Privacy Notice pursuant to Art. 13 of the GDPR
Name and Address of the Data Controller
The data controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection laws is:
Dinzl Ordnungstechnik GmbH
Industriestraße 1
91583 Schillingsfürst
Germany
Phone: +49 (0) 9868/76-0
Fax: +49 (0) 9868/76-66
Email: info@dinzl.de
Managing Directors: Peter Dinzl, Dietmar Andörfer, Christoph Dinzl
Commercial Register Entry: HRB Ansbach 96
Name and address of the Data Protection Officer
The Data Protection Officer of the controller is:
IPEXX Systems GmbH & Co KG
– Data Protection Officer –
Industriestraße 14
91637 Wörnitz
Germany
Email: datenschutz@dinzl.de
General Information on Data Processing
Legal Basis for the Processing of Personal Data
In accordance with Article 13 of the GDPR, we are providing you with the legal bases for our data processing activities. Unless the legal basis is specifically stated in the privacy notice, the following applies:
The legal basis for obtaining consent is Article 6(1)(a) in conjunction with Article 7 of the GDPR. The legal basis for processing data to fulfill our services, carry out contractual obligations, and respond to inquiries is Article 6(1)(b) of the GDPR. The legal basis for processing to fulfill our legal obligations is Article 6(1)(c) of the GDPR. If the processing of your data is necessary to safeguard a legitimate interest of our company or a third party, and the interests, fundamental rights, and fundamental freedoms of the data subject do not override the aforementioned interest, then Article 6(1)(f) of the GDPR serves as the legal basis for the processing. In the event that vital interests of the data subject or another natural person necessitate the processing of personal data, Article 6(1)(d) of the GDPR serves as the legal basis.
Data Deletion and Retention Periods
We adhere to the principles of data minimization pursuant to Article 5(1)(c) of the GDPR and data retention limits pursuant to Article 5(1)(e) of the GDPR. We store your personal data only for as long as is necessary to achieve the purposes stated here or as required by the retention periods established by law. Once the respective purpose no longer applies or once these retention periods have expired, the corresponding data will be deleted as soon as possible.
External Links
This website may contain links to third-party websites or to other websites under our control. If you follow a link to a website outside our control, please note that these websites have their own privacy policies. We assume no responsibility or liability for these third-party websites or their privacy policies. Therefore, before using these websites, please check whether you agree with their privacy policies.
You can recognize external links by the fact that they are displayed in a color slightly different from the rest of the text or are underlined. Your cursor will highlight external links when you move it over such a link.
​
Please also note that certain links may result in the transfer of data outside the European Economic Area. This could allow foreign authorities to access your data. You may not have any legal remedies against such access to your data. If you do not want your personal data to be transferred to the link’s destination or to be exposed to unwanted access by foreign authorities, please do not click on any links.
Rights of the Data Subject
As a data subject under the GDPR, you have the right to exercise various rights. The rights of data subjects arising from the GDPR include the right of access (Article 15), the right to rectification (Article 16), the right to erasure (Article 17), the right to restriction of processing (Article 18), the right to object (Article 21), the right to file a complaint with a supervisory authority, and the right to data portability (Article 20).
​
Right to Withdraw Consent:
Some data processing activities can only take place with your explicit consent. You may withdraw your consent at any time. However, this does not affect the lawfulness of the data processing that took place prior to the withdrawal.
​
Right to Object:
If the processing is based on Article 6(1)(e) or (f) of the GDPR, you, as the data subject, may object at any time to the processing of your personal data for reasons arising from your specific situation. You also have this right in the case of profiling based on these provisions within the meaning of Article 4(4) of the GDPR. Unless we can demonstrate a legitimate interest in the processing that outweighs your interests, rights, and freedoms, or unless the processing serves to assert, exercise, or defend legal claims, we will cease processing your data once you have objected.
If the processing of personal data is used for direct marketing purposes, you also have the right to object at any time. The same applies to profiling related to direct marketing. In this case as well, we will no longer process your personal data once you object.
​
Right to File a Complaint with a Supervisory Authority:
If you believe that the processing of your personal data violates the GDPR, you have the right to file a complaint with a supervisory authority—in particular in the Member State of your residence, your workplace, or the location of the alleged infringement.
Right to Data Portability:
If your data is processed automatically based on your consent or to fulfill a contract, you have the right to receive this data in a structured, commonly used, and machine-readable format. You also have the right to request that the data be transferred and made available to another data controller, provided this is technically feasible.
​
Right of Access, Rectification, and Erasure:
You have the right to obtain information about your processed personal data, including the purpose of the data processing, the
categories of data, the recipients, and the duration of storage. If you have any questions on this topic or on other matters related to personal data, you are welcome to contact us using the contact information provided in the Legal Notice.
​​
Right to Restriction of Processing:
You may request the restriction of the processing of your personal data at any time. To do so, you must meet one of the following conditions:
-
You contest the accuracy of the personal data. For the duration of the verification of its accuracy, you have the right to request a restriction of processing.
-
If the processing is unlawful, you may request that the use of the data be restricted as an alternative to erasure.
-
If we no longer need your personal data for the purposes of processing, but you need the data to assert, exercise, or defend legal claims, you may, as an alternative to erasure, request that processing be restricted.
-
If you object to the processing pursuant to Article 21(1) of the GDPR, a balancing of your interests against ours will be conducted. Until this balancing is completed, you have the right to request the restriction of processing.
​
Restriction of processing means that, apart from storage, personal data may only be processed with another natural or legal person, or for reasons of an important public interest of the Union, or with your consent, or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of a Member State.
Website Hosting (Web Host)
We host our website using the services of Wix.com.
The provider is Wix.com Luxembourg S.à r.l., 5, rue Guillaume Kroll, L-1882 Luxembourg (hereinafter: "Wix").
Wix is a Content Management System (CMS) that provides the technical infrastructure required to run and display our website. When you visit our website, Wix automatically collects server log files (e.g., IP address, date and time of access, browser type). This is technically necessary to display the website to you in a secure and stable manner.
Legal Basis: The use of Wix is based on Art. 6 (1) (f) GDPR. We have a legitimate interest in ensuring that our website is presented as reliably and securely as possible. If a corresponding consent was requested, processing takes place exclusively on the basis of Art. 6 (1) (a) GDPR; consent can be revoked at any time.
Data Processing Agreement: We have entered into a Data Processing Agreement (DPA) with Wix. This ensures that Wix processes the data of our website visitors solely in accordance with our instructions and in compliance with the GDPR.
​
Technically Necessary Cookies and System Storage (Wix)
Our website uses technically necessary data and cookies that are strictly required for the secure and stable operation of the platform (Legal basis: Art. 6 (1) (f) GDPR; legitimate interest in the IT security and error-free presentation of our services). The following internal first-party elements are loaded for the duration of the session:
-
XSRF-TOKEN: A security token used to protect against Cross-Site Request Forgery attacks (protection against tampering in form inputs).
-
server-session-bind: Used for stability and load balancing to direct user requests to the correct background server.
-
mpaSessionId: Used by internal Wix applications to maintain the visitor's state (e.g., page navigation or app interactions) during a session.
Consent via the cookie banner is not required for these system-critical functions.
Use of Local Storage Items, Session Storage Items, and Cookies
Our website uses local storage items, session storage items, and/or cookies. Local storage is a mechanism that enables data to be stored within the browser on your device. This data typically includes user preferences, such as a website’s “day” or “night mode,” and remains stored until you manually delete it. Session storage is very similar to local storage, except that the data is stored only for the duration of the current session—that is, until you close the current tab. Afterward, the session storage items are deleted from your device. Cookies are pieces of information that a web server (a server that provides web content) stores on your device in order to identify that device. They are either stored temporarily for the duration of a session (session cookies) and deleted after you leave a website, or stored permanently (permanent cookies) on your device until you delete them yourself or your web browser deletes them automatically.​​
These objects may also be stored on your device by third-party companies when you visit our site (third-party requests). This enables us, as the operator, and you, as a visitor to this website, to use certain services provided by third parties that are integrated into this website. Examples include the processing of payment transactions or the display of videos.
These mechanisms have a wide range of applications. They can improve a website’s functionality, manage shopping cart features, enhance the security and convenience of website use, and perform analyses of visitor traffic and behavior. Depending on the specific functions, these must be classified under data protection law. If they are necessary for the operation of the website and intended to provide certain functions (shopping cart function) or serve to optimize the website (e.g., cookies for measuring visitor behavior), then their use is based on Article 6(1)(f) of the GDPR. As the website operator, we have a legitimate interest in storing local storage items, session storage items, and cookies to ensure the technically error-free and optimized provision of our services. In all other cases, local storage items, session storage items, and cookies are stored only with your express consent (Article 6(1)(a) of the GDPR).
To the extent that local storage items, session storage, or third-party cookies are used for analytical purposes, we will inform you of this separately in this Privacy Notice. We will request your required consent, which may be revoked at any time.
Use of External Services
Our website uses external services. External services are third-party services that are used on our website. This may be done for various reasons, such as embedding videos or ensuring the security of the website. When using these services, personal data is also transferred to the respective providers of these external services. If we do not have a legitimate interest in using these services, we will obtain your consent—which you may revoke at any time—as a visitor to our website prior to their use (Art. 6(1)(a) GDPR).
Analytics
We process the personal data of website visitors to analyze user behavior. By evaluating the data collected, we are able to compile information about the use of the individual components of our website . This allows us to improve the user-friendliness of our website. Using the analytics tools we employ, we could, for example, create user profiles to display targeted or interest-based advertisements, recognize our website visitors could be recognized the next time they visit our website, their click/scroll behavior and downloads could be measured, heat maps could be created, page views could be tracked, visit duration or bounce rates could be measured, and the origin of website visitors (city, country, referring site) could be traced. With the help of these analytics tools, we can improve our market research and marketing activities.Data processing will only take place if you consent to this data processing (via our consent banner on the website). The legal basis for this processing is consent (Art. 6(1)(a) GDPR). Without your consent, data processing in the manner described above will not take place. If you withdraw your consent (e.g., via the consent banner or other options provided on this website), we will cease this data processing. The lawfulness of the processing carried out upto the time of withdrawal remains unaffected.
Sentry
We use the Sentry service on our website. The service is provided by Functional Software, Inc., 45 Fremont Street, 8th Floor, CA 94105, San Francisco, USA. Use of this service may result in data being transferred to a third country (the U.S.). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection. Further information can be found in the provider’s privacy policy at the following URL: https://sentry.io/privacy/.
Consent Management
To comply with data protection requirements, we use a consent management tool on our website. We use this tool to obtain the necessary consent for setting cookies or using external services. The consents are stored. The processing is necessary for compliance with a legal obligation to which the controller (website operator) is subject. Therefore, the legal basis for the processing is Article 6(1)(c) of the GDPR.
CookieYes
​We use the cookie consent management tool "CookieYes" on our website to obtain your consent for storing certain cookies on your device or for using certain technologies, and to document this in a data-protection-compliant manner. The provider is CookieYes Limited, 3rd Floor, 120 Baker Street, London, W1U 6TU, United Kingdom.
When the banner is activated, CookieYes stores a technically necessary cookie in your browser to record the consents you have given or their revocation. The collected data will be stored until you request us to delete it, delete the CookieYes cookie yourself, or the purpose for data storage no longer applies.
Legal Basis: The tool is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 (1) (c) GDPR.
Data Transfer to Third Countries: In the event that data is processed via servers of CookieYes LLC in the USA, an adequate level of data protection is ensured by the provider's certification under the EU-U.S. Data Privacy Framework as well as through the conclusion of EU Standard Contractual Clauses.
Content Delivery Network (CDN)
We use a Content Delivery Network (CDN) to optimize the performance and availability of our website. To this end, the service provider that makes this network available processes your IP address as well as information about when you visited our website. You can find all further information regarding data processing by this service provider in its privacy policy. We base this processing on a legitimate interest (Art. 6(1)(f) GDPR). Our legitimate interest in using a Content Delivery Network is to be able to display our website as quickly, securely, and reliably as possible.
Content Management System
A content management system enables the creation, editing, organization, and presentation of digital content. We use a content management system to create content for our website. This allows us to design a more appealing website.
We base this processing on a legitimate interest (Art. 6(1)(f) GDPR).
Our legitimate interest lies in the technically error-free presentation and optimization of the website.
Wix
We use the Wix service on our website. The service is provided by Wix Online Platforms Limited, 1 Grant’s Row, Dublin 2 D02HX96, Ireland.
Use of this service may result in data being transferred to a third country (the U.S.). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.
Further information can be found in the provider’s privacy policy at the following URL: https://de.wix.com/about/privacy.
Map Service
We use a map service on this website. In order for the map to be used and displayed on the website, it must be loaded from the provider’s server. This involves the transmission of your IP address to the provider’s server. Depending on the provider, cookies and other technologies—including fonts—may be loaded. For more details, please refer to the provider’s privacy policy.Data processing occurs only if you consent to this data processing (via our consent banner on the website). The legal basis for this processing is consent (Art. 6(1)(a) GDPR). Without your consent, data processing in the manner described above does not take place. If you withdraw your consent (e.g., via the consent banner or other options provided on this website), we will cease this data processing. The lawfulness of the processing carried out up to the time of withdrawal remains unaffected.
Google Maps
We use the Google Maps service on our website. The service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Using this service may result in data being transferred to a third country (the U.S.). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection. Further information can be found in the provider’s privacy policy at the following URL: https://business.safety.google/privacy.
Webfonts
This site uses so-called web fonts to ensure consistent font display; these are provided by an external provider and are loaded by your browser when you visit the website. In doing so, the web font provider becomes aware that our website was accessed from your IP address, since your browser establishes a direct connection to the web font provider.Data processing occurs only if you consent to this data processing (via our consent banner on the website). The legal basis for this processing is consent (Art. 6(1)(a) GDPR). Without your consent, data processing in the manner described above does not take place. If you withdraw your consent (e.g., via the consent banner or other options provided on this website), we will cease this data processing. The lawfulness of the processing carried out up to the time of withdrawal remains unaffected.
Google fonts
We use the Google Fonts service on our website. The service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Using this service may result in data being transferred to a third country (the U.S.). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection. Further information can be found in the provider’s privacy policy at the following URL: https://business.safety.google/privacy.
Websecurity
We integrate the security service "Cloudflare Turnstile" on our website. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (hereinafter: "Cloudflare").
Turnstile is used to check whether data entered on our website (e.g., in a contact form) is inputted by a human or by an automated program (a so-called bot). To achieve this, Turnstile analyzes the behavior of the website visitor based on various characteristics (e.g., IP address, time spent on the page, mouse movements). This data is transmitted to and processed on Cloudflare servers.
Legal Basis: The use of this service is based on Art. 6 (1) (f) GDPR. We have a legitimate interest in protecting our website from abusive automated scraping, spam, and DDoS attacks.
Data Transfer to Third Countries: Data transfers to the United States are based on the EU Commission's Standard Contractual Clauses and the Data Privacy Framework, ensuring an adequate level of data protection.
Google Recaptcha
We use the Google reCAPTCHA service on our website. The service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Using this service may result in data being transferred to a third country (the U.S.). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.
Further information can be found in the provider’s privacy policy at the following URL: https://cloud.google.com/terms/service-terms.
Contact Forms
On our website, you have the option to contact us via a contact form. To contact us using this form, we specifically require your contact information.
If you provide your consent, the legal basis is Article 6(1)(a) of the GDPR. This consent may be revoked at any time.
If you submit inquiries regarding our products, services, or our company, the processing is carried out for the purpose of fulfilling a contract or taking pre-contractual measures in accordance with Article 6(1)(b) of the GDPR. In addition, there may be a legitimate interest in maintaining business relationships or responding to your inquiry for other reasons. In this case, the legal basis for processing your data would be Article 6(1)(f) of the GDPR.
The data will be deleted once we have fully responded to your inquiry and no other retention obligations prevent this.
.png)