance with legal requirements. The objection may be made in particular against processing for the purposes of direct advertising.

Cookies and Right to Object to Direct Advertising

"Cookies" are small files that are stored on users' computers. Different information can be stored within cookies. A cookie primarily serves to store information about a user (or the device on which the cookie is stored) during or after their visit to an online offering.

Temporary cookies, also known as "session cookies" or "transient cookies", are cookies that are deleted after a user leaves an online offering and closes their browser. Such a cookie may, for example, store the contents of a shopping cart in an online shop or a login status.

"Permanent" or "persistent" cookies are cookies that remain stored even after the browser has been closed. For example, the login status may be saved when users visit the website again after several days. Likewise, such cookies may store users' interests, which are used for reach measurement or marketing purposes.

"Third-party cookies" are cookies offered by providers other than the Controller operating the online offering (otherwise, if only the Controller's own cookies are used, these are referred to as "first-party cookies").

We may use temporary and permanent cookies and provide information about this in our Privacy Policy.

If users do not wish cookies to be stored on their computers, they are asked to deactivate the corresponding option in their browser's system settings. Stored cookies can be deleted in the browser's system settings. Excluding cookies may result in functional restrictions of this Online Offering.

A general objection to the use of cookies employed for online marketing purposes can be declared through a number of services, particularly in the case of tracking, via the US website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/.

Furthermore, the storage of cookies can be prevented by disabling them in the browser settings. Please note that, in this case, not all functions of this Online Offering may be available.

Deletion of Data

The data processed by us is deleted or its processing restricted in accordance with legal requirements. Unless expressly stated otherwise in this Privacy Policy, the data stored by us is deleted as soon as it is no longer necessary for its intended purpose and provided that no statutory retention obligations prevent its deletion.

If the data is not deleted because it is required for other legally permissible purposes, its processing is restricted. This means that the data is blocked and is not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax-related reasons.

Changes and Updates to the Privacy Policy

We ask you to regularly inform yourself about the content of our Privacy Policy. We adapt the Privacy Policy as soon as changes to the data processing activities carried out by us make this necessary. We will inform you as soon as the changes require any action on your part (e.g. consent) or any other individual notification.

Contact

When contacting us (e.g. via contact form, email, telephone or social media), the information provided by the user is processed for the purpose of handling and responding to the contact enquiry in accordance with Article 6(1)(b) (within the framework of contractual/pre-contractual relationships) and Article 6(1)(f) (other enquiries) GDPR. The information provided by users may be stored in a Customer Relationship Management system ("CRM system") or a comparable enquiry management system.

We delete enquiries if they are no longer necessary. We review their necessity every two years; furthermore, statutory archiving obligations apply.

Online Presences in Social Media

We maintain online presences within social networks and platforms in order to communicate with customers, interested parties and users who are active there, and to inform them about our services.

We point out that user data may be processed outside the European Union. This may create risks for users, as the enforcement of their rights could, for example, become more difficult. With regard to US providers certified under the Privacy Shield, we point out that they thereby undertake to comply with EU data protection standards.

Furthermore, user data is generally processed for market research and advertising purposes. For example, usage profiles may be created based on user behaviour and the resulting interests. These usage profiles may in turn be used to display advertisements within and outside the platforms that are presumed to correspond to users' interests. For these purposes, cookies are generally stored on users' computers, in which usage behaviour and interests are recorded. Furthermore, usage profiles may also store data independently of the devices used by users (particularly if users are members of the respective platforms and are logged in).

The processing of users' personal data is based on our legitimate interests in effectively informing users and communicating with them in accordance with Article 6(1)(f) GDPR. If users are asked by the respective platform providers to consent to the data processing described above, the legal basis for processing is Article 6(1)(a) and Article 7 GDPR.

For a detailed description of the respective processing activities and the available options to object (opt-out), we refer to the information provided by the providers and linked below.

We also point out that, in the case of requests for information and the exercise of user rights, these can be most effectively pursued directly with the providers. Only the providers have access to users' data and can directly take appropriate measures and provide information. However, if you require assistance, you can contact us.

Facebook pages and groups (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland), on the basis of an Agreement on Joint Processing of Personal Data – Privacy Policy: https://www.facebook.com/about/privacy/, specifically for pages: https://www.facebook.com/legal/terms/information_about_page_insights_data, Opt-Out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.
Google/YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) – Privacy Policy: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) – Privacy Policy/Opt-Out: http://instagram.com/about/legal/privacy/.
Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA) – Privacy Policy: https://twitter.com/de/privacy, Opt-Out: https://twitter.com/personalization, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active.
Pinterest (Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA) – Privacy Policy/Opt-Out: https://about.pinterest.com/de/privacy-policy.
LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland) – Privacy Policy: https://www.linkedin.com/legal/privacy-policy, Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active.
Xing (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany) – Privacy Policy/Opt-Out: https://privacy.xing.com/de/datenschutzerklaerung.
Wakelet (Wakelet Limited, 76 Quay Street, Manchester, M3 4PR, United Kingdom) – Privacy Policy/Opt-Out: https://wakelet.com/privacy.html.
SoundCloud (SoundCloud Limited, Rheinsberger Str. 76/77, 10115 Berlin, Germany) – Privacy Policy/Opt-Out: https://soundcloud.com/pages/privacy.

Integration of Third-Party Services and Content

Within our Online Offering, we use content or service offerings from third-party providers on the basis of our legitimate interests (i.e. our interest in analysing, optimising and economically operating our Online Offering within the meaning of Article 6(1)(f) GDPR), in order to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as "Content").

This always requires that the third-party providers of this Content can access users' IP addresses, as they would not be able to send the Content to users' browsers without the IP address. The IP address is therefore necessary for the display of this Content.

We endeavour to use only such Content whose respective providers use the IP address solely for the delivery of the Content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes.

Through these "pixel tags", information such as visitor traffic on the pages of this website can be evaluated. The pseudonymous information may also be stored in cookies on users' devices and may include, among other things, technical information about the browser and operating system, referring websites, time of visit and other information about the use of our Online Offering, as well as information linked from other sources.

YouTube

We integrate videos from the "YouTube" platform, provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Maps

We integrate maps from the "Google Maps" service, provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

The data processed may include, in particular, users' IP addresses and location data, which are not collected without their consent (usually given through the settings of their mobile devices). The data may be processed in the USA.

Use of Facebook Social Plugins

On the basis of our legitimate interests (i.e. our interest in analysing, optimising and economically operating our Online Offering within the meaning of Article 6(1)(f) GDPR), we use social plugins ("plugins") from the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").

These may include, for example, content such as images, videos or texts and buttons that allow users to share the content of this Online Offering within Facebook. The list and appearance of Facebook Social Plugins can be viewed here: https://developers.facebook.com/docs/plugins/.

Facebook is certified under the Privacy Shield Agreement and thereby provides a guarantee of compliance with European data protection standards (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

When a user accesses a function of this Online Offering that contains such a plugin, their device establishes a direct connection with Facebook's servers. The content of the plugin is transmitted directly from Facebook to the user's device and integrated into the Online Offering. In doing so, usage profiles of users may be created from the processed data. We therefore have no influence over the extent of the data that Facebook collects using this plugin and inform users accordingly based on our knowledge.

By integrating the plugins, Facebook receives information that a user has accessed the corresponding page of the Online Offering. If the user is logged into Facebook, Facebook can associate the visit with their Facebook account. If users interact with the plugins, for example by clicking the Like button or leaving a comment, the corresponding information is transmitted directly from their device to Facebook and stored there.

Even if a user is not a member of Facebook, there is still the possibility that Facebook may discover and store their IP address. According to Facebook, only an anonymised IP address is stored in Germany.

The purpose and scope of data collection and the further processing and use of data by Facebook, as well as the related rights and setting options for protecting users' privacy, can be found in Facebook's privacy information: https://www.facebook.com/about/privacy/.

If a user is a Facebook member and does not want Facebook to collect data about them through this Online Offering and link it to their membership data stored by Facebook, they must log out of Facebook and delete their cookies before using our Online Offering.

Further settings and objections to the use of data for advertising purposes are possible within Facebook profile settings: https://www.facebook.com/settings?tab=ads, or through the US website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/.

The settings are platform-independent, meaning they apply to all devices, such as desktop computers and mobile devices.

Google+

Within our Online Offering, functions and content from the Google+ platform, offered by Google LLC, may be integrated. These may include, for example, content such as images, videos or texts and buttons that allow users to share the content of this Online Offering within Google.

If users are members of the Google+ platform, Google may associate the access to the above-mentioned content and functions with their respective profiles.

Google is certified under the Privacy Shield Agreement and thereby provides a guarantee of compliance with European data protection standards (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

Further information about Google's use of data, settings and options for objecting can be found in Google's Privacy Policy (https://policies.google.com/technologies/ads) and in the settings for the display of advertising (https://adssettings.google.com/authenticated).

Created with Datenschutz-Generator.de by Attorney Dr. Thomas Schwenke.