Privacy Policy
We are pleased about your visit to our website and your interest in our company. We view data protection as a customer-oriented quality feature. The protection of your personal data and the preservation of your personal rights are important to us.
With this privacy policy, we would like to inform all visitors to our website transparently about the type, scope, and purpose of the personal data we collect, use, and process, and to inform you about your rights.
Using our website is generally possible without providing personal data. However, if you wish to use services from our company via our website, the processing of your personal data may become necessary.
The data automatically collected when visiting our websites or the personal data you enter when using services will be processed in accordance with the current legal provisions for the protection of personal data.
If the processing of your personal data is necessary and there is no legal basis for such processing, we will generally obtain your consent for the necessary purpose of processing.
As the company responsible for processing, we have established technical and organizational measures to ensure a high level of protection for your personal data.
This page uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address bar of the browser changes from "http://" to "https://" and by the lock symbol in your browser bar.
When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
However, we would like to point out that data transmission over the Internet (e.g., when communicating via email) may have security vulnerabilities. A seamless protection of data against access by third parties is not possible.
If you wish to use services from our company and do not wish to use the method of data transmission over the World Wide Web, there is also the option of contacting us by phone.
1. Contact Details of the Controller
The responsible party in terms of the General Data Protection Regulation is:
DEQSTER GmbH
Friesenweg 5H
22763 Hamburg
Telefon: +49 40 734 486 1900
E-Mail: hallo@deqster.de
The following Data Protection Officer has been appointed:
Herr Stephan Hartinger
Coseco GmbH
Telefon: +49 8232 80988-70
E-Mail: datenschutz@coseco.de
2. Collection of General Access Information
ThiThis website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster's servers.
Our hoster will only process your data to the extent necessary to fulfill its performance obligations and will follow our instructions regarding this data.
We use the following host:
Company: Odoo S.A.
Street: Chaussée de Namur 40
Zip Code/City: 1367 Grand-Rosiere / Belgium
Tel.: +32 81 81 37 00
E-Mail: info@odoo.com
Every time our website is accessed, server log file information transmitted to us by your browser is automatically recorded. This includes:
IP address (Internet Protocol address) of the accessing computer
The website from which you are visiting us (referrer)
The website you are visiting on our platform
The date and duration of the visit
Browser type and browser settings
Operating system
Please note that this data cannot be assigned to a specific person. We use this technical access information exclusively for the following purposes:
To improve the attractiveness and usability of our websites,
To detect technical problems on our website at an early stage.
to deliver the content of our website correctly,
and to provide law enforcement authorities with the necessary information for prosecution in the event of a cyber attack.
As a technical precaution, this data is stored for a maximum of 7 days to protect the data processing systems against unauthorized access.
3. Collection and Disclosure of Personal Data
- We use your personal data only for the purposes stated on this data protection information page.
- The following input masks exist on our website for the collection of personal data:
- 3.1 Online shops (Odoo)
- We use the services of Odoo (Odoo S.A., Chaussée de Namur 40, 1367 Grand-Rosière, Belgium, hereinafter "Odoo") on our website.
- Odoo is used as an ERP and shop system to provide and operate our online shop. Via the online shop, users have the opportunity to inform themselves about our products, place orders, and use contractual services. Within the scope of using the online shop, we process personal data to the extent necessary for the initiation, conclusion, and execution of purchase contracts.
- If users create a customer account, the personal data provided during registration will be processed to set up and manage the customer account. This enables, in particular, a simplified processing of future orders, viewing past orders, and managing stored address data. The creation of a customer account is voluntary.
- As part of the ordering process, we process personal data to accept orders, conclude contracts, organize deliveries, create invoices, and communicate with customers regarding orders. Mandatory fields required for the conclusion of a purchase contract are marked accordingly. Without this information, an order cannot be processed.
- The processing of personal data is carried out for the purpose of providing the online shop, implementing pre-contractual measures, concluding and fulfilling purchase contracts, customer communication related to orders, and fulfilling statutory retention obligations. The legal basis for this processing is Art. 6(1)(b) GDPR. Insofar as legal obligations exist, the processing is also based on Art. 6(1)(c) GDPR.
- If Odoo receives access to personal data within the scope of technical provision, maintenance, or hosting, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR and exclusively according to our instructions. Personal data is only stored for as long as necessary for the stated purposes or as required by statutory retention periods. After the purpose of processing ceases to apply or the statutory periods expire, the data is deleted or blocked.
- Further information on data processing by Odoo can be found at:
- https://www.odoo.com/de_DE/privacy
- 3.2 Contacting via email
- We offer the option to contact us by email on our website. In this context, we process the personal data that you voluntarily transmit to us as part of your inquiry. This may include, in particular, information such as your name, contact details, company affiliation, and the content of your message.
- The processing of this data is carried out exclusively for the purpose of processing your inquiry and contacting the inquiring person.
- Data will not be passed on to third parties unless this is necessary to process the inquiry or a statutory obligation exists.
- The personal data you transmit will be deleted as soon as the purpose for storage ceases to apply and no statutory retention obligations conflict with this.
- 3.3 Sending newsletters
- We offer you the opportunity to subscribe to our newsletter on our website, through which we inform you at regular intervals about offers, products, and company information.
- To receive our newsletter, you need a valid email address.
- For the dispatch of a personalized newsletter, we require the following information from you:
- • Email address
- After submitting the registration, you will receive a confirmation email for legal reasons to complete your registration request for the newsletter subscription.
- The data mentioned here will be used exclusively for sending the newsletter.
- This personal data will not be disclosed to third parties.
- If we receive your email address in connection with the sale of a good or service and you have not objected to this, we reserve the right to regularly send you offers for similar products from our range by email.
- You have the option at any time to stop the dispatch by unsubscribing from the newsletter and to revoke your consent for the use of your data for newsletter dispatch. A corresponding link can be found in each newsletter.
4.Cookies
Our website uses so-called cookies in several places. If you would like detailed information about the cookies used or wish to make changes to your cookie settings, you can do so at any time using the cookie icon located at the bottom left edge of your screen.
5. Use and Application of Tracking and Analysis Tools
Our website currently does not use tracking or analysis tools
6. Use and Application of Social Plugins
6.1 LinkedIn
We use the social media channel LinkedIn of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, to communicate with interested parties, customers, and business partners, and to inform them about our company, our offerings, and current job openings.
When visiting our LinkedIn company page, LinkedIn processes users’ personal data under its own responsibility. In this context, usage and interaction data may be processed, for example, when content is accessed, commented on, or shared. LinkedIn provides us with anonymized and aggregated statistical evaluations (so-called "Page Insights") that do not allow conclusions to be drawn about individual persons. There is joint responsibility for the processing of Page Insights data between us and LinkedIn in accordance with Art. 26 GDPR.
If you contact us directly via LinkedIn, we process the personal data you provide solely for the purpose of handling your request and communicating with you. This data will not be shared with third parties.
The processing of personal data in connection with our LinkedIn presence is based on our legitimate interest in contemporary public relations and communication in accordance with Art. 6 para. 1 lit. f GDPR. If you voluntarily provide us with personal data via LinkedIn, the processing is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR.
LinkedIn may also transfer personal data to third countries, particularly to the USA. LinkedIn is certified under the EU-US Data Privacy Framework (DPF), ensuring an adequate level of data protection for data transfers to the USA in accordance with Art. 45 GDPR.
We delete the personal data processed by us via LinkedIn as soon as the purpose of processing ceases and there are no legal retention obligations to the contrary. The data processing by LinkedIn is subject to LinkedIn's privacy policies, including the retention periods specified there.
For more information on data processing by LinkedIn, please visit: https://www.linkedin.com/legal/privacy-policy
Information on objection and opt-out options can be found at: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
6.2. YouTube
We use the social media channel YouTube of YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, a subsidiary of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to inform about our company, our services, as well as current content and information in the form of video contributions.
Our website includes a YouTube icon that serves solely to link to our YouTube channel. When visiting our website, no automatic transmission of personal data to YouTube or Google occurs through this link. Data processing by YouTube only takes place when you click the corresponding link and access our YouTube channel.
In addition, we embed videos from the YouTube platform on our website. The videos are stored on YouTube's servers and are made directly accessible from our website. The embedding is done in a privacy-friendly manner. A connection to YouTube's servers is generally established only when you actively call up or play the respective video. Nevertheless, YouTube may already receive information when you visit a page where a video is embedded, indicating that you have visited the corresponding subpage of our website. Personal data, in particular your IP address, may be transmitted to YouTube.
When visiting our YouTube channel, YouTube processes users' personal data under its own responsibility. In this context, usage and interaction data may be processed, for example, when videos are accessed, commented on, or interacted with. If you are logged into Google or YouTube during your visit to our website or our YouTube channel, the collected information may be linked to your personal user account. If you do not wish for such a linkage, you must log out of your user account before accessing the corresponding content.
If you interact with our content on YouTube or comment on posts, we process the personal data you provide, such as your displayed username and the content of your comment, solely for the purpose of communication and interaction with you. This data will not be shared with third parties.
The processing of personal data in connection with our YouTube presence is based on our legitimate interest in contemporary public relations and communication in accordance with Art. 6 para. 1 lit. f GDPR. If consent to data processing is required in individual cases, it is based on Art. 6 para. 1 lit. a GDPR.
Google may also transfer personal data to third countries, particularly to the USA. Google is certified under the EU-US Data Privacy Framework (DPF), ensuring an adequate level of data protection for data transfers to the USA in accordance with Art. 45 GDPR.
We delete the personal data processed by us via YouTube as soon as the purpose of processing ceases and there are no legal retention obligations to the contrary. The data processing by YouTube is subject to Google's privacy policies, including the storage periods specified therein.
Further information on data processing by YouTube can be found at:
https://policies.google.com/privacy
Information on data protection and privacy settings can be found at:
https://privacy.google.com/take-control.html
Information on objection and setting options can be found at:
https://adssettings.google.com/authenticated
These texts are merely a first draft as a basis for the later privacy policy. The texts must be aligned with the actual services, integrations, and functions used on the website before publication and adjusted accordingly. Sections on services or functions that are not used must be removed or hidden before publication.
[FN2]We plan to run our videos directly through Odoo. If this is not possible, then only an embedding of YouTube on our website.
[SH3]If the videos are implemented via a YouTube plugin, we need the YouTube text; otherwise, the text can be removed.
7. Deletion, Blocking, and Duration of Storage of Personal Data
We process and store your personal data only for the period necessary to achieve the respective storage purpose or as provided for by the diverse retention periods stipulated by law.
After a storage purpose ceases to apply or after the expiry of the retention period stipulated by law, the personal data is routinely blocked or deleted for further processing in accordance with statutory regulations.
8. Data Protection Rights of the Affected Person
If you have questions about your personal data, you can contact us in writing at any time. Under the GDPR, you have the following rights:
• The right to access (Subpoint Art. 15 GDPR)
• The right to rectification (Art. 16 GDPR)
• The right to erasure / "right to be forgotten" (Art. 17 GDPR)
• The right to restriction of processing (Art. 18 GDPR)
• The right to data portability (Art. 20 GDPR)
• The right to object (Art. 21 GDPR)
• The right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR in conjunction with § 19 BDSG)
• The right to withdraw data protection consent at any time (Art. 7(3) GDPR)
9. Legal Basis for Processing
When processing personal data for which we obtain the consent of the data subject, Art. 6(1)(a) of the General Data Protection Regulation (GDPR) serves as the legal basis.
When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6(1)(b) GDPR serves as the legal basis. This regulation also covers processing operations necessary for the implementation of pre-contractual measures.
IInsofar as processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6(1)(c) GDPR serves as the legal basis.
If processing is necessary to protect a legitimate interest of our company or a third party, and the interests, fundamental rights, and freedoms of the data subject do not override the first-mentioned interest, Art. 6(1)(f) GDPR serves as the legal basis for the processing. The legitimate interest of our company lies in the performance of our business activities as well as in the analysis, optimization, and maintenance of the security of our online offer.
10. Transfer of data to third parties
We generally do not sell or rent user data. A transfer to third parties beyond the scope described in this privacy policy only takes place if this is necessary to process the respective requested service or if a legal obligation exists.
We only transfer data if there is a legal obligation to do so. This is particularly the case if government institutions (e.g., law enforcement authorities) request information in writing or a corresponding court order is available.
A transfer of personal data to so-called third countries outside the EU/EEA area generally does not take place. Insofar as a transfer to third countries can nevertheless take place within the scope of the services mentioned in this privacy policy, this is done exclusively in compliance with the requirements of Art. 44 et seq. GDPR and on the basis of appropriate safeguards, in particular by concluding standard contractual clauses of the European Commission.
11. Statutory or Contractual Provisions for Providing Personal Data; Consequences of Non-Provision
We hereby point out that the provision of personal data is required by law in certain cases (e.g., tax regulations) or may result from contractual arrangements (e.g., details of/about the contractual partner). For example, for the conclusion of a contract, it may be necessary for the data subject/contractual partner to provide their personal data so that their request (e.g., order) can be processed by us at all.
An obligation to provide personal data arises primarily when concluding contracts. If no personal data is provided in this case, the contract with the data subject cannot be concluded.
Before providing personal data, the data subject can contact our Data Protection Officer or the controller. The Data Protection Officer or the controller will then clarify to the data subject whether the provision of the required personal data is prescribed by law or contract, whether it is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data resulting from the data subject's request, and what consequences the non-provision of the requested data would have for the data subject.
12. Existence of Automated Decision-Making
As a responsible company, we do not use automated decision-making or profiling in our business relationships.
13. Additional information
In addition to these website-specific privacy notices, there is the option to view our transparent information.