Last Updated: June 1, 2023
Welcome to Daphnee GmbH's website. We appreciate your interest in our company and services. Protecting your privacy is a priority for us. This policy informs you about the collection, processing, and use of your data in compliance with data protection laws.
Our policy aims to be simple and understandable, primarily using terms from the General Data Protection Regulation (GDPR). These terms are defined in Article 4 of the GDPR.
Data Processing on Website Visit
When visiting our website, data is transmitted via your internet browser to our server. The following data is recorded during an ongoing connection for communication:
- Date and time of request
- Name of the requested file
- Page from which the file was requested
- Access status
- Web browser and operating system used
- Full IP address of the requesting computer
- Amount of data transferred
These data are collected to ensure a smooth website connection and user-friendly experience, and for evaluating system security and administrative purposes. The legal basis for data storage is Art. 6 (1) lit. f GDPR.
Contact Form and Email Contact
Data provided in contact forms or emails, including name, title, and email address, are stored for processing inquiries and follow-up questions. Providing an email address is mandatory, while providing a name and phone number is optional. This data is not shared without your consent. The legal basis for processing is our legitimate interest in responding to your inquiries under Art. 6 (1) lit. f GDPR and Art. 6 (1) lit. b GDPR if it relates to contract initiation. Data is deleted after the inquiry is resolved, unless legal storage obligations apply.
Data Transfer and Recipients
Your personal data is not transferred to third parties, except:
As explicitly stated in the data processing description
With your express consent under Art. 6 (1) S. 1 lit. a GDPR
If necessary for legal claims under Art. 6 (1) S. 1 lit. f GDPR and there is no overriding interest in non-disclosure
If there is a legal obligation for transfer under Art. 6 (1) S. 1 lit. c GDPR
If necessary for contract processing with you under Art. 6 (1) S. 1 lit. b GDPR
We use external service providers for website hosting, email sending, and IT system maintenance, who are contractually bound and regularly monitored.
We take suitable technical and organizational measures in accordance with Art. 32 GDPR, considering technology standards, implementation costs, nature, scope, context, and purposes of processing, as well as the varying likelihood and severity of risks to individuals' rights and freedoms. Our website uses SSL encryption for security and protection of confidential content.
Storage Duration of Personal Data
The storage duration is determined by legal retention periods. Data necessary for contract fulfillment or initiation or where there is a legitimate interest in storage will be deleted unless you exercise your right to withdraw consent or to object to data processing.
You have the following rights under data protection laws:
- Right to request information about your personal data processed by us as per Art. 15 GDPR.
- Right to request correction of incorrect personal data stored by us as per Art. 16 GDPR.
- Right to request deletion of your data stored by us as per Art. 17 GDPR, unless processing is necessary for exercising the right of freedom of expression, for compliance with a legal obligation, for public interest, or for asserting, exercising, or defending legal claims.
- Right to restrict processing of your data as per Art. 18 GDPR if you dispute the accuracy of the data, the processing is unlawful, or we no longer need the data.
- Right to data portability as per Art. 20 GDPR.
- Right to lodge a complaint with a supervisory authority as per Art. 77 GDPR.
- Right to withdraw consent at any time as per Art. 7 (3) GDPR.
If data is processed based on legitimate interests as per Art. 6 (1) S. 1 lit. f GDPR, you have the right to object to the processing of your personal data under Art. 21 GDPR.