DATA PRIVACY DECLARATION

I. Name and address of the controller
The controller under the General Data Protection Regulation and other national data privacy laws of the member states and other data protection regulations is:

DT Holding GmbH / Decor-Technik DT Vertrieb GmbH / DT metronic GmbH
(hereinafter referred to as: The DT Group)
Kruppstr. 6
76344 Eggenstein-Leopoldshafen
Deutschland
Tel.: +49 (0) 721 663823-0
info@dt-metronic.de
Website: www.decor-technik.de

II.  Contacting the Data Protection Officer
The Data Protection Officer for the controller can be contacted at the following e-mail address: uwe.larisch@congroup.de

III General information on data processing
1. Scope of processing of personal data
In general, we only process the personal data of our users only if this is necessary to provide a functional website and to provide our content and services. We typically only process our users’ personal data after we have received consent to do so from the user. In some exceptional cases, we may not be able to obtain prior consent due to the circumstances of the situation, but may process the data if this is permitted by law.

2. Legal basis for processing personal data
If we obtain consent from a data subject to process personal data, Art. 6 para. 1 lit. a. of the EU General Data Protection Regulation (GDPR) serves as the legal basis for processing that data.

When processing personal data necessary to perform a contract to which the data subject is a contractual party, Art. 6 para. 1 lit. b GDPR serves as the legal basis for processing. This also applies to processing that is necessary to carry out pre-contractual measures.

If personal data must be processed to fulfill a legal obligation of our company, Art. 6 para. 1 lit. c GDPR serves as the legal basis.

If the vital interests of the data subject or another natural person make it necessary for us to process personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.

If data processing is required to safeguard a legitimate interest of our company or a third party, and if the interests, basic rights, and basic freedoms of the data subject do not outweigh the above interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for processing.

3. Data deletion and storage terms
The personal data of data subjects is deleted or blocked once the purpose for which it was saved no longer applies. In addition, data may only be saved if specified under European or national legislation in EU ordinances, laws, or other regulations to which the controller is subject. Data will be blocked or deleted when the storage term specified by law ends, unless it is necessary to continue storing the data to conclude an agreement or perform a contract.

IV. Provision of Our Website and Creation of Log Files
1.  Description and scope of data processing
Each time you access our website, our system automatically records data and information from the requesting computer.

The following data are collected:

• Information on the type of browser and browser version used
• The user’s operating system
• The user’s IP address
• The date and time of access
• Websites from which the user's system accessed our website
• Websites accessed by the user’s system from our website

2. Legal basis for data processing
Art. 6 para. 1 lit. f GDPR serves as the legal basis for temporarily storing data and log files.

3. Purpose of data processing
The system must temporarily store the user’s IP address to allow it to deliver the website to the user’s computer. The user’s IP address must remain saved for the duration of the session. Data are saved in log files to ensure the functional capabilities of the website. In addition, we use this data to optimize the website and ensure the security of our information technology systems. Data are never evaluated for marketing purposes in this context. We have a legitimate interest in processing data for these purposes in accordance with Art. 6 para. 1 lit. f GDPR.

4. Duration of storage
Data are deleted once they are no longer necessary to achieve the purpose for which they were collected. If data are collected to provide the website, it will no longer be necessary once the specific session is ended. If data are saved in log files, this will be the case after seven days at the most. Data may be stored beyond this time. In this case, the user’s IP address will be deleted or distorted, so that it is no longer possible to associate it with the accessing client.

5. Right to object and right to data deletion
Data must be collected and saved in log files to provide and operate the website. Therefore, the user has no right to object in this case.

V. Use of cookies
a) Description and scope of data processing

Our website uses cookies. Cookies are text files saved in or by the user’s internet browser on their computer system. When a user accesses a website, a cookie may be saved on their operating system. This cookie includes a characteristic character string which allows it to clearly identify the browser the next time the user accesses the website.

We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after the user goes to another page.

The following data are saved and transmitted in the cookies:

• Language settings
• Login information

We also use cookies on our website which allow us to analyze user surfing behavior.

The following data may be transmitted by such cookies:

(1)          Frequency of page access (Google Analytics)

The user data collected in this manner are pseudonymized using technical precautions. After this, it will no longer be able to associate the data with the accessing user. Data will not be stored alongside other personal data of the user.

When the user accesses our website, they are informed regarding the use of cookies for analytic purposes by an info banner, and referred to this data privacy declaration.  They will also be informed in this context of how to prevent cookies from being saved through their browser settings (opt out).

b) Legal basis for data processing

Art. 6 para. 1 lit. f GDPR serves as the legal basis for processing personal data.

c) Purpose of data processing

Data are processed for the purpose of using cookies, which are required technically to simplify use of the website for the user. Some functions of our website cannot be provided without using cookies. To provide these functions, it is necessary that the user's browser can be recognized even after they access a different page.

We need cookies for the following applications (Google Analytics):

(1)          Adopting language settings

User data collected through technically required cookies are not used to create user profiles.

This website uses analytic cookies in order to improve the quality and content of our website. Analytic cookies tell us how the website is being used, helping us continuously optimize our services.

We have a legitimate interest in processing personal data for this purpose in accordance with Art. 6 para. 1 lit. f GDPR.

Duration of storage, right to object and right to data deletion

Cookies are saved on the user’s computer and transmitted to our website by the computer. Therefore, as a user you have full control over how cookies are used. You can change the settings in your web browser to deactivate or restrict the transmission of cookies. Cookies saved in the past can be deleted at any time. This can also be done using an automatic process. If cookies are deactivated for our website, it is possible that you may not be able to use all of the functions of our website in full.

VI.  Contact form and e-mail contact

1.   Description and scope of data processing

Our website includes a contact form that can be used to get in touch with us electronically. If a user uses this contact form, the data they enter on the input screen is transmitted to us and saved. This data includes:

• Company name
• Salutation
• First name
• Name
• E-mail address
• Notification text

When the message is sent, the following data are also saved:

• The user’s IP address
• Date and time of registration
• Content

Your consent will be obtained to process the data during the transmission process, and you will be referred to this Data Privacy Declaration.

Users may also contact us using the e-mail address provided. If they do so, any personal data transmitted in the e-mail will be saved.

Such data are never transmitted to third parties. Data are only used to handle the conversation.

2. Legal basis for data processing
If we have the user’s consent, the legal basis for processing personal data is Art. 6 para. 1 lit. a GDPR.

The legal basis for processing data transmitted when an e-mail is sent is Art. 6 para. 1 lit. f GDPR. If the e-mail contact is sent for the purpose of concluding an agreement, Art. 6 para. 1 lit. b GDPR also serves as the legal basis for processing.

3. Purpose of data processing
We only process personal data from the input screen to handle contact with the user. If a user contacts us via e-mail, this also serves as part of our justifiable interest in processing the data.

Other personal data processed during the transmission process is used to prevent misuse of the contact form and ensure the safety of our information technology systems.

4. Duration of storage
Data are deleted once they are no longer necessary to achieve the purpose for which they were collected. This is the case for the personal data from the contact form input screen and personal data transmitted via e-mail once our conversation with the user is over. The conversation is over when circumstances indicate that the matter in question has been fully clarified.

Additional personal data collected during the transmission process is deleted at the latest after seven days.

5. Right to object and right to data deletion
Users can revoke their consent to process personal data at any time. They may do so in writing or by sending an e-mail to datenschutzbeauftragter@dt-metronic.de. If the user contacts us via e-mail, they may object to the storage of their personal data at any time. In such cases, we will not be able to continue our conversation with them.

All personal data saved during the course of contacting the user will then be deleted.

VII. Use of analytic programs
I. Google Analytics
(1) This website uses Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses so-called “cookies,” text files saved on your computer that facilitate an analysis of your use of our website. The information provided by these cookies regarding your use of our website is generally transferred to a Google server in the USA and stored there. If IP anonymization is activated on this website, your IP address will, however, be shortened within the member states of the European Union or in other contracting states in the Agreement on the European Economic Area before this transfer. Only in exceptional cases will your full IP address be transferred to a Google server in the USA, where it will be shortened. Google will use this information to evaluate your site usage, create reports regarding website activity, and complete additional services associated with your internet use for the website operator.

(2) The IP addresses transferred by your browser as part of Google Analytics are not associated with other data from Google.

(3) You can prevent the storage of cookies by changing the settings in your browser software accordingly; we would, however, like to inform you that in this case you will not be able to use all of the functions on our website in full. You can also prevent data created by cookies and related to your use of the website (incl. your IP address) from being collected by Google and prevent Google from processing this data by downloading and installing the browser plug-in available at the following link: tools.google.com/dlpage/gaoptout.

As an alternative to the browser plug-in, or for browsers on mobile devices, you can prevent data from being collected by Google Analytics by clicking on this link: Deactivate Google Tracking

(4) This website uses Google Analytics with the extension “_anonymizeIp().” This ensures IP addresses are processed in shortened form, making it impossible to associate them with any specific individual. Insofar as the data we collect on you can be associated with you personally, this process prevents that association and your personal data are immediately deleted.

(5) We use Google Analytics to analyze the use of our website and regularly improve it. We can use the statistics generated to improve our services and make them more interesting for you as a user. Google has agreed to the EU-US Privacy Shield for the exceptional cases in which personal data are transmitted to the USA, see www.privacyshield.gov/EU-US-Framework . Art. 6 para. 1 lit. f GDPR serves as the legal basis for using Google Analytics.

(6) Information on the third party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of Use: www.google.com/analytics/terms/de.html, Data privacy overview: www.google.com/intl/de/analytics/learn/privacy.html , and Data Privacy Declaration: www.google.de/intl/de/policies/privacy .

(7) This website also uses Google Analytics for cross-device analysis of visitor streams, which is completed using user IDs. You can deactivate cross-device analysis of your website usage in your customer account under “My data,” “Personal data.”

II. Use of Google Adwords Conversion Tracking
We use the online advertising program “Google AdWords” and conversion tracking. Google Conversion Tracking is an analytic service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). If you click on an ad displayed by Google, a conversion tracking cookie is saved on your computer. These cookies become invalid after 30 days, do not contain any personal data, and cannot be used to personally identify you.

If you visit specific pages on our website and the cookie has not yet expired, Google and we can detect that you clicked on the ad and were transferred to this page. Every Google AdWords customer receives a unique cookie. This means cookies cannot be tracked across the websites of different AdWords customers.

The information obtained using conversion cookies is used to prepare conversion statistics for AdWords customers who have elected to participate in conversion tracking. Customers learn the total number of users who clicked on the ad and were transferred to a page with a conversion tracking tag. However, they do not receive information that could be used to personally identify the user.

If you do not want to participate in tracking, you can object to this use by changing the settings in your browser software to prevent cookies from being installed (deactivation option). You will then no longer be included in conversion tracking statistics. Further information and the Google Data Privacy Declaration are provided at: www.google.com/policies/technologies/ads/, www.google.de/policies/privacy/

VIII. Rights of Data Subjects

If we process your personal data, then you are a data subject in the sense of the GDPR, and you have the following rights towards the controller:

1. Your right to information

You can request a confirmation from the controller regarding whether or not we process your personal data.

If we do process your data, you can request information on the following subjects from the controller:

1. the purposes for which personal data are processed;

2. the categories of personal data processed;

3. the recipients or categories of recipients to whom your personal data has been disclosed or will be disclosed;

4. the planned duration for which your personal data will be stored or, if no specific information is available, the criteria for determining this duration;

5. your right to rectify your personal data, a right to restrict processing by the controller or a right to object to such processing;

6. your right to submit complaints to a supervisory authority;

7. all available information on the origin of the data, if it was not collected from the data subject

You have the right to request information on whether your personal data are transmitted to any third country or to any international organization. In this context, you can also request information regarding relevant guarantees according to Art. 46 GDPR given in conjunction with the transmission.

This right to information may be restricted if will likely make it impossible or seriously restrict our ability to engage in research or statistical purposes, and if the restriction is required to fulfill those research or statistical purposes.

2. Right to rectification
You have the right to request that the controller rectify and/or complete your personal data, if your personal data are incorrect or incomplete. The controller must correct such data promptly.

This right to rectification can be restricted if it will likely make it impossible or seriously restrict our ability to engage in research or statistical purposes, and if the restriction is required to fulfill those research or statistical purposes.

3. Right to restrict processing
Under the following conditions, you can request that processing of your personal data be restricted:

• if you dispute the correctness of your personal data for a long enough period allowing the data controller to check the correctness of said personal data;
• if processing is unlawful and you object to deletion of personal data, instead requesting that use of the personal data be restricted;
• if the controller no longer requires the personal data for the purpose of processing, but if you need such data to assert, exercise, or defend against legal claims, or
• if you have objected to processing according to Art. 21 para. 1 GDPR and it is not yet clear whether the controller's legitimate interests in processing outweigh your own justifications.
• If processing of your personal data has been restricted, this data may only be processed – apart from storing it – with your consent or to assert, exercise, or defend against legal claims, or to protect the rights of another legal or natural person, or in order to safeguard a significant public interest of the Union or its member states.

If the restriction of processing was restricted under the above conditions, you will be informed by the controller before this restriction is lifted.

This right to restrict processing can be restricted if will likely make it impossible or seriously restrict our ability to engage in research or statistical purposes, and if the restriction is required to fulfill those research or statistical purposes.

4. Right to deletion
a) Deletion obligation
You can request that the controller promptly delete your personal data, and the controller is obligated to delete this data promptly if one of the following justifications applies:

1. Your personal data are no longer required for the purposes for which it was collected or processed in some other manner.
2. You revoke your consent on which processing was based according to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR, and there is no other legal basis for processing.
3. You submit an objection to processing according to Art. 21 para. 1 GDPR and there are no legitimate grounds for processing that take priority over your objection, or you submit an objection to processing according to Art. 21 para. 2 GDPR.
4. Your personal data was processed unlawfully.
5. Your personal data must be deleted to fulfill a legal obligation under EU law or the law of its member states, to which the controller is subject.
6. Your personal data were collected in relation to information society services offered in accordance with Art. 8 para. 1 GDPR.

b) Information to third parties
If the controller has disclosed your personal data publicly, and if it is obligated to delete such personal data according to Art. 17 para. 1 GDPR, it shall take appropriate technical measures in consideration of available technology and implementation costs to inform the controller responsible for data processing that you as the data subject have requested that all links to said personal data or copies or replications of the personal data be deleted.

c) Exceptions
The right to deletion shall not exist if processing is required

 to exercise a right to freedom of expression and information;

to fulfill a legal obligation that requires processing in accordance with EU law or the law of the member states to which the controller is subject, or to carry out an obligation that is in the public interest or under public authority assigned to the controller;

to safeguard public interests in the area of public health in accordance with Art. 9 para. 2 lit. h and i and Art. 9 para. 3 GDPR;

 for archival purposes, scientific or historical research purposes that are in the public interest, or for statistical purposes according to Art. 89 para. 1 GDPR, insofar as the right indicated under section a) is likely to make it impossible or severely impact the ability to achieve the goals of this processing, or

to assert, exercise, or defend against legal claims.

5. Right to information
If you have asserted your rights to rectification, deletion, or restriction of processing to the controller, the controller is obligated to inform all recipients to whom your personal data were disclosed that data have been rectified or deleted, or that data processing has been restricted, unless this proves to be impossible or unreasonably difficult.

You have the right to be informed by the controller of who these recipients were.

6. Right to data portability
You have the right to obtain your personal data, which you have provided to the controller, in a structured, commonly used, and machine-readable format. In addition, you have the right to transmit these data to another controller without being prevented from doing so by the controller to whom personal data were provided, insofar

1. as the processing is based on your consent according to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, or on a contract according to Art. 6 para. 1 lit. b GDPR,
2. and if processing is carried out using automated processes.

In exercising this right, you furthermore have the right to ensure that your personal data are transmitted directly from one controller to another, if this is technically feasible. This may not affect the freedoms and rights of other individuals.

The right to data portability does not apply to processing of personal data which is necessary to carry out tasks that are in the public interest or to exercise public authority assigned to the controller.

7. Your right to object
You have the right to object to the processing of your personal data at any time for reasons related to your specific situation, if such processing is carried out under Art. 6 para. 1 lit. e or f GDPR; this also applies to profiling based on these provisions.

The controller will no longer process your personal data unless it can show mandatory and protected grounds for processing that outweigh your interests, rights, and freedoms, or if processing serves to assert, exercise, or defend against legal claims.

If your personal data are processed for the purpose of direct advertising, you have the right to object to processing of your personal data for the purpose of such advertisements; this also applies to profiling, if it is connected to such direct advertising.

If you object to processing for the purpose of direct advertising, your personal data will no longer be processed for this purpose.

You may exercise your right to object through an automated process in which technical specifications are used in conjunction with the use of information society services – regardless of directive 2002/58/EC.

You also have the right to object to processing of your personal data for scientific or historical research purposes or for statistical purposes according to Art. 89 para. 1 GDPR for reasons related to your particular situation.

Your right to object may be restricted if will likely make it impossible or seriously restrict our ability to engage in research or statistical purposes, and if the restriction is required to fulfill those research or statistical purposes.

8. Right to revoke a declaration of consent under data privacy law
You have the right to revoke your declaration of consent under data privacy law at any time. Your revocation of consent does not affect the legality of processing completed up to that point based on your consent.

9. Automated decisions in individual cases, including profiling
You have the right to have decisions made about you not be made exclusively through automated processing – including profiling – if this would have a legal impact on you or would affect you significantly in some other manner. This does not apply if the decision

1. is necessary to conclude or perform an agreement between you and the controller,
2. is permitted under the legal regulations of the European Union or member states to which the controller is subject, and if these legal regulations include appropriate measures safeguarding your rights, freedoms, and legitimate interests, or
3. is completed with your express consent.

However, these decisions may not be based on special categories of personal data according to Art. 9 para. 1 GDPR if Art. 9 para. 2 lit. a or g applies and if appropriate measures have been taken to safeguard your rights, freedoms, and legitimate interests.

With respect to the cases described in (1) and (3), the controller must take appropriate measures to safeguard your rights, freedoms, and legitimate interests, including at least the right to human intervention by the controller, the right to present one's own opinion, and the right to challenge a decision.

10. Right to submit complaints to a supervisory authority
Apart from any other legal remedies under administrative or other law, you have the right to submit a complaint to a supervisory authority, in particular in the member state in which you live, work, or where the alleged violation took place, if you believe that processing of your personal data violates the GDPR.

The supervisory authority to which the complaint was submitted must inform the individual submitting the complaint of the status and results of said complaint, including the option of judicial remedy under Art. 78 GDPR.

11. Visable Tracking Pixel
We uses products and services for analysis and marketing purposes, which are provided by Visable GmbH (www.visable.com) in cooperation with them. To that end, pixel-code technology is used to collect, process and store data in order to create at least pseudonymised, but where possible and meaningful, completely anonymous user profiles. Data collected, which may initially still include personal data, is transmitted to Visable or is collected directly by Visable and is used to create the aforementioned user profiles there. Visitors to this website are not personally identified and no other personal data is merged with the user profiles. If IP addresses are identified as personal, they are immediately deleted. You can object to the processing operations described with future effect at any time: