ServicesSuccess StoriesAbout usCareers
DEEN
Request your free account audit →

Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Dürr E-Commerce GmbH
Hohenzollernstraße 96
75177 Pforzheim
E-mail: info@duerr-ecommerce.de · Phone: +49 7231 6038614

You can find the complete provider details in our Imprint. A data protection officer has not been appointed; we are not legally obliged to do so.

2. General information & legal bases

We process personal data only on the basis of the statutory provisions. Depending on the processing, the legal bases are in particular your consent (Art. 6(1)(a) GDPR, in conjunction with § 25(1) TDDDG for access to information on your device), the performance or initiation of a contract (Art. 6(1)(b) GDPR) as well as our legitimate interests in a secure, functional offering (Art. 6(1)(f) GDPR).

3. Hosting

This website is hosted by Firebase Hosting (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When the pages are accessed, technically necessary data is processed (see server log files). A data processing agreement pursuant to Art. 28 GDPR exists with the provider. A transfer to the USA (Google LLC) is possible; this is safeguarded by the EU-US Data Privacy Framework (adequacy decision of the EU Commission) or EU standard contractual clauses. Legal basis: Art. 6(1)(f) GDPR.

4. Server log files

When the website is accessed, information transmitted by your browser is automatically recorded: browser type and version, operating system used, referrer URL, page accessed, date and time of the request as well as the (shortened) IP address. This data serves to ensure trouble-free operation and security. It is deleted after 30 days. Legal basis: Art. 6(1)(f) GDPR.

5. Cookies & consent management (CCM19)

On this website we use the consent management tool CCM19 to obtain, manage and document your consent to the use of cookies or technologies that are not strictly necessary. On your first visit you receive a consent banner through which you can enable or reject individual categories (e.g. marketing).

Technically necessary cookies and services (including the storage of your consent decision) are set on the basis of § 25(2) TDDDG or Art. 6(1)(f) GDPR and do not require consent. All other services (see sections 6, 7 and 8) are loaded only after your consent. In doing so, CCM19 stores information such as consent status, timestamp, a shortened/hashed IP address and browser information as proof of consent (Art. 7(1) GDPR). The consent data is processed via the CCM19 cloud; according to the provider the server location is in Germany/the EU. The operator of CCM19 is Papoo Software & Media GmbH. A data processing agreement pursuant to Art. 28 GDPR exists with the provider.

You can revoke or adjust your consent at any time with effect for the future via the consent settings (link in the banner or footer).

6. Google services: Analytics 4, Ads & Consent Mode

We use — only after your consent — services from Google Ads, offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. With these we measure the success of our advertisements (conversion tracking) and can show you interest-based advertising on other websites (remarketing). In this process, cookies or comparable technologies are used and usage data (e.g. pages visited, actions triggered, shortened IP address, device/browser information, click identifiers) is transmitted to Google and processed there.

A transfer to Google LLC in the USA is possible and safeguarded by the EU-US Data Privacy Framework or EU standard contractual clauses. The legal basis is your consent (Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG), which you can revoke at any time. Further information: Google's privacy policy.

Google Analytics 4

In addition we use — only after your consent — Google Analytics 4 to statistically evaluate the use of our website (e.g. pages accessed, time spent, approximate origin, device used) and to improve our offering. In doing so, cookies are set and usage data including a shortened IP address is processed. The provider, third-country transfer and legal basis correspond to the information given above regarding the Google services.

Google Consent Mode v2

To control the Google services in a consent-compliant manner we use the Google Consent Mode v2. Depending on your selection in the consent banner, only restricted or anonymized signals are transmitted to Google; without your consent, no cookies used for analysis and advertising are set.

7. Meta Pixel (Facebook & Instagram)

We use — only after your consent — the Meta Pixel of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. With it we measure the effectiveness of our advertising on Facebook and Instagram and can build target audiences for advertisements (remarketing). In doing so, usage and event data (e.g. pages visited, actions triggered, shortened IP address, device/browser information) is transmitted to Meta, among other things. The integration takes place exclusively client-side in the browser; a server-side transmission via the Meta Conversions API (CAPI) does not take place.

For the collection and transmission of the data via the pixel, we and Meta are joint controllers (Art. 26 GDPR); the further processing by Meta takes place under its sole responsibility. A transfer to Meta Platforms, Inc. in the USA is possible and safeguarded by the EU-US Data Privacy Framework or EU standard contractual clauses. The legal basis is your consent (Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG), which you can revoke at any time. Further information: Meta's privacy policy.

8. Snitcher

We use Snitcher, a service of Snitcher B.V., to identify the companies that visit our website on the basis of their IP address, for marketing and sales purposes (lead generation). The embedded Snitcher script transmits the IP address directly from your browser to Snitcher. For this purpose, Snitcher processes the IP address as well as further technical and usage-related data. The visit data is aggregated at company level; individual visitors are not shown to us on the basis of their IP address.

The data required for this is processed on the basis of your consent, which you can revoke at any time with effect for the future.

9. Trace

We use Trace, a service of Dürr E-Commerce GmbH, to attribute visits and enquiries to advertising campaigns and to analyse the course of visits across several sessions. Company identification via Snitcher is part of Trace; the information in the section on Snitcher applies in this respect.

Data processed: random pseudonymous visitor identifier, click and campaign parameters, origin of the visit, pages accessed and the time of the visits. When a form is submitted, the domain of the email address provided is processed in addition. Name, full email address and telephone number are not stored.

The processing takes place on the basis of your consent, which you can revoke at any time with effect for the future.

10. Fonts

The font "Inter" used is served locally from our server(self-hosted). There is no connection to Google servers and no transmission of your IP address to Google for the display of the font.

11. Contacting us

If you contact us by e-mail or via the contact/audit form, we process your details (e.g. name, company, e-mail address, message) to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding). For the delivery of the form we use the service Web3Forms, operated by Web3Creative (India); in doing so, the data you enter as well as technical details such as IP address and timestamp are transmitted to its server and forwarded to us by e-mail. A data processing agreement pursuant to Art. 28 GDPR exists with the provider. Web3Forms uses sub-processors to provide the service, including Amazon Web Services, Cloudflare and Hetzner (EU) as well as CleanTalk and Akismet (USA) for spam prevention. As the processing partly takes place outside the EU (including India, USA), the transfer is safeguarded by EU standard contractual clauses (Art. 46 GDPR). Submissions stored at Web3Forms are automatically deleted at the latest after three years; beyond that, we delete your data as soon as it is no longer required to achieve the purpose and no statutory retention obligations prevent deletion.

12. Recipients & processors

To provide our offering we use carefully selected service providers (including hosting, consent management, marketing services). Insofar as these process personal data on our behalf, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR.

13. Transfer to third countries

For some of the services mentioned, data may be transferred to third countries — for Google and Meta in particular to the USA, for Web3Forms to the USA and to India. This is safeguarded by the EU-US Data Privacy Framework (adequacy decision of the EU Commission) and/or EU standard contractual clauses (Art. 46 GDPR). A level of data protection fully corresponding to European standards cannot be guaranteed in every case in third countries.

14. Your rights

Under the GDPR you have the right to:

To exercise your rights, an informal message to the contact details given above is sufficient.

15. Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20, 70173 Stuttgart

Last updated: August 2026 · This privacy policy will be updated when our offering changes.