Table of contents

BASIC INFORMATION ON DATA PROCESSING

PERSONAL DATA

PURPOSES OF THE PROCESSING

DURATION OF STORAGE

YOUR RIGHTS REGARDING THE COLLECTION OF PERSONAL DATA

COOKIES AND OTHER TECHNOLOGIES

FINAL PROVISIONS

Privacy policy

DANZZ

https://danzz.at

I. BASIC INFORMATION ON DATA PROCESSING

  1. The controller for the processing of your personal data within the meaning of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG) is the:
    DANZZ Spółka z ograniczoną odpowiedzialnością
    ul. Techniczna 19
    37-600 Lubaczów (Poland)
    USt-IdNr: PL7931628448
    e-mail: info@danzz.de
    TEL: +49 17 63 62 76 475
  2. With the following privacy policy, we inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide either alone or together with others on the purposes and means of processing. We also inform you below about the third-party components we use for optimisation purposes and to increase the quality of use, insofar as third parties process data under their own responsibility.
  3. Please read through this policy to see how we handle your personal data.

II. PERSONAL DATA

  1. According to Article 4(1) of Regulation (EU) 2016/679, i.e. the GDPR, ‘processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
  2. The controller declares that it takes particular care to protect the interests of the data subjects and in particular ensures that:
    • personal data is processed lawfully, fairly and in a transparent manner for the data subjects;
    • collects personal data for specific, explicit and legitimate purposes and does not further process it in a way that is incompatible with those purposes;
    • personal data are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;
    • personal data is correct and, if necessary, updated;
    • store personal data in a form which permits identification of the data subject for no longer than is necessary for the purposes for which the personal data are processed;
    • processes personal data in a manner that ensures appropriate security, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.
  3. The provision of personal data is voluntary, but necessary for the purposes mentioned under point III.
  4. We guarantee the security of the data that you send to us, whether in physical, electronic or administrative form. We strongly advise you to take all necessary measures to protect your data when surfing the Internet.
  5. We use standard SSL encryption (Secure Sockets Layer) on all Internet pages via which personal data is entered.
  6. If content, tools or other means from other providers (hereinafter jointly referred to as ‘third-party providers’) are used within the scope of this privacy policy and their registered office is located in a third country, it is to be assumed that data is transferred to the countries in which the third-party providers are based. Third countries are countries in which the GDPR is not directly applicable law, i.e. generally countries outside the EU or the European Economic Area. Data is transferred to third countries either if there is an adequate level of data protection, user consent or other legal authorisation.

III. PURPOSES OF THE PROCESSING

    1. We only store your data for as long as is necessary for the respective purpose of processing.
    2. We only process users’ personal data in compliance with the relevant data protection regulations. This means that user data will only be processed if we are legally authorised to do so. This means, in particular, if the data processing is necessary for the provision of our contractual services (e.g. processing of orders) and online services, or is required by law, if the user has given their consent, as well as on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation and security of our online offer within the meaning of Art. 6 para. 1 lit. f) GDPR, in particular in the measurement of reach, creation of profiles for advertising and marketing purposes as well as collection of access data and use of third-party services).
    3. We would like to point out that the legal basis for consent is Art. 6 para. 1 lit. a) and Art. 7 GDPR, the legal basis for processing to fulfil our services and implement contractual measures is Art. 6 para. 1 lit. b) GDPR, the legal basis for processing to fulfil our legal obligations is Art. 6 para. 1 lit. c) GDPR, and the legal basis for processing to protect our legitimate interests is Art. 6 para. 1 lit. f) GDPR.
    4. If a purchase is made or other services offered by www.danzz.de are used, the fulfilment of the contract (Art. 6 para. 1 lit. b GDPR) forms the basis for the processing of user data. Accordingly, the user data is processed until the order or service has been provided or until the limitation period expires or until the claims expire.
    5. Depending on the selected payment method, we pass on the data necessary for processing the payment transaction to our technical service providers, who work for us as part of order processing, or to the commissioned credit institutions or to the selected payment service provider, insofar as this is necessary for processing the payment. This serves the fulfilment of the contract in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR. In some cases, the payment service providers collect the data required for processing the payment themselves, e.g. on their own website or via a technical integration in the ordering process. In this respect, the privacy policy of the respective payment service provider applies.
    6. Newsletter: You can register on our website to receive our newsletter. The newsletter contains news, offers and other information about DANZZ products and services. Our newsletter is sent on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR. To receive the newsletter, you must enter your e-mail address in the field provided for this purpose on our website. We will then send you a notification email and ask you to confirm that you wish to receive our newsletter by clicking on a link contained in this email (double opt-in). We will therefore only send you a newsletter by e-mail if you have expressly confirmed to us beforehand that we should activate the newsletter service.
    7. You can revoke your consent to the processing of your data for newsletter dispatch at any time with effect for the future. Each time you use our website, we collect access data that your browser automatically transmits to enable you to visit the website. The access data includes in particular IP address of the requesting device, information on the time of the request, address of the website accessed and the requesting website, information on the browser and operating system used, online identifiers..
    8. Sending review requests by email. If you have given us your express consent to this during or after your order in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, we will use your e-mail address to request a rating of your order via the rating system we use. This consent can be revoked at any time by sending a message to the contact option described in this privacy policy or via a link provided for this purpose in the evaluation request.
    9. The personal data that you provide in connection with contacting the controller by email, telephone or contact form will be processed primarily for the purpose of processing your enquiry and responding to your request. The legal basis for the processing of your personal data for this purpose is the legitimate interest of the controller – Art. 6 (1) (f) GDPR.
    10. Data recipients may be the following:
      Accounting companies, suppliers of IT solutions, payment processing companies, marketing companies, suppliers of telecommunication services, authorised state authorities.
    11. If payment is made using a payment method offered by PayPal, payment is processed by the payment service provider PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
    12. When paying using a payment method offered by Klarna, the payment is processed via the payment service provider Klarna Bank AB (publ). Sveavägen 46, 111 34 Stockholm.

IV. DURATION OF STORAGE

We only store your personal data for as long as we are required to do so by law (e.g. tax laws). After expiry of the relevant retention period, we routinely delete the corresponding data if it is no longer required for contract fulfilment or contract initiation. If the storage purpose ceases to apply before the expiry of a statutory retention period, we delete the corresponding data immediately. If we have to delete data because intervention rights have been exercised by you, this will also be done immediately.

V. YOUR RIGHTS REGARDING THE COLLECTION OF PERSONAL DATA

  1. The applicable data protection law grants you comprehensive data subject rights vis-à-vis the controller with regard to the processing of your personal data, about which we inform you below:
    1. Right to confirmation (Art. 15 GDPR). You have the right to request confirmation from us as to whether we are processing personal data concerning you. Corresponding requests must be addressed to us. If you make the corresponding request by electronic means, the information must be provided by us in a common electronic format, unless you specify otherwise.
    2. Right to information (Art. 15 GDPR). If personal data concerning you is processed by us, you have the right to receive information from us at any time free of charge about the personal data stored about you and a copy of this data. You can also request the following information from us:
      – the purposes of the processing;
      – the categories of personal data that are processed
      – the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations
      – where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
      – the existence of a right to rectification or erasure of personal data concerning you or to restriction of processing by us or a right to object to such processing
      – the existence of a right to lodge a complaint with a supervisory authority
      – if the personal data is not collected from you, all available information about the origin of the data
      – the existence of automated decision-making, including profiling, in accordance with Art. 22 (1) and (4) GDPR and – at least in these cases – meaningful information about the logic involved and the scope and intended effects of such processing for you.
      You can contact us at any time to assert the aforementioned rights to information. If you make the corresponding request by electronic means, we must provide the information in a commonly used electronic format, unless you specify otherwise.
    3. Right to rectification (Art. 16 GDPR). You have the right to demand the immediate correction of incorrect personal data concerning you and, taking into account the purposes of the processing, the completion of incomplete personal data – also by means of a supplementary declaration. Corresponding requests should be addressed to us.
    4. Right to erasure (right to be forgotten) (Art. 17 GDPR): You have the right to obtain from us the erasure of personal data concerning you without undue delay where one of the following grounds applies:
      – the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
      – You withdraw your consent on which the processing was based according to Art. 6 para. 1 a) GDPR or Art. 9 para. 2 a) GDPR, and where there is no other legal ground for the processing;
      – You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR:
      – the personal data have been processed unlawfully:
      – the erasure of the personal data is necessary for compliance with a legal obligation in Union or Member State law to which we are subject; or
      – the personal data have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR; where one of the above grounds applies and you wish to request the erasure of your personal data, you can contact us at any time.
    5. Right to restriction of processing (Art. 18 GDPR). You have the right to obtain from us restriction of processing where one of the following applies
      – the accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data;
      – the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
      – we no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims, or
      – you have objected to processing pursuant to Art. 21 (1) GDPR and it is not yet clear whether our legitimate grounds override yours; if one of the aforementioned grounds applies and you therefore wish to request the restriction of the processing of your data, you can contact us at any time. If processing has been restricted by us, we may only process this personal data – apart from storing it – with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
    6. Right to data portability (Art. 20 GDPR). You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to third parties without hindrance from us, provided that the processing is based on consent pursuant to Art. 6 para. 1 a) GDPR or Art. 9 para. 2 a) GDPR or on a contract pursuant to Art. 6 para. 1 b) GDPR and the processing is carried out using automated procedures. Furthermore, you have the right to request that the personal data be transmitted directly by us to third parties, insofar as this is technically feasible and provided that this does not affect the rights and freedoms of other persons.
      These rights do not apply if the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
      You can contact us at any time to assert your right to data portability.
    7. Right to object (Art. 21 GDPR), you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 (1) (e) or (f) GDPR.
      In the event of an objection, we will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
      If personal data is processed for the purpose of direct advertising, you can also object to this at any time. We will then no longer process your data for this purpose.
      You also have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out by us for scientific or historical research purposes or for statistical purposes in accordance with Art. 89 para. 1 GDPR, unless such processing is necessary for the fulfilment of a task carried out in the public interest.
      You can contact us at any time to assert your right to object.
    8. Right to withdraw consent under data protection law (Art. 7 para. 1 sentence 1 GDPR). You have the right to withdraw your consent to the processing of data at any time with effect for the future. In the event of revocation, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing without consent.
    9. Right to lodge a complaint (Art. 77 GDPR)
      You have the right to lodge a complaint with the competent supervisory authority at any time.

VI. COOKIES AND OTHER TECHNOLOGIES

    1. We use cookies on our website. Cookies are small files that are stored on your end device and save certain settings and data for exchange with our system via your browser. There are basically two different types of cookies, so-called session cookies, which are deleted as soon as you close your browser, and temporary/permanent cookies, which are stored on your end device for a longer period of time or indefinitely. This storage helps us to customise our website and our offers for you and makes it easier for you to use, for example by saving certain entries you make so that you do not have to keep repeating them.
    2. If you consent to the use of cookies, the legal basis for the processing is the declared consent in accordance with Section 6 (1) sentence 1 lit. a) GDPR.
    3. Otherwise, the data processed with the help of cookies will be processed on the basis of our legitimate interests (e.g. in the business operation of our online offer and its improvement) or, if the use of cookies is necessary to fulfil our contractual obligations, both in accordance with Section 6 (1) sentence 1 lit. f) GDPR.
    4. You can adjust your cookie settings at any time. You can set your Internet browser so that the storage of cookies on your end device is generally prevented or you are asked each time whether you agree to the setting of cookies. Once cookies have been set, you can also delete them at any time. You can find out how this works in detail in the help function of your browser. There are special explanations for the internet browsers Safari, Firefox, Microsoft Internet Explorer and Google Chrome.
    5. Use of cookies and other technologies for web analysis and advertising purposes
    6. Insofar as you have given your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, we use the following cookies and other third-party technologies on our website. The data collected in this context will be deleted once the purpose has ceased to apply and we have stopped using the respective technology. You can revoke your consent at any time with effect for the future. Further information on your cancellation options can be found in the section ‘Cookies and other technologies’. Further information, including the basis of our cooperation with the individual providers, can be found under the individual technologies. If you have any questions about the providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.
    7. Use of Google services
      We use the following technologies from Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’). The information automatically collected by Google technologies about your use of our website is usually transmitted to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there. There is no adequacy decision by the European Commission for the USA. Our co-operation is based on standard data protection clauses of the European Commission. If your IP address is collected via Google technologies, it will be shortened by activating IP anonymisation before it is stored on Google’s servers. Only in exceptional cases will the full IP address be transmitted to a Google server and truncated there. Unless otherwise specified for the individual technologies, data processing is carried out on the basis of an agreement concluded for the respective technology between jointly responsible parties in accordance with Art. 26 GDPR. Further information about data processing by Google can be found in Google’s privacy policy.

      1. Google Analytics
        For the purpose of website analysis, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information as well as information on your use of our website), from which user profiles are created using pseudonyms. Cookies may be used for this purpose. Your IP address will not be merged with other Google data. Data processing is carried out on the basis of an agreement on order processing by Google.
      2. Google Ads
        For advertising purposes in Google search results and on third-party websites, the so-called Google Remarketing Cookie is set when you visit our website, which automatically enables interest-based advertising by collecting and processing data (IP address, time of visit, device and browser information and information about your use of our website) and by means of a pseudonymous cookie ID and based on the pages you visit. Any further data processing will only take place if you have activated the ‘personalised advertising’ setting in your Google account. In this case, if you are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing.
        For website analysis and event tracking, we use Google Ads Conversion Tracking to measure your subsequent usage behaviour if you have reached our website via a Google Ads advertisement. For this purpose, cookies may be used and data (IP address, time of visit, device and browser information as well as information on your use of our website based on events specified by us, such as visiting a website or subscribing to a newsletter) may be collected, from which user profiles are created using pseudonyms.
      3. YouTube Video Plugin
        To integrate third-party content, data (IP address, time of visit, device and browser information) is collected via the YouTube video plugin in the extended data protection mode used by us, transmitted to Google and then processed by Google only when you play a video./li>
    8. Use of Facebook services
      1. Use of Facebook Pixel
        We use the Facebook Pixel as part of the technologies of Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland (‘Facebook’) described below. Facebook Pixel automatically collects and stores data (IP address, time of visit, device and browser information as well as information about your use of our website based on events specified by us, such as visiting a website or subscribing to a newsletter), from which user profiles are created using pseudonyms. As part of the so-called extended data comparison, information is also collected and stored in hashed form for comparison purposes, which can be used to identify individuals (e.g. names, e-mail addresses and telephone numbers). For this purpose, a cookie is automatically set by the Facebook pixel when you visit our website, which automatically enables your browser to be recognised by means of a pseudonymous cookie ID when you visit other websites. Facebook will merge this information with other data from your Facebook account and use it to compile reports on website activity and to provide other services related to website activity, in particular personalised and group-based advertising.
        The information automatically collected by Facebook technologies about your use of our website is usually transferred to a server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA and stored there. There is no adequacy decision by the European Commission for the USA. If we are responsible for the transfer of data to the USA, our cooperation is based on standard data protection clauses of the European Commission. Further information about data processing by Facebook can be found in Facebook’s privacy policy.
      2. Facebook Ads
        We use Facebook Ads to advertise this website on Facebook and other platforms. We determine the parameters of the respective advertising campaign. Facebook is responsible for the exact implementation, in particular the decision on the placement of the adverts with individual users. Unless otherwise specified for the individual technologies, data processing is carried out on the basis of an agreement between joint controllers in accordance with Art. 26 GDPR. The joint responsibility is limited to the collection of data and its transmission to Facebook Ireland. The subsequent data processing by Facebook Ireland is not covered by this.
      3. Based on the pseudonymous cookie ID set by Facebook Pixel and the data collected about your usage behaviour on our website, we operate personalised advertising via Facebook Pixel Remarketing.
        We use Facebook Pixel Conversions to measure your subsequent user behaviour for web analysis and event tracking if you have reached our website via a Facebook Ads ad. Data processing is carried out on the basis of an order processing agreement by Facebook.
    9. Social Media
      1. Social plugins from Facebook, Instagram, Pinterest,
        Social buttons from social networks are used on our website. These are only integrated into the page as HTML links so that no connection is established with the servers of the respective provider when our website is accessed. If you click on one of the buttons, the website of the respective social network will open in a new window of your browser where you can click on the Like or Share button, for example.
      2. Our online presence on Facebook, Instagram, YouTube, Pinterest
        If you have given your consent to the respective social media operator in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, your data will be automatically collected and stored for market research and advertising purposes when you visit our online presence on the above-mentioned social media, from which user profiles are created using pseudonyms. These can be used, for example, to place adverts within and outside the platforms that presumably correspond to your interests. Cookies are generally used for this purpose. For detailed information on the processing and use of data by the respective social media operator as well as a contact option and your rights and setting options for protecting your privacy, please refer to the providers’ data protection notices linked below. If you still need help in this regard, you can contact us.
      3. Facebook is a service provided by Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland (‘Facebook Ireland’). The information automatically collected by Facebook Ireland about your use of our online presence on Facebook is generally transmitted to a server of Facebook, Inc, 1601 Willow Road, Menlo Park, California 94025, USA and stored there. There is no adequacy decision by the European Commission for the USA. Our cooperation is based on standard data protection clauses of the European Commission. Data processing in the context of a visit to a Facebook fan page is based on an agreement between jointly responsible parties in accordance with Art. 26 GDPR. Further information (information on Insights data) can be found here.
      4. Instagram is an offer of Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland (‘Facebook Ireland’) The information automatically collected by Facebook Ireland about your use of our online presence on Instagram is usually transmitted to a server of Facebook, Inc, 1601 Willow Road, Menlo Park, California 94025, USA and stored there. There is no adequacy decision by the European Commission for the USA. Our cooperation is based on standard data protection clauses of the European Commission. Data processing in the context of visiting an Instagram fan page is based on an agreement between jointly responsible parties in accordance with Art. 26 GDPR. Further information (information on Insights data) can be found here.
      5. YouTube is a service provided by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’). The information automatically collected by Google about your use of our online presence on YouTube is usually transferred to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there. There is no adequacy decision by the European Commission for the USA. Our co-operation is based on standard data protection clauses of the European Commission.
      6. Pinterest is a service provided by Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (‘Pinterest’). The information automatically collected by Pinterest about your use of our online presence on Pinterest is usually transferred to a server of Pinterest, Inc, 505 Brannan St., San Francisco, CA 94107, USA and stored there. There is no adequacy decision by the European Commission for the USA. Our co-operation is based on standard data protection clauses of the European Commission.

VII. FINAL PROVISIONS

  1. The controller may change the privacy policy in the future. Each time such a change is made, information about it will be posted on the website of the online shop. A new version of the privacy policy with a new date will be displayed each time a change is made.
  2. This version of the privacy policy is valid from 23.01.2024.