PRIVACY POLICY

Information on data protection
‍
With this data protection information, we inform you about our handling of your personal data and about your rights according to the European Data Protection Regulation (DSGVO) and the Federal Data Protection Act (BDSG). DAA GmbH (hereinafter referred to as "we" or "us") is responsible for data processing.
‍
‍Content
‍
I. General information
‍
1.Contact
2.Legal basis
3.Duration of storage
4.Categories of recipients of the data
5.Data transfer to third countries
6.Processing when exercising your rights
7.Your rights
8.Right of objection
9.Data protection officer
‍
‍
II. Data processing on our website
‍‍
1.Processing of server log files
2.Cookies
3.Consent Management Tool
4.Contact us
5.Newsletter
6.Matomo
7.A/B Testing
8.Google Marketing Services
9.Google Maps
10.YouTube
11.Amazon Cloudfront
‍
‍
III. Forwarding Requests
‍‍
1.Forwarding Requests
2.Partner Portals for Special Forwarding Requests
3.Forwarding Development Loans and Grants
‍
IV. Corporate customer portal for specialist companies
‍
1.Registration
2.hCaptcha
3.Customer and prospective customer data
4.Use of e-mail address for marketing purposes

‍
V. Data processing on our social media pages
‍
1.Visiting our Facebook page
2.Comments and direct messages

I. General information
‍
1. Contact

If you have any questions or suggestions regarding this information, or if you would like to contact us about asserting your rights, please send your inquiry to
‍
DAA GmbH, Am Sandtorkai 73, 20457 Hamburg
Tel.: +49 40 22898548, e-mail: info@daa.net


2. Legal basis
‍
The term "personal data" in data protection law refers to all information relating to an identified or identifiable individual. We process personal data in compliance with the relevant data protection regulations, in particular the DSGVO and the BDSG. Data processing by us only takes place on the basis of a legal permission. We process personal data only with your consent (Art. 6 para. 1 letter a DSGVO), for the performance of a contract to which you are a party, or at your request for the performance of pre-contractual measures (Art. 6 para. 1 letter b DSGVO), for the performance of a legal obligation (Art. 6 para. 1 letter c DSGVO) or if the processing is necessary to protect our legitimate interests or the legitimate interests of a third party, unless your interests or fundamental rights and freedoms which require the protection of personal data override (Art. 6 (1) letter f DSGVO).


3 Duration of storage
‍
Unless otherwise stated in the following notes, we only store data for as long as is necessary to achieve the purpose of processing or to fulfill our contractual or legal obligations, or storage is required for the duration of statutory limitation periods. Legal retention obligations may arise in particular from commercial or tax law regulations. From the end of the calendar year in which the data was collected, we will retain such personal data contained in our accounting records for ten years and retain personal data contained in commercial letters and contracts for six years. In addition, we will retain data in connection with consents requiring proof as well as with complaints and claims for the duration of the statutory limitation periods. We will delete data stored for advertising purposes if you object to processing for this purpose.
‍

4. categories of recipients of the data
‍
We use order processors as part of the processing of your data. Processing operations carried out by such processors include, for example, hosting, maintenance and support of IT systems, customer and order management, order processing, accounting and billing, marketing measures or file and data carrier destruction. A processor is a natural or legal person, authority, institution or other body that processes personal data on behalf of the data controller. Processors do not use the data for their own purposes, but carry out data processing exclusively for the data controller and are contractually obligated to ensure appropriate technical and organizational measures for data protection. In addition, we may transfer your personal data to bodies such as postal and delivery services, the company's bank, tax advisors/auditors or the tax authorities. Further recipients may result from the following notes.

5. data transfer to third countries
‍
Visiting websites may involve the transfer of certain personal data to third countries, i.e. countries in which the GDPR is not applicable law. Such transfer takes place in a permissible manner if the European Commission has determined that an adequate level of data protection is warranted in such third country. If such an adequacy decision by the European Commission does not exist, a transfer of personal data to a third country will only take place if appropriate safeguards are in place in accordance with Article 46 of the GDPR or if one of the conditions of Article 49 of the GDPR is met.
‍
Unless an adequacy decision is in place and unless otherwise specified below, we use the EU Standard Contractual Clauses as appropriate safeguards for the transfer of personal data to third countries. You have the possibility to obtain a copy of these EU standard data protection clauses or to inspect them. To do so, please contact us at the address provided under Contact.
‍

6. processing when exercising your rights
‍
If you exercise your rights under Articles 15 to 22 of the GDPR, we will process the personal data provided for the purpose of implementing these rights by us and to be able to provide evidence thereof. We will only process data stored for the purpose of providing information and preparing it for this purpose and for data protection control purposes and otherwise restrict processing in accordance with Art. 18 DSGVO. These processing operations are based on the legal basis of Art. 6 para. 1 lit. c DSGVO in conjunction with. Art. 15 to 22 DSGVO and Section 34 (2) BDSG.
‍
7. your rights
‍
As a data subject, you have the right to assert your data subject rights against us. In particular, you have the following rights:
‍
In accordance with Art. 15 DSGVO and Section 34 BDSG, you have the right to request information about whether and, if so, to what extent we are processing personal data relating to you or not.
‍
You have the right to demand that we correct your data in accordance with Art. 16 DSGVO.
‍
You have the right, in accordance with Art. 17 DSGVO and § 35 BDSG, to demand that we delete your personal data.
‍
You have the right to have the processing of your personal data restricted in accordance with Art. 18 DSGVO.
‍
You have the right, in accordance with Art. 20 DSGVO, to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format and to transfer this data to another controller.
‍
If you have given us separate consent to data processing, you may revoke this consent at any time in accordance with Article 7 (3) DSGVO. Such a revocation will not affect the lawfulness of the processing that was carried out on the basis of the consent until the revocation.
‍
If you believe that a processing of personal data concerning you violates the provisions of the GDPR, you have the right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR.
‍

8. right to object
‍
In accordance with Art. 21(1) DSGVO, you have the right to object to processing based on the legal basis of Art. 6(1)(e) or (f) DSGVO on grounds relating to your particular situation. If personal data about you is processed by us for the purpose of direct marketing, you may object to such processing pursuant to Art. 21 (2) and (3) DSGVO.
‍

9. data protection officer
‍
You can reach our data protection officer at the following contact details:
‍
E-Mail: datenschutzbeauftragter@daa.net
Herting Oberbeck Datenschutz GmbH
Hallerstr. 76, 20146 Hamburg
https://www.datenschutzkanzlei.de

Do you have questions or need a data privacy report? You can reach our data privacy department at datenschutz@daa.net!

‍II. Data processing on our website

When you use the website, we collect information that you provide yourself. In addition, during your visit to the website, we automatically collect certain information about your use of the website. In data protection law, the IP address is also generally considered to be a personal data. An IP address is assigned to every device connected to the Internet by the Internet provider so that it can send and receive data.
‍

1. processing of server log files
‍
During the purely informative use of our website, general information that your browser transmits to our server is initially stored automatically (i.e. not via registration). This includes by default: browser type/version, operating system used, page accessed, the previously visited page (referrer URL), IP address, date and time of the server request and HTTP status code. The processing is carried out to protect our legitimate interests and is based on the legal basis of Art. 6 para. 1 letter f DSGVO. This processing serves the technical administration and security of the website. The stored data will be deleted after fourteen days unless there is a justified suspicion of unlawful use based on concrete indications and further examination and processing of the information is necessary for this reason. We are not able to identify you as a data subject on the basis of the stored information. Articles 15 to 22 of the GDPR therefore do not apply pursuant to Article 11 (2) of the GDPR, unless you provide additional information that enables your identification in order to exercise your rights set forth in these articles.
‍

2. Cookies

We use cookies and similar technologies ("cookies") on our website. Cookies are small text files that are stored by your browser when you visit a website. This identifies the browser you are using and can be recognized by web servers. You have full control over the use of cookies through your browser. You can delete the cookies in the security settings of your browser at any time. You can object to the use of cookies through your browser settings in principle or for specific cases. Further information on this is provided by the Federal Office for Information Security: https://www.bsi-fuer-buerger.de/BSIFB/DE/Empfehlun...
‍‍
The use of cookies is in part technically necessary for the operation of our website and thus permissible without the consent of the user. In addition, we may use cookies to offer special features and content and for analysis and marketing purposes. These may also include cookies from third-party providers (so-called third party cookies). We use such technically unnecessary cookies only with your consent pursuant to Art. 6 (1) a DSGVO loaded. You can find information about the purposes, providers, technologies used, stored data and the storage period of individual cookies in the cookie settings of our Consent Management Tools.

‍
3. consent management tool
‍
This website uses a consent management banner to control cookies. The Consent Banner enables users of our website to give consent to certain data processing procedures or to revoke a given consent. By confirming the "Accept All" button or by saving individual cookie settings, you consent to the use of the associated cookies. The legal basis under data protection law is your consent within the meaning of Art. 6 (1) a DSGVO.
‍
In addition, the banner supports us in being able to provide evidence of the declaration of consent. For this purpose, we process information about the declaration of consent and further log data about this declaration. Cookies are also used to collect this data.
‍
The processing of this data is necessary in order to be able to prove that consent has been given. The legal basis arises from our legal obligation to document your consent (Art. 6 para. 1 letter c in conjunction with Art. 7 para. 1 DSGVO).
‍
If you wish to revoke your consent or give new consent at a later date, you can adjust your consent at any time.. Click here to view your cookie consent and adjust it at any time.


‍4. Contact us

If you send us a message via a contact form or via the contact email provided, we will process the transmitted data for the purpose of responding to your inquiry. If your request is directed at the conclusion, performance or forwarding of a contract, Art. 6 (1) b DSGVO is the legal basis for the data processing. Otherwise, we process the data on the basis of our legitimate interest in contacting inquiring persons. The legal basis for data processing is then Art. 6 para. 1 lit. f DSGVO.

5. Newsletter

We offer the possibility to subscribe to our newsletter. After registration we will inform you regularly about the latest news on our offers. A valid e-mail address is required to register for the newsletter. To verify the e-mail address, you will first receive a registration e-mail, which you must confirm via a link (double opt-in). If you subscribe to the newsletter, we process personal data such as your e-mail address and your name on the basis of the consent you have given us. The processing is based on the legal basis of Art. 6 (1) a DSGVO. You can revoke your consent at any time with effect for the future, for example via the "unsubscribe" link in the newsletter.
‍
When you register for the newsletter, we also store the IP address and the date and time of registration. The processing of this data is necessary in order to be able to prove that consent has been given. The legal basis arises from our legal obligation to document your consent pursuant to Art. 6 para. 1 lit. c DSGVO in conjunction with. Art. 7 para. 1 DSGVO.
‍

6. Matomo

We use the web analytics service Matomo (formerly Piwik). Matomo is an open source software for reach measurement. In this process, accesses to our website are recorded and evaluated anonymously without the use of tracking cookies. The IP address is anonymized immediately after collection and before storage. Therefore, no further processing of personal data takes place when Matomo is used.
‍
This data processing is carried out to protect our legitimate interests in range measurement and statistical analysis of the use of our website. The processing is based on the legal basis of Art. 6 (1) (f) DSGVO and is necessary for our legitimate interest in optimizing our offer and thereby avoiding the processing of personal data as far as possible.
‍
You can object to this data processing altogether. In this case, a so-called opt-out cookie will be stored in your browser. As a result, no session data will be collected via Matomo. If you delete your cookies in your internet browser, the opt-out cookie will also be deleted. When you visit our website again, you must then make your objection again.

7. A/B Testing

We test different designs and settings of our website in order to be able to further develop our website according to requirements based on the results ("A/B Testing"). In the process, different versions of the website are played out to the users. We use a separate cookie for this purpose, which only records which version is displayed to the user. Further information on this processing activity and the storage period can be found in the section "Cookies". The processing is based on the legal basis of Art. 6 (1) (f) DSGVO and is necessary for our legitimate interest to optimize our offer and to avoid the processing of personal data as much as possible.

8. Google Marketing Services

We use the Google Tag Manager of Google Ireland Limited (Ireland/EU). The Google Tag Manager is used to manage our website tags via an interface. The Google Tag Manager is a cookie-less domain that does not collect or store any personal data. The Google Tag Manager merely triggers other tags, which in turn may collect data without accessing that data themselves. If a deactivation has been made at the domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager. Google Tag Manager is only used with your consent pursuant to Art. 6 (1) a DSGVO.
‍
We use the Google Analytics service of the provider Google Ireland Limited (Google Ireland/EU) on our website. Google Analytics is a web analytics service that allows us to collect and analyze data about the behavior of visitors to our website. Google Analytics uses cookies for this purpose, which enable an analysis of the use of our website. This involves processing personal data in the form of online identifiers (including cookie identifiers), IP addresses, device identifiers and information about interaction with our website. In part, this data is information stored in the terminal device you are using. In addition, further information is also stored on your used end device via the cookies used. Such storage of information by Google Analytics or access to information already stored in your end device will only take place with your consent.
‍
Google Ireland will process the data thus collected on our behalf in order to evaluate the use of our website by the users, to compile reports on the activities within our website and to provide us with further services related to the use of our website and the Internet. In doing so, pseudonymous usage profiles of the users can be created from the processed data.

The setting of cookies and the further processing of personal data described here takes place with your consent. The legal basis for the data processing in connection with the Google Analytics service is therefore Art. 6 (1) a DSGVO. You can revoke this consent at any time with effect for the future.
‍
The personal data processed on our behalf to provide Google Analytics may be transferred to any country in which Google Ireland or Google Ireland's sub-processors maintain facilities. The legal basis for this transfer is the standard contractual clauses for the transfer of personal data to third countries pursuant to Art. 46 para. 2 lit. c DSGVO.
‍
We only use Google Analytics with IP anonymization enabled. This means that the IP address of the user is shortened by Google Ireland within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The IP address transmitted by the user's browser is not merged with other data.
‍
We use the Google Universal Analytics variant. This allows us to assign interaction data from different devices and from different sessions to a unique user ID. This allows us to put individual user actions in context and analyze long-term relationships. Data on user actions is stored for a period of 14 months and then automatically deleted. In this process, the deletion of data whose storage period has expired occurs automatically once a month.
‍
We also use the Google Analytics advertising functions (remarketing). This function enables us, in conjunction with the cross-device functions of Google, to display advertisements in a more targeted manner and to present users with ads that are tailored to their interests. Via remarketing, users are shown ads and products for which interest has been identified on other websites in the Google network. The function allows us to link advertising target groups created via Google Analytics Remarketing with the cross-device functions of Google Ads. In this way, interest-based, personalized advertising messages that have been adapted to a user depending on previous usage and surfing behavior on one end device (e.g. cell phone) can also be displayed on another end device of the user (e.g. tablet or PC).
‍
If you have given your consent, Google will link your web and app browsing history with your Google account for this purpose. In this way, the same personalized advertising messages can be served on every end device on which you log in with your Google account. The aggregation of the collected data in your Google account is based solely on your consent, which you can give or revoke at Google. For these linked services, data is then collected via Google Analytics for advertising purposes. To support the remarketing function, Google Analytics collects users' google-authenticated IDs, which are temporarily linked to our Google Analytics data. This is used to define and create target groups for cross-device ad advertising.
‍
You can also prevent the collection of information generated by the cookie by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout. If you visit our website via a mobile device, you can deactivate Google Analytics by clicking on this link.
‍
You can permanently object to cross-device tracking by deactivating personalized advertising in your Google account; follow this link: https://www.google.com/settings/ads/onweb

‍For more information on the use of data for advertising purposes, please see Google's privacy policy at: www.google.com/policies/technologies/ads/

‍We use the Customer Match feature within the Google Ads service provided by Google Ireland Ltd. (Ireland, EU). This feature allows us to display ads more effectively to users based on customer lists in Google services such as Google Search, Gmail, or YouTube, thereby increasing the relevance of the ads. If we have previously collected this data from you, we will transmit your email address, phone number, postal address, and mobile device ID to Google Ireland Ltd (Google) for this purpose. Before transmitting the data to Google, we perform a one-way encryption of the data using the SHA256 algorithm. The so-called hash strings of the data are then automatically compared by Google with those of the corresponding data from existing Google accounts. In the event of a match, the respective Google account is added to a customer list created for us. If the data does not match, Google may still use it for policy compliance checks. Once the data has been matched and the compliance review is complete, Google deletes the data.

The processing of your data is based on your consent and is carried out on the legal basis of Art. 6(1)(a) of the General Data Protection Regulation (GDPR).

As a Google user, you can control which ads you see on Google services, including ads using the Customer Match feature, through your advertising settings on Google. For more information on data protection with Google Ads Customer Match, please visit: https://support.google.com/google-ads/answer/6334160. You can find the general privacy policy of Google at: https://support.google.com/google-ads/answer/6379332?hl=en.

‍9. Google Maps

We use the Google Maps service of Google Ireland Limited (Ireland/EU) on our website to display maps. For such an integration, a processing of your IP address is technically necessary so that the content can be sent to your browser. Your IP address is therefore transmitted to Google and Google may set its own cookies. Further information on this processing activity and the storage period can be found in the section "Cookies". Google Maps is only used with your consent pursuant to Art. 6 (1) a DSGVO.
‍
In the case of Google services, a transmission of data to Google Inc. in the USA cannot be ruled out. Please note the information in the section "Data transfer to third countries". Users can find further information on data protection at Google in Google's data protection information: https://www.google.com/policies/privacy


‍10. YouTube

We use the YouTube service of Google Ireland Limited (Ireland/EU) on our website to integrate videos. For such an integration, a processing of your IP address is technically necessary so that the content can be sent to your browser. Your IP address is therefore transmitted to Google and Google may set its own cookies. We use YouTube in "extended data protection mode" so that no cookies are set by YouTube to analyze user behavior. Further information on this processing activity and the storage period can be found in the section "Cookies". YouTube is only used with your consent pursuant to Art. 6 (1) a DSGVO.
‍
With YouTube, a transmission of data to Google Inc. and YouTube LLC in the USA cannot be excluded. Please note the information in the section "Data transfer to third countries". Users can find further information on data protection at Google in Google's data protection information: https://www.google.com/policies/privacy
‍

‍11. Amazon Cloudfront

We use the Content Delivery Network (CDN) Amazon CloudFront from Amazon Web Services EMEA SARL, 38 avenue John F. Kennedy, L-1855 Luxembourg (AWS) to increase the security and delivery speed of our website. This corresponds to our legitimate interest (Art. 6 para. 1 lit. f DSGVO). A CDN is a network of [globally] distributed servers that is able to deliver optimized content to the website user. For this purpose, personal data may be processed in server log files by AWS. Please compare the explanations under "Hosting". [In addition, we keep [anonymized] log files to ensure [optimize] the stability and security of our website.]
‍
AWS is a recipient of your personal data and acts as a processor for us. This corresponds to our legitimate interest within the meaning of Art. 6 (1) p. 1 lit. f DSGVO not to operate a content delivery network ourselves.
‍
You have the right to object to the processing. Whether the objection is successful is to be determined as part of a balancing of interests.
‍
The processing of the data provided under this section is not required by law or contract. The functionality of the website is not guaranteed without the processing.
‍
Your personal data will be stored by AWS for as long as necessary for the purposes described. [We delete the stored log files after [ ] ].
‍
For more information about opting out and opting out of AWS , please visit: https://d1.awsstatic.com/legal/privacypolicy/AWS_Privacy_Notice__German_Translation.pdf

AWS has implemented compliance measures for international data transfers. These apply to all global activities where AWS processes personal data of individuals in the EU. These measures are based on the EU Standard Contractual Clauses (SCCs). For more information, please visit: https://d1.awsstatic.com/legal/aws-gdpr/AWS_GDPR_DPA.pdf
‍

‍‍III. Forwarding Requests

1. Forwarding request
‍
Our website contains a request form that you can use to send us a forwarding request. On partner websites, we use a so-called iFrame for this purpose, which is embedded in the partner website but transfers your data directly to us. The transfer of your data is encrypted. We process the data provided in order to process your forwarding request and, if necessary, to specify your request with you by telephone or by WhatsApp, SMS or e-mail.
‍
In order to forward your request to a suitable specialist company with free capacities, we forward your data to specialist companies (this may also include dealers and manufacturers) that operate in your region and offer the service you requested. The number of forwardings is limited and results from the request form. It is possible that the specialist companies will contact you by telephone or by WhatsApp, SMS or e-mail in order to prepare a quotation.
‍
This data processing by us and by the specialized companies is necessary for the implementation of pre-contractual measures, which take place upon your request. The legal basis is Art. 6 para. 1 letter b DSGVO.

2. partner portals for special forwarding requests
‍
If we are unable to successfully forward your forwarding request for the following trades to the agreed number of specialist companies within two working days of activation, your request may be forwarded to a specialized partner portal. If necessary, our partner portal will contact you by telephone to specify your request.
‍

‍In order to find a suitable specialist company for you, the partner portal forwards your data to specialist companies (this may also include dealers and manufacturers) that are active in your region and offer the service you have requested. The number of forwardings is limited and results from the request form. It is possible that the specialist companies will contact you by telephone or via WhatsApp, SMS or e-mail in order to prepare a quotation.
‍
This data processing by us, the partner portal and the specialized companies is necessary for the implementation of pre-contractual measures, which take place upon your request. The legal basis is Art. 6 para. 1 letter b DSGVO.


3. forwarding of development loans and grants
‍
If you have requested advice on development loans and grants, we will forward your data to suitable credit institutions or loan brokers for this purpose. It is possible that the credit institutions or loan brokers will contact you by telephone or by WhatsApp, SMS or e-mail in order to prepare an offer. All data fields marked as mandatory are required to process your request. Failure to provide this data will result in us not being able to process your request. The provision of further data is voluntary.
‍
This data processing by us and by the credit institutions or loan brokers is necessary for the implementation of pre-contractual measures that take place at your request. The legal basis is Art. 6 para. 1 letter b DSGVO.
‍

4. Reviews

You have the opportunity to submit reviews via our website. In doing so, the provision of personal information is required. The required information can be seen in the input mask. All other information provided by you is voluntary. The contact data provided in the rating is required by us to determine the authenticity of a rating. In addition, we process the data to ensure legal enforcement in the event of an unlawful rating. The legal basis for data processing in this regard is Art. 6 para. 1 letter f DSGVO.
‍

IV. Corporate customer portal for specialist companies
‍
The following information is intended only for specialist companies, dealers and manufacturers.
‍
1. registration
‍
To use certain functions of the website, registration via the website is required. The required information can be found in the registration input mask. The provision of the information, which is marked as mandatory, is mandatory in order to complete the registration. The data provided will be processed for the purpose of providing the service. The processing is based on the legal basis of Art. 6 para. 1 letter b DSGVO.
‍
Personal data is collected and processed by us for the following purposes:
- Setting up a corporate customer account
- Forwarding inquiries
- Forwarding to inquiring customers
- Display in the DAA business directories


2. hCaptcha
‍
When registering for the corporate customer portal, we use the hCaptcha service provided by Intuition Machines, Inc. (USA). For such integration, the processing of your IP address is technically necessary to establish a connection to hCaptcha's servers and to send the contents to your browser. Your IP address is therefore processed on our behalf by hCaptcha. We use the service for security reasons to verify whether form entries are made by a natural person. This way, automated access attempts and attacks can be detected and prevented. We are legally obligated to take technically and economically appropriate measures to ensure the security of the portal. You can block these data processing activities at any time through the settings of the browser used or specific browser extensions. One such extension, for example, is the matrix-based firewall uMatrix for the Firefox and Google Chrome browsers. Please note that this may lead to functional limitations on the website or portal.

The processing of your data is based on Art. 6 para. 1 letter c GDPR in conjunction with Art. 32 GDPR and § 19 para. 4 TTDSG.

When using the service, the transmission of your data to the USA cannot be excluded. Please refer to the information in the section "Data Transfer to Third Countries" for further details. For more information on data protection at hCaptcha, please refer to hCaptcha's privacy policy: https://www.hcaptcha.com/privacy



‍3. Customer and prospective customer data
‍
If you contact our company as a customer or prospective customer, we process your data to the extent necessary to establish or implement the contractual relationship. This regularly includes the processing of personal master, contract and payment data provided to us as well as contact and communication data of our contact persons at commercial customers and business partners. The legal basis for this processing is Art. 6 para. 1 letter b DSGVO. We also process customer and prospective customer data for evaluation and marketing purposes. This processing is carried out on the legal basis of Art. 6 para. 1 letter f DSGVO and serves our interest to further develop our offer and to inform you specifically about our offers. Further data processing may take place if you have consented (Art. 6 para. 1 letter a DSGVO) or if this is necessary for the fulfillment of a legal obligation (Art. 6 para. 1 letter c DSGVO).
‍

4. use of e-mail address for marketing purposes
‍
We may use the e-mail address you provided during registration to inform you about our own similar products and services offered by us. The legal basis is Art. 6 para. 1 lit. f DSGVO in conjunction with. § Section 7 (3) UWG. You can object to this at any time without incurring any costs other than the transmission costs according to the prime rates. To do so, you can unsubscribe by clicking on the unsubscribe link contained in each mailing or by sending an e-mail to info@daa.net.
‍

V. Data processing on our social media sites
‍
When you visit or interact with a profile on a social media platform, personal data about you may be processed. Information associated with a social media profile used also regularly constitutes personal data. This also covers messages and statements made while using the profile. In addition, during your visit to a social media profile, certain information is often automatically collected about it, which may also constitute personal data.
‍

1. visiting our Facebook page
‍
When you visit our Facebook page, through which we present our company or individual products from our range, certain information about you is processed. The sole controller of this processing of personal data is Meta Platforms Ireland Limited (Ireland/EU). For further information about the processing of personal data by Meta, please visit https://www.facebook.com/privacy/explanation.
‍
Meta offers the possibility to object to certain data processing; information and opt-out options in this regard can be found at https://www.facebook.com/settings?tab=ads.

Meta provides us with anonymized statistics and insights for our Facebook page, which we use to gain knowledge about the types of actions people take on our page (so-called "page insights"). These page insights are created on the basis of certain information about individuals who have visited our site. This processing of personal data is carried out by Meta and us as joint controllers. The processing serves our legitimate interest to evaluate the types of actions taken on our site and to improve our site based on these insights. The legal basis for this processing is Article 6(1)(f) DSGVO. We cannot associate the information obtained via Page Insights with individual Facebook profiles that interact with our Facebook page. We have entered into a joint controller agreement with Meta, which sets out the distribution of data protection obligations between us and Meta. For details about the processing of personal data to create Page Insights and the agreement entered into between us and Meta, please visithttps://www.facebook.com/legal/terms/information_about_page_insights_data.

In relation to this data processing, you have the option of asserting your data subject rights (see "Your rights") against Meta as well. For more information, please refer to Meta's privacy policy at https://www.facebook.com/privacy/explanation.

Please note that according to Meta's Privacy Policy, user data is also processed in the USA or other third countries. Meta transfers User Data only to countries for which an adequacy decision has been issued by the European Commission pursuant to Art. 45 of the GDPR or on the basis of appropriate safeguards pursuant to Art. 46 of the GDPR.
‍

2. comments and direct messages
‍
We also process information that you have provided to us via our company page on the respective social media platform. Such information may be the username used, contact details or a message to us. We regularly process this personal data only if we have previously expressly requested you to provide us with this data. These processing operations by us are carried out as the sole responsible party. We process this data on the basis of our legitimate interest in contacting inquiring persons. The legal basis for the data processing is Art. 6 para. 1 letter f DSGVO. Further data processing may take place if you have consented (Art. 6 para. 1 letter a DSGVO) or if this is necessary for the fulfillment of a legal obligation (Art. 6 para. 1 letter c DSGVO).