Privacy Policy
Unless otherwise stated below, providing your personal data is neither legally nor contractually required, nor necessary to conclude a contract. You are not obliged to provide these data. Non-provision has no consequences. This applies only insofar as no other indication is made in the following processing operations.
"Personal data" means any information relating to an identified or identifiable natural person.
Server Log Files
You can visit our website without providing any personal information.
Each time our website is accessed, usage data is transmitted to us or our web host/IT service provider by your browser and stored in log files (so-called server log files). This data includes, for example, the name of the requested page, date and time of access, IP address, amount of data transferred, and the requesting provider.
The processing is based on Art. 6(1)(f) GDPR, based on our overriding legitimate interest in ensuring the uninterrupted operation of our website and in improving our offerings.
Contact
Responsible Party
You may contact us if desired. The responsible party for data processing is: Jan Jacoby, Ludwig-Erhard-Straße 35a, 30982 Pattensen, Germany, 051019129289, service@diconfa.de
Initiated Customer Contact via Email
If you contact us proactively by email, we collect your personal data (name, email address, message content) only to the extent provided by you. The data processing serves to handle and respond to your inquiry. If the contact is for pre-contractual measures (e.g., consultation for purchase interest, quote preparation) or concerns an existing contract between you and us, this data processing is based on Art. 6(1)(b) GDPR. If the contact occurs for other reasons, the processing is based on Art. 6(1)(f) GDPR, based on our overriding legitimate interest in handling and responding to your request. In this case, you have the right to object at any time to the processing of your personal data based on Art. 6(1)(f) GDPR, for reasons arising from your particular situation. We use your email address only to process your request. Your data will then be deleted in accordance with statutory retention periods unless you have consented to further processing and use.
Collection and Processing via Contact Form
When using the contact form, we collect your personal data (name, email address, message content) only to the extent provided by you. The data processing serves the purpose of contacting you. If the contact is for pre-contractual measures (e.g., consultation for purchase interest, quote preparation) or concerns an existing contract between you and us, this data processing is based on Art. 6(1)(b) GDPR. If the contact occurs for other reasons, the processing is based on Art. 6(1)(f) GDPR, based on our overriding legitimate interest in handling and responding to your request. In this case, you have the right to object at any time to the processing of your personal data based on Art. 6(1)(f) GDPR, for reasons arising from your particular situation. Your email address is used only to process your request. Your data will then be deleted in accordance with statutory retention periods unless you have consented to further processing and use.
Use of Google Maps API Address Validation
We use the address validation service of Google (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland; “Google”) on our website.
The data processing serves to check your entries in our address forms in real time for input and typing errors and, if necessary, to supplement missing data. If data is entered incorrectly, alternative suggestions for correction are displayed. For this purpose, the address data you enter is transmitted to Google, stored there, and analyzed.
Among other things, the following information may be transmitted to Google and processed there: postal addresses (country, city, postal code, street, house number), email address, and telephone number. Your data may also be transferred to the USA. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under TADPF and has committed to complying with European data protection principles.
The processing of your personal data is based on Art. 6(1)(f) GDPR, based on our overriding legitimate interest in having accurate data to fulfill our contractual obligations.
You have the right to object at any time to this processing of your personal data based on Art. 6(1)(f) GDPR for reasons arising from your particular situation.
The data is processed separately by the provider and is not merged with other data. It will be deleted by the provider once the status of the entered data has been determined, but at the latest after 30 days.
More information about Google’s terms of use and privacy policy can be found at: https://cloud.google.com/maps-platform/terms and https://www.google.de/policies/privacy/.
Collection and Processing When Sending Images via Upload
Our website provides an upload function for image files. This allows you to send images to us via encrypted data transmission. By submitting your images, we may collect your personal data (depiction of identifiable persons) only to the extent provided by you. The data processing serves the purpose of creating personalized products. The submitted image serves as a template for the product and is used for this purpose (e.g., T-shirt printing). Processing is based on Art. 6(1)(b) GDPR and is necessary for fulfilling a contract with you.
Your data may be shared with service providers that we use for order processing under a data processing agreement. No other third-party sharing occurs.
The image you provide is used only for service delivery. Your data will then be deleted in accordance with statutory retention periods unless you have consented to further processing and use.
Collection and Processing When Sending Images via Email
You may send images to us via email in connection with ordering a personalized product.
By submitting your images, we may collect your personal data (depiction of identifiable persons) only to the extent provided by you. The data processing serves the purpose of creating personalized products. The submitted image serves as a template for the product and is used for this purpose (e.g., T-shirt printing). Processing is based on Art. 6(1)(b) GDPR and is necessary for fulfilling a contract with you.
No sharing of your data occurs.
The image you provide is used only for service delivery. Your data will then be deleted in accordance with statutory retention periods unless you have consented to further processing and use.
Customer Account Orders
Customer Account
When opening a customer account, we collect your personal data to the extent provided. The data processing serves to improve your shopping experience and simplify order processing. Processing is based on Art. 6(1)(a) GDPR with your consent. You may revoke your consent at any time by notifying us, without affecting the legality of processing conducted before revocation. Your customer account will then be deleted.
Collection, Processing, and Sharing of Personal Data for Orders
When placing an order, we collect and process your personal data only to the extent necessary to fulfill and process your order and respond to your inquiries. Providing the data is required for concluding the contract. Failure to provide data means no contract can be concluded. Processing is based on Art. 6(1)(b) GDPR and is necessary for fulfilling a contract with you.
Your data may be shared, for example, with shipping companies, dropshipping or fulfillment providers, payment service providers, service providers for order processing, and IT service providers. In all cases, we strictly comply with legal requirements. The scope of data transmission is limited to the minimum necessary.
Advertising
Use of Your Personal Data for Sending Postal Advertising
We use your personal data (name, address) obtained during the sale of goods or services to send you postal advertising, provided you have not objected to this use. Providing this data is necessary for concluding the contract. Failure to provide it means that no contract can be concluded.
Processing is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in direct advertising.
You can object to the use of your address data for this purpose at any time by notifying us. Contact details for exercising your right to object can be found in the imprint.
Use of Email Address for Sending Newsletters
We use your email address independently of contract processing exclusively for our own marketing purposes to send newsletters, provided you have explicitly consented. Processing is based on Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time without affecting the legality of processing conducted before the revocation. You can unsubscribe from the newsletter at any time via the link in the newsletter or by notifying us. Your email address will then be removed from the distribution list.
Use of Email Address for Sending Direct Advertising
We use your email address obtained in connection with the sale of goods or services to send electronic advertising for our own goods or services similar to those you have already purchased from us, provided you have not objected. Providing your email address is necessary for concluding the contract. Failure to provide it means no contract can be concluded. Processing is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in direct advertising. You can object to the use of your email address for this purpose at any time by notifying us. Contact details for exercising your right to object can be found in the imprint. You can also use the designated link in the promotional email. No costs other than basic transmission costs apply.
Use of Mailchimp
We use the newsletter service provided by Rocket Science Group LLC (675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA; “Mailchimp”) under a data processing agreement.
The information you provide during newsletter registration (email address, and optionally first and last name) is forwarded to Mailchimp. Processing serves the purpose of sending newsletters and statistical evaluation.
To analyze newsletter campaigns, the sent newsletters include a 1x1 pixel graphic (tracking pixel) or a tracking link. This allows us to see whether you opened the newsletter and clicked any embedded links. In this context, we collect personal data such as IP address, browser type, device, and timestamp. Pseudonymous usage profiles may be created from this data. The data is not used to personally identify you and is used only for statistical analysis to improve newsletter campaigns.
Your data is usually transferred to Mailchimp servers in the USA and stored there. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Mailchimp is not certified under TADPF. Data transfer is based on Standard Contractual Clauses as appropriate safeguards, available at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.
The processing of your personal data is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in a targeted, effective, and user-friendly newsletter system.
You have the right to object at any time to this processing of your personal data for reasons arising from your particular situation.
More information and Mailchimp’s privacy policy can be found at: https://mailchimp.com/de/legal/data-processing-addendum/ and https://www.intuit.com/privacy/statement/.
Shipping Providers Inventory Management
Sharing Email Address with Shipping Companies to Inform About Shipping Status
We share your email address with the shipping company as part of contract processing, provided you have explicitly consented during the order process. The purpose of sharing is to inform you about the shipping status via email. Processing is based on Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time by notifying us or the shipping company, without affecting the legality of processing conducted before the revocation.
Use of an External Inventory Management System
We use an inventory management system for contract processing under a data processing agreement. Your personal data collected during the order process is transmitted to:
JTL-Software-GmbH, Rheinstr. 7, 41836 Hückelhoven, Germany.
The processing of your personal data serves the purpose of fulfilling the contract concluded with you and is based on Art. 6(1)(b) GDPR.
Payment Providers
Payment Processing via Unzer
We use the payment service provider Unzer GmbH, Vangerowstraße 18, 69115 Heidelberg, Germany (hereinafter “Unzer”) for payment processing. When selecting and using payment methods processed through Unzer, the data required for payment processing (e.g., name, billing address, email address, phone number, payment information such as bank account or credit card number) is transmitted to Unzer. Processing of this data is based on Art. 6(1)(b) GDPR (performance of a contract) and, if necessary, Art. 6(1)(f) GDPR (legitimate interest in secure and efficient payment processing). Further information on data processing by Unzer and your rights can be found in Unzer’s privacy policy at: https://www.unzer.com/de/datenschutz/
Cookies
Our website uses cookies. Cookies are small text files that are stored by your internet browser on your computer system. When a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a unique string that allows the browser to be uniquely identified when the website is visited again.
Cookies are stored on your device. You therefore have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually whether to accept them, as well as prevent the storage of cookies and the transmission of the contained data. Cookies already stored can be deleted at any time. However, please note that some functions of this website may not be fully usable without cookies.
The following links provide information on how to manage (and disable) cookies in the most common browsers:
Google Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Technically Necessary Cookies
Unless stated otherwise in this privacy policy, we only use technically necessary cookies to make our service more user-friendly, effective, and secure. Cookies also allow our systems to recognize your browser even after a page change and offer you services. Some functions of our website cannot be offered without the use of cookies, as it is necessary to recognize the browser after a page change.
The use of cookies or comparable technologies is based on § 25(2) TDDDG. Processing of your personal data is based on Art. 6(1)(f) GDPR, reflecting our legitimate interest in ensuring optimal functionality of the website and a user-friendly and effective design of our services.
You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you.
Use of the Shopware Cookie Consent Manager
We use the Cookie Consent Manager of Shopware AG (Ebbinghoff 10, 48624 Schöppingen, Germany; "Shopware") on our website. The tool allows you to give consent to data processing on the website, especially the use of cookies, and to exercise your right to withdraw consent for already given permissions. The data processing serves to obtain and document the necessary consents for data processing, thereby complying with legal obligations. Cookies may be used in this process. User information, including your IP address, is collected and transmitted to Shopware. No further data is shared with third parties. Data processing is carried out to fulfill a legal obligation based on Art. 6(1)(c) GDPR. Further information about privacy at Shopware can be found at: https://www.shopware.com/de/datenschutz/.
Analytics
Use of Google Analytics 4
We use the web analytics service Google Analytics of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. The data processing serves the purpose of analyzing this website and its visitors, as well as marketing and advertising purposes. Google, on behalf of the operator of this website, will use the collected information to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage for the website operator.
The following information may be collected: IP address, date and time of page visit, click path, information about the browser and device used, visited pages, referrer URL (website from which you accessed our website), location data, purchase activities. Your data may be linked by Google with other data, such as your search history, personal accounts, usage data from other devices, and any other data Google has about you.
The IP address is truncated by Google within the member states of the European Union or in other states that are parties to the Agreement on the European Economic Area before processing.
Google uses technologies such as cookies, web storage in the browser, and tracking pixels, which allow the analysis of website usage. The use of cookies or comparable technologies is based on your consent under § 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR.
The processing of your personal data is carried out with your consent based on Art. 6(1)(a) GDPR. You can revoke your consent at any time without affecting the legality of processing carried out based on your consent prior to the revocation.
The information generated about your use of this website is usually transmitted to a Google server in the USA and stored there. An adequacy decision by the European Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified under TADPF and thus committed to comply with European data protection principles. Both Google and US authorities have access to your data.
Further information on terms of use and privacy can be found at https://policies.google.com/technologies/partner-sites and https://policies.google.com/privacy?hl=de&gl=de.
Plugins and Miscellaneous
Use of Google Tag Manager
We use the Google Tag Manager of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. This application manages JavaScript and HTML tags used primarily for implementing tracking and analytics tools. The data processing serves the purpose of designing and optimizing our website according to user needs. The Google Tag Manager itself does not store cookies or process personal data. However, it can trigger other tags that may collect and process personal data. More information about terms of use and privacy can be found here.
Use of Google reCAPTCHA
We use the reCAPTCHA service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. The query serves to distinguish between human input and automated, machine-based processing. Your input is transmitted to Google and further processed there. In addition, the IP address and, if necessary, other data required for reCAPTCHA are transmitted to Google. These data are processed by Google within the European Union and may also be transferred to servers of Google LLC in the USA. An adequacy decision by the European Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under TADPF and thus committed to comply with European data protection principles. The use of cookies or comparable technologies is based on your consent under § 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent based on Art. 6(1)(a) GDPR. You can revoke your consent at any time without affecting the legality of processing carried out based on your consent prior to the revocation. More information about Google reCAPTCHA and its privacy policy can be found at https://www.google.com/recaptcha/intro/android.html and https://www.google.com/privacy.
Use of Google invisible reCAPTCHA
We use the invisible reCAPTCHA service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. This serves to distinguish human input from automated, machine-based processing. In the background, Google collects and analyzes usage data that invisible reCAPTCHA uses to differentiate regular users from bots. Your input is transmitted to Google and processed there. Additionally, the IP address and other data required by Google for invisible reCAPTCHA may be transmitted. These data are processed by Google within the European Union and may also be transferred to servers of Google LLC in the USA. An adequacy decision by the European Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under TADPF and thus committed to comply with European data protection principles. The use of cookies or comparable technologies is based on your consent under § 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent based on Art. 6(1)(a) GDPR. You can revoke your consent at any time without affecting the legality of processing carried out based on your consent prior to the revocation. More information about Google reCAPTCHA and its privacy policy can be found at https://www.google.com/recaptcha/intro/android.html and https://www.google.com/privacy.
Use of Cloudfront
We use the Cloudfront CDN of Amazon Web Services EMEA SARL (38 avenue John F. Kennedy, L-1855, Luxembourg; “Cloudfront”) on our website. This is a regional network of servers in various data centers, which our web server connects to in order to deliver certain content of our website. The data processing serves the purpose of optimizing our website’s loading times and making our offering more user-friendly. The following information may be collected: IP address, system configuration information, information about traffic to and from customer websites (so-called server logfiles). Your data may be transferred to the USA. An adequacy decision by the European Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Cloudfront is certified under TADPF and thus committed to comply with European data protection principles. The processing of your personal data is carried out based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in the proper and targeted design of the website. You have the right, for reasons arising from your particular situation, to object at any time to this processing of your personal data based on Art. 6(1)(f) GDPR. More information on data protection when using Cloudfront can be found at https://docs.aws.amazon.com/de_de/AmazonCloudFront/latest/DeveloperGuide/data-protection-summary.html and https://d1.awsstatic.com/legal/aws-gdpr/AWS_GDPR_DPA.pdf.
Use of Google Maps
We use the Google Maps embedding function of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. This feature allows the visual display of geographical information and interactive maps. When pages containing Google Maps are accessed, Google may collect, process, and use data from website visitors. Your data may also be transferred to the USA. An adequacy decision by the European Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under TADPF and thus committed to comply with European data protection principles. The use of cookies or comparable technologies is based on your consent under § 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent based on Art. 6(1)(a) GDPR. You can revoke your consent at any time without affecting the legality of processing carried out based on your consent prior to the revocation. More information on the collection and use of data by Google can be found in Google’s privacy policy at https://www.google.com/privacypolicy.html. There, you can also adjust your settings to manage and protect the data processed by Google.
Embedding of Händlerbund Membership Logo
Our website displays the Händlerbund membership logo (Händlerbund e.V., Kohlgartenstraße 11-13, 04315 Leipzig). When accessing our website, the browser on your device automatically sends information to the Händlerbund e.V. server. This information is temporarily stored in a server logfile for 7 days. The following information is collected automatically without your intervention:
- IP address of the requesting device,
- IP address of the requesting device, date and time of access,
- Name and URL of the accessed file,
- Website from which the access occurred (referrer URL),
- Browser used and, if applicable, the operating system of your device as well as the name of your access provider.
Temporary storage of the IP address is necessary to enable website delivery. The IP address must remain stored for the duration of the session. Storage in logfiles ensures the functionality of the website, optimizes the website, and guarantees the security of IT systems. These data are not combined with other personal data. The legal basis for data processing is Art. 6(1)(f) GDPR.
Use of Google Fonts
We use Google Fonts from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website. The data processing serves the purpose of uniform font display on our website. To load the fonts, a connection is made to Google servers when the page is accessed. Cookies may be used in this process. Your IP address and browser information are processed and transmitted to Google. This data is not linked to your Google account. Your data may be transferred to the USA. An adequacy decision by the European Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under TADPF and thus committed to comply with European data protection principles. The use of cookies or comparable technologies is based on your consent under § 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent based on Art. 6(1)(a) GDPR. You can revoke your consent at any time without affecting the legality of processing carried out based on your consent prior to the revocation. More information about data processing and privacy can be found at https://www.google.de/intl/de/policies/ and https://developers.google.com/fonts/faq.
Use of Font Awesome
We use Font Awesome from Fonticons Inc. (307 S Main St., Suite 202, Bentonville, AR, 72712-9214, USA; “Font Awesome”) on our website. The data processing serves the purpose of uniform display of fonts and icons on our website. To load the fonts, a connection is made to Font Awesome servers when the page is accessed. Cookies may be used. Your IP address and browser information are processed and transmitted to Font Awesome. Your data may be transferred to third countries such as the USA. An adequacy decision by the European Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Font Awesome is not certified under TADPF. The use of cookies or comparable technologies is based on your consent under § 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent based on Art. 6(1)(a) GDPR. You can revoke your consent at any time without affecting the legality of processing carried out based on your consent prior to the revocation. More information about data processing and privacy can be found at https://fontawesome.com/privacy and https://fontawesome.com/support.
Data Subject Rights and Storage Duration
Storage Duration
After the full completion of a contract, data will initially be stored for the duration of the warranty period. Afterwards, data will be stored in accordance with statutory retention periods, in particular tax and commercial law requirements, and then deleted once these periods have expired, provided you have not consented to further processing and use.
Rights of the Data Subject
Subject to the statutory requirements, you have the following rights under Articles 15 to 20 GDPR: right of access, right to rectification, right to erasure, right to restriction of processing, and right to data portability. In addition, under Art. 21(1) GDPR, you have the right to object to processing based on Art. 6(1)(f) GDPR, as well as to processing for direct marketing purposes.
Right to Lodge a Complaint with the Supervisory Authority
Under Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is unlawful.
You may, for example, lodge a complaint with the competent supervisory authority for us at the following contact details:
State Commissioner for Data Protection Lower Saxony
Prinzenstraße 5
30159 Hanover
Tel.: +49 511 1204500
Fax: +49 511 1204599
E-Mail: poststelle@lfd.niedersachsen.de
Right to Object
If the personal data processing described here is based on our legitimate interest under Art. 6(1)(f) GDPR, you have the right to object to this processing at any time, for reasons arising from your particular situation, with effect for the future. After an objection, processing of the affected data will cease unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or if processing is necessary for the establishment, exercise, or defense of legal claims.
If personal data is processed for direct marketing purposes, you may object to this processing at any time by notifying us. After the objection, we will stop processing the affected data for direct marketing purposes.
Last updated: 22.10.2024