Privat Policy
Privat Policy
Privat Policy - Website
1. Data Protection at a Glance
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with applicable data protection regulations and this privacy policy.
Data controller: Dritte Dimension Werk Sachsen UG (haftungsbeschränkt), Moritzburger Str. 58, 01689 Weinböhla, Germany
Email: info@ddw-sachsen.de
Managing Director: Mirko Döring
2. Hosting and Technical Provision (Shopify & netcup)
Our online shop uses the services of two specialised partners to ensure its secure and reliable operation:
E-commerce platform: Our shop is technically hosted by Shopify International Limited (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland). Shopify provides the software infrastructure that enables us to sell our products. Your data is processed on Shopify's servers, and may be transferred to Shopify Inc. (Canada) and Shopify Data Processing (USA). A Data Processing Addendum is part of our agreement with Shopify.
Domain hosting and email service: Domain DNS management and email services are provided by netcup GmbH (Daimlerstraße 25, 76185 Karlsruhe, Germany). A Data Processing Agreement (DPA) in accordance with Art. 28 GDPR has been concluded with netcup GmbH.
Legal basis: The use of these service providers is based on Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(f) GDPR (legitimate interest in technically sound and secure operation).
3. Data Collection in the Online Shop
Customer account (registration)
You may create a customer account in our shop to simplify future orders. We store your name, address, email address and order history.
- Legal basis: Art. 6(1)(b) GDPR. You may request deletion of your account at any time.
Payment processing
We offer exclusively advance payment by bank transfer or cash payment upon collection. We do not collect or store credit card data or data from external payment service providers. Your bank details from transfers are retained solely in compliance with statutory accounting obligations.
Shipping (Sendcloud)
For delivery and shipment tracking, we use the shipping platform Sendcloud (Sendcloud B.V., Eindhoven, Netherlands). We pass your name and address to Sendcloud to generate shipping labels for carriers (e.g. DHL, DPD or Hermes). Your email address is shared for tracking purposes only if you explicitly select this option during the ordering process (Art. 6(1)(a) GDPR).
4. Shopify Analytics (Internal Statistics)
We use Shopify's analytics tools to obtain statistical data about the usage of our shop (e.g. number of visits, most viewed products).
- Scope: Data collected includes device type, IP address (usually anonymised) and interactions within the shop.
- Purpose: Optimisation of our offer and error analysis.
- Legal basis: Our legitimate interest in the needs-based design and improvement of our online offer pursuant to Art. 6(1)(f) GDPR.
5. Cookies and Server Log Files
Shopify uses technically necessary cookies (e.g. for the shopping cart and login security). These are exempt from the consent requirement under applicable law, as they are strictly necessary for the operation of the service. In addition, server log files (IP address, browser type, timestamp) are automatically recorded by the hosting provider to ensure system security.
6. Your Rights
You have the right at any time to:
- Access (Art. 15 GDPR) to the data stored about you.
- Rectification (Art. 16 GDPR) of inaccurate data or erasure (Art. 17 GDPR).
- Object (Art. 21 GDPR) to the processing of your data on the basis of legitimate interest.
- Right to lodge a complaint: You may lodge a complaint with the competent supervisory authority. The supervisory authority responsible for our company is the Saxon Data Protection Commissioner (Sächsischer Datenschutzbeauftragter), Germany. Customers from other EU member states may also contact the supervisory authority in their country of residence.
7. Contact
For questions regarding data protection, please contact us by email: info@ddw-sachsen.de
Privat Policy - Facebook
1. Data Controllers
Two parties are jointly responsible for data protection in connection with our Facebook page:
Page operator: Dritte Dimension Werk Sachsen UG (haftungsbeschränkt), Moritzburger Str. 58, 01689 Weinböhla, Germany, Email: info@ddw-sachsen.de, Managing Director: Mirko Döring
Platform operator: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter 'Meta').
In accordance with the ruling of the European Court of Justice (ECJ, C-210/16) and the GDPR, we as page operator are jointly responsible with Meta for the processing of personal data on this page (Art. 26 GDPR). Meta has published a Joint Controller Addendum (Page Controller Addendum) for this purpose, which we as page operator have agreed to. It is available at: https://www.facebook.com/legal/terms/page_controller_addendum
2. What data is processed?
When you visit or interact with our Facebook page, Meta processes the following data:
- Profile information (name, profile picture, public details), if you are logged in
- Interactions with our page (likes, comments, shared posts)
- Technical data (IP address, device information, browser type, timestamp)
- Messages you send us via Facebook Messenger
3. Facebook Insights (Page Statistics)
Meta provides us as page operator with anonymised statistical data about the use of our page (so-called 'Insights'). These statistics include, for example, post reach, visitor demographics and interaction rates. We do not receive any individual personal data – the evaluation is carried out exclusively in aggregated, anonymised form.
Purpose: Optimisation of our content and better understanding of our target audience.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in targeted communication with our audience). The data processing for creating Insights is carried out primarily by Meta; we have no direct influence over this.
4. Messenger Communication
If you contact us via Facebook Messenger, your messages and profile information are processed by Meta and made accessible to us. We use Messenger exclusively to respond to customer enquiries.
Purpose: Customer communication and responding to enquiries.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures / initiation of a contract) or Art. 6(1)(f) GDPR (legitimate interest in direct customer communication).
Please note: Facebook Messenger is not an encrypted communication channel. For sensitive enquiries, we recommend contacting us by email: info@ddw-sachsen.de
5. Data Processing by Meta
Meta processes your data on the basis of its own privacy policy, over which we as page operator have no influence. Information on data processing by Meta can be found at:
- Meta Privacy Policy: https://www.facebook.com/privacy/policy
- Cookie Policy: https://www.facebook.com/policies/cookies
- Privacy settings for your Facebook account: https://www.facebook.com/settings?tab=privacy
Meta may also transfer data to the USA. For this purpose, Meta uses Standard Contractual Clauses (SCCs) pursuant to Art. 46 GDPR as an appropriate safeguard.
6. Your Rights
You have the following rights against us and Meta:
- Access (Art. 15 GDPR) to the data stored about you (e.g. Messenger messages).
- Rectification (Art. 16 GDPR) of inaccurate data or erasure (Art. 17 GDPR).
- Object (Art. 21 GDPR) to processing based on legitimate interests.
- Right to lodge a complaint: You may lodge a complaint with the competent supervisory authority. For our company this is the Saxon Data Protection Commissioner (Sächsischer Datenschutzbeauftragter), Germany. Customers from other EU member states may also contact the supervisory authority in their country of residence. For complaints against Meta, the competent authority is the Irish Data Protection Commission, Dublin.
7. Contact
info@ddw-sachsen.de
For enquiries regarding data processing by Meta, please contact Meta Platforms Ireland Limited directly or use Meta's privacy contact form at: https://www.facebook.com/help/contact/540977946302970