Dussmann Service

Data Protection

1. General

The Dussmann Stiftung & Co. KGaA and associated companies (in the following “Dussmann”) takes the protection of your personal data seriously and complies with the regulations governing data protection. Personal data is processed on our websites only as necessary for the respective purpose. Our staff has undertaken to comply with the regulations governing discretion, confidentiality and data protection.

In the following, we elucidate the information collated during your visit and how it is used. We inform you to what purposes you data is processed and how you can exercise your rights. You may access and print the data protection statement at any time by clicking the "Data protection" link at the bottom of every website page.

2. Personal data

Personal data is defined as information relating to an identified or identifiable natural person (e.g. name, address, telephone number).

3. Data controller

The controller of data processing is:

Dussmann Stiftung & Co. KGaA,
Friedrichstraße 90, 10117 Berlin

You will find a list of associated companies at https://www.dussmanngroup.com/verbundene-unternehmen . When you contact an associated company in a member state, this company is the controller.

Contact data of our data protection officer:

Dussmann Stiftung & Co. KGaA,
Data protection officer, 
Friedrichstraße 90, 10117 Berlin

Tel. +49 30 2025-0

4. Categories of data, purposes and legal basis of data processing

When you visit our website and/or conclude a contract with us via the website, we process your personal data. This may refer to the following data:

  • name, first names
  • address
  • email address
  • telephone number, fax number
  • date and time of request
  • content of request (page)
  • access status/http status code
  • amount of data transmitted
  • website, from which the request comes
  • browser type and version
  • language of browser version
  • IP address and internet access provider
  • operating system
  • manufacturer/ type of mobile device
  • goods/services
  • bank and credit card data

Data is processed to operate our websites, to fulfil and process contracts and for the purposes of advertising. We also use this data to fulfil our legal obligations towards state and federal authorities (e.g. the tax office). The legal basis for processing is article 6 para. 1 lit. a), b), c) and f) of the general data protection regulations (GDPR). For the conclusion of the contract, at least your name, first name and, where applicable, your address are required for your identification. Without these details we are unable to fulfill contracts.

IP addresses are used only when necessary in the legitimate interests of the data controller or a third party, unless the interests or fundamental rights and freedoms of the person affected (data subject) prevail. Legitimate interests are the analysis of website usage, direct advertising and optimization of the website, the pursuit of legal claims, the investigation of criminal offences and maintenance of IT security systems. Processing is carried out on the basis of article 6 para. 1 lit. f) GDPR.

We use data for surveys and marketing purposes only if you have given prior consent or if you are an existing client and have not expressed an objection inasmuch as this is provided for by law.

5. Logfiles

When you visit our websites, we temporarily store connection data of the visiting computer for the purpose of system security, the pages you visit on our site, the date and duration of your visit, the identification data of the browser, the operating system type used and the website from which you have come.

6. Contact form

When you use a contact form on our website, the data you provide is processed to forward your message to the appropriate person at Dussmann and to enable them to contact you. The data provided in a contact form is not used for any other purposes. The legal basis for processing is article 6(1)(f) GDPR. Our legitimate interest is to answer your inquiry.

7. Newsletter

When you order any of our newsletters, we need only a valid email address; additional information is voluntary. Following registration, the system sends you an email with an activation link to confirm your agreement with newsletter subscription and to ensure that you are the owner of the email address provided. Your address is added to the newsletter list only after you have followed the link and activated your subscription (double opt-in procedure). Processing is carried out on the legal basis of article 6 para. 1 lit. a) GDPR.

As an active client, you receive regular information with product recommendations by email. News articles and information about our products and services are sent, independent of a newsletter subscription. Processing is carried out on the legal basis of article 6 (1) (f) GDPR. Our legitimate interest is to provide you with information about our products and services.

You may unsubscribe from any further emails by clicking on the link at the end of each e-mail with effect for the future.

8. Recipients of personal data

To the extent permitted by law, your personal data may be disclosed to the following categories of recipients:

  • web analysis service providers
  • IT service providers
  • associated companies of the Dussmann Group (see link above)
  • authorities and other public bodies

9. Access of third parties to your personal data

Aour personal data is processed by ourselves and by other Dussmann Group companies or service companies commissioned by us unless expressly excluded. In such cases, we ensure that Dussmann Group companies and service providers comply with all applicable data protection regulations and the obligations arising from this data protection notice.

Your personal data is not disclosed without your consent except to state authorities who are entitled to require such information or should we be obliged to do so by law or by court order.

10. Cookies

“Cookies” are small text files which save specific information on your computer whilst you visit a website. Cookies help to identify frequency of use, the number of visitors to our websites and to make information available in a convenient and efficient way. We deploy ‘session cookies” which are stored exclusively for the duration of your visit to one of our websites.

It is possible to visit our website without cookies. You can deactivate the storage of cookies in your browser, limit use to certain websites or set your browser to notify you as soon as a cookie is sent. However, please note that you must then expect a limited display of page content and limited user guidance.

11. Google Analytics 

This website uses Google Analytics, a website analysis service provided by Google Inc. (in the following, “Google”). Google Analytics also uses cookies. The information about your visit to the website generated by the cookie is generally transferred to a Google server in the USA and saved. However, if IP anonymization is activated on this website, Google shortens your IP address in member states of the EU or in other states party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there.

Google uses this information on behalf of the website operator to evaluate website use, to compile reports on website activity and to provide the website operator with other services relating to website and internet use. The IP address transmitted by your browser in the context of Google Analytics is not mixed with other Google data.

You can set your browser to prevent saving cookies; please note, however, that this may limit page view and user features.

You can prevent Google from collecting the data generated by the cookie relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link. tools.google.com/dlpage/gaoptout

You will find further information concerning conditions of use and data protection at https://www.google.com/analytics/learn/privacy.html. On this website, Google Analytics has been extended by the code gat._anonymizeIp() to facilitate anonymous collation of IP addresses (IP-Masking).

12. Google ReCaptcha

We deploy the Google service reCaptcha to determine whether a person or a computer is attempting to use a contact form or newsletter subscription. The information used by Google to determine whether a user is a human or a computer is the IP address of the device used, the website visited and where captcha is integrated, the date and duration of the visit, browser identification data, operating system type, Google account if the user is logged in, mouse movements over the reCaptcha and the entries made to identify images. The legal basis for data processing is article 6 para. 1 lit. f) GDPR. Our legitimate interest in this data processing is to ensure the security of the website and to protect against automated entries and attack.

13. Use of Google Maps

This website uses Google Maps to visualize locations and how to get there. Google Maps is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Our legitimate interest in the use of Google is to inform the visitor about locations. The legal basis for data processing is article 6 para. 1 lit. f) GDPR.

You will find the terms of use under terms of use for Google Maps. Google provides further information here: https://www.google.com/policies/privacy.  Data protection settings may be made here: https://adssettings.google.com/authenticated.

14. Facebook Fan Pages

Dussmann operates Facebook fan pages. These are websites on the Facebook platform which serve to present the respective Dussmann company and to maintain contact with clients and other interested parties.

Joint responsibility with Facebook: Together with Facebook, we are responsible for the phase of data collation during your visit to our fan page. in accordance with 13 DSGVO concerning data collation, we have a joint duty of information which we are fulfilling with this statement. When you visit our fan page, personal data such as your IP-address and further information will be processed by Facebook as cookies on your computer. The results of this processing are passed to us by Facebook in the form of summarized, anonymized user statistic. Facebook provides further information at the following link: http://de-de.facebook.com/help/pages/insights.

In this context, your data is processed by Facebook Ireland Ltd. and possibly in countries outside the European Union. Facebook describes the information received and how it is used in its data guidelines at: http://de-de.facebook.com/about/privacy

If you are logged into Facebook, your end device has a cookie which enables Facebook to register that you have visited our fan page and how you have used it. This applies to all Facebook pages. You can prevent this by logging out of Facebook, deactivating the "stay logged in” function or deleting the cookies on your device and restarting.

Please note that the data collected may be sent to the USA, outside the European Union. The European Union has not made an adequacy decision for the USA but Facebook participates in the EU US Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

Our responsibility: Dussmann processes the data that you give voluntarily on the fan page (for example comments) to answer your requests, to communicate with you and to publish information about the contents of the fan page or about Dussmann. The legal basis of processing is article 6 para.1b and f GDPR. The legitimate interest lies in the effective information of users, clients and interested parties and communication with these.

Please note that details of processing by Facebook are unknown to us, both in terms of scope and content and we have no opportunity to influence it. Naturally, you are entitled to exercise your rights towards us as data subject. However, if these involve any data processing of which only Facebook has knowledge, we must inform you that our ability to contribute to the exercise of your rights are limited and we must refer you to Facebook.

15. Duration of data storage

We store your data for as long as the purpose requires or for as long as we are legally obliged to store it.

Where storage of data to process commercial contracts is necessary for tax reasons (transaction documentation), the standard storage period is 6 to10 years. During this time the processing of data is limited. The period of storage generally begins at the end of the calendar year in which the offer was submitted or the contract fulfilled.

16. Security

We take all necessary technical and organizational security measures to protect your personal data from loss and abuse. Your data is stored in a secure operating environment that is inaccessible to the public. SSL encryption is used on all websites. Your data is encrypted directly during transmission. For security reasons, we do not provide any further information here.

17. The rights of those affected

Withdrawal of consent

If you have given your consent to the processing of personal data, you can withdraw this at any time with effect for the future. Send withdrawal of consent to datenschutzbeauftragter @remove-this.dussmann.de or by post to
Dussmann Stiftung & Co. KGaA, Friedrichstraße 90, 10117 Berlin.

Further rights

You can assert your rights against the Dussmann Group company in your country. The names and addresses of the persons responsible can be found in the list of affiliated companies  https://www.dussmanngroup.com/verbundene-unternehmen/  or the impressum of the respective company.

You have the right to require the respective person responsible to inform you whether your personal data is being processed; if this is the case, you have a right of information concerning this personal data and to the information specified in article 15 GDPR.

You have the right to require the person responsible to correct any incorrect personal data and to complete personal data where it is incomplete, immediately (article 16 GDPR). You have the right to ask the person responsible to delete your personal data immediately if one of the reasons listed in Article 17 GDPR applies e.g. if the data is no longer required for the purposes it was collected (right of deletion).

You have the right to require the person responsible to restrict processing if one of the conditions set out in article 18 GDPR applies e.g. if you have filed an objection to processing.

You have the right to receive the personal data that you have provided to us in a commonly used and machine-legible format or to require the controller to transmit such data to another controller (right to data portability, article 20 GDPR), insofar as this is technically feasible.

You have the right to object at any time to the processing of your personal data for reasons arising from your particular situation. The data controller will then no longer process your personal data unless the controller can demonstrate compelling legitimate grounds for processing which override the interests, rights and freedoms of the data subject or unless the processing serves to establish, exercise or defend legal claims (article 21 GDPR).

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of your personal data infringes the GDPR (article 77 GDPR). You can lodge such a complaint in a supervisory authority of the member state of your habitual residence, your place of work or the place of the alleged infringement.

The competent supervisory authority for Dussmann Stiftung & Co. KGaA in Berlin is
Landesbeauftragte für Datenschutz und Informationsfreiheit Berlin
Friedrichstrasse 219, 10969 Berlin.
You may refer to the respective supervisory authority in your member state.

18. Amendments to this data protection statement

In order to ensure that our data protection information continues to comply with legal requirements, we reserve the right to make changes at any time. This also applies to amendment of the data protection information for new or revised practices or services.

Should you have any questions or suggestions regarding this data protection declaration, please do not hesitate to contact us. Thank you for entrusting us with your data.

Status: 2018.08.23