Privacy Policy

Section 1 Information about the collection of personal data

(1) Below, we inform you about the collection and processing of personal data when you use our website and when you contact us. Personal data are all data that can be related to you personally, e.g. name, address, e-mail addresses and user behaviour.

(2) The controller pursuant to Article 4 (7) EU General Data Protection Regulation (GDPR) is:

Dornbracht GmbH & Co. KG
Köbbingser Mühle 6
58640 Iserlohn
mail@dornbracht.com

(please see our Imprint)

You can contact our Data Protection Officer by e-mail at dsb@dornbracht.de or by writing to our mailing address, “attn. data protection officer.”

(3) Should you send us questions via the contact form, we will collect the data entered on the form, including the contact information you provide, in order to answer your question and in the event of any follow-up questions. We will not share this data without your consent.

The data entered in the contact form is therefore processed exclusively on the basis of your consent (Art. 6 (1) (a) GDPR). You can withdraw this consent at any time. An informal e-mail making this request is sufficient. This does not affect the lawfulness of any data processing done before we receive your withdrawal.

We will retain the data you provide on the contact form until such time as you request its erasure, withdraw your consent to its storage, or the purpose for its storage is no longer applicable (e.g. after completely processing your inquiry). Any mandatory statutory provisions, especially those regarding mandatory data retention periods, remain unaffected.

(4) If you contact us by e-mail, telephone or fax, your request, including all personal data arising from it (name, request), will be stored and processed by us for the purpose of handling your matter. To process your request, we use IT service providers who are bound by our instructions as processors. They receive personal data only to the extent necessary for the tasks assigned to them. Any further disclosure takes place only on an appropriate legal basis.

This data is processed on the basis of Art. 6 (1) (b) GDPR, provided your request is related to the performance of a contract or is required to carry out any pre-contractual actions. In all other cases, processing is based on your consent (Art. 6 (1) (a) GDPR) and/or our legitimate interests (Art. 6 (1) (f) GDPR), as we have a legitimate interest in effectively processing any requests addressed to us.

We will retain the data you provide in an inquiry until such time as you request its erasure, withdraw your consent to its storage, or the purpose for its storage is no longer applicable (e.g. after completely resolving your matter). Any mandatory statutory provisions, especially those regarding mandatory data retention periods, remain unaffected.

When processing customer and service enquiries that reach us by e-mail and are recorded in our customer management system Microsoft Dynamics 365, we use AI-assisted analysis to assign the enquiry to the responsible team. This also includes enquiries that our employees forward to this system for processing. For this purpose, the sender’s e-mail address, the subject line and the full content of the e-mail are transmitted to the AI service used. The analysis determines the language, the country relevant to processing and the type of enquiry. Attachments are not analysed. The AI-assisted assignment is based on Art. 6(1)(f) GDPR. Our legitimate interest is the efficient and targeted processing of incoming enquiries. The data transmitted for analysis are not used to train the AI models. The AI is used exclusively for classification and assignment. Our responsible employees decide how your enquiry is handled in substance.

No separate permanent storage of the transmitted enquiry content is envisaged within the AI analysis process. The enquiry and the assignment information required to process it are subsequently stored in our CRM and ERP systems. They are deleted as soon as they are no longer required to process and document the enquiry and no statutory retention obligations prevent deletion. Where statutory retention obligations apply, deletion takes place after they expire.

For the AI-assisted analysis within Microsoft Dynamics 365, we use Microsoft Deutschland GmbH, Konrad-Zuse-Straße 1, 85716 Unterschleißheim, Germany, as a processor. Processing is carried out on the basis of a data processing agreement pursuant to Art. 28 GDPR.

In connection with this processing, personal data may be transferred to Microsoft and its subprocessors in countries outside the European Union and the European Economic Area, in particular the United States. The transfers are subject to the European Commission’s 2021 Standard Contractual Clauses implemented by Microsoft and to the supplementary safeguards in the Microsoft Data Protection Addendum. The Data Protection Addendum also states that Microsoft is certified under the EU-U.S. Data Privacy Framework. You may request information about the safeguards used and a copy of the relevant Standard Contractual Clauses using the contact details set out in Section 1(2).

(5) If you order brochures, press kits, etc. (hereinafter referred to as “materials”), we will only collect and store contact information required to process your order and forward them to companies responsible for logistics and delivery of these materials. Mandatory fields are denoted with “\*” on the order form.

If you do not order materials from Germany, data will either be forwarded by us to our local branch or to our sales partners, who will send the materials to you by forwarding them to a logistics provider in the respective country, or they will be sent by us as described above.

If you do not reside in the European Economic Area, we may transmit your personal data to countries that have not been designated by the European Commission as providing adequate protection, including the United States. In the case of these transfers, we will take the necessary contractual steps to ensure that your personal data will receive an adequate level of protection.

When businesses place orders for materials, we may collect the name of the contact person at the respective company. The preceding comments apply accordingly in such cases.

Data entered in connection with the ordering process will be processed exclusively on the basis of your consent (Art. 6 (1) (a) GDPR). You can withdraw this consent at any time. An informal e-mail making this request is sufficient. This does not affect the lawfulness of any data processing done before we receive your withdrawal.

(6) If you wish to apply to us, we have provided the opportunity to do so using a form intended for this purpose. All mandatory information requested must be provided in full, otherwise the application process cannot be completed properly. Additional information is available here.

The Legal basis for processing your personal data in connection with the application process is primarily section 26 of the Federal Data Protection Act (BDSG). This law permits the processing of data required in connection with a decision to establish an employment relationship. Should the data continue to be necessary for legal purposes once the application process is complete, it may be processed on the basis of Art. 6 GDPR, in particular in order to pursue legitimate interests in accordance with Art. 6 (1) (f) GDPR. Our interest would then consist of asserting or defending against legal claims. If you have provided your consent, your data is subject to processing on the basis of Art. 6 (1) (a) GDPR. Your consent may be withdrawn at any time. Your personal data will only be shared within our company with persons who are involved in handling your application.

In the event of a rejection, applicant data will be deleted six months from the end of the recruiting process. If you are hired following the recruiting process, your data will be transferred from the candidate application system to our human resources information system.

You may object to having this data stored if you have legitimate interests that outweigh ours.

We use services provided by rexx systems GmbH, Süderstrasse 75-79, 20097 Hamburg in connection with the job application process. More information about this provider is available at: www.rexx-systems.com. After you have provided your consent to processing, data you have entered in the application forms will be transmitted to service provider rexx systems GmbH and stored on its server. Your data will be used exclusively for the purpose described above and subject to compliance with the terms of the GDPR. Your data will not be shared with third parties.

We have concluded a contract data processing agreement with rexx systems GmbH.

(7) As part of our dealer search feature, you have the opportunity to search specifically for authorized dealers in your area and contact them directly. In doing so, we process the data you provide (e.g. name, email address, message) for the purpose of forwarding it to the dealer you have selected.

To ensure quality, we retain your information for a period of 8 weeks. After 14 days, we will automatically send you a short feedback form to evaluate your initial contact with the dealer.

Your data will be used exclusively for these purposes and will then be deleted.

The selected dealer will receive your submitted data and is independently responsible for the further processing of your personal data. Please also refer to the dealer's individual privacy policy in this context.

The legal basis for the processing of your data is your consent pursuant to Art. 6 (1) lit. a GDPR.

(8) In the event that we use third-party service providers in connection with specific functions of our website, or if we desire to use your data for marketing purposes, we will inform you below in detail about the respective processes. We also specify the defined criteria for the retention period. We have carefully selected these service providers and they are obliged to process data provided by us only within the scope of tasks assigned to them.

Section 2 Personal data collection when visiting our website

(1) If you use the website solely for information purposes, that is, if you do not register or otherwise provide us with information, we only collect the personal data which your browser transmits to our server. If you wish to view our website, we collect the following data which is technically necessary for us to display our website to you and to guarantee stability and security (the legal basis is Art. 6 (1) (f) GDPR):

– IP address

– Date and time of access

– Time zone difference to Greenwich Mean Time (GMT)

– Contents of the request (specific page)

– Access status/HTTP status code

– The volume of data transferred in each case

– The referring website

– Browser

– Operating system and its interface

– Language and version of browser software.

(2) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files which are stored on your hard disk in association with the browser you are using and by which the party setting the cookie (in this case, us) receives certain information. Cookies cannot run programs or place viruses on your computer. The purpose of cookies is to make our website more user-friendly and functional.

(3) Use of cookies:

a) This website uses the following types of cookies, the scope and functionality of which are explained below:

– Transient cookies (see b)

– Persistent cookies (see c).

b) Transient cookies are automatically deleted when you close the browser. This relates to session cookies in particular. They store a so-called session ID with which various requests from your browser can be assigned to a common session. This allows your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close the browser.

c) Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie. You can delete the cookies at any time using your browser's security settings.

d) You can configure your browser settings as desired and, for example, refuse to accept third-party cookies or any cookies. Please note that you may then not be able to use all functions of this website.

e) We also use cookies to identify you on subsequent visits if you have an account with us. Otherwise you will have to log in again each time you visit our website.

Section 3 Special types of use for our website

(1) If you conclude contracts on our website for services or digital content, it is necessary for the conclusion of the respective contract that you provide us with personal data we need to process your order. Mandatory information required to process your order is marked accordingly; any additional information is voluntary. We will process the data you have provided in order to process your order. We may share your payment data with our house bank for such purposes. The relevant legal basis is Art. 6 (1) (b) GDPR.

(2) The connection is encrypted using TLS technology in order to prevent unauthorized access by third parties to your personal data, in particular to your financial data.

Section 4 Newsletters

(1) Upon providing your consent, you may subscribe to our newsletter which we use to inform you of current offerings that may be of interest to you. Goods and services to be advertised are indicated in the consent form.

(2) We use the double opt-in procedure in connection with registration for our newsletter. This means that after you have registered, we will send you an e-mail to the e-mail address you provided, in which we will ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we will store your IP address and the time of registration and confirmation. The purpose of this process is to be able to verify your registration and, if necessary, to clarify any potential misuse of your personal data.

(3) The only mandatory information for sending the newsletter is your e-mail address. Providing any other specifically marked information is voluntary. This information is used to address you personally. After your confirmation, we will save your e-mail address for the purpose of sending you the newsletter. The applicable legal basis is Art. 6 (1) (a) GDPR.

(4) You can withdraw your consent to receiving our newsletter at any time by unsubscribing to the newsletter. You can provide notice of such withdrawal by sending by clicking on the link provided in every newsletter e-mail or by sending a message to the contact information provided in the Imprint.

(5) We use the services of Microsoft Dynamics 365 for Marketing in connection with sending our newsletter. This service is provided by the Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. CleverReach is a service for the organization and analysis of newsletter distribution. The data you provide (e.g. your e-mail address) in order to subscribe to our newsletter will be stored on servers maintained by Microsoft Dynamics 365 for Marketing in Germany or the United States.

Newsletters we sent via Microsoft Dynamics 365 for Marketing contain a so-called "web-beacon", i.e. a pixel-sized file that is retrieved when opening the newsletter either from our server or that of our e-mail delivery service provider should we use one. During this process, technical information such as your browser and operating system, as well as your IP address and the time of download, is collected. This information is used for making technical improvements to the service, as technical data or target group data can be analyzed according to their reading behavior, their download locations (identifiable through IP addresses), or download times. Statistical data collection also includes an analysis of when the newsletters are opened, and which links are clicked on. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our desire, nor that of our distribution service provider - should we use one - to monitor individual users. The analysis of this data, is more importantly used to recognize patterns in the reading behavior of our users, and to adapt content accordingly or send different content according to the interests of our users. Additional information about data analysis by Microsoft Dynamics 365 for Marketing is available at: https://www.microsoft.com/en-us/dynamics-365

Data is processed on the basis of your consent (Art. 6 (1) (a) GDPR). You can withdraw your consent at any time by canceling your newsletter subscription. This does not affect the lawfulness of any data processing done before you have withdrawn your consent.

If you do not wish Microsoft Dynamics 365 for Marketing to analyze your use of our newsletter, you must cancel your subscription. We provide a link to do this in every newsletter we send. In addition, you can also directly unsubscribe from the newsletter on our website.

Data you provided when registering for the newsletter will be used to distribute the newsletter until such time as you cancel your subscription; Thereafter it will be deleted from our servers and those of Microsoft Dynamics 365 for Marketing. This does not affect data we have stored for other purposes (e.g., e-mail addresses for the members’ area).

You can find additional information about the privacy policies of Microsoft Dynamics 365 for Marketing at: https://www.microsoft.com/en-us/privacy/privacystatement.

We have entered into an agreement with Microsoft for the outsourcing of our data processing and fully implement the strict requirements of the German data protection authorities when using Microsoft Dynamics 365 for Marketing.

Section 5 Google Analytics

(1) This website uses Google Analytics, a web analysis service. The service is operated by Google Inc, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Terms of use: https://marketingplatform.google.com/about/analytics/terms/us/, Overview of data protection: https://support.google.com/analytics/answer/6004245?hl=en, and the Privacy Policy: https://policies.google.com/privacy?hl=en.

Google Analytics uses “cookies.” Cookies are text files stored on your computer that enable analysis of how you use our website. As a rule, the information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. The data sent by us that is linked to cookies, user IDs or advertising IDs are automatically deleted after 14 months. Data for which the retention period has expired is automatically deleted once a month.

The storage of Google Analytics cookies and the use of this analysis tool are based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising. In connection with the use of this service, personal data may be transferred to the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework (DPF). Insofar as the transfer is made to Google LLC or a US subsidiary covered by its certification and falls within the scope of that certification, it is based on the European Commission adequacy decision of 10 July 2023 pursuant to Art. 45 GDPR. Further information on the certification and the legal framework for data transfers can be found in Google’s information on international data transfers.

(2) We have activated the IP anonymization feature on this website. Your IP address will be shortened by Google within the European Union or other parties to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases will the complete IP address be transferred to a Google server in the United States and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activities for website operators, and to provide additional services related to the use of the website and the Internet. The IP address transferred by your browser in connection with Google Analytics will not be associated with other data held by Google.

(3) You can prevent cookies from being stored by selecting the appropriate settings in your browser; however, we wish to point out that by doing so, you may not be able to enjoy the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie that relates to your use of the website (including your IP address) and prevent Google from processing such data by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

For more information on how to handle user data on Google Analytics, please refer to the Google Privacy https://support.google.com/analytics/answer/6004245?hl=en.

(4) We have entered into a contract with Google for the outsourcing of our data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Section 6 Crazy Egg

(1) This web page uses Crazy Egg, a web analysis service operated by Crazy Egg, Inc., 6220 E. Ridgeview Lane, La Mirada, CA, 90638, USA.

(2) Crazy Egg uses “cookies”, i.e. text files stored on your computer that enable analysis of how you use our website. The information generated by the cookie about your usage will be transmitted to a Crazy Egg server in the United States and stored there.

(3) You may refuse the placement of cookies by selecting the appropriate settings on your browser. You can also prevent Crazy Egg from collecting the data generated by the cookie that relates to your use of the website (including your IP address) and prevent Crazy Egg from processing such data by following the instructions available under the following link: https://www.crazyegg.com/opt-out.

(4)More detailed information about the collection, processing and use of data by Crazy Egg is contained in its privacy policy which may be accessed at the following link: https://www.crazyegg.com/privacy

Section 7 Integration of YouTube videos

(1) We have integrated YouTube videos into our website. These videos are stored at https://www.youtube.com/ and can be played directly from our website. These are all integrated and embedded in the "Extended Privacy Mode", i.e. no data about you as a user is transmitted to YouTube if you do not play the videos. The data referred to in the following paragraph is not transmitted until you play the videos. We have no influence over the transmission of this data.

When you visit this website, YouTube receives the information that you have accessed the corresponding sub-page on our website. In addition, the data referred to in Section 3 of this Privacy Policy is transferred. This is regardless of whether YouTube has provided a user account through which you are logged in or even if you do not have a user account. If you are also logged in to Google, your information will be directly associated with your account. If you do not wish to be associated with your profile when using YouTube, you must first log out before clicking the button. YouTube stores your data as usage profiles and uses your data for the purposes of advertising, market research and/or tailoring its website to your needs. Such evaluation also takes place (even for users who are not logged in) for the purposes of providing customized advertising and to inform other social network users about activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

For more information on the purpose and scope of data collection and processing by YouTube, please refer to its privacy policy. There you will also find further information about your rights and setting options to protect your privacy: Google Privacy Policy. In connection with the use of this service, personal data may be transferred to the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework (DPF). Insofar as the transfer is made to Google LLC or a US subsidiary covered by its certification and falls within the scope of that certification, it is based on the European Commission adequacy decision of 10 July 2023 pursuant to Art. 45 GDPR. Further information is available in Google’s information on international data transfers.

(2) We use YouTube in the interest of making our website more appealing. This represents a legitimate interest within the meaning of Art. 6 (1) (f) GDPR.

Section 8 Integration of Vimeo

(1) In some cases, we have integrated videos from Vimeo, Inc. 555 West 18th Street, New York, New York 10011, USA into our website.

(2) Some of our webpages contain videos from Vimeo. A connection to the Vimeo servers is established when you access any of these pages. The plug-in then transmits information about which of our pages you have visited to the Vimeo server. Vimeo will assign this information to your personal user account if you are logged in as a member of Vimeo. By clicking the start button of a video, this information may also be assigned an existing user account. You can prevent the information being assigned to your account by logging out of your Vimeo account and deleting the corresponding Vimeo cookies before using our website.

(3) We use the service on our website on the basis of our legitimate interests (i.e. interest in the analysis, optimization, and efficient operation of our website). The applicable legal basis is Art. 6 (1) (f) GDPR.

(4) For more information on Vimeo's data processing and privacy policy, please visit https://vimeo.com/privacy.

(5) Vimeo also accesses the tracker Google Analytics via an iFrame in which the video is accessed. This is Vimeo's own tracking system to which we have no access. You can stop tracking by Google Analytics by using the opt-out tools that Google offers for some web browsers. Users can additionally prevent the collection of data produced by the Google Analytics and associated with their website use (including IP address), and its transmission and processing by Google, by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

Section 9 Use of Azure Maps

(1) This website uses the map service Azure Maps provided by Microsoft Corporation (One Microsoft Way, Redmond, WA 98052-6399, USA). The processing is based on Art. 6 (1) (f) GDPR. Our legitimate interest lies in providing a user-friendly display of geographic information.

(2) In this context, personal data – in particular your IP address – may be transmitted to Microsoft and processed on servers in the United States. Microsoft is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR).

(3) For more information on how Microsoft processes personal data, please refer to: https://www.microsoft.com/en-us/privacy/privacystatement

Section 10 Use of web fonts

(1) This website uses external fonts provided by Google Fonts. Google Fonts is a service provided by Google Inc. (“Google”). The web fonts are integrated by accessing a server, usually a Google server in the United States. This transmits to the server information about which of our webpages you have visited. Google also stores the IP address of the browser used on the visitor’s terminal device.

(2) When you open a page, your browser loads the required web fonts into its browser cache so that text and fonts can be displayed correctly. Web fonts are used in the interest of a consistent and attractive presentation of our online services.

(3) This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR.

(4) Further information is available in Google Fonts information and in Google’s Privacy Policy.

Section 11 Use of Google Ads Conversion Tracking and Remarketing

(1) We use Google Ads to draw attention to our attractive offers on external websites with the help of advertising media (known as Google Ads). In relation to the advertising campaign data, we can determine how successful individual advertising measures are. In doing so, we pursue our interest in showing you advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs.

(2) These advertising media are delivered by Google via so-called “ad servers”. For this purpose, we use ad server cookies that enable certain success parameters, such as the display of advertisements or clicks by users, to be measured. If you reach our website via a Google advertisement, Google Ads stores a cookie on your device. These cookies generally expire after 30 days and are not intended to identify you personally. The analysis values usually stored for this cookie include the unique cookie ID, the number of ad impressions per placement (frequency), the last impression (relevant for post-view conversions) and opt-out information (a record that the user no longer wishes to be addressed).

(3) These cookies enable Google to recognise your web browser. If a user visits certain pages on an Ads customer’s website and the cookie stored on the user’s device has not yet expired, Google and the customer can recognise that the user clicked on the advertisement and was redirected to that page. A different cookie is assigned to each Ads customer, so cookies cannot be tracked across the websites of Ads customers. We do not ourselves collect or process personal data in connection with these advertising measures. We only receive statistical evaluations from Google. These evaluations enable us to identify which advertising measures are particularly effective. We do not receive any additional data from the use of the advertising media and, in particular, cannot identify users from this information.

(4) Because of the marketing tools used, your browser automatically establishes a direct connection with Google’s server. We have no influence over the scope and further use of the data collected by Google through this tool and therefore provide information according to our current knowledge: by integrating Ads Conversion Tracking, Google receives the information that you have accessed the relevant part of our website or clicked on one of our advertisements. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google or are not logged in, the provider may obtain and store your IP address.

(5) You can prevent participation in this tracking process in several ways: a) by configuring your browser software accordingly, in particular by blocking third-party cookies, in which case you will not receive advertisements from third-party providers; b) by managing personalised advertising in Google My Ad Center; c) by opting out of interest-based advertising from providers participating in the “About Ads” self-regulatory programme at YourAdChoices; or d) by using the controls described in Google’s advertising privacy help. Please note that, in this case, you may not be able to use all functions of this service in full.

(6) The legal basis for processing your data is Art. 6(1), first sentence, point (f) GDPR. Further information on data protection at Google is available in Google’s Privacy Policy. You may also visit the Network Advertising Initiative. In connection with the use of this service, personal data may be transferred to the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework (DPF). Insofar as the transfer is made to Google LLC or a US subsidiary covered by its certification and falls within the scope of that certification, it is based on the European Commission adequacy decision of 10 July 2023 pursuant to Art. 45 GDPR. Further information is available in Google’s information on international data transfers.

(7) In addition to Ads Conversion Tracking, we use Google Remarketing. This is a process through which we wish to address you again. The application enables our advertisements to be displayed to you during your subsequent use of the internet after you visit our website. This is done by means of cookies stored in your browser through which Google records and evaluates your usage behaviour when you visit various websites. Google can therefore identify your previous visit to our website. According to Google, the data collected as part of remarketing are not combined with personal data that Google may store. Google states in particular that pseudonymisation is used for remarketing.

Section 12 Google reCAPTCHA

(1) We use “Google reCAPTCHA” (“reCAPTCHA”) on our websites. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

(2) reCAPTCHA is used to check whether data entered on our websites (for example, in a contact form) are entered by a person or by an automated program. For this purpose, reCAPTCHA analyses the behaviour of the website visitor on the basis of various characteristics. This analysis begins automatically as soon as the visitor accesses the website. reCAPTCHA evaluates various information for the analysis (for example, IP address, the time spent by the visitor on the website or mouse movements made by the user). The data recorded during the analysis are forwarded to Google. The reCAPTCHA analyses run entirely in the background. Website visitors are not informed that an analysis is taking place.

(3) In connection with the use of this service, personal data may be transferred to the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework (DPF). Insofar as the transfer is made to Google LLC or a US subsidiary covered by its certification and falls within the scope of that certification, it is based on the European Commission adequacy decision of 10 July 2023 pursuant to Art. 45 GDPR. Further information is available in Google’s information on international data transfers.

(4) The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the security of our website and in preventing unwanted automated access in the form of spam or similar activity.

(5) Further information about Google reCAPTCHA and Google’s privacy policy is available at Google Privacy Policy and Google reCAPTCHA.

Section 13 Use of the Facebook Pixel

(1) Our website uses the Facebook visitor action pixel to measure conversions. The provider is Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”).

(2) This makes it possible to track the behaviour of visitors after they have been redirected to the provider’s website by clicking on a Facebook advertisement. It enables the effectiveness of Facebook advertisements to be evaluated for statistical and market-research purposes and future advertising measures to be optimised.

(3) The data collected are anonymous to us as the operator of this website; we cannot draw conclusions about the identity of users. However, the data are stored and processed by Facebook, meaning that a connection to the relevant user profile is possible and Facebook may use the data for its own advertising purposes in accordance with its Data Policy. This enables Facebook to place advertisements both on and outside Facebook. We, as the website operator, cannot influence this use of the data.

(4) The use of the Facebook Pixel is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in effective advertising measures, including through social media.

(5) Further information on protecting your privacy is available in Facebook’s Privacy Policy.

(6) You can also disable the “Custom Audiences” remarketing function in the Facebook/Meta ad preferences. You must be logged in to Facebook to do so. If you do not have a Facebook account, you can disable usage-based advertising from participating providers via Your Online Choices.

Section 14 Use of The Trade Desk

Provision of functions for displaying personalised advertising based on interest- and behaviour-based information, including demographic characteristics, interests and users’ browsing history, which is stored in user profiles; service provider: The UK Trade Desk Ltd., 10th Floor, 1 Bartholomew Close, EC1A 7BL London, United Kingdom; legal basis: consent (Art. 6(1), first sentence, point (a) GDPR); website: The Trade Desk; privacy policy: The Trade Desk Privacy Policy; data processing agreement: provided by the service provider. Basis for third-country transfers: EU-U.S. Data Privacy Framework (DPF) and Standard Contractual Clauses (provided by the service provider).

Section 15 Your rights

(1) You have the following rights against us in relation to personal data concerning you:

– Under the applicable statutory provisions, you have the right at any time to obtain free information about your stored personal data, their origin and recipients and the purpose of the data processing, and, where applicable, a right to rectification, restriction or erasure of these data. You may contact us at any time at the address given in the legal notice regarding this and any other questions concerning personal data.

– You have the right to request restriction of the processing of your personal data. You may contact us at any time at the address stated in the legal notice. The right to restriction applies in the following cases:

– If you contest the accuracy of personal data stored by us, we generally need time to verify this. For the duration of the verification, you have the right to request restriction of the processing of your personal data.

– If the processing of your personal data was or is unlawful, you may request restriction of data processing instead of erasure.

– If we no longer need your personal data but you require them for the establishment, exercise or defence of legal claims, you have the right to request restriction of processing instead of erasure.

– If you have objected pursuant to Art. 21(1) GDPR, your interests and ours must be balanced. For as long as it has not yet been determined whose interests prevail, you have the right to request restriction of the processing of your personal data.

– Where you have restricted the processing of your personal data, such data may, apart from storage, be processed only with your consent, for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.

– You have the right to receive data that we process automatically on the basis of your consent or in performance of a contract in a commonly used, machine-readable format, or to have them transmitted to a third party (data portability). If you request the direct transfer of the data to another controller, this will be done only where technically feasible.

(2) You also have the right to lodge a complaint with a data protection supervisory authority concerning our processing of your personal data.

Section 15a HYRA Service App

(1) This privacy information also applies, in addition, to the use of the HYRA Service App provided by Dornbracht. The HYRA Service App is used to configure, diagnose, maintain and support operation of the respective drinking-water solution.

(2) Depending on the functions used, the following data in particular may be processed when the HYRA Service App is used: technical app and device data; product and device data such as device name, serial numbers, hardware and firmware versions, installed updates and operating hours; diagnostic and status data such as error codes, warnings, cleaning status, consumables status, filter status, CO₂ status and water-consumption and usage data; service and report data such as customer name, installation location and information on maintenance, repairs or service cases; and network data such as the Wi-Fi SSID and, where technically necessary, Wi-Fi access credentials.

(3) Processing takes place to provide and operate the app; to establish a connection and communicate with the respective device; to configure, diagnose, maintain and analyse errors; to display device, consumption, filter, maintenance and status information; to create service and diagnostic reports; to carry out and display software/firmware updates; to provide service, support and consumables links; and to ensure the app’s technical stability, functionality and security.

(4) The legal basis for processing is Art. 6(1)(b) GDPR where processing is necessary to provide the app functions or to perform a contract or take pre-contractual measures. Where processing is necessary to ensure technical functionality, IT security, error analysis, product improvement or service support, it is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR. Where individual processing operations require consent, processing is based on Art. 6(1)(a) GDPR.

(5) We may use technical service providers to provide, develop, maintain and technically support the HYRA Service App. Where these service providers process personal data on our behalf, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR. Processing by service providers for their own purposes takes place only where this is separately stated or the relevant service provider has its own responsibility under data protection law.

Personal data are not transferred to recipients in countries outside the European Union (EU) or the European Economic Area (EEA). Data processing takes place exclusively on servers within the EU/EEA, thereby ensuring an adequate level of data protection.

(6) If service, maintenance or diagnostic reports are created using the HYRA Service App, they may contain technical device and diagnostic data as well as information entered by the user. Such reports are transmitted to Dornbracht, technical service providers or other recipients only to the extent necessary for service processing or where actively initiated by the user.

(7) Personal data resulting from use of the HYRA Service App are stored only for as long as required for the purposes stated above or for as long as statutory retention obligations apply. Diagnostic, service and report data are deleted or anonymised as soon as they are no longer required for the relevant diagnosis, maintenance, service processing or documentation.

Section 16 Right to object

Where data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right at any time, on grounds relating to your particular situation, to object to the processing of your personal data; this also applies to profiling based on those provisions. The respective legal basis for processing can be found in this Privacy Policy. If you object, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims (objection under Art. 21(1) GDPR). If your personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, including profiling to the extent that it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for direct marketing purposes (objection under Art. 21(2) GDPR).

Section 17 Data security

During visits to our website, we use the widely adopted SSL (Secure Socket Layer) protocol in conjunction with the highest level of encryption supported by your browser. This is generally 256-bit encryption. If your browser does not support 256-bit encryption, we instead use 128-bit v3 technology. You can tell whether an individual page of our website is transmitted in encrypted form from the closed key or padlock symbol in your browser’s status bar.

We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction and unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

Section 18 Current status and amendments to this Privacy Policy

This Privacy Policy is currently valid and was last updated in November 2026.

As our website and the services offered through it develop, or as a result of changes to legal or regulatory requirements, it may become necessary to amend this Privacy Policy. The current Privacy Policy can be accessed and printed at any time at https://www.dornbracht.com/en/privacy-policy.