Privacy policy decor metall GmbH ( [V1.0]

1. Introduction

With the following information we would like to give you an overview of the collection, use and processing of your personal data by us and your rights under the data protection regulations. If you want to use special services of our company on our website, a processing of personal data is required. If there is no legal basis for such processing, we generally obtain your consent.

The processing of personal data, such as your name, address or e-mail address, is always in accordance with the General Data Protection Regulation (GDPR) and in accordance with the data protection regulations applicable to decor metall GmbH.

We have implemented many technical and organizational measures in order to ensure the most complete protection possible for personal data processed through this website. Nevertheless, Internet-based data transmissions can generally have security holes, so that absolute protection cannot be guaranteed. For this reason, you are free to transmit personal data to us in alternative ways, such as by phone or by post.

2. Name and address of the controller

The controller, as defined by the law, is:

decor metall GmbH
Benzstraße 1-5, 32108 Bad Salzuflen, Germany

Tel: +49 52 22 2 86-0
Fax: +49 52 22 2 86-1 89
E-Mail: info(at)decor-metall(dot)com 

Managing director`s: Thomas Löhr & Marcus Wenzel

3. Contact details of the data protection officer

The controller's data protection officer can be reached at:

Jannik Helmsorig
audatis Consulting GmbH
Leopoldstr. 2-8
32051 Herford


If you have any questions or suggestions regarding data protection, you can contact our data protection officer at any time.

4. Technique

Data collection when visiting the website

In the case of merely informative use of our website, ie if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (in so-called "server log files"). Our website collects a series of general data and information each time you call one page through you or an automated system. This general data and information is stored in the log files of the server. We record the

  • used browser types and versions, the operating system used by the accessing system,
  • the website from which an accessing system comes to our website (so-called referrers),
  • the sub-websites, which are accessed via an accessing system on our website,
  • the date and time of access to the website,
  • an internet protocol address (IP address),
  • the Internet service provider of the accessing system.

When using this general data and information, we draw no conclusions about your person. Rather, this information is needed

  • to deliver the contents of our website correctly,
  • to optimize the content of our website as well as the advertising for it,
  • to ensure the long-term functionality of our IT systems and the technology of our website, as well as
  • providing law enforcement with the information needed to prosecute a cyberattack.

This collected data and information is therefore statistically evaluated by us with the aim of increasing the data protection and data security in our company in order to ultimately ensure an optimum level of protection for the personal data we process. The data of the server log files are stored separately from all personal data provided by an affected person and automatically deleted after 7 days.

The legal basis for data processing is Art. 6 Para. 1 (f) GDPR. Our legitimate interest follows from the data collection purposes listed above.

5. Contents of our website

5.1 Contact / contact form

When contacting us (for example via contact form or e-mail), personal data is collected. Which data is collected can be seen from the respective contact form. This data is stored and used solely for the purpose of answering your request or for establishing contact and the associated technical administration. The legal basis for processing the data is our legitimate interest in answering your request in accordance with Art. 6 Para. 1(f) GDPR. If your contact is aimed at concluding a contract, then additional legal basis for the processing is Art. 6 Para. 1(b) GDPR. Your data will be deleted after final processing of your request, this is the case if it can be inferred from the circumstances that the matter in question is finally clarified and provided that no statutory storage requirements are in conflict.

5.2 Newsletter

On our website you are given the opportunity to subscribe to the newsletter of our company. Which personal data is transmitted to us when ordering the newsletter, results from the input mask used for this purpose.

We inform our customers and business partners at regular intervals by means of a newsletter about our offers. The newsletter of our company can only be received if

  • You have a valid e-mail address and
  • You have registered for newsletter shipping.

For legal reasons, a confirmation e-mail will be sent to your registered e-mail address. This confirmation email serves to check whether you, as the owner of the e-mail address, have authorized the receipt of the newsletter.

When registering for the newsletter, we also store the IP address of your Internet service provider (ISP) of the IT system you used at the time of registration and the date and time of registration. The collection of this data is necessary to understand the (possible) misuse of your e-mail address at a later date and therefore serves our legal protection.

The personal data collected in the context of registering for the newsletter will be used exclusively to send our newsletter. Subscribers to the newsletter may also be notified by e-mail if this is necessary for the operation of the newsletter service or registration, as might be the case in the event of changes to the newsletter or technical changes. There will be no transfer of the personal data collected as part of the newsletter service to third parties. Subscription to our newsletter may be terminated by you at any time. The consent to the storage of personal data that you have given us for the newsletter can be revoked at any time. For the purpose of revoking the consent, there is a corresponding link in each newsletter. It is also possible to unsubscribe at any time directly from our newsletter via our website or to inform us in a different way.

The legal basis of data processing for the purpose of sending out newsletters is Art. 6 Para. 1(a) GDPR.

5.3 Newsletter2go

This website uses Newsletter2Go for sending newsletters. Provider is the Newsletter2Go GmbH, Nürnberger Straße 8, 10787 Berlin, Germany.

Newsletter2Go is a service that helps the dispatch of newsletters. The data entered by you for the purpose of newsletter subscription is stored on the servers of Newsletter2Go in Germany.

If you do not wish to be analyzed by Newsletter2Go, you must unsubscribe from the newsletter. For this purpose, we provide a link in every newsletter message. Furthermore, you can unsubscribe from the newsletter directly on the website.

With the help of Newsletter2Go we are able to analyze our newsletter campaigns. E.g. we can see if a newsletter message has been opened and which links have been clicked. 

In addition, we can see if certain predefined actions have been performed after opening / clicking links (conversion rate). We can, for example, recognize whether you have made a purchase after clicking on the newsletter.

Newsletter2Go also enables us to subdivide the newsletter recipients into different categories ("clusters"). In this case, the newsletter recipients can be e.g. Divided by age, gender or place of residence. In this way, the newsletters can be better adapted to the respective target groups.

Detailed information about the features of Newsletter2Go can be found here:

Data processing is based on your consent Art. 6 Para. 1(a) GDPR. You can revoke this consent at any time. The legality of the already completed data processing operations remains unaffected by the revocation.

The data deposited by us for the purpose of subscribing to the newsletter will be stored by us until your subscription and will be deleted from our servers as well as from the servers of Newsletter2Go after cancellation of the newsletter. Data that has been stored for other purposes (such as e-mail addresses for the members area) remain unaffected.

For further information, please refer to the privacy policy of Newsletter2Go at:

6. Cookies

General information about cookies

We use cookies on our website. These are small files that your browser automatically creates and that are stored on your IT system (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not harm your device, do not contain viruses, Trojans or other malicious software.

In the cookie information is stored in connection with the specific used IT system. However, this does not mean that we are immediately aware of your identity.

Cookies serve to make the use of our website and services more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages on our website. These are automatically deleted after leaving our page.

Furthermore we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer. These cookies allow us to automatically recognize when you visit our site again or that you have already been with us. These cookies are automatically deleted after a defined time.

The data processed by cookies are for the purposes mentioned in order to safeguard our legitimate interests as well as third parties according to Art. 6 Para. 1 (f) GDPR.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your IT system or a hint appears before a new cookie is created. However, disabling cookies completely may mean that you cannot use all features of our website.

7. Rights of the data subject

If your personal data are being processed, you are the "data subject" as defined by the GDPR, and you are entitled to the following rights with respect to us as the controller. You may exercise your rights by contacting our data protection officer or the service centre staff, indicating your concerns.

7.1 Right to access

Any data subject affected by the processing of personal data has the right to obtain information about the personal data stored about them at any time, free of charge, as well as the right to access a copy of such data from the controller. 

You may request confirmation from the controller as to whether they are processing the personal data that relates to you. 

7.2 Right to correction 

Any data subject affected by the processing of personal data has the right to request the immediate correction of any incorrect personal data that relates to them. Furthermore, the data subject has the right to request the completion of incomplete personal data, including through a supplementary declaration, taking into account the purposes of the processing.

7.3 Right to restriction of processing

Any data subject affected by the processing of personal data has the right to request the controller immediately restricts processing if the conditions stipulated by Art. 18 Para. 1 GDPR are met.

7.4 Right to erasure

Any data subject affected by the processing of personal data has the right to request that the personal data regarding the data subject be erased if and insofar as one of the reasons stipulated in Art. 17 Para. 1 GDPR applies.

7.5 Right to data portability

Any data subject affected by the processing of personal data has the right obtain personal data relating to the data subject and provided by the same to the controller in a structured, commonly used and machine-readable format. They also have the right to transfer these data to another controller without hindrance by the controller to whom the personal data was provided, provided that the processing is based on the consent pursuant to Art. 6 Para. 1(a) GDPR or Art. 9 Para. 2(a) GDPR or on a contract pursuant to Art. 6 Para. 1(b) GDPR, and the data are processed using automated procedures.

7.6 Right to object

Any data subject affected by the processing of personal data has the right to lodge an objection to the processing of personal data relating to you for reasons relating to your particular situation where this is done on the basis of Article 6 Para. 1(e) or (f) GDPR. This also applies to profiling based on these provisions.

In the event of an objection, the company will longer process the personal data unless we can demonstrate compelling and legitimate reasons for such processing that outweigh the interests, rights and freedoms of the data subject, or where processing serves the assertion, exercise or defence of legal claims.

If the company processes personal data in order to run a direct mail campaign, the data subject has the right to object at any time to the processing of personal data for the purpose of such advertising. This also applies to profiling where this is connected to this kind of direct marketing. Should the data subject object to the processing of their data for direct marketing purposes, we will no longer process their personal data for this purpose.

7.7 Right to revoke declaration of consent in relation to data protection

Any data subject affected by the processing of personal data has the right to revoke their consent to the processing of personal data at any time.

You have the right to revoke any declaration of consent granted in relation to data protection at any time. The revocation of consent does not affect the lawfulness of the processing based on consent before revocation.

8. Routine storage, deletion and blocking of personal data

We process and store your personal data only for the period required to achieve the purpose of the storage or as provided by the legislation to which our company is subject.

If the purpose of the storage is omitted or if a prescribed storage period expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.

Duration of storage of personal data

The criterion for the duration of the storage of personal data is the respective statutory retention period. After the deadline, the corresponding data will be routinely deleted, if they are no longer required to fulfill the contract or to initiate a contract.

9. Updating and changing the privacy policy

This privacy policy is currently valid and has the status: 16 May 2018.

Due to the further development of our websites and offers or due to changed legal or official requirements, it may be necessary to change this privacy policy. The current privacy policy can be viewed and printed at any time on the website at