Privacy Policy
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Dürr E-Commerce GmbH
Hohenzollernstraße 96
75177 Pforzheim
E-mail: info@duerr-ecommerce.de · Phone: +49 7231 6038614
You can find the complete provider details in our Imprint. A data protection officer has not been appointed; we are not legally obliged to do so.
2. General information & legal bases
We process personal data only on the basis of the statutory provisions. Depending on the processing, the legal bases are in particular your consent (Art. 6(1)(a) GDPR, in conjunction with § 25(1) TDDDG for access to information on your device), the performance or initiation of a contract (Art. 6(1)(b) GDPR) as well as our legitimate interests in a secure, functional offering (Art. 6(1)(f) GDPR).
3. Hosting
This website is hosted by Firebase Hosting (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When the pages are accessed, technically necessary data is processed (see server log files). A data processing agreement pursuant to Art. 28 GDPR exists with the provider. A transfer to the USA (Google LLC) is possible; this is safeguarded by the EU-US Data Privacy Framework (adequacy decision of the EU Commission) or EU standard contractual clauses. Legal basis: Art. 6(1)(f) GDPR.
4. Server log files
When the website is accessed, information transmitted by your browser is automatically recorded: browser type and version, operating system used, referrer URL, page accessed, date and time of the request as well as the (shortened) IP address. This data serves to ensure trouble-free operation and security. It is deleted after 30 days. Legal basis: Art. 6(1)(f) GDPR.
5. Cookies & consent management (CCM19)
On this website we use the consent management tool CCM19 to obtain, manage and document your consent to the use of cookies or technologies that are not strictly necessary. On your first visit you receive a consent banner through which you can enable or reject individual categories (e.g. marketing).
Technically necessary cookies and services (including the storage of your consent decision) are set on the basis of § 25(2) TDDDG or Art. 6(1)(f) GDPR and do not require consent. All other services (see sections 6 and 7) are loaded only after your consent. In doing so, CCM19 stores information such as consent status, timestamp, a shortened/hashed IP address and browser information as proof of consent (Art. 7(1) GDPR). The consent data is processed via the CCM19 cloud; according to the provider the server location is in Germany/the EU. The operator of CCM19 is Papoo Software & Media GmbH. A data processing agreement pursuant to Art. 28 GDPR exists with the provider.
You can revoke or adjust your consent at any time with effect for the future via the consent settings (link in the banner or footer).
6. Google services: Analytics 4, Ads & Consent Mode
We use — only after your consent — services from Google Ads, offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. With these we measure the success of our advertisements (conversion tracking) and can show you interest-based advertising on other websites (remarketing). In this process, cookies or comparable technologies are used and usage data (e.g. pages visited, actions triggered, shortened IP address, device/browser information, click identifiers) is transmitted to Google and processed there.
A transfer to Google LLC in the USA is possible and safeguarded by the EU-US Data Privacy Framework or EU standard contractual clauses. The legal basis is your consent (Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG), which you can revoke at any time. Further information: Google's privacy policy.
Google Analytics 4
In addition we use — only after your consent — Google Analytics 4 to statistically evaluate the use of our website (e.g. pages accessed, time spent, approximate origin, device used) and to improve our offering. In doing so, cookies are set and usage data including a shortened IP address is processed. The provider, third-country transfer and legal basis correspond to the information given above regarding the Google services.
Google Consent Mode v2
To control the Google services in a consent-compliant manner we use the Google Consent Mode v2. Depending on your selection in the consent banner, only restricted or anonymized signals are transmitted to Google; without your consent, no cookies used for analysis and advertising are set.
7. Meta Pixel (Facebook & Instagram)
We use — only after your consent — the Meta Pixel of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. With it we measure the effectiveness of our advertising on Facebook and Instagram and can build target audiences for advertisements (remarketing). In doing so, usage and event data (e.g. pages visited, actions triggered, shortened IP address, device/browser information) is transmitted to Meta, among other things. The integration takes place exclusively client-side in the browser; a server-side transmission via the Meta Conversions API (CAPI) does not take place.
For the collection and transmission of the data via the pixel, we and Meta are joint controllers (Art. 26 GDPR); the further processing by Meta takes place under its sole responsibility. A transfer to Meta Platforms, Inc. in the USA is possible and safeguarded by the EU-US Data Privacy Framework or EU standard contractual clauses. The legal basis is your consent (Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG), which you can revoke at any time. Further information: Meta's privacy policy.
8. SalesViewer®
On this website, data is collected and stored for marketing, market research and optimization purposes using the SalesViewer® technology of SalesViewer® GmbH on the basis of the legitimate interests of the website operator (Art. 6(1)(f) GDPR).
For this purpose, a JavaScript-based code is used which serves to collect company-related data and the corresponding usage. The data collected with this technology is encrypted via a non-reversible one-way function (so-called hashing). The data is immediately pseudonymized and not used to personally identify the visitor of this website.
The data stored within the scope of SalesViewer® is deleted as soon as it is no longer required for its intended purpose and no statutory retention obligations prevent deletion.
You can object to the collection and storage of the data at any time with effect for the future by clicking this link https://www.salesviewer.com/opt-out to prevent the collection by SalesViewer® within this website in the future. In doing so, an opt-out cookie for this website is placed on your device. If you delete your cookies in this browser, you will have to click this link again.
9. Fonts
The font "Inter" used is served locally from our server(self-hosted). There is no connection to Google servers and no transmission of your IP address to Google for the display of the font.
10. Contacting us
If you contact us by e-mail or via the contact/audit form, we process your details (e.g. name, company, e-mail address, message) to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding). For the delivery of the form we use the service Web3Forms, operated by Web3Creative (India); in doing so, the data you enter as well as technical details such as IP address and timestamp are transmitted to its server and forwarded to us by e-mail. A data processing agreement pursuant to Art. 28 GDPR exists with the provider. Web3Forms uses sub-processors to provide the service, including Amazon Web Services, Cloudflare and Hetzner (EU) as well as CleanTalk and Akismet (USA) for spam prevention. As the processing partly takes place outside the EU (including India, USA), the transfer is safeguarded by EU standard contractual clauses (Art. 46 GDPR). Submissions stored at Web3Forms are automatically deleted at the latest after three years; beyond that, we delete your data as soon as it is no longer required to achieve the purpose and no statutory retention obligations prevent deletion.
11. Recipients & processors
To provide our offering we use carefully selected service providers (including hosting, consent management, marketing services). Insofar as these process personal data on our behalf, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR.
12. Transfer to third countries
For some of the services mentioned, data may be transferred to third countries — for Google and Meta in particular to the USA, for Web3Forms to the USA and to India. This is safeguarded by the EU-US Data Privacy Framework (adequacy decision of the EU Commission) and/or EU standard contractual clauses (Art. 46 GDPR). A level of data protection fully corresponding to European standards cannot be guaranteed in every case in third countries.
13. Your rights
Under the GDPR you have the right to:
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing (Art. 21 GDPR)
- Withdrawal of consent given with effect for the future (Art. 7(3) GDPR)
To exercise your rights, an informal message to the contact details given above is sufficient.
14. Right to lodge a complaint with the supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20, 70173 Stuttgart
Last updated: July 2026 · This privacy policy will be updated when our offering changes.