1. DATA PROTECTION NOTICE

D.V.I. Services GmbH and its affiliated companies (“D.V.I”, “we”, “us”, “our") protect your privacy and your private data. The protection of personal data is important to D.V.I. . D.V.I. collects, processes and uses your personal data in accordance with applicable European and German data protection laws.

This data protection notice informs you how we handle data relating to you personally in connection with our online presence at www.dvi.de, e.g. your name, address, email addresses, and information about your visit to and use of our website.

We collect your personal data for clearly defined purposes. You will find the details below. If we intend to process your data for other purposes in the future, we will provide you with the relevant information in advance.

2. Controller

The controller responsible for the for the collection and processing of your personal data within the meaning of Article 4(7) of the EU General Data Protection Regulation (Regulation (EU) 2016/679 (“GDPR”)) is

D.V.I. Services GmbH
Gartenstrasse 50
12529 Schönefeld
Germany
Email: info@dvi.de
Phone: +49 (0)30 634 128 841

Further information about us and our affiliated companies can be found in the Legal Notice .

3. Purposes and information on the legal basis of the data processing and recipients of the data

3.1 Visits to the website

In order to make our website available and to ensure its functionality, the web server automatically records your visit in so-called server log files when you visit our website. The following data is processed: browser type and version, the operating system used by the end device, the URL of websites previously visited, the IP address of the requesting computer, access date and time of the server request, the duration of the stay on the website, the amount of data transferred, the location from which users retrieve data from the website, connection data and sources and from which page the access is made.

Purpose
This data is processed for the purpose of the provision our website and for statistical analysis, and for the purpose of identifying and tracing unauthorised access to the web server and other criminal offences.

Legal basis and legitimate interest
The legal basis for this data processing is the execution of the contract of use with you regarding the use of our website, Article 6(1)(b) of GDPR.

Recipients
The recipients of the data are our IT service providers within the scope of processing. You can find more information on data processing by our processors here:https://strato.de/blog/dsgvo-logfiles

Storage period
Log file information is stored from the end of your website visit for a period of 7 days and then deleted. After that, your data will be stored in anonymised form for a maximum of six months.

Right to object
The data processing is necessary for the security and operation of the website. You can exercise your objection by no longer accessing our website.

Obligation to provide data
The provision of the aforementioned personal data is neither legally nor contractually required. However, without such provision, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be limited.

3.2 General information on cookies and tracking

When accessing our website, the user is informed about the use of cookies. If necessary, his or her consent to the processing of personal data used in this context is obtained. Cookies are small text files by which the user’s end device can be identified. When using our website, cookies are stored on your end device. Cookies can transmit information from our web server or third-party web servers to the user's web browser, where it is stored for later retrieval. A cookie usually contains the name of the domain from which the cookie data was sent, information about the age of the cookie and an alphanumeric identifier.

Purpose
We use cookies to ensure the proper functioning of our website and to optimise your website experience.

Legal bases and legitimate interest
The legal basis for the data processing for the processing described in further detail below with legitimate interest is Article 6(1)(f) of GDPR. Our legitimate interests consist in the technical provision and guarantee of the operation of our internet presence and IT security as well as in the optimisation of the presentation of our service and in direct marketing measures.

For other processing of personal data by cookies, which neither require a technical necessity of the use of cookies nor are covered by our legitimate interests, the legal basis is Article 6(1)(a) of GDPR, insofar as you have given your consent in this regard when accessing our website. When you access our website, a consent management tool appears. Here you can select which cookies you wish to allow. You can use the consent management tool to revoke your consent at a later date.

Recipients
In addition to the individual transfers set out below, we pass on your data to our IT service providers strictly for the intended purpose, if necessary, and only to the extent required by the processing.

Storage period
We store the data for as long as is needed to fulfil the aforementioned purpose or until you delete the cookies, but in any case for no longer than six months.

Rights of withdrawal of consent and objection
Insofar as the data processing is based on the legal basis of Article 6(1)(a) of GDPR, you have the right to withdraw your consent at any time. You can do this by revoking your consent via our  consent management tool.

When the legal basis is Article 6(1)(f) of GDPR, you can object to the data processing. You can exercise your right to object by configuring your browser according to your wishes, for example so that no cookies from third-party providers (so-called third-party cookies) or no cookies at all are stored, or a notice always appears before a new cookie is created. Furthermore, cookies that have already been stored can be deleted at any time via the browser.

You can find out how to configure cookies for the most common browsers by clicking on the links below:
Firefox: https://support.mozilla.org/en-US/kb/block-websites-storing-cookies-site-data-firefox
Chrome: https://support.google.com/chrome/answer/95647?hl=en&hlrm=en.
Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/13.0/mac/10.15.
Opera: https://help.opera.com/en/latest/web-preferences/#cookies

Obligation to provide data
The provision of your personal data is neither legally nor contractually required. However, without such provision, the service and functionality of our website may not be guaranteed.

3.3 Provision and presentation of the website

Monotype MyFonts
We use MyFonts (myfonts.com or fast.font.net) from Monotype Imaging Holdings Inc., a Delaware corporation located at 600 Unicorn Park Drive, Woburn, Massachusetts 01801 USA (“Monotype") on our website. MyFonts is a font directory. The fonts are automatically optimised for the web, which adapts the display of the website to end devices, especially when mobile devices are used, and also ensures fast loading times. We store this data locally on our own servers. When you visit our website, the fonts are loaded via our server. In connection such access, only anonymised data is transmitted to Monotype for billing purposes, which cannot be connected to you personally.

Purpose
We use MyFonts for the attractive presentation of our website.

Legal basis
The legal basis for data processing is your consent pursuant to Article 6(1)(f) of GDPR.

Recipients / transmission to a third country
The use of MyFonts results in only anonymised data being transmitted to Monotype in the USA. Information on data protection at Monotype can be found here https://www.monotype.com/legal/privacy-policy and specifically for MyFonts at https://www.monotype.com/legal/privacy-policy/web-font-tracking-privacy-policy.

Storage period
We only store the transmitted data for the duration of the transmission.

Right of objection
You can prevent the use of MyFonts by selecting the appropriate settings on your browser; however, please note that if you do this you may not be able to use the full functionality of this website. You can exercise your objection via our consent management tool.

Obligation to provide data
The provision of your data is voluntary. It is also possible to visit our website without using MyFonts. However, please note that in this case you may not be able to use all the functions of our website to their full extent and this may result in a restricted presentation of our website.

3.4. Web analysis

Matomo
We use the open source software Matomo from InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand to analyse and statistically evaluate the use of the website. We use Matomo version 3.13.6, which enables use without tracking cookies. When you visit our website, Matomo collects a so-called device fingerprint; this retrieves information about your browser, the operating system you use and also any do-not-track settings. In addition, location, time and audio settings, screen resolution and/or installed browser plug-ins may be collected. The device fingerprint data is anonymised. Every 24 hours a random value is generated for the device fingerprint, thus preventing repeat visitors to our website from being recognised. User profiling is therefore not possible. The information collected is stored exclusively on our server.

Purpose
The information is used to evaluate the use of the website and to enable us to design our website appropriately.

Legal basis and legitimate interest
The legal basis for this processing is your consent pursuant to Article 6(1)(f) of GDPR. The legitimate interest is that we analyse the activities on our website in order to be able to optimise our website provision.

Recipient / transmission to a third country
The information is not passed on to third parties as we store the data locally. Information on data protection can be found in the data protection declaration at: https://matomo.org/privacy/.

Storage period
The data processed as described here will be deleted after a storage period of 14 days.

Right of objection
You can object to processing via Matomo at any time. You can communicate your objection via our Consent-Management-Tool .

Obligation to provide your data
The provision of your data is voluntary. Please note that if you object to the use of Matomo, you may not be able to use this website to its full extent.

3.5. Integration of third-party content

GoogleMaps
On this website, you can use the content of the Google Maps service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google"). With each individual accessing of Google Maps, a cookie is set by Google in order to process user settings and data when displaying the page into which Google Maps is integrated.

Purpose
Provision of maps on the website.

Legal basis
The data processing described above will only be carried out when you visit the website if you give us the corresponding consent (Article 6(1)(a) of GDPR) when you visit the website. If you do not give your consent to processing for Google Maps, Google Maps content on the website will not be available or will only be available to a limited extent.

Recipient
The personal data collected in this regard may be transferred to Google, possibly including in the USA, and stored and processed there. The transfer is secured by a processing agreement and the conclusion of the EU standard contractual clauses, which in individual cases allow a transfer to so-called third countries outside the EU. Information on data protection at Google can be found here https://policies.google.com/privacy.

Storage period
This cookie is stored for a period of up to two years, unless you manually delete it from your browser at an earlier time.

Right of withdrawal of consent / objection
It is also possible to deactivate the “Google Maps” service and thus prevent the transfer of data to Google. To do this, you must deactivate the Java Script function in your browser. You can also prevent the execution of Java Script by installing a Java Script blocker. However, please note that in this case you will not be able to use Google Maps, or be able to do so only to a limited extent.

Obligation to provide the data
If you object/do not consent to the data processing, you will not be able to view the maps that we have embedded using GoogleMaps.

3.6 Contact via email or telephone

You can contact us via the email addresses and telephone numbers we provide on our website. If you make use of this possibility, the personal data transmitted with the email or telephone call will be processed.

Purpose
The processing is carried out for the purpose of handling your request.

Legal basis and legitimate interest
If the contact is aimed at concluding a contract or if your contact is about an existing contract, Article 6 (1)(b) of GDPR is the legal basis for the processing. The legal basis for processing your data in other cases is Article 6(1)(f) of GDPR. The legitimate interest in these cases results from the fact that we can only carry out the action requested by you (e.g. answering enquiries) by processing your data accordingly.

Recipient
As part of the processing of your enquiry, your data will be transferred to our staff who will process your enquiry.

Storage period
We generally store your data until we have fully answered your enquiry.

Obligation to provide data
There is no legal obligation to provide your data. However, if you do not provide us with your data, it is not possible to contact us.

4. Data transfer outside the EEA

In order to ensure an adequate level of data protection when transferring personal data outside the European Economic Area in connection with Google Analytics and GoogleMaps technologies, we have concluded the EU standard contractual clauses with Google LLC.

Unless otherwise stated in this privacy notice, we do not transfer your data outside the European Economic Area.

5. How long we store your personal data

Unless the other provisions of this data protection notice result in a shorter storage period, we will only store your personal data for as long as is necessary to fulfil the respective purposes, and thereafter only to the extent and insofar as we are obliged to do so due to mandatory statutory retention obligations. If we no longer require your data for the purposes described in this data protection notice, it will only be stored for the respective statutory retention period and will not be processed for other purposes, unless the applicable legal requirements exist and we inform you accordingly in advance.

6. Your rights

If we process personal data about you, you have the following rights in relation to us:

6.1 Right of access
You can request confirmation from us as to whether personal data concerning you is being processed by us. If such processing is taking place, you can request information from us about the information listed in Article 15 of GDPR. If you exercise your right without telling us what specific information you want, we will provide you with all information pursuant to Article 15 of GDPR.

6.2 Right of rectification
You have a right to require us to correct and/or complete your personal data, if the personal data processed which concerns you is inaccurate or incomplete.

6.3 Right to restrict processing
You may request the restriction of the processing of personal data concerning you under the following conditions:

If you dispute the accuracy of the personal data relating to you. This applies for a period of time that allows us to verify the accuracy of the personal data;

The processing is unlawful. You reject the erasure of the personal data and instead request the restriction of the use of the personal data;

We no longer need your personal data for the purpose of processing. However, you require them to establish, exercise or defend legal claims;

If you have objected to the processing pursuant to Article 21(1) of GDPR and it has not yet been determined whether our legitimate grounds for further processing override your grounds. If the processing of personal data relating to you has been restricted, such data may - apart from being stored - only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for important grounds of public interest of the Union or a Member State.

If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.

6.4 Right to erasure

6.4.1 Obligation to erase
You can demand that we erase the personal data concerning you immediately. For our part, we have a duty to erase this data without delay if one of the reasons listed in Article 17 DSof GDPR applies.

6.4.2 Information to third parties
If we have made the personal data concerning you public in an individual case and we are obliged to erase it pursuant to Article 17(1) of GDPR, we shall take reasonable steps, including technical measures, having regard to the available technology and the cost of implementation, to inform the data controllers processing the personal data that you, as the data subject, have requested that they erase all links to, or copies or replications of, that personal data. However, in general we do not make your personal data public.

6.4.3 Exceptions
The right to erasure does not exist where the processing is necessary to exercise the right to freedom of expression and information;

for compliance with a legal obligation which requires processing under Union or Member State law to which we are subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;

for reasons of public interest in the area of public health pursuant to Article 9(2)(h) and (i) and Article 9(3) of GDPR;

for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Article 89(1) of GDPR, where the right referred to in Section 5.4.1 is likely to render impossible or seriously prejudice the achievement of the purposes of such processing, or for the establishment, exercise or defence of legal claims.

6.4.4 Right to information
If you have asserted the right against us to require rectification, erasure or restriction of processing of your personal data, we are obliged to notify all recipients of your personal data of this rectification or erasure of the data or restriction of processing. This does not apply if notification proves impossible or would involve a disproportionate effort. You have the right to be informed of these recipients.

6.5 Right to data portability
You have the right to receive the personal data relating to you that you have provided to us in a structured, commonly used and machine-readable format. You also have the right to transfer this data to another controller, provided that

the processing is based on consent pursuant to Article 6(1)(a) of GDPR or Article 9(2)(a) of GDPR or on a contract pursuant to Article 6(1)(b) of GDPR, and

the processing is carried out by automated means. If you so wish and insofar as it is technically feasible for us and the freedoms and rights of other persons are not impaired thereby, we shall transmit the personal data relating to you directly to the other controller.

The right to data portability shall not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

6.6. Right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based Article 6(1)(e) or (f) of GDPR, including profiling based on those provisions.

We will no longer process the personal data relating to you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defence of legal claims.

If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling to the extent that it is related to such direct marketing.

6.7 Automated individual decision-making, including profiling

Where certain decisions by us are based solely on automated processing, including profiling, you have the right not to be subject to such a decision which produces legal effects concerning you or similarly significantly affects you. However, this does not apply
if the decision is necessary for the conclusion or performance of a contract between you and us,

where the decision is authorised by Union or Member State law to which we are subject and which also contains appropriate measures to safeguard your rights and freedoms and your legitimate interests; or if this form of decision-making is carried out with your express consent.

6.8 Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the provisions of data protection law, including GDPR.

6.9 Revocation of consent given
If you have given your consent under data protection law, you have the right to revoke this consent at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. If you have given several declarations of consent under data protection law, please tell us which of the consents you are revoking. If we do not receive such a specification even upon request, we will assume that your revocation applies to all consents granted up to that point. We will then terminate the data processing activities based on the consents with the exception of the consent-based cookies on our website. You can revoke the consents for these cookies in the manner described for the respective technology or via our consent management tool .

7. Our data security principles

All information that you transmit to us is stored on servers within the European Economic Area or, subject to compliance with the further requirements set out here, in a third country. Unfortunately, the transmission of information via the Internet is not completely secure, which means we cannot guarantee the security of data transmitted to our website via the Internet. However, we comprehensively secure our website and other systems by technical and organisational measures against loss, destruction, access, modification or distribution of your data by unauthorised persons. Our security measures are continuously revised in line with technological developments. Our employees are obliged to maintain confidentiality.

8. Links to third party websites

Please note that our website may contain links to content from other providers to which this data protection notice does not apply. We have no influence over these websites, or on whether they comply with the applicable data protection provisions.

9. Updating of the data protection notice

The constant development of technology and the Internet makes it necessary to adapt our data protection notice from time to time. We reserve the right to change this data protection notice at any time with effect for the future. The latest version is available on our website. Please visit the website regularly and inform yourself about the current data protection notice.

Last updated: 29/10/2020