General information on the processing of your data

We are legally obligated to inform you about the processing of your data (hereinafter referred to as “data”) when you use our website. We take the protection of your personal data very seriously. The present Privacy Policy provides you with information about the particularities of the processing of your Data and about your legal rights related to this. Terms such as “personal data” or “processing” are used according to their legal definitions in Art. 4 GDPR. We reserve the right to adjust the Privacy Policy with effect for the future, especially as regards development of the website, use of new technologies or changes to the legal foundations and/or the corresponding jurisdiction. We recommend that you read this Privacy Policy occasionally and keep a printout or copy of it for your records.

Scope of application

The Privacy Policy applies to all pages at dedon.de. It does not extend to any linked websites or internet presence of other providers.

Responsible party

The following party is responsible for the processing of personal data within the scope of application of this Privacy Policy:

DEDON GmbH

Zeppelinstraße 22

21337 Lüneburg, Germany

Phone: +49 (0) 41 31 / 22 44 70

Fax: +49 (0) 41 31 / 22 44 7 630

Email: [email protected]

Questions regarding data protection

Should you have any questions regarding data protection with respect to our company or our website, please feel free to contact our Data Protection Officer:

Anna Cardillo

Postal address: Data Protection Officer

c/o DEDON GmbH

Zeppelinstraße 22

21337 Lüneburg, Germany

Security

We have taken extensive technical and organisational precautions to protect your personal data from unauthorised access, misuse, loss and other external interference. To this end, we regularly evaluate our security measures and adjust them in line with the latest technology.

Your rights

You can exercise the following rights against us with respect to the personal data relating to you:

Right to information: You can demand information in line with Art. 15 GDPR about your personal data that we process.
Right to correction: If the information concerning you is not (or no longer) correct, you can request a correction in accordance with Art. 16 GDPR. If your data are incomplete, you can demand their completion.
Right to deletion: You can demand the deletion of your personal data in line with Art. 17 GDPR.
Right to restriction of processing: In accordance with Art. 18 GDPR, you have the right to demand a restriction of the processing of your personal data.
Right to object to processing: You have the right to object at any time on grounds relating to your particular situation to the processing of your personal data which is carried out on the basis of Art. 6(1) sentence 1(e) or (f) GDPR in accordance with Art. 21(1) GDPR. In this case, we will not continue to process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the purpose of asserting, exercising or defending legal claims (Art. 21(1) GDPR). According to Art. 21(2) GDPR, you also have the right to object to the processing of your personal data for the purposes of direct advertising at any time; this also applies to any profiling, to the extent that it is connected with such direct advertising activities. We inform you about the right to object in this Privacy Policy in the context of the respective processing.
Right to revocation of consent: If you have given consent for the processing of your data, you have the right to revoke this consent in accordance with Art. 7(3) GDPR.
Right to data portability: You have the right to receive the personal data related to you that you have provided to us in a structured, common and machine-readable format (”data portability”) as well as the right to onward transfer of these data to another responsible party if the prerequisites of Art. 20(1)(a), (b) GDPR apply (Art. 20 GDPR).

You can exercise your rights by notifying the contacts listed in the "Responsible party" section or by contacting our designated Data Protection Officer.

If you believe that the processing of your personal data violates data protection legislation, you are also entitled according to Art. 77 GDPR to submit a complaint to a data protection authority of your choice. This also includes the data protection authority that the responsible party answers to: The Lower Saxony State Representative for Data Protection, Prinzenstraße 5, 30159 Hannover, Germany, Tel.: +49 (0) 511 / 120 45 00, Email: [email protected].

Use of our website

In principle, you can use our website for purely informative purposes without disclosing your identity. When accessing individual pages of the website in this way, access data will only be transferred to our webspace provider for the purpose of presenting the website to you. The following data are processed here:

Browser type / browser version,
operating system used,
language and version of the browser software,
date and time of access,
IP address,
content of the request (specific website),
·other websites via which the website was accessed,
referrer URL (previously visited website),
message about whether access was successful,
end device (desktop, tablet, mobile) and

Temporary processing of these data is necessary to make the website visit, and transmission of the website to your end device, technically possible. The access data will not be used to identify other users or amalgamated with other data. Further storage in log files takes place in order to ensure the functionality of the website and the security of the information technology systems. The legal basis for the processing is Art. 6(1) sentence 1(f) GDPR. Our legitimate interests lie in ensuring the functionality, integrity and security of the website. The storage of access data in log files, particularly the IP address, for longer periods allows us to identify and defend against misuse. This includes, for example, defending against requests that overload the service or any usage by bots. Access data will be deleted as soon as they cease to be necessary for the purpose for which they were processed. In the case of data collection for the provision of the website, this will take place when you end your visit to the website. Generally, the log files are stored so as to be directly and exclusively accessible by administrators and deleted after no more than seven days. After this point, they can only be accessed indirectly via reconstruction of backups and will be permanently deleted after no more than four weeks.

You may file an objection against the processing of your data. You have the right to object on grounds relating to your particular situation. You can communicate your objection to us via the contact details listed in the “Responsible party” section.

End device information

In addition to the aforementioned access data, technologies are used during use of the website which store information on your terminal equipment (e.g. desktop PC, laptop, tablet, smartphone) or access information which is already stored on your terminal equipment. This technology may involve things such as cookies, Pixel, LocalStorage, SessionStorage, IndexedDB or browser fingerprinting technologies. These technologies can be used to recognise you across multiple devices and websites.

As stipulated by § 25(1) Federal Act on the Regulation of Data Protection and Privacy in Telecommunications and Telemedia (TTDSG), we generally require your consent to be able to use these technologies. According to § 25(2) TTDSG, your consent is only unnecessary if the technologies either enable the transmission of a message via a public telecommunications network or if they are absolutely necessary to provide a telemedia service that you have expressly requested:

Technically necessary end device information

Some elements of our website serve the sole purpose of transmitting a message (§ 25(2) no. 1 TTDSG) or are absolutely necessary in order to provide you with our website or individual functionalities of our website (§ 25(2) no. 2 TTDSG):

Language settings,
font settings,
“my selection”
Login information

You can prevent data processing by implementing the relevant settings in your browser software. Elements whose storage duration is not limited to the session can be deleted in the settings of your browser software after your session has expired.

Insofar as the elements contain personal data, such as an identifier, and these data are further processed after storage or access to your terminal equipment, the legal basis for this processing shall be Art. 6(1) sentence 1(f) GDPR. Our legitimate interests in processing lie in providing the stated special functionalities to make the website more appealing and effective.

Consentmanager consent management platform

We use the Consentmanager tool to request consent to process your end device information and personal data on our website using cookies or other tracking technologies. Consentmanager allows you to accept or reject the processing of your end device information and personal data with cookies or other tracking technologies for the purposes outlined in Consentmanager. The purposes for processing may include integrating external elements and streaming content, statistical analysis, reach measurement as well as personalised advertising and product recommendations. You can use Consentmanager to consent or object to all purposes for processing, or consent or object to individual purposes or individual third-party providers. You can also adjust these settings retrospectively. The purpose of integrating Consentmanager is to allow users of our website to decide whether to allow cookies and similar functionalities and to provide the option of changing previously implemented settings in the course of further use of our website. When you use Consentmanager, we will process your personal data and information about the end device you are using. This will also involve your data being transferred to Consentmanager (Jaohawi AB, Håltegelvägen 1b, 72348 Västerås, Sweden). The information about your chosen settings will also be stored on your end device. The legal basis for the processing is Art. 6(1) sentence 1(c) GDPR in conjunction with Art. 7(1) GDPR insofar as the processing serves to fulfil the legally prescribed obligations to provide evidence for the granting of consent. Apart from that, Art. 6(1) sentence 1(f) GDPR is the relevant legal basis. Our legitimate interests in processing lie in the storage of user settings and preferences in relation to the use of cookies and the evaluation of consent rates. You will be asked to provide consent again 12 months after implementation of the user settings. The chosen user settings will then be saved again for a further 12 months, unless you delete the information yourself before the end of this period via the user settings in the designated end device capacities.

You may file an objection against the processing of your data insofar as the processing is based on Art. 6(1) sentence 1(f) GDPR. You have the right to object on grounds relating to your particular situation. You can communicate your objection to us via the contact details listed in the “Responsible party” section.

Technically unnecessary end device information

We also use technologies on our website which are not technically necessary. We use these technologies in accordance with the legal provisions and only with your consent. You can find information on the individual technologies and functions in our consent tool as well as sorted by the individual functions in the following information.

Google Maps

This website uses the Google service Google Maps (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland and Google, LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, USA) to present maps or sections of maps to allow you to easily use the map feature on the website. When you visit the website, Google receives the information that you have accessed the corresponding subpage on our website. In addition, the data specified in the sections titled “Use of our website” and “Cookies” are sometimes transferred to Google. This takes place regardless of whether you have a Google user account which you have logged in through or whether you do not have a user account. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the data to be assigned to your Google account, you must log out before clicking the button. Google stores your data in the form of user profiles and processes it for the purposes of advertising, market research and/or demand-driven design of its website, regardless of whether you have a Google user account. The legal basis for the processing is your consent in accordance with Art. 6(1) sentence 1(a) GDPR. Google processes some of the data in the USA. There exists no EU Commission decision on adequacy for data transfer to the USA; the legal basis for data transfer to the USA is your consent in accordance with Art. 49(1) sentence 1(a) GDPR. For more information on the purpose and scope of processing by the plug-in provider and the storage duration at Google Maps, visit https://policies.google.com/privacy?hl=en-GB.

You can revoke your consent to processing and third country transfer at any time by resetting the slider in the "Advanced settings" of the consent tool for the respective third party provider by clicking the Button "Cookie Settings" at the bottom of the page. The lawfulness of the processing remains unaffected until you exercise the revocation.

YouTube videos

Our website contains plug-ins from the video platform YouTube.com, a service of YouTube LLC (HQ at 901 Cherry Avenue, San Bruno, CA 94066, USA; hereinafter referred to as “YouTube”) for which Google (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001) is the responsible party in terms of data protection law. By processing data through the plug-ins, we pursue the purpose of integrating visual content (videos) that we have published on Youtube.de or Youtube.com on this website as well. The videos are all embedded in extended data protection mode, meaning no data about you as a user are transmitted to YouTube if you do not watch the videos. When you watch videos, YouTube receives the information that you have accessed the corresponding subpage on our website. In addition, the data specified in the section titled “Use of our website” are sometimes transferred to Google. This takes place regardless of whether you have a YouTube user account which you have logged in through or whether you do not have a user account. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the data to be assigned to your YouTube account, you must log out before clicking the button. YouTube stores your data in the form of user profiles and processes them for the purposes of advertising, market research and/or demand-driven design of its website, regardless of whether you have a Google user account. The legal basis for the processing is your consent in accordance with Art. 6(1) sentence 1(a) GDPR. Google processes some of the data in the USA. There exists no EU Commission decision on adequacy for data transfer to the USA; the legal basis for data transfer to the USA is your consent in accordance with Art. 49(1) sentence 1(a) GDPR. For more information on the purpose and scope of processing by YouTube and the storage duration at YouTube, see their privacy policy: https://policies.google.com/privacy.

Google Analytics

In order to optimise our website in line with the interests of our users, we use Google Analytics, a web analysis service of Google (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001). Google Analytics uses cookies (see the previous section titled “cookies”) which are saved on your end device. Using the cookies, Google processes the information on the use of our website generated from your end device (e.g. about a specific website you accessed) and processes data including those specified in the “Use of our website” section, in particular your email address, browser information, previously visited website as well as the date and time of the server request for the purpose of statistical analysis of the use of their website. For this purpose, it may also be determined whether various end devices belong to you or your household. This website uses Google Analytics with the anonymizeIp() extension, which is used to process IP addresses in an abbreviated form to make it much more difficult to trace them back to individuals. According to Google, your IP address will be shortened beforehand within member states of the European Union. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. Google will process these data to evaluate your use of the website, to compile reports for us about website activity and, if specifically requested by us, to provide us with other services associated with use of the website. If users are registered with a Google service, Google can assign the visit to a user account, and create and evaluate user profiles across various applications. The legal basis for the processing is your consent in accordance with Art. 6(1) sentence 1(a) GDPR. Google processes some of the data in the USA. There exists no EU Commission decision on adequacy for data transfer to the USA; the legal basis for data transfer to the USA is your consent in accordance with Art. 49(1) sentence 1(a) GDPR. Your data associated with Google Analytics will be deleted after no more than fourteen months. For more information on data protection at Google, visit: https://policies.google.com/privacy?hl=en.

You can revoke your consent to processing and third country transfer at any time by resetting the slider in the "Advanced settings” of the consent tool by clicking the Button "Cookie Settings" at the bottom of the page. The lawfulness of the processing remains unaffected until you exercise the revocation.

Leadfeeder

To allow us to target our marketing towards prospective customers, we use the Leadfeeder service of Liidio Oy (Mikonkatu 17, 00100 Helsinki, Finland).

The tracking script of the Leadfeeder service allows us to assign an unknown website visitor to a specific company. The Leadfeeder technology is based on evaluation of shortened IP addresses. The data will not be used to personally identify the user of this website. However, the company behind the user is identified, and general company contact data as well as the industry and information on the specific behaviour of the user on the website are assigned to this company.

The legal basis for the processing is Art. 6(1) sentence 1(a) GDPR. The data collected using SalesViewer® technology will be deleted after no more than 24 months.

You can revoke your consent to processing at any time by resetting the slider in the "Advanced settings” of the consenttool by clicking the Button "Cookie Settings" at the bottom of the page. The lawfulness of the processing remains unaffected until you exercise the revocation.

Hotjar

We use the service “Hotjar” of Hotjar Ltd (Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141, Malta) to allow us to better understand the needs of our users and optimise the offer and experience on this website. We use the technology of Hotjar to acquire a better understanding of the experiences of our users (e.g. how much time users spend on which pages, which links they click on, what they like and dislike, etc.) and this helps us to adapt our offer according to the feedback of our users. Hotjar uses cookies and other technologies to collect data about the behaviour and end devices of our users, in particular the IP address of the device (collected and stored only in anonymised form during your website visit), screen size, device type (unique device identifier), information about the browser being used, location (country only), preferred language to view our website in. Hotjar stores this information on our behalf in a pseudonymised user profile.

The legal basis for the processing is Art. 6(1) sentence 1(a) GDPR. The data collected by Hotjar will be deleted after no more than 12 months. Hotjar works with subcontractors, some of whom process the data in the USA. There exists no EU Commission decision on adequacy for data transfer to the USA; the legal basis for data transfer to the USA is your consent in accordance with Art. 49(1) sentence 1(a) GDPR as well as the standard contract clauses agreed between Hotjar and the relevant service provider.

Google Ads remarketing

We use the tool Google Ads with Google’s dynamic remarketing feature (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001). This is a process which we would like to use to market to you again. The dynamic remarketing feature allows us to recognise users of our website on other websites within the Google advertising network (Google Ads in Google searches or on YouTube, or other websites) and present them with advertisements tailored to their interests. The advertisements may refer to products and services that you have already viewed on our website. For this, the interaction of the users on our website is analysed, such as the offers the user has shown interest in, to enable us to also present targeted advertisements to users on other websites after visiting our website. If you visit our website, Google Ads will save a cookie on your end device. Using the cookies, Google processes the information on the use of our website generated from your end device and interactions with our website, as well as the information specified in the “Use of our website” section, in particular your email address, browser information, previously visited website as well as the date and time of the server request for the purpose of displaying personalised advertisements. For this purpose, it may also be determined whether various end devices belong to you or your household. If users are registered with a Google service, Google can assign the visit to a user account, and create and evaluate user profiles across various applications. The legal basis for the processing is your consent in accordance with Art. 6(1) sentence 1(a) GDPR. Google processes some of the data in the USA. There exists no EU Commission decision on adequacy for data transfer to the USA; the legal basis for data transfer to the USA is your consent in accordance with Art. 49(1) sentence 1(a) GDPR. Google will store the data for a maximum of twenty-four months. For more information on data protection and storage duration at Google, visit: https://policies.google.com/privacy?hl=en.

Google Ads conversion

We use Google Ads services by Google (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001) to raise awareness of our attractive offers on external websites using advertising media (formerly known as “Google AdWords”). We can determine how successful individual advertising campaigns are in relation to data from advertising campaigns. These advertising media are delivered by Google via "Ad Servers". For this we use Ad Server cookies, which can be used to measure specific parameters for range measurement such as display of advertisements or clicks by users. If you reach our website via a Google advertisement, Google Ads will save a cookie on your end device. Using the cookies, Google processes the information on interactions with our advertising media generated from your end device (access to a specific webpage or a click on an advertising medium), as well as the information specified in the “Use of our website” section, in particular your email address, browser information, the previously visited website as well as the date and time of the server request for the purpose of analysing and visualising the measurement of the range of our advertisements. For this purpose, it may also be determined whether various end devices belong to you or your household. Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. If you are registered with a Google service, Google can assign the visit to your account. Even if you do not have a Google account, or have not signed in, it is possible for the provider to ascertain and process your IP address. Google only provides us with statistical evaluations for measurement of the success of our advertising media. The legal basis for the processing is your consent in accordance with Art. 6(1) sentence 1(a) GDPR. Google processes some of the data in the USA. There exists no EU Commission decision on adequacy for data transfer to the USA; the legal basis for data transfer to the USA is your consent in accordance with Art. 49(1) sentence 1(a) GDPR. Google will store the data for a maximum of twenty-four months. For more information on data protection and storage duration at Google, visit: https://policies.google.com/privacy?hl=en.

Google Tag Manager

We use Google Tag Manager by Google on our website (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001). Google Tag Manager is a solution which can be used to manage website tags and other elements from third-party providers via an interface.

Firstly, an http request is sent to Google when the website is accessed with Google Tag Manager. This transmits end device information and personal data such as your IP address and information about your browser settings to Google. We use the Google Tag Manager to facilitate electronic communication by transferring information to third-party providers via programming interfaces, among other things. In Google Tag Manager, the respective tracking codes of third-party providers are implemented without us having to make any elaborate changes to the source code of the website ourselves. Instead, integration is carried out using a container, which places a “placeholder” code in the source code. In addition, Google Tag Manager allows the data parameters of the users to be exchanged in a certain order, in particular by ordering and systematising the data packets. Occasionally, your data will be transferred to the USA. Standard contract terms have been agreed with Google to ensure that an appropriate level of data protection is maintained. We will provide you with a copy of the standard contract terms upon request. The legal basis for the processing is Art. 6(1) sentence 1(f) GDPR. Our legitimate interests in processing are to facilitate and carry out electronic communications by identifying communication endpoints, controlling opportunities to exchange data elements in a specified order and identifying transmission errors. Google Tag Manager does not initiate data storage. For more information on data protection at Google, visit: https://policies.google.com/privacy?hl=en.

You may file an objection against the processing of your data insofar as the processing is based on Art. 6(1) sentence 1(f) GDPR. You have the right to object on grounds relating to your particular situation. You can prevent the processing by deleting the browsing history and website data in your browser’s settings or by opening the browser in private mode.

Contacting our company

When contacting our company, e.g. via email or the contact form on the website, we will process the personal data you have provided to us in order to answer your query. A valid email address, a subject line and your message are absolutely necessary for us to be able to process your query via the contact form. When the message is sent to us, your IP address and the date and time of your registration will also be processed. The legal basis for the processing is Art. 6(1)sentence 1(f) GDPR or Art. 6(1) sentence 1(b) GDPR if the objective of the contact is to conclude a contract. If the objective of the query is to conclude a contract, then it will be necessary and obligatory for you to provide your data. If you do not provide the data, it will not be possible to conclude or perform a contract by means of contact or query processing. The processing of personal data from the contact form serves the sole purpose of handling the query. We will also have a necessary legitimate interest in processing your data if you contact us via email. The other data processed during the contact process is used to prevent misuse of the contact form and to ensure the security of our information technology systems. None of the data accruing in this context will be passed on to third parties. We delete the data accruing in this context once processing is no longer necessary or, if necessary, restrict the processing to the minimum level required to ensure compliance with the existing legal retention obligations.

Processing for contractual purposes

We will process your personal data if and when this is necessary for the initiation, establishment, performance and/or termination of a legal transaction with our company. The legal basis for this is Art. 6(1) sentence 1(b) GDPR. It is necessary to provide your data for the conclusion of the contract and you are bound by contract to provide your data. Failure to provide your data will render the conclusion and/or performance of the contract impossible. Once the purpose has been achieved (e.g. processing the contract) the personal data will be blocked from further processing or deleted unless we are authorised to process it further on the basis of consent granted by you (e.g. consent to the processing of the email address for sending electronic advertisements), a contractual agreement, a legal authorisation (e.g. authorisation to send direct advertising) or on the basis of legitimate interests (e.g. retention for the enforcement of claims).

Your personal data will be transferred to third parties if and when

it is necessary for the establishment, performance or termination of legal transactions with our company (e.g. for data transfer to a payment service provider / a shipping company to process a contract with you), (Art. 6(1) sentence 1(b) GDPR), or
a subcontractor or vicarious agent whom we appoint solely in the course of providing the offer or service that you have requested requires such data (such agents are only authorised to process the data to the extent necessary for the provision of the offer or service unless you are expressly notified otherwise), or
an enforceable administrative order exists (Art. 6(1) sentence 1(c) GDPR), or
an enforceable court order exists (Art. 6(1) sentence 1(c) GDPR), or
we are obligated to do so by law (Art. 6(1) sentence 1(c) GDPR), or
the processing is necessary to protect the vital interests of affected persons or another natural person (Art. 6(1) sentence 1(d) GDPR), or
it is necessary for the performance of a task which is in the public interest or takes place in exercise of public authority (Art. 6(1) sentence 1(e) GDPR), or
we can appeal to our overriding legitimate interests, or those of a third party, in transferring the data (Art. 6(1) sentence 1(f) GDPR).

Beyond that, your personal data will not be transferred to other persons, companies or authorities unless you have effectively consented to such data transfer. The legal basis for that processing is Art. 6(1) sentence 1(a) GDPR. We refer you to the respective recipients within the scope of this data protection information in relation to the respective processing procedure.

DEDON portal

We have set up a portal on our website for the business customers and media partners. If you wish to use this, you must register with the following information:

Company name (optional)
Title (optional)
First name and surname
Password
Address
Email address
Profession
As a registered user of our portal, you can access content which is exclusively available to registered users. This means that registering as a professional allows you to download the relevant 2D and 3D files, product images and data sheets from the detailed collection and product pages, for example.

After you register, we will perform a check to ensure that we can allow you to use our DEDON portal. If you are successfully accepted, you will receive confirmation of your personal login information to the email address provided and your data will be saved. Otherwise your data will be deleted within 30 days of your rejection.

The legal basis for the processing is Art. 6(1) sentence 1(b) GDPR. It is necessary and obligatory to provide your data for the conclusion and/or performance of the contract. If you fail to provide your data, you will be unable to register or use the DEDON portal.

You can deregister from our DEDON portal at any time. To do this, please inform us of your desire to deregister via the contact details listed in the “Responsible party” section. We will delete any of your data which are not subject to a statutory retention period within 14 days following your deregistration. All other data will be saved for the duration of the statutory retention period and then automatically deleted.

Catalogue order

You can order our catalogue from our website. For this you need to provide us with the following information
Company name (optional)
Title (optional)
First name and surname
Address
Email address
Phone number (optional)
Profession

These data will be used to send the catalogue you have requested to the address you have provided. The legal basis for the processing is Art. 6(1) sentence 1(b) GDPR. It is necessary and obligatory to provide your data for the conclusion and/or performance of the contract. If you do not provide your data, we will be unable to send you the catalogue.

We will delete your personal data once we have sent the catalogue.

Email marketing

Newsletters

You can subscribe to our email newsletter on our website. We will use this to regularly update you about the following content

actual products and new collections
actual information about desginers
Awards
fairs and events
general news about DEDON

To receive the newsletter, you only need to provide us with a valid email address. Providing your title, first name, surname, country and recipient category is optional. We will process your email address for the purpose of sending our email newsletter provided that you have subscribed to it.

The legal basis for the processing is Art. 6(1) sentence 1(a) GDPR.

Your consent to the processing of your email address for the purpose of receiving the newsletter can be revoked at any time, either by clicking directly on the “unsubscribe” link in the newsletter or by contacting us via the contact details listed in the “Responsible party” section. This does not affect the legality of the processing which has been performed due to your consent until the point of your revocation.

In order to document your newsletter registration and prevent the misuse of your personal data, registration for our email newsletter takes place via the Double Opt-In process. After you have entered the data marked as compulsory, we will send an email to the email address provided by you, in which we will ask you to expressly confirm your subscription to the newsletter by clicking on the confirmation link. Here we will process your IP address, the date and time of newsletter registration and the time of your confirmation. This allows us to ensure that you genuinely want to receive our email newsletter. We are legally bound to prove your consent to the processing of your personal data in connection with the newsletter registration (Art. 7(1) GDPR). Due to this legal obligation, data processing is performed on the basis of Art. 6(1) sentence 1(c) GDPR.

You are under no obligation to provide your personal data during the registration process. However, if you do not provide the necessary personal data, we will be partly or completely unable to process your subscription under some circumstances. If the newsletter subscription is not confirmed within 24 hours, we will block the data you have provided to us and delete them automatically after a maximum of one month. After confirming, your data will remain stored for as long as you are subscribed to the newsletter.

If you unsubscribe by revoking your declaration of consent we will process your data, in particular your email address, to ensure that you do not receive any more newsletters from us. For this purpose, we will add your email address to a block list to prevent you being sent the newsletter again. The legal basis for the data processing is Art. 6(1) sentence 1(c) GDPR for the fulfilment of our obligation to provide proof; in other cases it is Art. 6(1) sentence 1(f) GDPR. In this case, our legitimate interests lie in complying with legal obligations to reliably stop sending you the newsletter.

In addition, we process the aforementioned data for the establishment, exercise or defence of legal claims. The legal basis for the processing is Art. 6(1) sentence 1(c) GDPR and Art. 6(1) sentence 1(f) GDPR. In these cases, our legitimate interest lies in the assertion or defence of legal claims.

We also statistically evaluate newsletter opening rates, the number of clicks on links contained within them and the reading time, as well as measuring the reach of our newsletters and adapting the offers and information to your personal interests. For this purpose, usage behaviour on our websites and in the newsletter sent by us is evaluated using end-device-specific information (e.g. email client used, software settings). To enable this analysis, the emails we send to you contain web beacons or tracking pixels in the form of single-pixel image files that are also embedded on our website.

The legal basis for the processing is Art. 6(1) sentence 1(a) GDPR. We will delete your data when you unsubscribe from the newsletter.

You may revoke your consent at any time, either by sending us a message (see contact details in the “Responsible party” section) or by clicking on the “unsubscribe” link contained in the newsletter. This does not affect the legality of the processing which has been performed due to your consent until the point of your revocation.

We enlist the following provider to send our newsletter: Sendinblue (Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin). Sendinblue processes your personal data on our behalf in order to send you the newsletter. For this purpose, we have established an agreement with Sendinblue on the processing on our behalf in accordance with Art. 28 GDPR. The legal basis for the processing is Art. 6(1) sentence 1(f) GDPR. We use these external services with the aim of sending our newsletter efficiently and securely.

Advertising to existing customers

We reserve the right to use the email address you have provided to us as part of the contractual relationship in line with legal provisions to send you information on offers via email, unless you have previously objected to this processing of your email address.

The legal basis for the data processing is Art. 6(1) sentence 1(f) GDPR. Our legitimate interests in this processing lie in increasing and optimising our range of services, sending direct advertising and ensuring customer satisfaction. We will delete your data when you end the usage process, but no later than three years after termination of the contract.

We inform you that you may object to receiving direct advertising as well as to data processing for the purpose of direct advertising at any time, without incurring any costs other than the transfer costs according to the basic rates. You have the right to object without the need to state a reason (Art. 21(2) GDPR). To do this, click on the “unsubscribe” link in the relevant email or inform us of our objection via the contact details listed in the “Responsible party” section.

Amazon Cloudfront (content delivery network)

We use the services of the Cloudfront content delivery network from Amazon Web Services, Inc. (440 Terry Ave N, Seattle, WA 98109, United States) to make our online services more quickly accessible. When you visit our website, a library will be loaded and cached on your end device so that the content does not need to be loaded again. This will involve the provider processing your IP address. Amazon processes some of its data in the USA. There exists no EU Commission decision on adequacy for data transfer to the USA. We have agreed standard contract terms with Amazon which obligate Amazon to maintain an appropriate level of data protection. We will provide you with a copy of this upon request.

The legal basis for the data processing is Art. 6(1) sentence 1(f) GDPR. We use the services of Cloudfront to pursue the legitimate interest of quicker accessibility and improved, more effective presentation of our online services. You can find more information, in particular regarding storage duration, at: https://aws.amazon.com/privacy/?nc1=h_ls.

Cookie Settings