Privacy Policy

We take the protection of your personal data seriously. Processing is carried out in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). The following information is intended to give you an overview of how our company processes your personal data and your rights under data protection law. Your personal data will not be transferred to third parties for purposes other than those listed below. We only disclose your personal data to third parties if:

  • You have given your explicit consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR,
  • The transfer is necessary for the establishment, exercise or defense of legal claims pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR and there is no reason to assume that you have an overriding legitimate interest in not having your data transferred,
  • in the event that there is a legal obligation to disclose the data pursuant to Art. 6 para. 1 sentence 1 lit. c) GDPR, as well as
  • This is legally permissible and necessary for the performance of a contract with you in accordance with Article 6(1)(b) GDPR.


In detail:

1. Name and contact details of the controller

This privacy information applies to data processing by the controller:

Responsible party / Contact information

DCT DELTA AG
Bodanrückstr. 1
Postcode 78351 Bodman-Ludwigshafen
Germany

Phone: + 49 7773 9363 0
Email: info@dct-delta.de

You can direct data protection inquiries to the above address, addressed to the Data Protection Officer, or by email to datenschutz@dct-delta.de.

Our external data protection officer: www.kt-datenschutz.de.

2. Collection and storage of personal data as well as the nature and purpose of their use

a) When visiting the website

When you access our website www.dct-delta.de, your browser automatically sends information to our website's server. This information is temporarily stored in a log file. The following information is collected automatically and stored until it is automatically deleted:

  • Request (filename of the requested file) (e.g., www.example.com/index.html)
  • Browser type/version (e.g., Mozilla Firefox 33, Google Chrome, Safari)
  • Browser language (e.g., German)
  • Operating system used (e.g., Windows 10)
  • inner resolution of the browser window
  • screen resolution
  • JavaScript enabled: "Yes" or "No"
  • Java On/Off
  • Cookies On/Off
  • color depth
  • Referrer URL (the previously visited page)
  • Shortened IP address for geographic identification
  • Time of access (timestamp)
  • Clicks
  • Possibly form contents (for free text fields, e.g. name and password, only "filled in" or "not filled in" is transmitted).

The data mentioned are processed by us for the following purposes:

  • Ensuring a smooth connection of the website,
  • Ensuring comfortable use of our website,
  • Evaluation of system security and stability as well
  • for further administrative purposes and for
  • Abuse detection and troubleshooting

The legal basis for data processing is Article 6(1)(f) GDPR. Our legitimate interest arises from the purposes of data collection listed above. Under no circumstances will we use the collected data to draw conclusions about your identity.

b) When registering for our newsletter

If you have expressly consented in accordance with Article 6 Paragraph 1 Sentence 1 Letter a) GDPR, we will use your email address to send you our newsletter regularly. Providing an email address is sufficient to receive the newsletter. We also use this address for the confirmation email in the double opt-in procedure to verify that the owner of the email address has authorized receipt of the newsletter.

You can also send your unsubscribe request at any time to info@dct-delta.de via email. The data you provide will only be shared with our technical service providers and partner companies, whom we use for the technical processing of the newsletter distribution. In these cases, however, we limit the scope of the transmitted data to the necessary minimum. After unsubscribing from the newsletter, your email address will be deleted from both our servers and the servers of the service provider.

c) By using our contact form

If you have any questions, you can contact us using the form provided on our website. A valid email address is required so we know who is contacting us and can respond. Providing additional information is optional. Data processing for the purpose of contacting us is based on your freely given consent in accordance with Article 6 Paragraph 1 Sentence 1 Letter a) of the GDPR. The personal data collected through the contact form will be deleted after your inquiry has been fully processed. This is the case when it is clear from the circumstances that the matter has been resolved and provided there are no legal retention obligations.

d) If your data is transferred by other means with your consent (Article 6 Paragraph 1 a GDPR)

If you have given us your consent to process your personal data for specific purposes (e.g., sharing your contact details from your business card within our group), the lawfulness of this processing is based on your consent. You can withdraw your consent at any time. This also applies to the withdrawal of declarations of consent that were given to us before the EU General Data Protection Regulation (GDPR) came into effect, i.e., before May 25, 2018. Please note that the withdrawal is only effective for the future. Processing that took place before the withdrawal remains unaffected. You can request information about the consents you have given and the personal data processed by us at any time using the contact details provided above.

3. Disclosure of data

A transfer of your personal data to third parties for purposes other than those listed below does not take place. We only pass on your personal data to third parties if:

  • You have given your explicit consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR,
  • The transfer is necessary for the establishment, exercise or defense of legal claims pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR and there is no reason to assume that you have an overriding legitimate interest in not having your data transferred,
  • in the event that there is a legal obligation to disclose the data pursuant to Art. 6 para. 1 sentence 1 lit. c) GDPR, as well as
  • This is legally permissible and necessary for the performance of a contract with you in accordance with Article 6(1)(b) GDPR.

When we provide links to external websites, this process opens a new browser window on your computer, and your IP address and the requested URL (i.e., the target address of the desired website) are transmitted there. We have no knowledge of how this data is further used on the external website; however, we only provide links to providers we consider trustworthy. Therefore, the guarantees of our privacy policy do not apply to these external sites.

4. Analysis Tools

a) Content or service offerings from Google Maps

For our online services, we use content or service offerings from third-party providers based on our legitimate interests within the meaning of Art. 6 para. 1 lit. f) GDPR.

For transparency and choice regarding your Google activities, you can find the "Infochoices" here: www.google.com/policies/privacy/.

In our case, these are maps from Google that we embed on our pages (third-party content). This always requires that the third-party providers are aware of your IP address, as they cannot send their content to your browser without it. The IP address is therefore necessary for displaying this content. We strive to use only content from providers who use the IP address solely for delivering the content.

Google Maps: Maps from the third-party service "Google Maps" provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Data protection statement: www.google.com/policies/privacy/

Opt-Out: www.google.com/settings/ads/.

5. Social media plug-ins

On our website, we use social plugins from the social networks Facebook and Instagram based on Article 6 Paragraph 1 Sentence 1 Letter f) of the GDPR to increase awareness of our company. The underlying advertising purpose is considered a legitimate interest within the meaning of the GDPR. The respective providers are responsible for ensuring that their services comply with data protection regulations. We integrate these plugins using the so-called two-click method to provide the best possible protection for visitors to our website.

a) Facebook

Our website uses social media plugins from Facebook to personalize your experience. We use the "LIKE" or "SHARE" button for this purpose. This is a service offered by Facebook. When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to Facebook's servers. The plugin content is transmitted directly from Facebook to your browser and integrated into the website. By integrating the plugins, Facebook receives information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are not currently logged in to Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there. If you are logged in to Facebook, Facebook can directly associate your visit to our website with your Facebook account. If you interact with the plugins, for example by clicking the "LIKE" or "SHARE" button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information will also be published on Facebook and displayed to your Facebook friends. Facebook may use this information for advertising, market research, and to tailor its services to your needs. For this purpose, Facebook creates usage, interest, and relationship profiles, for example, to analyze your use of our website in relation to the advertisements displayed to you on Facebook, to inform other Facebook users about your activities on our website, and to provide other services related to the use of Facebook. If you do not want Facebook to associate the data collected via our website with your Facebook account, you must log out of Facebook before visiting our website. For information on the purpose and scope of data collection and the further processing and use of data by Facebook, as well as your related rights and privacy settings, please refer to Facebook's privacy policy (https://www.facebook.com/about/privacy/).

b) YouTube

We have embedded YouTube videos on our website. These videos are stored on YouTube (operated by Google Inc., Amphitheater Parkway, Mountain View, CA 94043, USA) and can be played directly on our website. To protect your privacy, you must first activate the videos on our pages.

By activating or playing these videos, cookies from YouTube or DoubleClick may be stored and/or read on your device, and therefore data may be transferred to YouTube or DoubleClick by Google Inc. in the USA, in particular your IP address and cookie ID, the specific address of the page you visited on our site, the system date and time of the visit, and your browser identifier.

The purposes and scope of data collection and processing by YouTube or DoubleClick by Google can be found in the information provided by Google Inc., e.g. at [link to Google's privacy policy]. www.google.de/intl/de/policies/privacy/ .

If you do not want YouTube or DoubleClick by Google to collect data about you through your use of our website, you must not activate and/or play the videos. This data transfer occurs as soon as you activate the video, regardless of whether you have a YouTube or Google account and are logged in, or whether you have no account at all. If you are logged in, this data can be directly associated with your account. If you wish to prevent this, you must log out before activating the video.

6. Storage, deletion and blocking of data

We process and store personal data in accordance with the principles of data avoidance and data minimization, i.e. only for the period necessary to achieve the purpose of storage (e.g. answering inquiries, fulfilling contracts) or as required by legal regulations to which our company is subject.

When the purpose for which the data was stored no longer applies or the legally applicable retention period expires, the personal data is routinely blocked or deleted in accordance with legal requirements. The criterion for the storage period is the respective statutory retention period.

7. Data subject rights

Every affected person has the right to

  • In accordance with Article 15 of the GDPR, you have the right to request information about your personal data processed by us. In particular, you can request information about the purposes of the processing, the categories of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if they were not collected by us, and the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the logic involved.
  • In accordance with Article 16 GDPR, you have the right to request the immediate rectification of inaccurate or incomplete personal data concerning you that we hold;
  • In accordance with Article 17 of the GDPR, you have the right to request the erasure of your personal data stored by us, unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;
  • Pursuant to Article 18 GDPR, you have the right to request the restriction of the processing of your personal data if you contest the accuracy of the data, the processing is unlawful but you oppose its erasure, we no longer need the data but you require it for the establishment, exercise or defense of legal claims, or you have objected to processing pursuant to Article 21 GDPR;
  • In accordance with Article 20 GDPR, you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller;
  • In accordance with Article 7 Paragraph 3 of the GDPR, you have the right to withdraw your consent at any time. This means that we will no longer be permitted to process your data based on this consent in the future.
  • According to Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority. You can contact the supervisory authority – the State Commissioner for Data Protection – of your usual place of residence or work, or at our company's registered office.
  • The right to information and the right to erasure are subject to the restrictions set out in Sections 34 and 35 of the German Federal Data Protection Act (BDSG).

8. Right of objection

If your personal data is processed on the basis of legitimate interests pursuant to Article 6(1)(f) GDPR, you have the right to object to the processing of your personal data pursuant to Article 21 GDPR, provided there are grounds relating to your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right to object, which we will implement without requiring you to specify a particular situation.

If you wish to exercise your right of withdrawal or objection, an email to datenschutz@dct-delta.de is sufficient, but you can also contact us informally in another way.

9. Automated decision-making including profiling

We generally do not use fully automated decision-making pursuant to Article 22 GDPR for establishing and conducting business relationships with you. We will inform you separately if this is required by law and if we should use these procedures in individual cases.

10th profiling session

We process customer data partly automatically with the aim of evaluating certain personal aspects (profiling). For example, we use this in the following cases: due to legal requirements, we are obligated to combat money laundering and fraud. Data analyses in the area of ​​payment transactions are carried out for this purpose, which also serves to protect you. Providing our customers with targeted information and advice about our specific, often highly technical applications is only possible if we can use appropriate analytical tools, which enables us to tailor communication, information, and advertising, including market and opinion research, to their needs and customers' requirements. We may use scoring to assess the creditworthiness of our customers. This involves calculating a probability using mathematical statistical methods, which allows us to estimate the risk of payment defaults. In addition to experience from previous business relationships with the companies, factors such as the timely repayment of previous loans and information from credit agencies are also taken into account.

Information on the right to object pursuant to Article 21 of the EU General Data Protection Regulation (GDPR)

1. Right to object on a case-by-case basis

For reasons arising from your particular situation, you have the right to object at any time to the processing of personal data concerning you which is based on point (e) of Article 6(1) GDPR (processing in the public interest) and point (f) of Article 6(1) GDPR (processing based on legitimate interests); this also applies to profiling based on those provisions within the meaning of Article 4(4) GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of establishing, exercising or defending legal claims.

2. Right to object to the processing of data for advertising purposes

In individual cases, and only if we are legally entitled to do so, we process your personal data for direct marketing purposes. You have the right to object at any time to the processing of your personal data for such marketing; this also applies to profiling insofar as it is related to such direct marketing. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.

You can object informally, preferably by emailing datenschutz@dct-delta.de, but you can also contact us in another way.

11. Further data protection issues

If you have any further questions, comments or other inquiries regarding your personal data that are not answered here, please contact us at: datenschutz@dct-delta.de or contact our external data protection officer.