Privacy Policy

domeba distribution GmbH takes the protection of your personal data very seriously and strictly adheres to the rules of data protection laws.

The use of our online offering is generally possible without providing personal data, but different rules may apply for the use of individual services. The following data protection declaration explains the type, scope and purpose of the processing of personal data (hereinafter also referred to as “data”) within our online offering and the associated websites, functions and content as well as external online presences, such as our social media profiles (hereinafter jointly referred to as “online offering”).

We would like to point out that internet-based data transmission has security gaps, meaning that complete protection against access by third parties is impossible.

Definitions

To define the terms used, such as “processing” or “controller”, we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).

Responsible

domeba GmbH
A4 GewerbeparkBornaer Str. 205D – 09114 ChemnitzPhone: +49 (0)371 4002080E-Mail: info@domeba.de

Contact the data protection officer

The data protection officer for domeba is:

Mr. Matthias Voh
domeba GmbHA4 GewerbeparkBornaer Str. 205D – 09114 ChemnitzE-Mail: datenschutz@domeba.deTelephone: 0371 4002080

Cookies

We use so-called cookies on our website to recognize repeated use of our service by the same user/internet connection owner. Cookies are small text files that your internet browser saves on your computer. They are used to optimize our website and our offers. These are mostly so-called “session cookies” that are deleted at the end of your visit.

However, some of these cookies provide information to automatically recognize you. This recognition is based on the IP address stored in the cookies. The information obtained in this way is used to optimize our offers and to give you easier access to our website.

You can prevent the installation of cookies in the privacy settings or by setting your browser accordingly. However, we would like to point out that in this case you may not be able to use all functions of our website to their full extent.

The legal basis for the use of cookies is your consent given in the data protection settings. No separate consent is required for technically necessary (essential) cookies.

Cookie Manager

To obtain consent to use cookies that are not technically necessary on the website, the provider uses a cookie manager.

When the website is accessed, a cookie with the setting information is stored on the user’s device so that the user does not have to provide consent on subsequent visits.

The cookie is required to obtain legally compliant consent from the user.

The user can prevent or stop the installation of cookies by adjusting his browser settings.

Server data

For technical reasons, the following data, which your Internet browser transmits to us or to our web space provider, is recorded (so-called server log files):

  • Browser type and version
  • operating system used
  • Website from which you visit us (referrer URL)
  • Website you visit
  • Date and time of your access
  • Your Internet Protocol (IP) address

This anonymous data is stored separately from any personal data you may have provided and therefore does not allow any conclusions to be drawn about a specific person.

This storage is carried out on the legal basis of Art. 6 Paragraph 1 Letter f) GDPR. Our legitimate interest lies in the improvement, stability, functionality and security of our website.

Compliance Letter (Newsletter)

If you would like to receive the compliance letter offered on the website, we require your name and title, a valid email address and information that allows us to verify that you are the owner of the email address provided or that the owner agrees to receive the newsletter. No further data is collected. You can revoke your consent to the storage of the data, the email address and their use to send the newsletter at any time.

Registration for our Compliance Letter is carried out using a so-called double opt-in process. This means that after registration you will receive an email asking you to confirm your registration. This confirmation is necessary so that no one can register using someone else’s email address. Registrations for the Compliance Letter are logged in order to be able to prove the registration process in accordance with legal requirements. This includes storing the time of registration and confirmation, as well as the IP address. Changes to your data stored by the shipping service provider are also logged.

Contact option

On our website we offer you the opportunity to contact us by email or via a contact form. In this case, the information you provide will be stored for the purpose of processing your contact request. It will not be passed on to third parties. The data collected in this way will also not be compared with data that may be collected by other components of our website.

Your data may be stored in a customer relationship management system (“CRM system”) or similar systems. Your data will be deleted from these systems if they are no longer required.

Service Desk

On our website we offer you the opportunity to contact our service desk directly with your request. If you want to use this option, we will collect your name and contact details, your company and information about the type, reproducibility and priority of your described problem. This data is collected and processed for the purpose of establishing contact in the context of problem processing as well as for the associated internal documentation and, if applicable, billing.

Your data may be stored in a customer relationship management system (“CRM system”) or similar systems. Your data will be deleted from these systems if they are no longer required.

When making a Service Desk request, please ensure that the personal data transferred is kept to a necessary minimum. It is your responsibility to ensure that you are authorized to transfer this personal data.

Webinar registration

On our website we offer you the opportunity to register for various webinars on the topic of compliance management. If you want to use this option, we will collect your name and contact details, your company and information about which webinars you want to register for. This data is collected for the purpose of contacting you during the webinar and for the associated reminder functions (e.g. reminder email two days before the start of the event).

Registration for our webinars is done using a so-called double opt-in process. This means that after registering, you will receive an email asking you to confirm your registration. This confirmation is necessary so that no one can register using someone else’s email address. Registrations for the webinars are logged in order to be able to prove the registration process in accordance with legal requirements. This includes storing the time of registration and confirmation, as well as the IP address. Changes to your data stored by the shipping service provider are also logged.

Test systems

On our website we offer you the opportunity to register for an iManSys test system. If you want to use this option, we will collect your name and contact details, your region for the allocation of sales areas, your company including the number of employees and your position in the company in order to be able to offer you consulting services optimized for your industry and your application, and possibly a message from you to us. We use your data to activate your test access and to set up your associated user, as well as to contact you in order to be able to advise you as part of the test process.

Your data may be stored in a customer relationship management system (“CRM system”) or similar systems. Your data will be deleted from these systems if they are no longer required.

When using the test systems, please note that it is up to you whether and which personal data you enter into these systems. When using real data, please ensure that you are authorized to use this data. Please also note that domeba employees have access to your test system to ensure optimal advice. For more information on data security and data protection for test systems, please contact us.

Registration for our test systems is carried out using a so-called double opt-in process. This means that after registration you will receive an email asking you to confirm your registration. This confirmation is necessary so that no one can register using someone else’s email address. Registrations for the webinars are logged in order to be able to prove the registration process in accordance with legal requirements. This includes storing the time of registration and confirmation, as well as the IP address. Changes to your data stored by the shipping service provider are also logged.

Usage analysis with Matomo

This website uses Matomo, an open source software for statistical analysis of visitor access. Matomo uses so-called “cookies”, text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is stored on our server in Germany. The IP address is anonymized immediately after processing and before it is saved. You can prevent the installation of cookies in the data protection settings or by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

Use of Google Adwords

We use the Google advertising tool “Google Adwords” to promote our website. As part of this, we use the analysis service “Conversion Tracking” from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter “Google”. If you have reached our website via a Google ad, a cookie will be stored on your computer. Cookies are small text files that your Internet browser stores on your computer. These so-called “conversion cookies” expire after 30 days and are not used to personally identify you. If you visit certain pages on our website and the cookie has not yet expired, we and Google can recognize that you as a user have clicked on one of our ads placed on Google and were redirected to our page.

The information obtained using “conversion cookies” is used by Google to compile visit statistics for our website. These statistics tell us the total number of users who clicked on our advert and which pages of our website were subsequently accessed by the respective user. However, we and other advertisers using “Google Adwords” do not receive any information that could be used to personally identify users.

You can prevent the installation of “conversion cookies” in the privacy settings or by setting your browser accordingly, for example by using a browser setting that generally deactivates the automatic setting of cookies or specifically blocks only cookies from the domain “googleadservices.com”.

Microsoft Bing Ads

We use Bing Ads for remarketing and conversion tracking on our website. This is a service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052 – 6399, USA, hereinafter referred to as “Microsoft”, which uses so-called Universal Event Tracking (UEN).

If you have given your consent for this processing, the legal basis is Art. 6 (1) (a) GDPR. The legal basis can also be Art. 6 (1) (f) GDPR. Our legitimate interest lies in the analysis, optimization and economic operation of our website.

If you click on an advert placed by us on the Internet search engine “Bing”, Microsoft will store a cookie for tracking functionality on your device via your Internet browser. This tracking cookie expires after 180 days and is not used to identify you personally. If you visit certain pages on our website and the cookie has not yet expired, both Microsoft and we can recognise that you have clicked on an advert placed by us on Bing and have been redirected from there to our website.

Microsoft uses the information collected by the tracking cookie to create visit statistics for us. This gives us information about the number of times the advertisements we place on Bing are accessed, as well as the pages of our website that were subsequently accessed. However, we do not receive any information that would enable us to identify you personally.

In addition, Microsoft may be able to track your user behavior across multiple devices using so-called cross-device tracking. This enables Microsoft to show you personalized advertising across devices.

If you do not agree to this processing, you have the option of preventing the installation of cookies by selecting the appropriate settings on your Internet browser. You can find details about this above under the heading “Cookies”.

If you have a Microsoft account, you can also change your settings for personalized advertising at http://choice.microsoft.com/de-de/opt-out.

Microsoft also offers further information about Bing Ads, the collection and use of data, and your rights and options for protecting your privacy at https://help.bingads.microsoft.com/#apex/3/de/53056/2 and at https://privacy.microsoft.com/de-de/privacystatement.

HubSpot

This website uses HubSpot, a software from HubSpot Inc., USA. This is an integrated software solution that we use to optimize our online marketing.

HubSpot uses so-called cookies (see the Cookies section). You can prevent the installation of cookies in the privacy settings or by setting your browser accordingly. However, we would like to point out that in this case you may not be able to use all functions of our website to their full extent.

For more information about HubSpot Inc.’s terms of use and privacy policy, please visit http://www.hubspot.com/terms-of-service and http://www.hubspot.com/privacy-policy . All information we collect is subject to this privacy policy and is used solely to optimize our marketing activities.

If you do not wish the information about your visit to be used for the purposes described, you can prevent the storage of cookies at any time by adjusting your browser settings accordingly.

LinkedIn

We maintain an online presence on LinkedIn to present our company and our services and to communicate with customers/prospects. LinkedIn is a service of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, a subsidiary of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA.

In this respect, we would like to point out that it is possible that user data may be processed outside the European Union, particularly in the USA. This may result in increased risks for users, as it may, for example, make it more difficult to access user data at a later date. We also have no access to this user data. Access is only possible through LinkedIn.

LinkedIn’s privacy policy can be found at: https://www.linkedin.com/legal/privacy-policy

Use of LinkedIn Insight

We use the LinkedIn Insight tool for conversion tracking of campaigns run on our LinkedIn presence.

The LinkedIn Insight Tag (or the analogous action-specific image pixel) enables the collection of data on website visits including URL, referrer URL, IP address, user agent and timestamp. The IP addresses are shortened or (if used to reach members across devices) hashed. The direct identifiers of the members are removed within seven days to pseudonymize the data. This remaining pseudonymized data is then deleted within 180 days.

LinkedIn does not share any personal data with us, but only provides reports (in which you are not identified) about website audience and ad performance. You can control the use of your personal data for advertising purposes in your account settings.

Facebook

We maintain an online presence on XING to present our company and our services and to communicate with customers/prospects. XING is a service of New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany.

You can find XING’s privacy policy at: https://privacy.xing.com/de/datenschutzerklaerung/druckversion

YouTube

We maintain an online presence on YouTube to present our company and our services and to communicate with customers/prospects. YouTube is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA.

In this respect, we would like to point out that it is possible that user data may be processed outside the European Union, particularly in the USA. This may result in increased risks for users, as it may, for example, make it more difficult to access user data at a later date. We also have no access to this user data. Access is only possible via YouTube.

You can find YouTube’s privacy policy at https://policies.google.com/privacy

X (formerly Twitter)

We maintain an online presence on Twitter to present our company and our services and to communicate with customers/prospects. Twitter is a service of Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, IRELAND.

In this respect, we would like to point out that it is possible that user data may be processed outside the European Union, particularly in the USA. This may result in increased risks for users, as it may, for example, make it more difficult to access user data at a later date. We also have no access to this user data. Access is only possible with Twitter.

Twitter’s privacy policy can be found at https://twitter.com/de/privacy

Facebook

To promote our products and services and to communicate with interested parties or customers, we maintain a company presence on the
Facebook platform.

On this social media platform we are jointly responsible with Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

Facebook’s data protection officer can be reached via a contact form: https://www.facebook.com/help/contact/540977946302970

We have regulated the joint responsibility in an agreement regarding the respective obligations within the meaning of the GDPR. This agreement, from which the mutual obligations arise, can be accessed under the following link: https://www.facebook.com/legal/terms/page_controller_addendum

The legal basis for the resulting processing of personal data as reproduced below is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the analysis, communication, sale and promotion of our products and services.

The legal basis can also be the user’s consent to the platform operator in accordance with Art. 6 (1) (a) GDPR. The user can revoke this consent for the future at any time by notifying the platform operator in accordance with Art. 7 (3) GDPR.

When you access our online presence on the Facebook platform, Facebook Ireland Ltd., as the operator of the platform in the EU, processes user data (e.g. personal information, IP address, etc.).

This user data is used to provide statistical information about the use of our company presence on Facebook. Facebook Ireland Ltd. uses this data for market research and advertising purposes as well as to create user profiles. Based on these profiles, Facebook Ireland Ltd. is able, for example, to advertise to users within and outside of Facebook based on their interests. If the user is logged into their Facebook account at the time of the visit, Facebook Ireland Ltd. can also link the data to the respective user account.

If the user contacts us via Facebook, the personal data entered by the user on this occasion will be used to process the request. The user’s data will be deleted by us if the user’s request has been answered conclusively and there are no statutory retention periods, such as in the case of subsequent contract processing, that prevent this.

Facebook Ireland Ltd. may also set cookies to process the data.

If the user does not agree to this processing, it is possible to prevent the installation of cookies by setting the browser accordingly. Cookies that have already been saved can also be deleted at any time. The settings for this depend on the respective browser. In the case of Flash cookies, processing cannot be prevented via the browser settings, but by setting the Flash player accordingly. If the user prevents or restricts the installation of cookies, this may mean that not all Facebook functions can be used to their full extent.

Further information on the processing activities, their prevention and the deletion of data processed by Facebook can be found in Facebook’s data policy: https://www.facebook.com/privacy/explanation

It cannot be ruled out that processing by Meta Platforms Ireland Limited may also be carried out via Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA.

Instagram

To promote our products and services and to communicate with interested parties or customers, we maintain a company presence on the
Instagram platform.

On this social media platform we are jointly responsible with Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

Instagram’s data protection officer can be reached via a contact form:

https://www.facebook.com/help/contact/540977946302970

We have regulated the joint responsibility in an agreement regarding the respective obligations within the meaning of the GDPR. This
agreement, from which the mutual obligations arise, can be accessed under the following link:

https://www.facebook.com/legal/terms/page_controller_addendum

The legal basis for the resulting processing of personal data as reproduced below is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the analysis, communication, sale and promotion of our products and services.

The legal basis can also be the user’s consent to the platform operator in accordance with Art. 6 (1) (a) GDPR. The user can revoke this consent
for the future at any time by notifying the platform operator in accordance with Art. 7 (3) GDPR .

When you access our online presence on the Instagram platform, Facebook Ireland Ltd., as the operator of the platform in the EU,
processes user data (e.g. personal information, IP address, etc.).

This user data is used to provide statistical information about the use of our company presence on Instagram. Facebook Ireland Ltd. uses this data for market research and advertising purposes as well as to create user profiles. Based on these profiles, Facebook Ireland Ltd. is able, for example, to advertise to users within and outside of Instagram based on their interests. If the user is logged into their Instagram account at the time of the visit, Facebook Ireland Ltd. can also link the data to the respective user account.

If the user contacts us via Instagram, the personal data entered by the user on this occasion will be
used to process the request. The user’s data will be deleted by us if the user’s request has been conclusively answered and there are no statutory retention periods, such as in the case of subsequent contract processing, that prevent this.

Facebook Ireland Ltd. may also set cookies to process the data.

If the user does not agree to this processing, it is possible to prevent the installation of cookies by setting the browser accordingly. Cookies that have already been saved can also be deleted at any time. The settings for this depend on the respective browser. In the case of Flash cookies, processing cannot be prevented via the browser settings, but by setting the Flash player accordingly. If the user prevents or restricts the installation of cookies, this may mean that not all Facebook functions can be used to their full extent.

Further information on the processing activities, their prevention and the deletion of data processed by Instagram can be found in
Instagram’s data policy:

https://help.instagram.com/519522125107875

It cannot be ruled out that processing by Facebook Ireland Ltd. may also be carried out via Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA.

Social media linking via graphic or text link

We also advertise presences on the social networks listed below on our website. The integration is done via a linked graphic of the respective network. Using this linked graphic prevents a connection to the respective server of the social network from being automatically established when a website that has a social media advertisement is accessed in order to display a graphic of the respective network itself. Only by clicking on the corresponding graphic is the user redirected to the service of the respective social network.

After the user has been redirected, information about the user is collected by the respective network. It cannot be ruled out that the data collected in this way will be processed in the USA.

This is initially data such as IP address, date, time and page visited. If the user is logged into their user account on the respective network, the network operator may be able to assign the information collected from the user’s specific visit to the user’s personal account. If the user interacts via a “Share” button on the respective network, this information may be saved in the user’s personal user account and may be published. If the user wants to prevent the information collected from being directly assigned to their user account, they must log out before clicking on the graphic. It is also possible to configure the respective user account accordingly.

The following social networks are integrated into our site by links:

LinkedIn

LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, a subsidiary of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085 USA.
Privacy Policy: https://www.linkedin.com/legal/privacy-policy

Facebook

New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany
Privacy Policy: https://privacy.xing.com/de/datenschutzerklaerung/druckversion

X (formerly Twitter)

Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, IRELAND
Privacy Policy: https://twitter.com/privacy

Instagram

Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

Privacy Policy: https://help.instagram.com/519522125107875

YouTube

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA
Privacy Policy: https://policies.google.com/privacy

OpenStreetMap

For directions we use OpenStreetMap, a service of the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB 4 0 WS, United Kingdom, hereinafter referred to as “OpenStreetMap”.

When you visit one of our websites in which the OpenStreetMap service is integrated, OpenStreetMap stores a cookie on your device via your internet browser. This means that your user settings and user data are processed for the purpose of displaying the page or to ensure the functionality of the OpenStreetMap service. Through this processing, OpenStreetMap can recognize which website your request was sent from and to which IP address the route description should be sent.

If you have given your consent for this processing, the legal basis is Art. 6 (1) (a) GDPR. The legal basis can also be Art. 6 (1) (f) GDPR. Our legitimate interest lies in the optimization and economic operation of our website.

If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your Internet browser.

OpenStreetMap offers further information on the collection and use of data as well as your rights and options for protecting your privacy at https://wiki.osmfoundation.org/wiki/Privacy_Policy .

Rights of the data subject

a. Information

You have the right to obtain information about your personal data processed by us and to request access to your personal data and/or copies of this data. This includes information about the purpose of use, the category of data used, its recipients and those authorized to access it and, if possible, the planned duration of data storage or, if this is not possible, the criteria for determining this duration.

b. Correction

You have the right to request that we immediately correct any inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to request that incomplete personal data be completed – also by means of a supplementary statement.

c. Right to object

To the extent that the processing of personal data concerning you is based on Art. 6 (1) (f) GDPR, you have the right to object to the processing of this data at any time for reasons arising from your particular situation. We will then no longer process this personal data unless we can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

d. Right of withdrawal

If the processing is based on consent, you have the right to withdraw your consent at any time without affecting the legality of the processing carried out on the basis of the consent until the withdrawal. To do so, you can contact us or our data protection officer at any time using the details provided above.

e. Right to erasure

You have the right to request that we erase personal data concerning you without undue delay and we are obliged to erase personal data without undue delay where one of the following reasons applies:

  • The personal data are no longer necessary for the purposes for which they were collected or otherwise processed
  • You object to the processing and there are no overriding legitimate grounds for the processing.
  • The personal data were processed unlawfully.
  • The erasure of personal data is necessary to fulfill a legal obligation under Union or Member State law to which we are subject.

This does not apply if the processing is necessary

  • to fulfill a legal obligation which requires processing by Union or Member State law to which we are subject.
  • to assert, exercise or defend legal claims

f. Right to restriction of processing

You have the right to request that we restrict processing if one of the following conditions applies:

  • the accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data,
  • the processing is unlawful and you oppose the erasure of the personal data and request the restriction of the use of the personal data instead
  • we no longer need the personal data for the purposes of processing, but you require it to assert, exercise or defend legal claims, or you have objected to processing pending the verification whether our legitimate grounds outweigh yours.

If processing has been restricted, these personal data may – with the exception of storage – only be processed with your consent or for the establishment, exercise or defense of legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State. If you have obtained a restriction on processing, we will inform you before the restriction is lifted.

g. Right to complain

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or place of the alleged infringement if you consider that the processing of personal data concerning you infringes the GDPR.

Changes to the privacy policy

We reserve the right to change this privacy policy in compliance with data protection regulations. You can find the current version here.

This declaration uses excerpts from the model data protection declaration of the law firm Weiß & Partner and the model data protection declaration of StepStone.