Privacy policy

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Dedrev Online Shops UG (haftungsbeschränkt)
Stubaier Str. 46
70327 Stuttgart
Deutschland
Email: info@dedrev.com

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The server location is in Germany. A data processing agreement (DPA) pursuant to Art. 28 GDPR is in place with the provider, ensuring that personal data is processed solely in accordance with our instructions and in line with the GDPR. The legal basis is our legitimate interest in secure and reliable operation (Art. 6(1)(f) GDPR).

When you access this website, the hosting provider automatically collects information that your browser transmits (server log files). These are typically: browser type and version, operating system used, referrer URL, hostname of the accessing computer, time of the server request and the IP address. This data is not merged with other data sources. Processing is based on Art. 6(1)(f) GDPR to ensure technical security and stability. The log files are deleted after a short period unless they are needed to investigate security incidents.

If you contact us via the contact form or by email, we process the data you provide (name, company, email address, optionally phone number and the content of your message) in order to handle your enquiry. Data submitted via the form is forwarded to us exclusively by email and is not stored in a database.

The legal basis is Art. 6(1)(b) GDPR insofar as your enquiry is aimed at concluding or performing a contract, otherwise our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR) as well as your consent (Art. 6(1)(a) GDPR), which you give by submitting the form.

We store your data until your enquiry has been fully processed and there is no reason for further retention. Statutory retention obligations remain unaffected. You may withdraw your consent at any time with effect for the future.

We only use technically necessary cookies required for the operation of the website (e.g. to store your language selection and your cookie decision). These do not require consent (§ 25(2) TDDDG). We store your cookie decision locally in your browser in order to honour it on subsequent visits.

Should non-necessary services (e.g. statistics) be used in future, this will happen solely on the basis of your explicit consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). Your consent is voluntary and can be withdrawn at any time with effect for the future via the "Cookie settings" link in the footer. We keep a record of the time and scope of your consent (consent log).

Status of this website: only technically necessary cookies are active. No statistics or marketing services and no third-party content are loaded.

We currently do not use web analytics. This section is prepared in case privacy-friendly reach measurement is introduced in future. Any such measurement would only be activated after your explicit consent via the consent banner. Should analytics be introduced, we will inform you here about the provider, purpose, cookies used, storage period and recipients and obtain your consent in advance.

[Placeholder for future web analytics – e.g. Matomo (self-hosted, server location Germany) or Plausible. Before activation, provider, purpose, storage period and legal basis must be completed here in full and connected to the statistics category of the consent manager.]

You have the following rights vis-à-vis the controller regarding the personal data concerning you:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw consent with effect for the future (Art. 7(3) GDPR)

To exercise your rights, an informal message to the email address above is sufficient.

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your residence, place of work or place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR. The supervisory authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (Germany).

This privacy policy is adapted as soon as changes to processing make it necessary – for example when new services are introduced. The version published on this page applies.