Data protection policy
Data privacy statement and consent to the use of personal data and contact by
I. Information about the responsible party
Name and address of the responsible party
Responsible party in terms of the General Data Protection Ordinance (GDPR) is the natural or legal person who alone or with others decides about the purposes and means of the processing of personal data.
The party responsible within the meaning of the Basic Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:
doppler H. Würflingsdobler GmbH
A. Kolping Str. 3
D-84359 Simbach at the Inn
Management: Hermann Würflingsdobler
Phone: +49 (0) 8571 / 9122 - 351
Fax: +49 (0) 8571 / 9122 - 9351
Commercial Register: District Court Landshut HRB 7264
VAT no. DE814879791
Name and address of the data protection officer
The data protection officer of the person responsible is:
aigner business | solutions gmbh
Goldener Steig 42
Phone: +49 (0) 8505 / 91927 - 16
We use SSL or TLS encryption for our website. You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser line.
II. General information about data processing
1. Scope of the processing of personal data
"Personal data" means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier or one or more specific characteristics which expresses the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.
We only collect and use personal data of our users insofar as this is necessary to provide a functional website as well as our contents and services. The collection and use of personal data of our users takes place regularly only with the user's consent. An exception applies in those cases where prior consent cannot be obtained for real reasons and the processing of the data is permitted by law.
2. Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a EU Data Protection Ordinance (DSGVO) serves as the legal basis.
In the processing of personal data required for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b DSGVO serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
Insofar as the processing of personal data is required to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c DSGVO serves as the legal basis.
In the event that the vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) DSGVO serves as the legal basis.
If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f DSGVO serves as the legal basis for processing.
3. Data erasure and storage time
The personal data of the person concerned will be deleted or blocked as soon as the purpose of storage ceases to apply. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the person responsible is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.
III. Provision of the website and creation of log files
Every time you visit our website, our system automatically collects data and information from the computer system of the calling computer
The following data is collected:
(1) Information about the browser type and version used
(2) The user's operating system
(3) The Internet service provider of the user
(4) Amount of data sent in bytes
(5) The IP address of the user
(6) Date and time of access
(7) Websites from which the user's system reaches our website
(8) Websites accessed by the user's system via our website
The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.
The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f DSGVO.
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this the IP address of the user must remain stored for the duration of the session.
The data is stored in log files to ensure the functionality of the website. In addition, the data serves us to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
Our legitimate interest in data processing pursuant to Art. 6 para. 1 lit. f DSGVO also lies in these purposes.
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
If the data is stored in log files, this is the case after seven days at the latest. Further storage is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.
The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.
For these functions it is necessary that the browser is recognized even after a page change. The user data collected by technically necessary cookies are not used to create user profiles.
In the above-mentioned purposes, our legitimate interest also lies in the processing of personal data pursuant to Art. 6 para. 1 lit. f) DSGVO.
The following data is stored and transmitted in the cookies:
-Items in a shopping cart
Please note that even after you have set your browser accordingly, you can be informed individually about the setting of cookies and thus also decide on their acceptance.
You will find help in the help menu of your browser under the following links:
V. Web analysis services
1. Google Analytics
This website uses Google Analytics, a web analysis service, which is offered by Google Ireland Limited (" Google "), a company incorporated and operated under Irish law and located in Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website (including the shortened IP address) is generally transmitted to a Google server in the USA and stored there.
This website uses Google Analytics exclusively with the extension "_anonymizeIp()", which ensures an anonymization of the IP address by shortening and excludes a direct personal relationship. As a result of the extension, your IP address will previously be reduced by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. In these exceptional cases, this processing is carried out in accordance with Art. 6 Para. 1 letter f DSGVO on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes.
On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with other services relating to website and Internet use. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.
With browsers on mobile devices or alternatively to the browser plug-in, you can use the following link to set an opt-out cookie that prevents Google Analytics from collecting data on this website in the future (this opt-out cookie only works in this browser and for this domain. If you have deleted your cookies in this browser, the cookie must be set again).
This website uses Mouseflow, a web analysis tool from Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark, to record randomly selected individual visits (with anonymous IP address only). This results in a protocol of mouse movements, mouse clicks and keyboard interaction, with the intention of randomly reproducing individual visits to this website as so-called session replays and evaluating them in the form of so-called heatmaps and deriving potential improvements for this website. The data collected by Mouseflow is not personal and will not be passed on to third parties. The data collected is stored and processed within the EU. If you do not wish Mouseflow to collect data, you can object to this on all websites that use Mouseflow by clicking on the following link:
3. Facebook pixel, custom audiences / Facebook conversion
We use on our website the so-called "Facebook pixel" of the social network Facebook, which is operated by Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are based in the EU, Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").
Facebook is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).
Our legitimate interest according to art. 6 par. 1 lit.f DSGVO is the analysis, optimization and economic operation of our online offer as well as the exploitation of the financial potential of our website.
With the help of the Facebook pixel, Facebook is able to determine the visitors of our website as a target group for the display of ads (so-called "Facebook ads"). Accordingly, the Facebook pixel is used to display the Facebook ads we post only to Facebook users who have also shown an interest in our online offering or who have certain features (e.g. interests in certain products that are determined by the websites visited) that we transmit to Facebook (so-called "custom audiences"). At the same time, we want to ensure that our Facebook ads do not annoy users because they are not in their interests at all. We can also use the pixel to see how effective our Facebook ads are for our statistical market research purposes when we see whether a user has reached our website after clicking on a Facebook advertisement (so-called "conversion").
Facebook processes the data in accordance with the Facebook Data Usage Policy. For general guidance on how to display Facebook ads, please see Facebook's Data Usage Policy: https://www.facebook.com/policy.php. Specific information and details about the Facebook pixel and how it works can be found in the Facebook help section: https://www.facebook.com/business/help/651294705016616.
You can object to the collection by the Facebook pixel and use of your data to display Facebook ads at any time. You can set the types of ads you will see within Facebook by following the instructions given there: https://www.facebook.com/settings?tab=ads. The settings are platform-independent.
4. Trusted Shops Trustbadge
On our website we include the Trusted Shops Trustbadge to display the Trusted Shops seal of approval and any collected evaluations as well as to offer Trusted Shops products to buyers after placing an order.
This serves to protect our legitimate interests (Art. 6 para. 1 lit. f DSGVO) in an optimal marketing of our offer. The Trustbadge and the services advertised with it are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne.
When the trust badge is called, the web server automatically saves a so-called server log file, which contains e.g. your IP address, date and time of the call, transferred data volume and the requesting provider (access data) and documents the call. This access data is not evaluated and is automatically overwritten at the latest seven days after the end of your page visit.
Further personal data will only be transferred to Trusted Shops if and insofar as you decide to use Trusted Shops products after completing an order or have already registered for use. In this case the contractual agreement between you and Trusted Shops applies.
VI Social Media
1. YouTube videos
On this website we use the Youtube embedding function to display and play videos from the provider "Youtube", a service provided by Google Ireland Limited ("Google"), a company incorporated and operated under Irish law and located at Gordon House, Barrow Street, Dublin 4, Ireland.
You have the right to object to the creation of these user profiles, and you must contact YouTube to exercise this right.
Regardless of the playback of the embedded videos, every time this website is accessed, a connection to the Google network "DoubleClick" is established, which can trigger further data processing operations without our influence.
Opt-out possible at: https://adssettings.google.com/authenticated.
2. Social plugins from Facebook, Twitter, Instagram & Co using the Shariff solution
On our website we use social media plugins ("plugins") from social networks. In order to increase the protection of your data when visiting our website, the plugins are not unrestricted, but only integrated into the page using an HTML link (so-called "Shariff solution"). This integration means that when you access our website, which contains such plug-ins, no connection is established with the servers of the provider of the respective social network. Click on one of the plugin buttons, a new window of your browser opens and calls up the page of the respective service provider, where you can (if necessary after entering your login data) e.g. press the Like or Share button. The purpose and scope of data collection and the further processing and use of the data by the providers on their pages as well as your relevant rights and setting options for the protection of your privacy can be found in the data protection information of the providers: https://www.facebook.com/policy.php or https://twitter.com/privacy or https://instagram.com/about/legal/privacy/.
You can subscribe to a free newsletter on our website. When registering for the newsletter, the email address from the input mask is sent to us.
In the course of the registration process, your consent is obtained for the processing of the data and reference is made to this data protection declaration. If you purchase goods or services on our website and provide us with your e-mail address, we may subsequently use it to send you a newsletter. In such a case, the newsletter will only send direct advertising for similar goods or services of our own.
In connection with data processing for the dispatch of newsletters, no data is passed on to third parties. The data will be used exclusively for sending the newsletter.
The legal basis for the processing of the data after registration for the newsletter by the user is Art. 6 para. 1 lit. a DSGVO.
The legal basis for sending the newsletter as a result of the sale of goods or services is Section 7 para. 3 UWG.
The collection of the user's e-mail address serves to send the newsletter. The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. The user's e-mail address will therefore be stored for as long as the subscription to the newsletter is active. The other personal data collected during the registration process will generally be deleted after a period of seven days.
The subscription to the newsletter can be cancelled by the user concerned at any time. For this purpose there is a corresponding link in every newsletter. This also makes it possible to revoke the consent to the storage of personal data collected during the registration process.
VIII. Use of our webshop and registration
If you would like to order in our webshop, it is necessary for the conclusion of the contract that you enter your personal data, which we need for the completion of your order. We process the data provided by you to process your order.
For this purpose we can pass on your payment data to our house bank. The legal basis for this is Art. 6 para. 1 sentence 1 lit. b DSGVO.
On our website, we also offer users the opportunity to register by providing personal data. The data is entered into an input mask and transmitted to us and saved. The data will not be passed on to third parties. The following data is collected during the registration process:
- Telephone number
- Email address
- Date of birth
In the course of the registration process, the user's consent to the processing of this data is obtained.
User registration is required to keep User's order history available on our website. The registration also facilitates the further orders of the user, as he does not have to re-enter his user data. The user can keep a notepad in his customer account and save there the articles he would like to remember.
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected.
This is the case for the data collected during the registration process if the registration on our website is cancelled or changed. As a user you have the possibility to cancel the registration at any time. You can change the data stored about you at any time. You can send us an informal message by email.
We are obliged by commercial and tax law to store your address, payment and order data for a period of ten years.
IX. Email contact
The user has the possibility to contact us via the provided e-mail address. In this case, the user's personal data transmitted by e-mail will be stored.
In this context, the data will not be passed on to third parties. The data is used exclusively for processing the conversation.
The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f DSGVO. If the e-mail contact aims at the conclusion of a contract, then additional legal basis for the processing is Art. 6 exp. 1 lit. b DSGVO.
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. For the personal data sent by e-mail, this is the case when the conversation with the user is finished. The conversation is terminated when it can be inferred from the circumstances that the facts in question have been finally clarified.
If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.
For this purpose the user sends us an email to the above email address and informs us of his revocation.
All personal data stored in the course of contacting us will be deleted in this case.
X. Commenting function
Within the scope of the comment function on this website, in addition to your comment, information on the time of writing the comment and the name of the commentator you have chosen are stored and published on the website. Furthermore, your IP address is logged and stored. This IP address is stored for security reasons and in the event that the person concerned violates the rights of third parties or posts illegal content by submitting a comment. We need your e-mail address to contact you if a third party should object to your published content as unlawful. The legal basis for the storage of your data is Art. 6 para. 1 lit.b and f DSGVO. We reserve the right to delete comments if they are objected to as unlawful by third parties.
XI. External service providers
We offer several payment methods for the use of the webshop and use different payment service providers. Depending on which payment method you choose, different data is transmitted to the respective payment service provider. The legal basis for the transmission is Art. 6 para. 1 sentence 1 lit. a DSGVO. Below we list our payment service providers.
If you choose the payment option PayPal, your personal data will be transmitted to PayPal. The requirement for using PayPal is the registration of a PayPal account. When using or registering for a PayPal account, you must provide PayPal such information as your name, address, telephone number and e-mail address. The legal basis for the transmission of the data is Article 6 para. 1 lit. a DSGVO (consent) and Article 6 para. 1 lit. b DSGVO (processing for the fulfilment of a contract).
The operator of the PayPal payment service is:
PayPal (Europe) S.à r.l. et Cie, S.C.A.
22-24 Boulevard Royal
With the payment option PayPal you consent to the transmission of personal data such as name, address, telephone number and e-mail address to PayPal. Which further data is collected by PayPal, results from the respective data protection declaration of PayPal. This can be found at: https://www.paypal.com/us/webapps/mpp/ua/privacy-full.
When paying by credit card via Heidelpay, payment is processed by the payment service provider Heidelberger Payment GmbH, Vangerowstraße 18, 69115 Heidelberg (hereinafter "Heidelpay"), to whom we pass on your data provided during the ordering process exclusively for the purpose of payment processing in accordance with Art. 6 Para. 1 lit. b DSGVO. The data will only be passed on if it is actually necessary for payment processing. To the extent necessary, Heidelpay will again transmit your data to HUELLEMANN & STRAUSS ONLINESERVICES S.A., 1, Place du Marché, 6755 Grevenmacher, Luxembourg, in accordance with Art. 6 Para. 1 letter b DSGVO.
If you choose the payment method "Purchase invoice via Heidelpay" or "Direct debit via Heidelplay", you will be asked to enter your personal data (first and last name, street, house number, postcode, city, date of birth, e-mail address and telephone number) during the order process.
In order to safeguard our legitimate interest in determining the solvency of our customers, we will forward this data to Heidelberger Payment GmbH, Vangerowstr. 18, 69115 Heidelberg (hereinafter "Heidelpay") for the purpose of a credit assessment in accordance with Art. 6 Para. 1 letter f DSGVO. Based on your personal data and other data (such as shopping cart, invoice amount, order history, payment experience), Heidelpay checks whether the payment option you have selected can be granted with regard to payment and/or default risks. In order to decide on the establishment or implementation of a contractual relationship, identity or creditworthiness information from the following credit agencies may also be included pursuant to Article 6 (1) (f) DSGVO:
– SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden, Germany
– CRIF Buergel GmbH, gas route 18, 22761 Hamburg, Germany
– Arvato Infoscore GmbH, Rheinstrasse 99, 76532 Baden-Baden, Germany
– Deltavista GmbH, Kaiserstrasse 217, 76133 Karlsruhe, Germany
– UNIVERSUM Business GmbH, Hugo-Junkers-Strasse 3, 60386 Frankfurt am Main, Germany
– Bisnode International Group, Robert-Bosch-Strasse 11, 64293 Darmstadt, Germany
– Regis24 GmbH, Wallstrasse 58, 10179 Berlin, Germany
– Creditreform AG, Hellersbergstrasse 12, 41460 Neuss, Germany
The credit report can contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data.
You can object to this processing of your data at any time by sending a message to the person responsible for data processing or to Heidelpay. However, Heidelpay may still be entitled to process your personal data if this is necessary for contractual payment processing.
Which further data is collected by Heidelpay, results from the respective data protection declaration of Heidelpay. This can be read at: https://www.heidelpay.com/en/privacy-statement/.
4. Amazon Pay
5. Shipping service provider
If the goods are delivered to you by the transport service provider
a) DPD (DPD Germany GmbH, Wailandtstraße 1, 63741 Aschaffenburg)
b) GLS (General Logistics Systems, Germany GmbH & Co OHG, GLS Germany-Strasse 1 - 7, DE-36286 Neuenstein)
c) DHL (German Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn)
we pass on only the name of the recipient and the delivery address to the transport service provider for the purpose of delivery, if this is necessary for the delivery of the goods, pursuant to Art. 6 Para. 1 lit. b) DSGVO.
Only if you have given your express consent during the ordering process, we will pass your e-mail address on to the transport service provider in accordance with Art. 6 Para. 1 lit. a) DSGVO prior to delivery of the goods for the purpose of agreeing a delivery date or for delivery notification.
The consent can be revoked at any time with effect for the future vis-à-vis the above-mentioned person in charge or the respective transport service provider.
XII. Rights of the data subject
If personal data are processed by you, you are affected within the meaning of the DSGVO and you have the following rights vis-à-vis the person responsible:
1. Right to information
You can ask the data controller to confirm whether personal data concerning you are being processed by the data controller. In addition, you have a right to information about the purpose, the categories of personal data, the recipients, the planned duration of storage and the existence of further rights such as correction of the data or the existence of a right of appeal to a supervisory authority.
2. The right to correction
You have a right of rectification and/or completion vis-à-vis the data controller if the personal data processed concerning you are incorrect or incomplete. The person responsible shall make the correction without delay.
3. Right to limitation of processing
You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data contested is checked, if you refuse to have your data deleted due to inadmissible data processing and instead request the restriction of the processing of your data, if you need your data to assert, exercise or defend legal claims after we no longer need this data after we have achieved the purpose or if you have filed an objection for reasons of your particular situation, as long as it is not yet clear whether our legitimate reasons prevail.
If the processing of personal data concerning you has been restricted, such data may only be processed - apart from being stored - with your consent or for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person or on grounds of an important public interest of the Union or a Member State.
If the processing restriction has been restricted, you will be informed by the person responsible before the restriction is canceled.
4. Right to cancellation
You can demand that the person responsible delete the personal data concerning you immediately if and to the extent that the conditions for this are fulfilled. The person responsible is obliged to delete this data immediately.
If the data controller has made the personal data concerning you public and is obliged to delete it pursuant to Art. 17 para. 1 DSGVO, he shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform data processors who process the personal data that you as the data subject have requested the deletion of all links to this personal data or of copies or replications of this personal data.
The right to cancellation does not exist insofar as the processing is necessary
(1) to exercise freedom of expression and information;
(2) for the performance of a legal obligation required for processing under the law of the Union or of the Member States to which the controller is subject or for the performance of a task in the public interest or in the exercise of official authority conferred on the controller;
(3) for reasons of public interest in the field of public health pursuant to Art. 9 para. 2 lit. h) and i and Art. 9 para. 3 DSGVO;
(4) for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 para. 1 DSGVO, insofar as the law referred to under a) is likely to make it impossible or seriously impair the attainment of the objectives of such processing, or
(5) to assert, exercise or defend legal claims.
5. Right to information
You have the right to be informed by the controller of the recipient to whom the controller has informed that you have asserted your right to rectification, cancellation or limitation of the processing against the controller.
6. Right to data transferability
You have the right to receive the personal data concerning you that you have provided to the person responsible in a structured, common and machine-readable format.
7. Right of objection
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you under Article 6(1)(e) or (f) DSGVO; this also applies to profiling based on these provisions.
8. Right to revoke the data protection declaration of consent
You have the right to revoke your data protection declaration of consent at any time. The revocation of consent shall not affect the legality of the processing carried out on the basis of the consent until revocation.
9. Right to non-automated decision in individual cases including profiling
You have the right not to be subject to a decision based exclusively on automated processing - including profiling - that has legal effect against you or significantly impairs you in a similar manner.
10. Right of appeal to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State where you reside, work or suspect of infringement, if you believe that the processing of personal data concerning you is contrary to the DSGVO.