Privacy Policy
Privacy Policy
(Courtesy translation: German version is legally binding)
1. Data Controller
The party responsible for data processing on this website is:
Dais Group GmbH
Sendlinger Straße 24, 80331 Munich, Germany
E-mail: info@dais-group.com
2. General Information
We take the protection of your personal data very seriously and process your data exclusively in accordance with the legal provisions, in particular the General Data Protection Regulation (GDPR) and the German Telecommunications Telemedia Data Protection Act (TTDSG).
Personal data is any information that can be used to personally identify you.
3. Rights of Data Subjects
You have the right at any time to:
• Information / Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing (Art. 21 GDPR)
In addition, you have the right to lodge a complaint with a data protection supervisory authority.
4. Hosting & Shop Platform
To operate our online shop, we use the shop and e-commerce platform Shopify, a service provided by Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (hereinafter “Shopify”). This enables us to present and sell our products to you online in a web shop.
Shopify provides us with software that we use to operate our e-commerce business. This is a tool for creating and hosting websites, in particular online shops.
When you, as our customer, visit our online shop or make a purchase, Shopify collects and processes personal data about you. This data is used solely to provide our online shop to you and to enable the purchase of our products.
When you visit our website, Shopify records your IP address as well as information about the device and browser you are using.
If you make a purchase on our website, personal data that you provide yourself, such as name, billing address, delivery address, e-mail address, telephone number, payment information, and other data related to your purchase, is processed in order to enable you to complete a transaction, to check orders for fraud and risk, and to fulfil orders.
In addition, information on how you access our website, your account, and our platform is collected and processed, including information about the device and browser you use, your network connection, your IP address, and details about how you navigate our website and our platform. This enables analyses to be provided to us, such as the number of shop visitors, allowing us to fix errors or improve our shop offering for you.
Shopify collects some of this information using cookies or other similar technologies directly from your device.
The use of Shopify and the processing of your data takes place on the one hand for the performance of the contract on the basis of Art. 6(1)(b) GDPR and on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in the reliable and secure technical presentation of our website (our online shop).
For further information, please visit the Shopify website: https://www.shopify.de/. Additional information on how Shopify processes personal data can be found in the privacy policy: https://www.shopify.de/legal/datenschutz
5. Contact
If you contact us by e-mail, we process your information to handle your enquiry.
Legal basis:
• Art. 6(1)(b) GDPR (contractual / pre-contractual)
• or Art. 6(1)(f) GDPR (legitimate interest)
6. Customer Account & Orders
To process orders, we collect, among other things:
• Name
• Billing and delivery address
• E-mail address
• Payment information
Legal basis: Art. 6(1)(b) GDPR.
7. Payment Service Providers
We use the following providers for payment processing:
a) Shopify Payments
As a payment service provider, we use Shopify Payments, a service provided by Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. With Shopify Payments, we can offer fast and secure payment processing.
For the purpose of payment processing, the data collected during the payment process, including master data (e.g. name, e-mail address, telephone number), payment data (payment amount, product description), and meta/communication data (e.g. IP address), is transmitted to Shopify.
Data processing serves the performance of the contract on the basis of Art. 6(1)(b) GDPR.
You can find the Shopify Payments privacy policy here: https://www.shopify.com/de/legal/datenschutz
b) PayPal
As a further payment service provider, we use PayPal, a service provided by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”). With PayPal, we can offer fast and secure payment processing.
For the purpose of payment processing, the data collected during the payment process, including master data (e.g. name, e-mail address, telephone number), payment data (payment amount, product description), and meta/communication data (e.g. IP address), is transmitted to PayPal.
PayPal may transmit the collected data to credit reference agencies for the purpose of identity and credit checks, for example in the case of payment by direct debit or invoice. More information can be found here: https://www.paypal.com/de/webapps/mpp/ua/creditref
Data processing serves the performance of the contract on the basis of Art. 6(1)(b) GDPR.
You can find the PayPal privacy policy here: https://www.paypal.com/en/webapps/mpp/ua/privacy-full
c) Klarna
As a further payment service provider, we use Klarna, a service provided by Klarna Bank AB, Sveavägen 46, 11134 Stockholm, Sweden (hereinafter “Klarna”). With Klarna, we can ensure fast and secure payment processing.
The data collected during the payment process is processed, including master data (e.g. name, e-mail address, telephone number), payment data (payment amount, product description), and meta/communication data (e.g. IP address), and transmitted to Klarna.
This data processing serves the performance of the contract on the basis of Art. 6(1)(b) GDPR.
You can find the Klarna privacy policy here: https://cdn.klarna.com/1.0/shared/content/legal/terms/de-DE/privacy
8. Cookies & Consent Management
Our website uses cookies and similar technologies.
Cookie categories:
• Necessary cookies (shop functionality)
• Analytics cookies
• Marketing cookies
Legal bases:
• Necessary: Section 25(2) TTDSG
• Analytics & marketing: Section 25(1) TTDSG in conjunction with Art. 6(1)(a) GDPR
9. Google Analytics
We use the Google Analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”). The service analyses and evaluates the use of our website and creates statistics and reports on this basis, which help us to optimise and improve our website for visitors. Google Analytics uses cookies for this purpose.
For the above processing purpose, the information generated by the cookie, such as your anonymised IP address, device and browser characteristics, session duration, and pages visited, is transmitted to a Google server on our behalf, where it is stored and analysed.
On this website, we use the IP anonymisation function of Google Analytics. This ensures the anonymised collection of IP addresses. The anonymisation of your IP address is generally carried out by Google by truncating your IP address within the European Union or other contracting states of the European Economic Area (EEA). In exceptional cases, your IP address is transmitted to a Google server in the USA and only anonymised there. Your IP address transmitted in this process will not be merged with other Google data.
As part of the Google Analytics advertising function, remarketing and reports on performance by demographic characteristics and interests are used. The purpose of these procedures is to use information about user behaviour to better tailor advertising measures to the interests of the respective users. As part of remarketing, personalised advertising measures can be displayed on other websites based on the user's browsing behaviour on this website. The advertising materials may contain products that the user has previously viewed on the website. Provided you have consented to your web and app browser history being linked to your Google account by Google and to information from your Google account being used to personalise advertisements, Google uses this data for cross-device remarketing.
Data processing, in particular the setting of cookies, takes place with your consent on the basis of Art. 6(1)(a) GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of consent up to the point of revocation.
You can also prevent the collection and processing of data by Google by downloading and installing the browser add-on available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Alternatively, or for browsers on mobile devices, please click the corresponding link to deactivate Google Analytics. An opt-out cookie will be placed on your device for our website with effect for the browser you are currently using. If you delete your cookies in this browser, you must click on this link again.
Google offers signed-in Google users and other users the option of deactivating personalised advertising. Details can be found here: https://support.google.com/ads/answer/2662922?hl=de
You can find the Google privacy policy here: https://policies.google.com/privacy?hl=de.
10. Meta (Facebook & Instagram Ads)
We use the Meta Pixel service provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter “Facebook”), in order to display advertisements on Facebook and other websites to you and other potentially interested users, and to measure the effectiveness of our advertising.
Through the Meta Pixel, your browser establishes a connection with Meta, allowing user data such as IP address or user ID to be matched, and sets a cookie with the information that you have visited our website or clicked on one of our advertisements, as soon as you have consented to the use of consent-based cookies. If you are registered with Facebook, Meta can associate the visit with your account. By means of the “Custom Audience” function, we can address you and other website visitors again through interest-based advertising on Facebook or third-party websites. Through the “Conversion” function of the Meta Pixel, we can also measure actions of visitors on our website (e.g. the purchase of a product). From the data collected, we cannot draw any conclusions about the identity of website visitors. However, Meta can subsequently adjust the placement of advertisements on and outside Facebook. The Meta Pixel also collects meta/communication data (e.g. IP address, device and browser characteristics).
Data processing and the setting of cookies takes place on the basis of your consent in accordance with Art. 6(1)(a) GDPR, Section 25(1) TTDSG. You can revoke your consent at any time with effect for the future.
If you are logged in to Facebook, you can manage your advertising preferences, including the display of interest-based advertising, at: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen.
Without a Facebook account, you can deactivate interest-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.
As part of the service, data is transferred to the USA. The transfer is based on the EU Commission's Standard Contractual Clauses. Further details can be found here: https://www.facebook.com/legal/terms/dataprocessing, https://www.facebook.com/legal/EU_data_transfer_addendum, and https://de-de.facebook.com/help/566994660333381.
Insofar as personal data is collected on our website with the mentioned tool and forwarded to Meta, we and Meta are joint controllers (Art. 26 GDPR), limited to this data processing. The processing carried out by Meta after the forwarding does not take place under joint responsibility. The framework conditions of joint responsibility have been set out in a joint processing agreement: https://www.facebook.com/legal/controller_addendum. According to this, we are responsible for providing the data protection information and for the data-protection-compliant implementation of the tool on our website. Meta is responsible for the data security of the Meta products. You can assert data subject rights (e.g. requests for information) regarding the data processed by Meta directly with Meta. If you assert your rights with us, we are obliged to forward them to Meta.
Information on how Meta processes personal data, including the legal basis on which Meta relies, options for exercising data subject rights vis-à-vis Meta, and contact options for Meta and the Meta Data Protection Officer, can be found in Meta's privacy policy at https://www.facebook.com/privacy/policy.
Specific information and details about the Meta Pixel and how it works can also be found in the Facebook Help Centre.
11. TikTok Ads
On our website, we use the TikTok Pixel, a service provided by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, and TikTok Information Technologies UK Limited, 4 Lindsey Street, Barbican, London, EC1A 9HP, United Kingdom (hereinafter “TikTok”), in order to display advertisements on TikTok to you and other potentially interested users, and to measure the effectiveness of our advertising.
Through the TikTok Pixel, your browser establishes a connection with TikTok and sets a cookie with the information that you have visited our website or clicked on one of our advertisements, as soon as you have consented to the use of consent-based cookies. If you are registered with TikTok, TikTok can associate the visit with your account. TikTok's conversion tracking allows us to measure actions of website visitors (e.g. the purchase of a product, viewing a specific page element). Visitors to our website can also be addressed again through targeted and personalised advertising on TikTok. For this purpose, the TikTok Pixel collects meta and communication data (e.g. IP address, device information, browser characteristics, operating system, timestamp of the website action). From the data collected, we cannot draw any conclusions about the identity of website visitors.
Data processing, in particular the setting of cookies, takes place with your consent on the basis of Art. 6(1)(a) GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of consent up to the point of revocation.
You can view the TikTok privacy policy at https://www.tiktok.com/legal/page/eea/new-privacy-policy/de-DE.
12. Newsletter & E-Mail Marketing (Klaviyo)
For sending newsletters, we use Klaviyo, WeWork, One Central Plaza, Dame Street, Dublin 2, D02 A4W7, Ireland.
Klaviyo is a company that automatically creates personalised newsletters and e-mail campaigns based on customer data. For this purpose, a data processing agreement has been concluded with Klaviyo. This stipulates that Klaviyo may collect name, telephone number, e-mail address, address data, IP address, device identifiers, and usage data (such as interactions between a user and Klaviyo's online system, the website or e-mail address, the browser used, the operating system used, and the referrer URL).
Data processing takes place on the basis of your consent (Art. 6(1)(a) GDPR) or, if such consent is not necessary, on the basis of the legitimate interest in direct marketing (Art. 6(1)(f) GDPR). Consent can be revoked at any time by unsubscribing from the newsletter, for example by clicking the corresponding link in any newsletter e-mail or by sending us an e-mail. Data processing operations carried out on the basis of consent prior to revocation remain unaffected.
For further information, please visit the Klaviyo website: https://www.klaviyo.com/de/
Additional information on how Klaviyo processes personal data can be found in the Data Processing Agreement: https://www.klaviyo.com/de/legal/data-processing-agreement.
13. Microsoft Clarity
We use Microsoft Clarity to analyse the use of our website. Microsoft Clarity creates session recordings (video-like playbacks of mouse movements, clicks, and scroll behaviour of individual visitors) and heatmaps (aggregated visualisations showing where visitors click and how far they scroll). We use the insights gained to improve the usability of our website.
Microsoft Clarity is provided to us by Microsoft Ireland Operations Limited (One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland). Microsoft processes the website usage data on our behalf and is contractually obliged to take measures to ensure the security and confidentiality of the processed data.
During your website visit, the following data, among others, is recorded and transmitted to Microsoft:
• pages visited
• mouse movements, clicks, and scroll behaviour
• orders and other conversion events
• your approximate location (country and city)
• your internet address (IP address)
• technical information such as browser, operating system, device, and screen resolution
• a randomly generated user ID
No further personal data such as name, address, or contact details is transmitted. Form entries are automatically masked by Microsoft Clarity and not recorded.
This data is transmitted to Microsoft servers in the USA. Microsoft Corporation is certified under the EU-US Data Privacy Framework (DPF). Adequate safeguards within the meaning of Art. 45 GDPR therefore exist for data transfers to the USA.
Microsoft Clarity stores cookies in your web browser. First-party cookies: _clck is stored for 1 year and contains a randomly generated user ID. _clsk is stored for 1 day and combines page views into a session recording. Microsoft third-party cookies: MUID identifies your browser across Microsoft websites and is used, among other things, for analytics and advertising. Other Microsoft cookies (CLID, MR, SM, ANONCHK) serve to synchronise the user ID within the Microsoft infrastructure.
Session recordings are automatically deleted after 30 days. Heatmap data and aggregated click data are automatically deleted after 13 months.
The legal basis for this processing is your consent in accordance with Art. 6(1)(a) GDPR. You can revoke your consent at any time via our cookie settings dialog or permanently disable data collection via the Microsoft Clarity opt-out page.
Additional information on data processing by Microsoft Clarity can be found in the privacy policy: https://clarity.microsoft.com/privacy.
14. Storage Period
Personal data is only stored for as long as is necessary for the respective purposes or as required by statutory retention obligations.
