Legal notice

General

As the operator of this website and as a company, we come into contact with your personal data. This refers to all data that says something about you and with which you can be identified. In this privacy policy, we would like to explain to you in what way, for what purpose, and on what legal basis we process your data.

The entity responsible for data processing on this website and in our company is:

digithings GmbH

Halberstädter Straße 89

33106 Paderborn

Phone: 0172 5252068

Email: info@digithings.de

General information


SSL or TLS encryption

When you enter your data on websites, place online orders, or send emails over the internet, you must always expect that unauthorized third parties may access your data. Complete protection against such access does not exist. However, we do everything we can to protect your data in the best possible way and to close security gaps as far as we are able.

An important protective mechanism is the SSL or TLS encryption of our website, which ensures that data you transmit to us cannot be read by third parties. You can recognize the encryption by the lock icon in front of the entered internet address in your browser and by the fact that our internet address begins with https:// and not with http://.

How long do we store your data?

In some places in this privacy policy, we inform you about how long we or the companies that process your data on our behalf store your data. If such information is missing, we store your data until the purpose of the data processing no longer applies, you object to the data processing, or you withdraw your consent to the data processing.

In the event of an objection or withdrawal, however, we may continue to process your data if at least one of the following requirements is met:

  • We have compelling legitimate grounds for continuing the data processing that outweigh your interests, rights, and freedoms (only in the case of objection to data processing; if the objection is directed against direct marketing, we cannot present any legitimate grounds).

  • The data processing is necessary to assert, exercise, or defend legal claims (does not apply if your objection is directed against direct marketing).

  • We are legally obligated to retain your data.

In this case, we will delete your data as soon as the requirement(s) no longer apply.


Data transfer to the USA

We also use tools on our website from companies that transfer your data to the USA, where it is stored and, if applicable, further processed. The European Commission has adopted an adequacy decision for the EU-US Data Privacy Framework. This establishes that the USA ensures an adequate level of protection for personal data transferred from the EU to US companies. This decision is based on new safeguards and measures introduced by the USA to meet data protection requirements. The adequacy decision includes, among other things, limitations and safeguards regarding access to data by US intelligence services. Binding safeguards have been introduced to limit access by US intelligence services to what is necessary and proportionate to protect national security. In addition, enhanced oversight of US intelligence activities has been established to ensure compliance with limitations on surveillance activities. An independent redress mechanism has also been set up to handle and resolve complaints from European citizens regarding access to their data. The EU-US Data Privacy Framework thus enables European companies to transfer data to certified US companies without having to introduce additional data protection safeguards. A list of all certified companies can be viewed at the following link: https://www.dataprivacyframework.gov/s/participant-search

A change in the decision of the European Commission cannot be ruled out.

Your rights

Objection to data processing

IF YOU READ IN THIS PRIVACY POLICY THAT WE HAVE LEGITIMATE INTERESTS FOR PROCESSING YOUR DATA AND THEREFORE BASE THIS ON ART. 6 ABS. 1 SENTENCE 1 LIT. F) GDPR, YOU HAVE THE RIGHT TO OBJECT TO THIS UNDER ART. 21 GDPR. THIS ALSO APPLIES TO PROFILING BASED ON THE AFOREMENTIONED PROVISION. THE REQUIREMENT IS THAT YOU PROVIDE REASONS FOR THE OBJECTION ARISING FROM YOUR PARTICULAR SITUATION. A JUSTIFICATION IS NOT REQUIRED IF THE OBJECTION IS DIRECTED AGAINST THE USE OF YOUR DATA FOR DIRECT MARKETING.

THE CONSEQUENCE OF THE OBJECTION IS THAT WE MAY NO LONGER PROCESS YOUR DATA. THIS ONLY DOES NOT APPLY IF ONE OF THE FOLLOWING REQUIREMENTS IS MET:

  • WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OUTWEIGH YOUR INTERESTS, RIGHTS, AND FREEDOMS.

  • THE PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

THE EXCEPTIONS DO NOT APPLY IF YOUR OBJECTION IS DIRECTED AGAINST DIRECT MARKETING OR PROFILING ASSOCIATED WITH IT.

Other rights

Withdrawal of your consent to data processing

Many data processing operations take place on the basis of your consent. You grant this, for example, by ticking a box on online forms before sending the form, or by allowing certain cookies when you visit our website. You can withdraw your consent at any time without giving reasons (Art. 7 Abs. 3 GDPR). From the time of withdrawal, we may no longer process your data. The only exception: We are legally obligated to retain the data for a certain period of time. Such retention periods exist in particular in tax and commercial law.

Right to lodge a complaint with the competent supervisory authority

If you believe that we are violating the General Data Protection Regulation (GDPR), you have the right to lodge a complaint with a supervisory authority under Art. 77 GDPR. You can contact a supervisory authority in the Member State of your habitual residence, your place of work, or the place of the alleged violation. The right to lodge a complaint exists in addition to administrative or judicial remedies.

Right to data portability

We must hand over data that we process automatically on the basis of your consent or in fulfillment of a contract to you or to a third party in a structured, commonly used, machine-readable format if you request it. We can only transfer the data to another controller insofar as this is technically feasible.

Right to information, erasure, and rectification

Under Art. 15 GDPR, you have the right to obtain, free of charge, information about what personal data we have stored about you, where the data comes from, to whom we transfer the data, and for what purpose it is stored. Should the data be incorrect, you have a right to rectification (Art. 16 GDPR); under the requirements of Art. 17 GDPR, you may request that we delete the data.

Right to restriction of processing

In certain situations, you can demand that we restrict the processing of your data under Art. 18 GDPR. The data may then – apart from storage – only be processed as follows:

  • with your consent

  • to assert, exercise, or defend legal claims

  • to protect the rights of another natural or legal person

  • for reasons of important public interest of the European Union or a Member State

The right to restriction of processing exists in the following situations:

  • You have disputed the accuracy of your personal data stored by us and we need time to verify this. The right exists for the duration of the verification.

  • The processing of your personal data is unlawful or was unlawful in the past. Here, the right exists as an alternative to the erasure of the data.

  • We no longer need your personal data, but you need it to exercise, defend, or assert legal claims. Here, the right exists as an alternative to the erasure of the data.

  • You have objected under Art. 21 Abs. 1 GDPR and your interests and ours must now be weighed against each other. The right exists as long as the result of the weighing has not yet been determined.


Hosting and content delivery networks (CDN)


External hosting

Our website is hosted on a server of the following internet service provider (hoster):

Framer B.V.
Rozengracht 207B
1016 LZ Amsterdam, Netherlands

Has a data processing agreement been concluded with the hoster or are standard contractual clauses (SCC) used?

Yes

How do we process your data?

The hoster stores all data of our website. This also includes all personal data collected automatically or through your input. This can be in particular: your IP address, pages accessed, names, contact details and inquiries, as well as meta and communication data. In processing the data, our hoster adheres to our instructions and always processes the data only to the extent necessary to fulfill the performance obligation towards us.

On what legal basis do we process your data?

Since we address potential customers through our website and maintain contacts with existing customers, the data processing by our hoster serves contract initiation and fulfillment and is therefore based on Art. 6 Abs. 1 lit. b) GDPR. Furthermore, it is our legitimate interest as a company to provide a professional online presence that meets the necessary security, speed, and efficiency requirements. In this respect, we also process your data on the basis of Art. 6 Abs. 1 lit. f) GDPR.

Data collection on this website


Use of cookies

Our website places cookies on your device. These are small text files used for different purposes. Some cookies are technically necessary for the website to function at all (necessary cookies). Others are required to perform certain actions or functions on the site (functional cookies). For example, without cookies, it would not be possible to use the advantages of a shopping cart in an online shop. Still other cookies serve to analyze user behavior or to optimize marketing measures. If we use third-party services on our website, e.g., to process payment transactions, these companies may also leave cookies on your device when you access the website (so-called third-party cookies).

How do we process your data?

Session cookies are only stored on your device for the duration of a session. As soon as you close the browser, they disappear on their own. Permanent cookies, on the other hand, remain on your device unless you delete them yourself. This can, for example, lead to your user behavior being permanently analyzed. You can influence how your browser handles cookies via its settings:

  • Do you want to be informed when cookies are set?

  • Do you want to exclude cookies generally or for specific cases?

  • Do you want cookies to be automatically deleted when the browser is closed?

If you deactivate or do not allow cookies, the functionality of the website may be restricted.

Insofar as we use cookies from other companies or for analysis purposes, we will inform you about this within the scope of this privacy policy. We also request your consent in this regard when you access our website.

On what legal basis do we process your data?

We have a legitimate interest in ensuring that our online offerings can be used by visitors without technical problems and that all desired functions are available to them. The storage of necessary and functional cookies on your device is therefore based on Art. 6 Abs. 1 lit. f) GDPR. We use all other cookies on the basis of Art. 6 Abs. 1 lit. a) GDPR, provided you give us corresponding consent. You can withdraw this at any time with effect for the future. If you consented to the placement of necessary and functional cookies when consent was requested, the storage of these cookies also takes place exclusively on the basis of your consent.

Server log files

Server log files log all requests and accesses to our website and record error messages. They also include personal data, in particular your IP address. However, this is anonymized by the provider after a short time, so that we cannot assign the data to you personally. The data is automatically transmitted from your browser to our provider.

How do we process your data?

Our provider stores the server log files to be able to trace activities on our website and to locate errors. The files contain the following data:

  • Browser type and version

  • Operating system used

  • Referrer URL

  • Host name of the accessing computer

  • Time of the server request

  • IP address (anonymized if applicable)

We do not merge this data with other data, but use it solely for statistical evaluation and to improve our website.

On what legal basis do we process your data?

We have a legitimate interest in our website running without errors. It is also our legitimate interest to receive an anonymized overview of accesses to our website. The data processing is therefore lawful in accordance with Art. 6 Abs. 1 lit. f) GDPR.


Contact form

You can send us a message via the contact form on this website.

How do we process your data?

We store your message and the details from the form in order to process your request including follow-up questions. This also applies to the contact details provided. We do not pass the data on to other persons without your consent.

How long do we store your data?

We delete your data as soon as one of the following points occurs:

  • Your request has been conclusively processed.

  • You request us to delete the data.

  • You withdraw your consent to storage.

This only does not apply if we are legally obligated to retain the data.

On what legal basis do we process your data?

Insofar as your inquiry is related to our contractual relationship or serves the implementation of pre-contractual measures, we process your data on the basis of Art. 6 Abs. 1 lit. b) GDPR. In all other cases, it is our legitimate interest to effectively process inquiries addressed to us. The legal basis for data processing is therefore Art. 6 Abs. 1 lit. f) GDPR. If you have consented to the storage of your data, Art. 6 Abs. 1 lit. a) GDPR is the legal basis. In this case, you can withdraw your consent at any time with effect for the future.


Inquiries by email, phone, or fax

You can send us a message by email or fax, or call us.

How do we process your data?

We store your message as well as the contact details you provide or the transmitted telephone number in order to process your request, including follow-up questions. We do not pass the data on to other persons without your consent.

The processing is carried out via the form system of Framer B.V., Rozengracht 207B, 1016 LZ Amsterdam, Netherlands, which acts as a technical service provider for the provision and storage of form data.

How long do we store your data?

We delete your data as soon as one of the following points occurs:

  • Your request has been conclusively processed.

  • You request us to delete the data.

  • You withdraw your consent to storage.

This only does not apply if we are legally obligated to retain the data.

On what legal basis do we process your data?

Insofar as your inquiry is related to our contractual relationship or serves the implementation of pre-contractual measures, we process your data on the basis of Art. 6 Abs. 1 lit. b) GDPR. In all other cases, it is our legitimate interest to effectively process inquiries addressed to us. The legal basis for data processing is therefore Art. 6 Abs. 1 lit. f) GDPR. If you have consented to the storage of your data, Art. 6 Abs. 1 lit. a) GDPR is the legal basis. In this case, you can withdraw your consent at any time with effect for the future.



Plugins and tools

Google Fonts (local hosting)

We use fonts from the US company Google on our website. We have installed the fonts locally, so no connection to Google's servers takes place when you visit our website.

Further information on Google Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://policies.google.com/privacy?hl=de.


Google Maps

What is Google Maps?

Map service of Google Ireland Ltd.

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Where can you find further information about data protection at Google?

https://policies.google.com/privacy?hl=en

On what basis do we transfer your data to the USA?

On the basis of the adequacy decision of the European Commission as well as the company's corresponding certification.

How do we process your data?

We use Google Maps on our website. In order for you to use all functions of the map service, Google stores your IP address on one of its servers in the USA.

On what legal basis do we process your data?

The maps from Google Maps ensure that the locations specified on our website are easier for visitors to find. As a company, we have a legitimate interest in this. The data processing is therefore lawful under Art. 6 Abs. 1 lit. f) GDPR.

If you have consented to the data processing, we process your data exclusively on the basis of Art. 6 Abs. 1 lit. a) GDPR. You can withdraw your consent at any time. From the time of withdrawal, we may no longer process your data.