Privacy policy

Table of Contents:

Introduction
Responsible for Data Processing
What Data Wo We Collect and How Do We Use Them?
Legal Basis for Data Processing
Transmission of Personal Data
Data Transmission to a Third Country
Cookies Usage
Payment Methods
Services Provided by Third-Party Providers
Contact
Web Analytics
Online Marketing
Social Media
Plug In Applications
Data Obligations
Data Protection Rights
Changes to this Privacy Policy

1. Introduction

This Privacy Policy describes how dbteo.com (the “Site” or “we”) collects, uses, and discloses your Personal Data (herein after also referred to as "data") when you visit or make a purchase from the Site. This policy applies to all processing of data carried out by us, both as part of the provision of our services and on our websites, in mobile applications and within external online presences, such as our social media profiles (hereinafter collectively referred to as the "Online Offer").

Last Updated: October 30th, 2021

2. Responsible for Data Processing

dbteo UG
Durchsholz 13
42897, Remscheid, Germany

Authorized representative: Debbie Teo

E-mail address: hello@dbteo.com

Phone: +49 (0)2191963413 (Unfortunately, for organizational reasons, we cannot answer our phone on a regular basis. The best and fastest way to contact us is via email)

3. What Data Wo We Collect and How Do We Use Them?

Types of data processed:

Inventory data (e.g., names, addresses).
Content data (e.g. entries in online forms).
Contact information (e.g., email, phone numbers, addresses).
Meta/communication data (e.g. device information, IP addresses).
Usage data (e.g. websites visited, interest in content, access times).
Contract data (e.g. subject matter of the contract, term, customer category).
Payment data (e.g. bank details, invoices, payment history).
Event data (Facebook) ("Event data" is data that may be transmitted by us to Facebook, e.g. via Facebook Pixel (via apps or other means), and relates to persons or their actions; the data includes, for example, information about visits to websites, interactions with content, functions, app installations, product purchases, etc.; the event data is processed for the purpose of creating target groups for content and advertising information (Custom Audiences).Event data is processed for the purpose of creating target groups for content and advertising information (Custom Audiences); Event data does not include the actual content (such as written comments), no login information and no contact information (i.e. no names, email addresses and phone numbers). Event data is deleted by Facebook after a maximum of two years, the target groups formed from them with the deletion of our Facebook account).

Categories of affected persons:

Business and Contractual Partners (this includes, for example, the designation of their legal representatives, company name, commercial registration number, VAT number, company number, address, contact person contact data (e-mail address, telephone number, fax), bank data.
Interested parties.
Communication partner.
Customers (this includes, for example, first and last name, address, contact details (e-mail address, telephone number).
Users (e.g., website visitors, users of online services).

Processing purposes:

Fulfilment of orders.
A/B testing.
Provision of our online offer and user-friendliness.
Conversion measurement (measurement of the effectiveness of marketing measures).
Office and organizational procedures.
Click tracking.
Direct marketing (e.g. by e-mail or postal mail).
Target group formation.
Heatmaps (mouse movements on the part of the user, which are combined to form an overall picture).
Marketing.
Contact requests and communication.
Remarketing.
Reach measurement (e.g. access statistics, recognition of returning visitors).
Safety measures.
Provision of contractual services and customer service.
Managing and responding to inquiries.
Target group formation (determination of target groups relevant for marketing purposes or other output of content).

4. Legal Basis for Data Processing

We process your data in accordance with the provisions of the General Data Protection Regulation (DS-GVO) and the Federal Data Protection Act 2018, as amended. Please note that in addition to the provisions of the GDPR, national data protection provisions of your or our country of residence or domicile may apply. Should more specific legal bases be relevant in individual cases, we will inform you of these in the data protection declaration.

Consent (Art. 6 (1) p. 1 lit. a. DSGVO) - The data subject has given his/her consent to the processing of personal data concerning him/her for a specific purpose or purposes.
Contract performance and pre-contractual requests (Art. 6 para. 1 p. 1 lit. b. DSGVO) - Processing is necessary for the performance of a contract to which the data subject is a party or for the performance of pre-contractual measures taken at the data subject's request.
Legal obligation (Art. 6 para. 1 p. 1 lit. c. DSGVO) - Processing is necessary for compliance with a legal obligation to which the controller is subject.
Legitimate interests (Art. 6 (1) p. 1 lit. f. DSGVO) - Processing is necessary to protect the legitimate interests of the controller or a third party, unless such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data.

National data protection regulations in Germany: In addition to the data protection regulations of the General Data Protection Regulation, national regulations on data protection apply in Germany. These include, in particular, the Act on Protection against Misuse of Personal Data in Data Processing (Federal Data Protection Act - BDSG). The BDSG contains special regulations on the right to information, the right to erasure, the right to object, the processing of special categories of personal data, processing for other purposes and transmission, as well as automated decision-making in individual cases, including profiling. Furthermore, state data protection laws of the individual federal states may apply.

5. Transmission of Personal Data

Our store is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products and services to you. Your data is stored across Shopify's data store, databases and general Shopify applications that we use, such as Shopify Payments. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy/customers. We remain responsible for the protection of your data. All order processors are contractually obligated to treat your data confidentially and to process it only in the context of the service provision. The processors commissioned by us receive your data if they need the data to perform their respective services. These are, for example, IT service providers that we need for the operation and security of our IT system, as well as advertising and address publishers for their own advertising campaigns. Your data will be processed in our customer database. The customer database supports data quality enhancement of existing customer data (duplicate cleansing, moved/deceased indicators, address correction), and enables enrichment with data from public sources. In the event of a legal obligation and in the context of legal prosecution, authorities, and courts as well as external auditors may be recipients of your data. In addition, for the purpose of contract initiation and performance, insurance companies, banks, credit agencies and service providers may be recipients of your data.

6. Data Transmission to a Third Country

If we process data in a third country (i.e., outside the European Union (EU), the European Economic Area (EEA)) or the processing takes place in the context of the use of third-party services or the disclosure or transfer of data to other persons, entities, or companies, this will only be done in accordance with the legal requirements. Subject to express consent or contractually or legally required transfer, we only process or have data processed in third countries with a recognized level of data protection, contractual obligation through so-called standard protection clauses of the EU Commission, in the presence of certifications or binding internal data protection regulations (Art. 44 to 49 DSGVO)

7. Cookies Usage

When you visit our Internet pages, we may store information on your computer in the form of cookies. Cookies are small files that are transferred from an Internet server to your browser and stored on its hard drive. The legal basis for the use of cookies is Art. 6 para. 1 lit f DSGVO. Only the Internet protocol address is saved during this process – but no other personal data. This information, which is stored in the cookies, enables us to recognise you automatically the next time you visit our website, thereby making it easier for you to use our website. You can of course also visit our Internet pages without accepting cookies. If you do not want your computer to be recognised upon your next visit, you can also refuse the use of cookies by changing the settings in your browser to "Reject cookies". You can find out how to do this in the operating instructions of your browser. However, if you reject the use of cookies, there may be restrictions on the use of some areas of our Internet pages.

The following cookie types and functions are distinguished:

Temporary cookies (also: session cookies): Temporary cookies are deleted at the latest after a user has left an online offer and closed his browser.
Permanent cookies: Permanent cookies remain stored even after the browser is closed. For example, the login status can be saved or preferred content can be displayed directly when the user visits a website again. Likewise, the interests of users used for reach measurement or marketing purposes can be stored in such a cookie.
First-party cookies: First-party cookies are set by us.
Third-party cookies (also: third-party cookies): Third-party cookies are mainly used by advertisers (so-called third parties) to process user information.
Necessary (also: essential or absolutely necessary) cookies: Cookies may be absolutely necessary for the operation of a website (e.g. to store logins or other user inputs or for security reasons).
Statistics, marketing and personalization cookies: Furthermore, cookies are generally also used in the context of range measurement and when a user's interests or behavior (e.g. viewing certain content, using functions, etc.) on individual websites are stored in a user profile. Such profiles are used, for example, to show users content that matches their potential interests. This process is also referred to as "tracking", i.e., tracking the potential interests of users. Insofar as we use cookies or "tracking" technologies, we will inform you separately in our privacy policy or in the context of obtaining consent.

Notes on legal bases: The legal basis on which we process your personal data using cookies depends on whether we ask you for consent. If this is the case and you consent to the use of cookies, the legal basis for processing your data is your declared consent. Otherwise, the data processed with the help of cookies is processed on the basis of our legitimate interests (e.g. in a business operation of our online offer and its improvement) or, if the use of cookies is necessary to fulfil our contractual obligations.

Storage period: If we do not provide you with explicit information about the storage period of permanent cookies (e.g. in the context of a so-called cookie opt-in), please assume that the storage period can be up to two years.

Processing of cookie data based on consent: We use a cookie consent management procedure in which the consent of users to the use of cookies, or the processing and providers mentioned in the cookie consent management procedure, can be obtained and managed and revoked by users. In this context, the declaration of consent is stored in order not to have to repeat its request and to be able to prove the consent in accordance with the legal obligation. The storage can take place on the server side and/or in a cookie (so-called opt-in cookie, or with the help of comparable technologies), in order to be able to assign the consent to a user or their device. Subject to individual information on the providers of cookie management services, the following information applies. A pseudonymous user identifier is created and stored with the time of consent, information on the scope of consent (e.g., which categories of cookies and/or service providers), as well as the browser, system and end device used.

8. Payment Methods

In the context of contractual and other legal relationships, due to legal obligations or otherwise on the basis of our legitimate interests, we offer data subjects efficient and secure payment options and use other service providers in addition to banks and credit institutions for this purpose (collectively, "payment service providers"). We engage the services of Shopify Payments for all our payments, who will at all times comply with the provisions of applicable data protection law, including the EU General Data Protection Regulation (“GDPR”), as applicable. If Shopify Payments process any of our personal data when performing their obligations under this Agreement, they will do so as a “data controller”, as defined by the GDPR. If Shopify Payments process any Cardholder Data on our behalf, we both agree that it is our intention that we shall be the “data controller” and Shopify Payments shall be the “data processor” in relation to that data, as those terms are defined in the GDPR. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy/customers

The data processed by the payment service providers includes inventory data, such as the name and address, bank data, such as account numbers or credit card numbers, passwords, TANs and checksums, as well as the contract, total and recipient-related information. The information is required to carry out the transactions. However, the data entered is only processed by the payment service providers and stored with them. I.e., we do not receive any account or credit card related information, but only information with confirmation or negative information of the payment. Under certain circumstances, the payment service providers transmit the data to credit agencies. The purpose of this transmission is to check identity and creditworthiness. In this regard, we refer to the terms and conditions and the data protection notices of the payment service providers.

The terms and conditions and the data protection notices of the respective payment service providers apply to the payment transactions, which can be accessed within the respective websites or transaction applications. We also refer to these for the purpose of further information and assertion of revocation, information and other data subject rights.

Types of data processed: inventory data (e.g. names, addresses), payment data (e.g. bank details, invoices, payment history), contract data (e.g. subject matter of contract, term, customer category), usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses), contact data (e.g. e-mail, telephone numbers).
Affected persons: Customers, interested parties.
Purposes of processing: provision of contractual services and customer service.
Legal basis: Contract fulfillment and pre-contractual requests (Art. 6 para. 1 p. 1 lit. b. DSGVO), Legitimate Interests (Art. 6 para. 1 p. 1 lit. f. DSGVO).

9. Services Provided by Third-Party Providers

In general, the third-party vendors we use will only collect, use, and disclose your information to the extent necessary for them to provide the services they provide to us.
Certain third-party vendors, however, such as payment gateways and other payment processors, have their own privacy policies regarding the information we must provide to them for your purchase-related transactions.
For these providers, we recommend that you read their privacy policies so that you understand how your personal information will be handled by them.
In particular, remember that certain providers may be located in or have facilities that are in a different jurisdiction than you or us. So, if you choose to engage in a transaction that involves the services of a third-party provider, your information may be subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.
For example, if you are located in Canada and your transaction is processed by a payment gateway in the United States, your personal information used to complete that transaction may be disclosed under the laws of the United States, including the Patriot Act.
Once you leave our store's website or are redirected to a third-party website or application, you are no longer subject to this Privacy Policy or our website's Terms of Service.

Types of data processed: payment data (e.g. bank details, invoices, payment history), contact data (e.g. e-mail, telephone numbers, addresses).
Affected persons: Customers
Purposes of processing: provision of contractual services and customer service.
Legal basis: Contract fulfillment and pre-contractual requests (Art. 6 para. 1 p. 1 lit. b. DSGVO), Legitimate Interests (Art. 6 para. 1 p. 1 lit. f. DSGVO).

Services used and service providers:

Easyship Fulfillment Services Ltd. (“Easyship“, “we“ and “us“) is the operator of www.easyship.com (“Website“), and used for the delivery fulfilment of products. Easyship Fulfillment Services Limited, 20/F 111 Queens Road West, Sheung Wan, Hong Kong SAR https://www.easyship.com/legal/privacy

10. Contact

When contacting us (e.g. by contact form, e-mail, telephone or via social media), the information of the inquiring persons is processed to the extent necessary to respond to the contact requests and any requested measures. The response to contact requests in the context of contractual or pre-contractual relationships is made in order to fulfil our contractual obligations or to respond to (pre)contractual inquiries and otherwise on the basis of legitimate interests in responding to the inquiries.

Types of data processed: inventory data (e.g. names, addresses), contact data (e.g. e-mail, telephone numbers), content data (e.g. entries in online forms), usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
Affected persons: Communication partners.
Purposes of processing: contact requests and communication, management and response to requests.
Legal basis: Contract fulfilment and pre-contractual inquiries (Art. 6 para. 1 p. 1 lit. b. DSGVO), Legitimate Interests (Art. 6 para. 1 p. 1 lit. f. DSGVO).

11. Web Analytics

Web analytics (also referred to as "reach measurement") is used to evaluate the flow of visitors to our online offering and may include behaviour, interests or demographic information about visitors, such as age or gender, as pseudonymous values. With the help of reach analysis, we can recognize, for example, at what time our online offer or its functions or content are most frequently used or invite re-use. Likewise, we can understand which areas require optimization.

In addition to web analytics, we may also use testing procedures, for example, to test and optimize different versions of our online offering or its components.

For these purposes, so-called user profiles may be created and stored in a file (so-called "cookie") or similar procedures may be used with the same purpose. This information may include, for example, content viewed, websites visited and elements used there and technical information such as the browser used, the computer system used and information on usage times. If users have consented to the collection of their location data, this may also be processed, depending on the provider.

The IP addresses of the users are also stored. However, we use an IP masking procedure (i.e., pseudonymization by shortening the IP address) to protect users. Generally, in the context of web analysis, A/B testing and optimization, no clear data of the users (such as e-mail addresses or names) are stored, but pseudonyms. This means that we, as well as the providers of the software used, do not know the actual identity of the users, but only the information stored in their profiles for the purposes of the respective procedures.

Notes on legal bases: If we ask users for their consent to use third-party providers, the legal basis for processing data is consent. Otherwise, users' data is processed on the basis of our legitimate interests (i.e. interest in efficient, economical and recipient-friendly services). In this context, we would also like to refer you to the information on the use of cookies in this privacy policy.

Types of data processed: Usage data (e.g. web pages visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
Data subjects: Users (e.g., website visitors, users of online services).
Purposes of processing: Reach measurement (e.g. access statistics, recognition of returning visitors), profiles with user-related information (creation of user profiles), A/B tests, feedback (e.g. collecting feedback via online form), marketing.
Security measures: IP masking (pseudonymization of the IP address).
Legal basis: Consent (Art. 6 para. 1 p. 1 lit. a. DSGVO), Legitimate Interests (Art. 6 para. 1 p. 1 lit. f. DSGVO).

Services used and service providers:

Google Tag Manager: The Tag Manager does not collect any personal data. The tool ensures that other tags are triggered, which may in turn collect data. Google Tag Manager does not access this data. If deactivation has occurred at domain or cookie level, this remains in place for all tracking tags which are implemented with Google Tag Manager. Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Google Tag Manager website; Google Tag Manager privacy policy.
Google Analytics: Reach measurement and web analytics; service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Google Analytics website; Google privacy policy.

12. Online Marketing

We process personal data for online marketing purposes, which may include, in particular, marketing advertising space or displaying promotional and other content (collectively, "Content") based on users' potential interests and measuring its effectiveness. For these purposes, so-called user profiles are created and stored in a file (so-called "cookie") or similar procedures are used, by means of which the information about the user relevant for the presentation of the aforementioned content is stored. This information may include, for example, content viewed, websites visited, online networks used, but also communication partners and technical information such as the browser used, the computer system used and information on usage times. If users have consented to the collection of their location data, this may also be processed. The IP addresses of the users are also stored. However, we use available IP masking procedures (i.e., pseudonymization by shortening the IP address) to protect users. In general, no clear user data (such as e-mail addresses or names) is stored as part of the online marketing process, but pseudonyms. This means that we, as well as the providers of the online marketing procedures, do not know the actual identity of the users, but only the information stored in their profiles. The information in the profiles is usually stored in the cookies or by means of similar procedures. These cookies can later generally also be read on other websites that use the same online marketing procedure and analysed for the purpose of displaying content as well as supplemented with further data and stored on the server of the online marketing procedure provider. Exceptionally, clear data may be associated with the profiles. This is the case if, for example, the users are members of a social network whose online marketing procedures we use and the network links the users’ profiles with the aforementioned data. We ask that you note that users can make additional agreements with the providers, e.g., by giving their consent as part of the registration process. In principle, we only receive access to summarized information about the success of our advertisements. However, in the context of so-called conversion measurements, we can check which of our online marketing methods have led to a so-called conversion, i.e., for example, to a contract being concluded with us. The conversion measurement is used solely to analyse the success of our marketing measures. Unless otherwise stated, we ask you to assume that cookies used will be stored for a period of two years.

Notes on legal bases: If we ask users for their consent to use third-party providers, the legal basis for processing data is consent. Otherwise, users’ data is processed on the basis of our legitimate interests (i.e. interest in efficient, economical and recipient-friendly services). In this context, we would also like to refer you to the information on the use of cookies in this privacy policy.

Types of data processed: Usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses), event data (Facebook) (“event data” is data that may be transmitted, e.g. via Facebook Pixel (via apps or in other ways), by us to Facebook and relates to individuals or their actions; the data includes, e.g.. Information about visits to websites, interactions with content, functions, installations of apps, purchases of products, etc.; Event data is processed for the purpose of forming target groups for content and advertising information (Custom Audiences); Event data does not include the actual content (such as written comments), no login information and no contact information (i.e. no names, email addresses and phone numbers). Event data is deleted by Facebook after a maximum of two years, the target groups formed from them with the deletion of our Facebook account).
Data subjects: Users (e.g., website visitors, users of online services).
Purposes of processing: marketing, profiling with user-related information (creating user profiles), remarketing, conversion measurement (measuring the effectiveness of marketing measures), targeting, target grouping (determining target groups relevant for marketing purposes or other output of content).
Security measures: IP masking (pseudonymization of the IP address).
Legal basis: Consent (Art. 6 para. 1 p. 1 lit. a. DSGVO), Legitimate Interests (Art. 6 para. 1 p. 1 lit. f. DSGVO).
Opt-out: We refer to the data protection notices of the respective providers and the opt-out options given for the providers. If no explicit opt-out option has been specified, you have the option of switching off cookies in your browser settings. However, this may restrict functions of our online offer. We therefore recommend the following additional opt-out options, which are offered in summary for the respective areas: a) Europe b) Canada c) USA d) Cross-territory

Services used and service providers:

Facebook Custom Audiences Pixel: We use "Custom Audiences Pixel" from Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook") to present interest-based advertisements to visitors to our website during their visit to Facebook. For this purpose, we have implemented a pixel of Facebook on our website, which establishes a direct connection to the Facebook servers when you visit our website. Information is sent to the Facebook server that you have visited our website and Facebook is assigning this information to your personal Facebook user account. For more information about Facebook's collection and use of the data and your rights and options for ensuring your privacy in this respect, please see the data protection information issued by Facebook at https://www.facebook.com/about/privacy/.

13. Social Media

We maintain online presences within social networks and process user data in this context in order to communicate with users active there or to offer information about us. We would like to point out that user data may be processed outside the European Union. This may result in risks for the users because, for example, the enforcement of the users' rights could be made more difficult. Furthermore, user data is usually processed within social networks for market research and advertising purposes. For example, usage profiles can be created based on the usage behaviour and resulting interests of the users. The usage profiles can in turn be used, for example, to place advertisements within and outside the networks that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the users' computers, in which the usage behaviour and interests of the users are stored. Furthermore, data independent of the devices used by the users may also be stored in the usage profiles (especially if the users are members of the respective platforms and are logged in to them). For a detailed presentation of the respective forms of processing and the options to object (opt-out), we refer to the privacy statements and information provided by the operators of the respective networks.

In the case of requests for information and the assertion of data subject rights, we would also like to point out that these can be asserted most effectively with the providers. Only the providers have access to the users' data and can take appropriate measures and provide information directly. If you still need help, you can contact us.

Facebook: We are jointly responsible with Facebook Ireland Ltd. for the collection (but not further processing) of data from visitors to our Facebook page (known as a "Fan Page"). This data includes information about the types of content users view or interact with, or the actions they take (see under "Things You and Others Do and Provide" in the Facebook Data Policy, as well as information about the devices users use (e.g., IP addresses, operating system, browser type, language settings, cookie data; see under "Device Information" in the Facebook Data Policy statement. As explained in the Facebook Data Policy under "How do we use this information?", Facebook also collects and uses information to provide analytics services, called "Page Insights," to Page operators to provide them with insights into how people interact with their Pages and with content associated with them. We have entered into a special agreement with Facebook ("Page Insights Information"), which regulates in particular which security measures Facebook must observe and in which Facebook has agreed to fulfil the data subject rights (i.e., users can, for example, send information or deletion requests directly to Facebook). The rights of users (in particular to information, deletion, objection and complaint to the competent supervisory authority), are not restricted by the agreements with Facebook. Further information can be found in the "Information on Page Insights"

Types of data processed: contact data (e.g. e-mail, telephone numbers), content data (e.g. entries in online forms), usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
Data subjects: Users (e.g., website visitors, users of online services).
Purposes of processing: contact requests and communication, feedback (e.g. collecting feedback via online form), marketing.
Legal basis: Legitimate interests (Art. 6 para. 1 p. 1 lit. f. DSGVO).

Services used and service providers:

Instagram: Social network; service provider: Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA, parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; Instagram website; Instagram privacy policy.
Facebook: Social network; service provider: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; Facebook website; Facebook privacy policy; Opt-out: Facebook Ads settings (login to Facebook is required).

14. Plug In Applications

We integrate functional and content elements into our online offer that are obtained from the servers of their respective providers (hereinafter referred to as "third-party providers"). These can be, for example, graphics, videos or city maps (hereinafter uniformly referred to as "content"). The integration always requires that the third-party providers of this content process the IP address of the user, since without the IP address they could not send the content to their browser. The IP address is thus required for the display of this content or function. We strive to use only such content whose respective providers use the IP address only for the delivery of the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. The "pixel tags" can be used to analyze information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and may contain, among other things, technical information about the browser and operating system, referring websites, time of visit and other information about the use of our online offer as well as be linked to such information from other sources.

Integration of third-party software, scripts or frameworks (e.g. jQuery): We integrate software into our online offer that we retrieve from servers of other providers (e.g. function libraries that we use for the purpose of presentation or user-friendliness of our online offer). In doing so, the respective providers collect the IP address of the user and may process this for the purpose of transmitting the software to the user's browser and for security purposes, as well as for the evaluation and optimization of their offer.

Types of data processed: Usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses), inventory data (e.g. names, addresses), contact data (e.g. e-mail, telephone numbers), content data (e.g. entries in online forms).
Data subjects: Users (e.g., website visitors, users of online services).
Purposes of processing: provision of our online offer and user-friendliness, provision of contractual services and customer service.
Legal basis: Legitimate interests (Art. 6 para. 1 p. 1 lit. f. DSGVO), consent (Art. 6 para. 1 p. 1 lit. a. DSGVO), contract performance and pre-contractual requests (Art. 6 para. 1 p. 1 lit. b. DSGVO).

Services used and service providers:

Google Fonts: We integrate the fonts ("Google Fonts") of the provider Google, whereby the user data is used solely for the purpose of displaying the fonts in the user's browser. The integration is based on our legitimate interests in a technically secure, maintenance-free and efficient use of fonts, their uniform display and taking into account possible licensing restrictions for their integration. Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Google Fonts website; Google Fonts privacy policy.
You Tube: Social network and video platform; service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; YouTube privacy policy; YouTube opt-out.
Instagram Plugins and Content: We are jointly responsible with Facebook Ireland Ltd. for collecting or receiving in the course of a transmission (but not further processing) "Event Data" that Facebook collects or receives in the course of a transmission by means of Instagram features (e.g., content embedding features) running on our Online Service for the purposes of: a) displaying content as well as promotional information that is relevant to users' presumed interests; b) delivering commercial and transactional messages (e.g. e.g., targeting users via Facebook Messenger); c) improving ad delivery and personalization of features and content (e.g., improving the detection of which content or advertising information presumably matches users' interests). We have entered into a special agreement with Facebook ("Addendum for Responsible Parties"), which regulates in particular which security measures Facebook must observe (Facebook data security terms) and in which Facebook has agreed to fulfill data subject rights (i.e., users can, for example, provide information or make deletion requests directly to Facebook). Note: When Facebook provides us with metrics, analytics, and reports (which are aggregated, i.e., do not receive information about individual users and are anonymous to us), this processing is not done under shared responsibility, but rather on the basis of a data processing contract ("Data Processing Terms") , the "Data Security Terms and Conditions" and, with regard to processing in the USA, on the basis of standard contractual clauses ("Facebook EU Data Transfer Addendum). The rights of users (in particular to information, deletion, objection and complaint to the competent supervisory authority), are not restricted by the agreements with Facebook.

Types of data processed: Usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
Data subjects: Users (e.g., website visitors, users of online services).
Purposes of processing: provision of our online offer and user-friendliness, marketing, profiles with user-related information (creation of user profiles).
Legal basis: Consent (Art. 6 para. 1 p. 1 lit. a. DSGVO), Legitimate Interests (Art. 6 para. 1 p. 1 lit. f. DSGVO).

15. Data Obligations

The processing of your data is necessary for the conclusion or fulfillment of your contract entered into with us. If you do not provide us with this data, we will usually have to refuse to conclude the contract or will no longer be able to perform an existing contract and consequently have to terminate it. However, you are not obliged to give your consent to data processing with regard to data that is not relevant for the fulfillment of the contract or that is not required by law.

16. Data Protection Rights

As a data subject, you are entitled to various rights under the GDPR, which arise in particular from Art. 15 to 21 GDPR:

Right to object: You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) DSGVO; this also applies to profiling based on these provisions. If the personal data concerning you is processed for the purposes of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing; this also applies to profiling, insofar as it is related to such direct marketing.
Right of revocation for consents: You have the right to revoke any consent you have given at any time.
Right of access: You have the right to request confirmation as to whether data in question is being processed and to obtain information about this data, as well as further information and a copy of the data in accordance with the legal requirements.
Right to rectification: In accordance with the law, you have the right to request that data concerning you be completed or that inaccurate data concerning you be rectified.
Right to erasure and restriction of processing: You have the right, in accordance with the law, to request that data relating to you be erased immediately or, alternatively, to request restriction of the processing of the data in accordance with the law.
Right to data portability: You have the right to receive data relating to you that you have provided to us in a structured, common and machine-readable format in accordance with the legal requirements, or to request that it be transferred to another controller.
Complaint to supervisory authority: In accordance with the law and without prejudice to any other administrative or judicial remedy, you also have the right to lodge a complaint with a data protection supervisory authority, in particular a supervisory authority in the Member State where you usually reside, the supervisory authority of your place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.

Supervisory authority responsible for us:

State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia
Kavalleriestr. 2
40213 Düsseldorf
Telephone: 0211/38424-0
E-Mail: poststelle@ldi.nrw.de

If you are a resident of California, you have the right to access the Personal Information we hold about you (also known as the ‘Right to Know’), and to ask that your Personal Information be corrected, updated, or erased. If you would like to exercise these rights or designate an authorized agent to submit these requests on your behalf, please contact us through the contact information below: hello@dbteo.com

17. Changes to this Privacy Policy

We reserve the right to update our Privacy Policy from time to time. The latest effective date will be reflected at the top of the Privacy Policy. We encourage you to periodically review the latest Privacy Policy. If fundamental changes are carried out, we will announce the changes on our website and update the effective date reflected at the top of the Privacy Policy.

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at hello@dbteo.com.