Doghammer GmbH Privacy Policy

Preamble:

Doghammer GmbH (hereinafter: Doghammer) is delighted that you are visiting our website. Data protection and data security when using our website are very important to us. We would therefore like to take this opportunity to inform you about which of your personal data we collect when you visit our website and for what purposes this data is used. As changes to the law or to our internal company processes may require amendments to this privacy policy, we ask that you review this privacy policy regularly. This privacy policy applies to the Doghammer GmbH website, which is accessible via the domain www.doghammer.de and its various subdomains (hereinafter referred to as ‘our website’).

1. Name and address of the data controller

The data controller and service provider is Doghammer GmbH, Innaustraße 2a, 83026 Rosenheim (hereinafter referred to as ‘Doghammer’).

2. Names and addresses of the data protection officers

Doghammer is not obliged to appoint a data protection officer. The designated contact person for data protection matters is Maximilian Hundhammer, tel. +49 8031 796 8736, email: [email protected], address: Innaustraße 2a, 83026 Rosenheim.

3. General information on data processing

We generally collect and use our users’ personal data only to the extent necessary to provide a fully functional website and our content and services.

3.1 Personal data

Personal data is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, email address, IP address or user behaviour. Information for which we cannot establish a link to your person (or can only do so with disproportionate effort), e.g. through anonymisation of the information, does not constitute personal data.

3.2 Processing of personal data

Processing means any operation or set of operations, carried out with or without the aid of automated means, — operation or set of operations performed on personal data, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, distribution or any other form of making available, the matching or linking, the restriction, erasure or destruction.

3.3 Legal bases for the processing of personal data

The collection and use of our users’ personal data generally takes place only with the user’s consent. Where we obtain the data subject’s consent for the processing of personal data, the legal basis is Article 6(1)(a) of the General Data Protection Regulation (GDPR).

An exception applies in cases where it is not possible, for practical reasons, to obtain consent in advance and where the processing of the data is permitted by statutory provisions. Where the processing of personal data is necessary for the performance of a contract to which the data subject is a party, the legal basis is Article 6(1)(b) of the GDPR. This also applies to processing operations necessary for the implementation of pre-contractual measures.

Where the processing of personal data is necessary for compliance with a legal obligation to which we are subject, Article 6(1)(c) of the GDPR forms the legal basis.

Where processing is necessary to safeguard a legitimate interest of the joint controllers or of a third party, and the interests, fundamental rights and fundamental freedoms of the data subject do not override the former interest, Article 6(1)(f) of the GDPR constitutes the legal basis.

4. Data processing operations

Personal data is collected via this website when you provide it to us of your own accord, e.g. by filling in forms, using our website chat function or sending emails. We use this data for the purposes specified in each case or arising from your enquiry; for example, we use your email address to contact you. Data will only be disclosed to third parties if this is expressly permitted by law or if you have consented to such disclosure in the course of an active business relationship.

4.1 Informational use of the website

You may visit our website without providing any personal details. If you use our website purely for information purposes – that is, without providing us with any personal information – we do not process any personal data, with the exception of the data transmitted by your browser to enable you to visit the website. For the purpose of the technical provision of our website, it is necessary for us to process certain information transmitted automatically by you so that your browser can display our website and you can use it. This information is automatically collected each time you access our website and stored in our server log files. This information relates to the computer system of the accessing device. The following information is processed in this process:

Host
User’s IP address
Date and time of access
Method of access (GET/POST)
Request
Protocol (e.g. https)
Status (e.g. error messages)
Amount of data retrieved
Referrer
User’s browser and operating system

Article 6(1)(f) of the GDPR serves as the legal basis for the processing of the aforementioned data. The processing of the aforementioned data is necessary for the provision of a website and thus serves to safeguard a legitimate interest of our company.

As soon as the data mentioned is no longer required to display the website, it will be deleted. The collection of data for the provision of the website and the (temporary) storage of data in log files is absolutely essential for the operation of the website. Further storage may take place in individual cases where this is required by law.

4.2 Active use of the website – registration (customer account) and registration process

On our website, we offer users the option to register by providing personal data. The data is entered into a form, transmitted to us and stored. As a general rule, the data is not passed on to third parties unless this is strictly necessary for the fulfilment of a contract. The following personal data is collected as part of the registration process:

Name, address, email address, telephone number and a password chosen by you.
IP address
Date and time of registration

We use the processed data to create a customisable user account for you, which allows you to access certain content and services, such as the Doghammer online shop, on our website. We process your email address so that we can send you new login details should you ever forget them.

You can have the data stored about you amended at any time via your customer account.

The processing of the personal data set out above serves, in accordance with Article 6(1)(b) of the GDPR, to carry out pre-contractual measures.

As soon as your registration on our website is cancelled or amended, the data processed during the registration process will be deleted. Further storage may take place in individual cases where this is required by law.

As a user, you have the option to cancel your registration at any time. To do so, please send us an email stating your request to the following email address: [email protected].

4.3 Contact form

If you send us enquiries via the contact form, we will ask you for your title, first name and surname, your email address and your country. You may also enter your enquiry and a personalised message. These are mandatory fields. You may also provide your order number on a voluntary basis. We store this information for the purpose of processing your enquiry and in case of any follow-up questions. Please note that we currently use the ticket system provided by Smartsupp for our contact form and customer service. Smartsupp acts as our data processor within the meaning of Article 4(8) of the GDPR. A data processing agreement has been concluded with the provider in accordance with Article 28 of the GDPR, which ensures compliance with data protection regulations.

The processing of this data is based on Article 6(1)(b) of the GDPR, provided that your enquiry relates to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Article 6(1)(f) of the GDPR).

The data you enter in the contact form will remain with us until you request its deletion, withdraw your consent to its storage, or the purpose for storing the data no longer applies (e.g. once your enquiry has been dealt with). Mandatory legal provisions – in particular retention periods – remain unaffected.

4.4. Chat function

If you use the chat function to contact us and provide personal data in the process, we will store this data solely for the purpose of processing your enquiry and for any follow-up questions. Please note that we currently use the provider Smartsupp.com, Šumavská 3, Building B, 602 00 Brno, Czech Republic, for the chat function.

Smartsupp.com acts as our data processor within the meaning of Article 4(8) of the GDPR. A data processing agreement in accordance with Article 28 of the GDPR has been concluded with the provider, which ensures compliance with data protection regulations.

The processing of this data is based on Article 6(1)(b) of the GDPR, provided that your enquiry relates to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Article 6(1)(f) of the GDPR).

The data you enter in the chat will remain with us until you request its deletion, withdraw your consent to its storage, or the purpose for storing the data no longer applies (e.g. once your enquiry has been fully processed). Mandatory legal provisions – in particular retention periods – remain unaffected.

4.5 Other means of contact

Our contact details (telephone and email) are also available on our website. You can send us a message via the email address provided. In this case, we process your first name, surname and email address, as well as any personal data transmitted with the email. Furthermore, you can send us a personalised message via the message box. You may also call us; in that case, we will process the data you provide. It is entirely up to you whether you choose to provide us with this data. However, without this information, we may not be able to fulfil your request for contact, or may only be able to do so partially.

In this context, no data is passed on to third parties. The data is used exclusively for the purpose of handling the correspondence.

The legal basis for processing the data transmitted when you contact us is Article 6(1)(f) of the GDPR. When you contact us, the legitimate interest required for the processing of the data lies in the handling of your enquiry.

If the email contact is aimed at concluding a contract, the legal basis for the processing is Article 6(1)(b) of the GDPR.

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. The correspondence is deemed to have ended when it is clear from the circumstances that the matter in question has been conclusively resolved. Further storage may take place in individual cases where this is required by law.

4.6 Newsletter

To subscribe to our email newsletter, we require your email address to which the newsletter is to be sent. It is entirely up to you whether you provide us with this information. However, without this information, we may not be able to send you our newsletter.

The data will be used exclusively for the purpose of sending the newsletter. You may unsubscribe from the newsletter at any time. Similarly, you may withdraw your consent to the storage of personal data at any time. A link for this purpose is included in every newsletter.

Please note that we currently work with Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany, to send out the newsletter; they process your data on our behalf and ensure that the emails are sent correctly. Your data will not be disclosed to any third parties beyond this in connection with the distribution of the newsletter. Further information about Sendinblue GmbH, as well as your relevant data protection rights and settings options for protecting your privacy, can be found at: Privacy Policy – Protection of Personal Data | Brevo.

When you subscribe to the newsletter, your email address will be used for our own marketing purposes until you unsubscribe from the newsletter. To unsubscribe, you can click the link at the end of each newsletter. The use of the newsletter software allows access to recipients’ personal responses. By subscribing to our newsletter, you consent to tracking permission and the processing of personal responses. You may revoke your tracking permission at any time via the link at the end of each newsletter, thereby cancelling it.

We use the so-called double opt-in procedure for sending the newsletter, i.e. we will only send you the newsletter once you have confirmed your subscription via a confirmation email sent to you for this purpose by clicking the link contained therein. This is to ensure that only you, as the owner of the email address provided, can subscribe to the newsletter. Your confirmation must be provided promptly after receiving the confirmation email; otherwise, your newsletter subscription will be automatically deleted from our database.

The legal basis for processing your data following your subscription to the newsletter is Article 6(1)(a) of the GDPR, provided you have given your consent.

Your data will be stored for as long as you remain subscribed to the newsletter. Once you unsubscribe from the newsletter, your data will be deleted. Further storage may take place in individual cases where this is required by law.

4.6 Ordering process in the Doghammer online shop

To process orders in the Doghammer online shop, we require the following personal details: first name and surname, address, email address, telephone number, date of birth and, where applicable, your gender and height. It is entirely up to you whether you choose to provide us with this data. However, without this information, we cannot process your order.

Please note that we use third-party service providers. We work with ‘PayPal’ and ‘Stripe’ to provide you with a convenient online payment option. The following data is transmitted to the service provider as part of the payment process:

Name of the invoice recipient
Billing address
Name of the recipient of the parcel
Delivery address
Order number
Order details (such as items, quantity, price, discounts, etc.)

Your data will then be forwarded to the bank or online payment service provider responsible for processing the payment. In some cases, the selected payment service providers may also collect this data themselves if you create an account with them. In this case, you must log in to the payment service provider’s platform using your login details during the ordering process. The privacy policy of the respective payment service provider applies in this regard.

The legal basis for the processing of your personal data required to fulfil a sales contract concluded with us – in particular for payment processing – is Article 6(1)(b) of the GDPR. This also applies to processing operations necessary for the implementation of pre-contractual measures. In some cases, we may also be legally obliged to transfer data relating to you (implementation of strong customer authentication in accordance with Directive (EU) 2015/2366 (PSD 2) or the Payment Services Supervision Act (ZAG)). Where we are legally obliged to transfer data, Article 6(1)(c) of the GDPR, in conjunction with the relevant provisions of Directive (EU) 2015/2366 (PSD 2) or the Payment Services Supervision Act (ZAG) shall serve as the legal basis.

Once the contract has been fully executed and the purchase price has been paid in full, your data will be blocked for further use and deleted once the retention periods under tax and commercial law have expired, unless you have expressly consented to the continued use of your data. Data may be retained for a longer period in individual cases where this is required by law.

If you choose to pay via ‘PayPal’ as part of your ordering process, your personal data will be automatically transmitted to PayPal. PayPal is a service provided by PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. PayPal acts as an online payment service provider and a trustee, and offers buyer protection services.

The personal data transmitted to PayPal typically includes your first name, surname, address, email address, IP address or other data necessary for processing the payment. Personal data relating to the specific order (such as the number of items, item number, invoice amount, VAT and other invoice details) is also required to fulfil the sales contract.

This is in line with our legitimate interest in offering an efficient and secure payment method (Article 6(1)(f) of the GDPR). In this context, we pass on the aforementioned data to PayPal to the extent necessary for the performance of the contract (Article 6(1)(b) of the GDPR).

PayPal also reserves the right to collect personal data from the buyer. According to PayPal, this may include the following information:

Name
Address
Telephone number
Email
Account number

PayPal may pass on your personal data to affiliated companies, service providers or subcontractors where this is necessary to fulfil contractual obligations or where the data is processed on its behalf.

The personal data we provide to PayPal may be passed on by PayPal to credit reference agencies. The purpose of this transfer is to carry out identity and credit checks. PayPal uses the result of the credit assessment, taking into account the statistical probability of default, to decide whether to provide the relevant payment method. The credit report may contain probability values (so-called ‘score’ values). Where score values form part of the credit report’s outcome, these are based on a scientifically recognised mathematical and statistical method.

You can view which credit reference agencies are involved here: https://www.paypal.com/de/webapps/mpp/ua/privacy-full#rAnnex

You have the option to withdraw your consent to the processing of your personal data at any time by notifying PayPal. However, withdrawing your consent does not affect the lawfulness of any processing carried out on the basis of your consent prior to its withdrawal, provided that the personal data must be processed, used or transferred for the purpose of processing payments in accordance with the contract.

You can view PayPal’s privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Your personal data, which was transferred to the service provider for invoicing purposes, will be deleted by the service provider after 24 months. Following deletion, the service provider retains backups of this data and deletes them after a further 12 months. Data may be retained for longer if required by law, for example due to retention periods under tax and commercial law.

If you choose to pay via ‘STRIPE’ as part of your order process, your personal data will be automatically transmitted to STRIPE. STRIPE is a service provided by Stripe Payments Europe, Ltd., a limited liability company incorporated under Irish law, with company number 513174 and offices at The One Building, 1 Grand Canal Street Lower, Dublin 2, Ireland. STRIPE acts as an online payment service provider.

The personal data transmitted to STRIPE typically includes first name, surname, billing and delivery addresses, email address, payment method (such as credit or debit card number, bank account details) or other data necessary for payment processing. Personal data relating to the relevant order (such as the number of items, item number, date of purchase, invoice amount, taxes and other invoicing details) is also required to fulfil the purchase contract.

This is in line with our legitimate interest in offering an efficient and secure payment method (Article 6(1)(f) of the GDPR). In this context, we pass on the aforementioned data to STRIPE to the extent necessary for the performance of the contract (Article 6(1)(b) of the GDPR).

STRIPE may pass on your personal data to affiliated companies, service providers or subcontractors to the extent that this is necessary to fulfil contractual obligations or where the data is processed on its behalf.

You have the option to withdraw your consent to the processing of your personal data at any time by notifying STRIPE. However, the withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent prior to its withdrawal, provided that the personal data must be processed, used or transferred for the purpose of contractual payment processing.

You can access STRIPE’s privacy policy at https://stripe.com/de/privacy.

Your personal data, which was transferred to the service provider for invoicing purposes, will be deleted by the service provider once the limitation periods have expired. Data may be retained for longer if required by law, for example due to retention periods under tax and commercial law.

4.7 Delivery

Delivery is carried out by the following courier companies: DHL, DPD, Austrian Post

To fulfil the contract in accordance with Article 6(1)(b) of the GDPR, we pass on your data to the delivery company commissioned to carry out the delivery, insofar as this is necessary for the delivery of the goods ordered.

If you have given us your express consent during or after placing your order for the purpose of delivery notification or coordination, we will, on this basis and in accordance with Article 6(1), first sentence, point (a) of the GDPR, pass on your email address and telephone number to the selected delivery service provider so that they may contact you prior to delivery for the purpose of notifying you of or coordinating the delivery.

You may withdraw your consent at any time by sending a message via the contact details provided above or directly to the delivery service provider at the contact address listed below:

DHL Paket GmbH

Sträßchensweg 10

53113

Bonn

Following revocation, we will delete the data you have provided for this purpose, unless statutory retention obligations prevent us from doing so.

4.11 Recruitment

If you are interested in any of the job vacancies listed on our website, you can email us at any time at team[a]doghammer.de or send your application documents to the following address: Doghammer GmbH, Grubholzer Straße 12, 83026 Rosenheim. In doing so, we will process all the information you provide.

The legal basis for the processing of the personal data set out above is Article 6(1), first sentence, point (b) of the GDPR in conjunction with Section 26(1), first sentence of the BDSG-neu.

We assure you that the personal data you provide will be processed solely for the purpose of conducting the recruitment process. Following the conclusion of the recruitment process, the data will be retained for 6 months to defend against any claims arising under the General Equal Treatment Act (AGG).

In the event that your application cannot be considered at present, you also have the option of consenting to us storing the documents you have submitted as part of this application, as well as any other data you have provided, in our applicant database in accordance with Article 6( 1(a) of the GDPR, so that we may contact you in the future should a vacancy arise that matches your application profile. You must explicitly consent to the use of your application details again at the relevant stage when submitting an application. You may withdraw your consent to the storage of your application data for this purpose, for a maximum period of 12 months, at any time with future effect. To do so, simply send an email to the following email address: team[a]doghammer.de

4.12 Product reviews

On our website, we offer you the opportunity to submit product ratings and publish reviews of our products. In this case, we require the following data: first name, country, email address, the specific content of the review and the rating. The email address will not be published alongside the rating and review.

It is entirely up to you whether you provide us with this data. Without providing the above-mentioned data, you cannot submit a product rating or review.

The data processing described above for the purpose of submitting a product rating is carried out on the basis of your consent in accordance with Article 6(1)(a) of the GDPR. You may withdraw this consent at any time, with future effect, without giving any reason. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of your consent prior to its withdrawal. To do so, simply send an email to [email protected] or a written notice to Doghammer GmbH, Grubholzer Straße 12, 83026 Rosenheim.

The data will be stored for as long as the purpose of the review remains valid and you have not withdrawn your consent.

5. Transfer of personal data to third parties

As a general rule, your personal data will not be disclosed. Your personal data will only be passed on to third parties or otherwise disclosed if

we are legally obliged to do so on the basis of an official or court order,
we are entitled to do so, e.g. because this is necessary for the prosecution of criminal offences or for the exercise and enforcement of our rights, or,
you have given your prior consent.

6. Cookies and external services

Cookies are small files that enable specific, device-related information to be stored on users’ devices (PCs or similar). They serve to enhance the user-friendliness of websites and thus benefit users. Some functions of our website cannot be provided without the use of technically necessary cookies. In addition, they may be used to collect statistical data on website usage and to analyse this data for the purpose of improving the website. Users can control the use of cookies. For further information on the use of cookies on our website and for individual cookie settings, click HERE.

7. Fan pages on Facebook, Instagram, TikTok, YouTube and LinkedIn, as well as Google

We operate fan pages on the social media platforms Facebook, Instagram, TikTok, YouTube and LinkedIn. As the operators of these fan pages, we are joint controllers within the meaning of Article 4(7) of the GDPR, together with the operators of these platforms. When you visit one of our fan pages, personal data is processed by the controllers. As the data controller for the fan pages, we have entered into agreements with the social media platforms which, amongst other things, govern the conditions for using these pages. We have incorporated this privacy policy into the relevant fan pages, where you can find further information, or at https://www.doghammer.de:

7.1 Google Ads Customer Match

We use Google Ads Customer Match for our Google marketing. The legal basis for this is your consent in accordance with Article 6(1)(a) of the GDPR. When using Customer Match, selected, encrypted user data – such as email addresses or telephone numbers – is automatically transmitted to Google Ireland Limited as part of conversion tracking, provided that you have previously given your consent. Google uses this encrypted user data solely to match it to existing Google accounts in order to display personalised adverts. According to Google, the data is automatically deleted once the data has been matched and the advertising measures have been implemented. Google then uses this data to compare the extent to which the transmitted user data matches existing Google customers. This enables target groups to be created for the delivery of adverts and campaigns. The encrypted customer data is automatically deleted once the Customer Match lists have been created.

Google receives and processes the data in its capacity as a data processor. To this end, we have entered into a data processing agreement with Google. It cannot be ruled out that Google LLC, based in California, USA, and, where applicable, US authorities may also have access to the data stored by Google.

If you do not wish to participate in tracking, you can refuse the setting of the cookie required for this – for example, via a browser setting that generally disables the automatic setting of cookies, or via our cookie settings. You can also customise personalised advertising in your Google account under the ‘Privacy’ tab according to your preferences. To do this, log in to Google and click on the ‘Data and privacy’ section under ‘Manage your Google Account’.

7.2 Microsoft Clarity

To provide statistics on the use of our website, in the form of heatmaps – primarily generated by tracking mouse movements – and session recordings – we use the Microsoft Clarity service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA (“Microsoft”).

To analyse the use of our website, Microsoft Clarity uses cookies and pixels. In doing so, your IP address, mouse movements, clicks, time, frequency, location and user behaviour, as well as interaction data and the scrolling activity during your visit to our website and similar information are collected, transmitted to Microsoft (Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland) and stored there .

In order to be able to assign the statistics to individual campaigns, Microsoft Clarity is linked to Google Analytics 4 (see the separate section in this privacy policy regarding the latter service), provided that you have also consented to the use of Google Analytics 4.

The legal basis for the use of Microsoft Clarity, including the linking to Google Analytics 4, is your consent pursuant to Article 6(1)(a) of the GDPR. Where personal data is transferred to the USA, this is done pursuant to Article 45 of the GDPR in conjunction with the Adequacy Decision C(2023) 4745 of the European Commission. Both Microsoft and Google have committed to complying with the data processing principles of the Data Privacy Framework (DPF).

Please refer to Microsoft’s privacy notices at https://privacy.microsoft.com/de-de/privacystatement and at https://clarity.microsoft.com/terms.

8. Security measures to protect the data stored by us

We are committed to protecting your privacy and treating your personal data as confidential. To prevent the loss or misuse of the data stored with us, we implement comprehensive technical and organisational security measures, which are regularly reviewed and adapted to technological advances. However, we would like to point out that, due to the nature of the internet, it is possible that data protection rules and the aforementioned security measures may not be observed by other individuals or organisations outside our sphere of responsibility. In particular, data disclosed in unencrypted form – even if this is done by email – may be read by third parties. We have no technical control over this. It is the user’s responsibility to protect the data they provide against misuse, whether through encryption or by other means.

9. Hyperlinks

Our website contains so-called hyperlinks to websites operated by other providers. When you click on these hyperlinks, you will be redirected directly from our website to the website of the other provider. These may also include the corporate websites of Doghammer’s partners. You can recognise this, amongst other things, by the change in the URL. We cannot accept any responsibility for the confidential handling of your data on other websites. Please refer directly to the respective websites for information on how your personal data is handled there.

10. External service providers

We use service providers to deliver our services and to process your data in connection with our services. These service providers process the data exclusively in accordance with our instructions and are obliged to comply with the applicable data protection regulations. All data processors have been carefully selected and are granted access to your data only to the extent and for the duration necessary to provide the services, or to the extent to which you have consented to the processing and use of the data.

In this context, personal data may be transferred to countries outside the EU, in particular to the USA. In order to ensure an adequate level of protection for your personal data in the event of its transfer to such so-called third countries, we have entered into so-called EU-US Standard Contractual Clauses with our service providers. The US is regarded by the European Court of Justice as a country with a level of data protection that is insufficient by EU standards. Due to the absence of an adequacy decision and in the absence of suitable safeguards, there is a particular risk that your data may be processed by US authorities for monitoring and surveillance purposes, possibly without any means of legal redress. Furthermore, where possible, we are in contact with the service provider to ensure the protection of your personal data by implementing any additional measures that may be necessary.

11. Retention period

Your personal data will be deleted as soon as the respective purpose for processing has been achieved or has subsequently ceased to apply.

In order to fulfil contractual obligations, data collected from you may be retained for as long as the contract remains in force, and, depending on the scope of the contract, for a further 6 or 10 years thereafter, in order to comply with statutory retention obligations and to resolve any enquiries or claims that may arise after the contract has expired.

If, at our discretion, data is necessary to investigate or defend against claims made against us, or to initiate criminal proceedings or bring claims against you, us or third parties, we may retain this data for as long as such proceedings could be brought.

For the purposes of customer service, the data collected from you may be retained for 3 to 10 years after collection, unless you request the deletion of this data and there are no contractual or statutory retention obligations that preclude such a request for deletion.

Relevant obligations regarding evidence and data retention arise, amongst other things, from the German Commercial Code and the German Fiscal Code.

In this case, the legal basis for processing is the relevant statutory provisions in conjunction with Article 6(1)(c) of the GDPR.

If a contract is not concluded, we will delete your data after 3 years, at the end of the statutory limitation period.

12. Data subjects’ rights

12.1 Right of access, Article 15 of the GDPR

You have the right to request information from us at any time regarding the data we hold about you, as well as its origin, the recipients or categories of recipients to whom this data is disclosed, and the purpose of its storage.

12.2 Right to withdraw consent, Article 7(3) of the GDPR

If you have given your consent to the use of your data, you may withdraw this consent at any time, with future effect and without giving reasons. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of that consent prior to its withdrawal. To do so, simply send an email to [email protected] or a written notification to Doghammer GmbH, Grubholzer Straße 12, 83026 Rosenheim.

12.3 Right to rectification, Article 16 of the GDPR

You may request the rectification of inaccurate data or the completion of your data held by us.

12.4 Right to erasure and restriction of processing, Articles 17 and 18 of the GDPR

You have the right to have your personal data stored by us restricted or erased. Should statutory retention obligations or other legally established grounds preclude erasure, only the restriction of your data may be carried out instead of erasure.

12.5 Right to data portability, Article 20 of the GDPR

Should you request the personal data you have provided to us, we will, if you so wish, provide or transfer the data to you or to another controller in a structured, commonly used and machine-readable format. However, the latter will only be done if it is technically feasible.

12.6 Right to object, Art. 21 GDPR

You have the right, on grounds relating to your particular situation, to object at any time, subject to the conditions set out in Article 21 of the GDPR, to the processing of personal data concerning you, provided that the data processing is carried out on the basis of our legitimate interests pursuant to Article 6(1)(f) of the GDPR.

12.7 Contact details for exercising data subject rights

To exercise your data subject rights, you may contact us by email at team[a]doghammer.de or by post at Doghammer GmbH, Grubholzer Straße 12, 83026 Rosenheim.

When you contact us, we will store the data you provide (your email address and, where applicable, your name and telephone number) in order to answer your questions or deal with your enquiry. We will delete the data collected in this context once storage is no longer necessary, or restrict its processing if statutory retention obligations apply.

13. Right to lodge a complaint with the supervisory authority, Article 77 of the GDPR

You have the right to lodge a complaint with the relevant supervisory authority regarding the processing of your personal data if you consider that your rights under the GDPR have been infringed.

14. Data transfer to affiliated companies

Where affiliated companies exist within the respective partner organisations, data may be transferred to them for operational reasons and to ensure IT operations and IT security.

The legal basis for this is Article 6(1)(f) of the GDPR.

15. Automated decision-making/profiling

We do not use automated decision-making or profiling (an automated analysis of your personal circumstances).

Date: January 2025